Dell EMC PowerProtect DDVE on Amazon Web Services 7.9 Installation and Administration Guide

Using the CLI to configure the DDVE

You can log in through SSH to configure the DDVE using the command line interface (CLI). Authentication using EC2 key access pair and username and password are supported.

1. Log in to the DDVE instance to configure the system. The default login credentials for the DDVE instance are:
   • Username: sysadmin
   • AWS default password: Default sysadmin password is the EC2 instance-id for the DDVE.

   # ssh sysadmin@<IP address of DDVE>
   EMC DD Virtual Edition
   Password:
   
   Welcome to Data Domain OS 7.9.0.0-*******
   sysadmin@myddve0#
   

2. During the first login, users are prompted to accept the EULA and change the password.
3. The configuration wizard launches.
4. Follow the steps in the wizard to add elicenses and configure object store.
   NOTE

   • If an elicense file cannot be found in /ddr/var, the license can be pasted directly in the wizard.
   • The System Passphrase is required to encrypt the object store credentials. If file system encryption is enabled, the System Passphrase is also used to encrypt keys.
   • For AWS, the profile creation requires that you import the Baltimore CyberTrust Root certificate to communicate with the object store.
   • For AWS GovCloud, profile creation has an additional option to enable the FIPS endpoint.

   Welcome to Data Domain OS *.*.*.*-*******
   -----------------------------------------
   Press any key then hit enter to acknowledge the receipt of EULA information: q
   Enter new password:
   Re-enter new password:
   Passwords matched.
   
   Security Officer
   Do you want to create security officer ? (yes|no) [no]: no
   
   Do you want to configure system using GUI wizard (yes|no) [no]: no
   
   Network Configuration
   Configure Network at this time (yes|no) [no]: yes
   
   Use DHCP
   Use DHCP for hostname, domainname, default gateway and DNS servers?
   (At least one interface needs to be configured using DHCP) (yes|no|?) [yes]: yes
   
   Ethernet port ethV0
   Enable Ethernet port ethV0 (yes|no|?) [yes]: yes
   Use DHCP on Ethernet port ethV0 (yes|no|?) [yes]: yes
   
   Pending Network Settings
   Hostname Use DHCP
   Domain name Use DHCP
   Default Gateway Use DHCP
   DNS Server List Use DHCP
   Port Enabled Cable DHCP IP Address Netmask or Prefix Length
   ----- ------- ----- ---- -------------- ------------------------
   ethV0 yes yes yes 10.200.204.62* 255.255.255.224*
   ----- ------- ----- ---- -------------- ------------------------
   * Value from DHCP
   Do you want to save these settings (Save|Cancel|Retry): save
   
   eLicenses Configuration
   Configure eLicenses at this time (yes|no) [no]: yes
   
   Available eLicense Files
   # File Name
   - ------------
   1 elicense.lic
   - ------------
   
   
   Do you want to use an existing eLicense file (yes|no)
   [yes]: yes
   Enter the index of eLicense file [1|cancel]
   : 1
   
   Pending eLicense Settings
   Existing Licenses:
   Capacity licenses:
   ## Feature Capacity Type State Expiration Date Note
   -- -------- ---------- ---------- ------ --------------- ----
   1 CAPACITY 232.83 TiB evaluation active 2022-09-06
   -- -------- ---------- ---------- ------ --------------- ----
   
   Feature licenses:
   ## Feature Count Type State Expiration Date Note
   -- ------------------------- ----- ---------- ------ --------------- ----
   1 REPLICATION 1 evaluation active 2022-09-06
   2 DDBOOST 1 evaluation active 2022-09-06
   3 RETENTION-LOCK-GOVERNANCE 1 evaluation active 2022-09-06
   4 ENCRYPTION 1 evaluation active 2022-09-06
   -- ------------------------- ----- ---------- ------ --------------- ----
   
   New Licenses:
   Capacity licenses:
   ## Feature Capacity Type State Expiration Date Note
   -- -------- --------- --------------- ------ --------------- ----
   1 CAPACITY 87.31 TiB permanent (int) active n/a
   -- -------- --------- --------------- ------ --------------- ----
   
   
   ** New license(s) will overwrite existing license(s).
   Do you want to save these settings (Save|Cancel|Retry): save
   
   Successfully updated eLicenses.
   
   Filesystem Configuration
   Configure Filesystem at this time (yes|no) [no]: no
   
   System Configuration
   Configure System at this time (yes|no) [no]: no
   
   CIFS Configuration
   Configure CIFS at this time (yes|no) [no]: no
   
   NFS Configuration
   Configure NFS at this time (yes|no) [no]: no
   
   SMT Configuration
   Configure SMT at this time (yes|no) [no]: no
   
   Storage object-store profile Configuration
   Configure Storage object-store profile at this time (yes|no) [no]: yes
   
   Do you want to enable object store (yes|no)
   [yes]: yes
   A passphrase needs to be set on the system.
   Enter new passphrase:
   Re-enter new passphrase:
   Passphrases matched.
   DD VE is running in AWS. Role-based access will be used to access s3.
   Enter the bucket name: cloudddve
   
   Object-store endpoint needs the Starfield Class 2 Certification Authority certificate to be imported.
   Do you want to import that certificate with below fingerprint?
   AD:7E:1C:28:B0:64:EF:8F:60:03:40:20:14:C3:D0:E3:37:0E:B5:8A (yes|no) [yes]: yes
   
   Pending Object Store Settings
   Bucket name: cloudddve
   
   Do you want to save these settings (Save|Cancel|Retry): save
   The passphrase is set
   
   Successfully set object store profile.
   
   Configuration complete.

5. Run the following command to view the disks that are attached to the DDVE:

   # disk show hardware
   Disk   Slot        Manufacturer/Model     Firmware   Serial No.   Capacity    Type 
          (pci/idx)                                                                   
   ----   ---------   --------------------   --------   ----------   ---------   -----
   dev1   -/a         Virtual BLOCK Device   n/a        (unknown)    250.0 GiB   BLOCK
   dev2   -/b         Virtual BLOCK Device   n/a        (unknown)    10.0 GiB    BLOCK
   dev3   -/c         Virtual BLOCK Device   n/a        (unknown)    1.0 TiB     BLOCK
   ----   ---------   --------------------   --------   ----------   ---------   -----
   

6. Add the metadata storage disks to the active tier:

   # storage add tier active dev<n>

7. Create and enable the file system:

   # filesys create
   # filesys enable
   

8. DDVE requires reliable time synchronization for object store communication. DDVE can synchronize time by using Amazon Time Sync Service or by configuring an NTP server.

   Option	Description
   Method 1 - Using Amazon Time Sync Service (recommended)	By default, DDVE uses Amazon Time Sync Service for time synchronization through a chrony client. DDVE does not require Internet access or configuration of security group rules to use this time synchronization service. Dell EMC recommends using the Amazon Time Sync Service.
   Method 2 - Configuring NTP server (not recommended)	To override the default, you can configure an NTP server by running these commands: ntp add timeserver 0.amazon.pool.ntp.org ntp enable ntp sync NOTE ntp disable switches to the default time synchronization option (Amazon Time Sync Service).