PowerProtect Data Manager 19.14 Azure Deployment Guide

Deploy PowerProtect Data Manager to Azure

Use this method to deploy PowerProtect Data Manager and DDVE to Azure.

1. In a browser, navigate to https://portal.azure.com.
2. Log in to the Azure account.
3. From the Home > Marketplace > Get Started pane, select Search the Marketplace and search for and select Dell PowerProtect Data Manager and Data Domain Virtual Editions.
4. Click Create.
5. From the Home > Marketplace > Create Dell PowerProtect Data Manager and Data Domain Virtual Editions > Basics pane, provide the project and instance details.

   Table 1. BasicsBasics

   Parameters	Description
   Subscription	The subscription to use.
   Resource group	Select the resource group to use, or click Create New. NOTE:If you select a resource group, it must be empty. For more information about creating resource groups, see Manage Azure Resource Manager Resource Groups by Using the Azure Portal.
   Region	The region where both PowerProtect Data Manager and DDVE will be deployed.

6. Click Next: Infrastructure Configuration.
7. From the Home > Create Dell PowerProtect Data Manager and Data Domain Virtual Editions > Infrastructure Configuration pane, configure the virtual networks and storage account.

   Table 2. Infrastructure ConfigurationInfrastructure Configuration

   Parameters	Description
   Virtual network	Select the virtual network that both PowerProtect Data Manager and DDVE will be deployed to, or click Create New. NOTE:For more information about creating virtual networks, see What Is Azure Virtual Network?
   Subnet	The subnet to which PowerProtect Data Manager and DDVE will be deployed. NOTE:It is recommended that you deploy PowerProtect Data Manager and DDVE to a private subnet. If you create a virtual network from the Azure portal, a subnet will be created and used automatically.
   Diagnostics Storage Account	Select the diagnostics storage account to use for both PowerProtect Data Manager and DDVE, or click Create New.
   Network security group	Select Create to create a network security group that restricts communication between the cloud-based PowerProtect Data Manager instance and its external components to the default ports documented in the PowerProtect Data Manager Security Configuration Guide . Otherwise, select Use existing and provide the network security group ID of an existing network security group. NOTE:If the network security group includes an entry that allows or blocks a port in contradiction to ports allowed and blocked by an Azure account policy, deployment of PowerProtect Data Manager fails with a disallowed by policy error. For more information about Azure account policies, see Tutorial: Create and manage policies to enforce compliance.

8. Click Next: PowerProtect Data Manager VM Configuration.
9. From the Home > Create Dell PowerProtect Data Manager and Data Domain Virtual Editions > PowerProtect Data Manager VM Configuration pane, configure PowerProtect Data Manager.

   Table 3. PowerProtect Data Manager VM ConfigurationPowerProtect Data Manager VM Configuration

   Parameters	Description
   Data Manager Version	The desired PowerProtect Data Manager version.
   Data Manager Name	The hostname to assign to PowerProtect Data Manager. This is limited to 10 alphanumeric characters.
   Data Manager VM Size	The resources assigned to PowerProtect Data Manager. This cannot be changed from the default of D8s_v3, which provides 8 CPU cores, 32 GB of RAM, 6 data disks, 12,800 IOPS, 64 GB of temporary storage, and one 1-GB NIC .
   Admin User Name	The username for administrator SSH access to PowerProtect Data Manager. This cannot be root, admin, or support.
   Admin Authentication Type	Select either Password or SSH Public Key to determine how users are authenticated when using SSH. NOTE:SSH public key authentication requires a password change after the first login.
   VM Log-in Password	Either enter the administrator password, or select the representation of an SSH public key.
   Confirm Password
   Use Custom DNS Server	Select Yes to use your own DNS server, which allows for reverse DNS lookups of IP addresses to hostnames. Otherwise, leave the default selection of No to use the Azure DNS server. If you select Yes, ensure the following prerequisites and provide values for the next 3 parameters: Your DNS server already has an entry for the IP address and fully qualified domain name of the PowerProtect Data Manager instance. You have added the Azure DNS server as a forwarder to your DNS server.
   DNS Server IP Address	Enter the IP address of your DNS server.
   Data Manager IP Address	Enter the IP address of the PowerProtect Data Manager instance.
   Data Manager FQDN	Enter the fully qualified domain name of the PowerProtect Data Manager instance.

10. Click Next: PowerProtect DD Virtual Edition VM Configuration.
11. From the Home > Create Dell PowerProtect Data Manager and Data Domain Virtual Editions > PowerProtect DD Virtual Edition VM Configuration pane, configure DDVE.

    Table 4. PowerProtectDD Virtual Edition ConfigurationPowerProtectDD Virtual Edition Configuration

    Parameters	Description
    Deploy DDVE	Select Yes to deploy and launch a DDVE instance in the same subnet as PowerProtect Data Manager. Select No to deploy only PowerProtect Data Manager. NOTE:You might choose to not deploy DDVE if you already have an instance deployed, or if you are performing PowerProtect Data Manager-server disaster recovery.
    DDVE Version	The desired DDVE version.
    DDVE Name	The hostname to assign to DDVE. This is limited to 10 alphanumeric characters.
    DDVE VM Size	The resources assigned to DDVE.
    DDVE Capacity (TB)	The capacity of the DDVE data disk.
    DDVE admin user	The username for administrator SSH access to DDVE. This cannot be changed from the default of sysadmin.
    Sysadmin Authentication type	Select either Password or SSH Public Key to determine how users are authenticated when using SSH. NOTE:SSH public key authentication requires a password change after the first login.
    VM Log-in Password	Either enter the administrator password, or select the representation of an SSH public key.
    Confirm Password

12. Click Next: Solution Software Configuration.
13. From the Home > Create Dell PowerProtect Data Manager and Data Domain Virtual Editions > Solution Software Configuration pane, configure DDVE.

    Table 5. Solution Software ConfigurationSolution Software Configuration

    Parameters	Description
    Enable Automatic Configuration and Accept Product End User License Agreement (EULA)	Confirm if automatic configuration is enabled and the terms and conditions outlined in the product End User License Agreement (EULA) accepted. Select Yes to accept the EULA. NOTE:Do not select Yes if you need to restore a PowerProtect Data Manager disaster-recovery backup. Select No if you do not accept the EULA. If you select No, automatic configuration is disabled. To configure the instances manually after deployment, see Configure the PowerProtect Data Manager virtual appliance.
    Data Manager Time Zone	Select a timezone for the PowerProtect Data Manager instance.
    Data Manager NTP Servers	Enter the IP address or FQDN of one or two NTP servers for the PowerProtect Data Manager instance. Separate NTP servers with commas.
    Data Manager common password	Enter the password for the PowerProtect Data Manager instance. The password must contain at least 9 characters, 1 lowercase letter, 1 uppercase letter, 1 numeral, 1 special character, and be no more than 128 characters in length. The same password will be used by the PowerProtect Data Manager instance for all system accounts, including the lockbox and administrator user.
    Confirm password
    Storage Account Name	Enter the name of the storage account to be used by the DDVE instance.
    Container Name	Enter the name of the container to be used by the DDVE instance.
    Storage Access Key	Enter the access key of the storage account to be used by the DDVE instance. To locate the access key from the Azure portal, select the storage account, Access keys, and then either Key1 or Key2.
    DDVE common password	Enter the password for the DDVE instance. The password must contain at least 9 characters, 1 lowercase letter, 1 uppercase letter, 1 numeral, 1 special character, no spaces, and be no more than 100 characters in length. The same password will be used by the DDVE instance for the object store passphrase and DDBoost. If SSH Public Key was selected for the sysadmin authentication type from the Home > Create Dell PowerProtect Data Manager and Data Domain Virtual Editions > PowerProtect DD Virtual Edition VM Configuration pane, then the password will also be used for the sysadmin account.
    Confirm password

14. Click Next: Review + create >.
15. From the Home > Create Dell PowerProtect Data Manager and Data Domain Virtual Editions > Review + create pane, click Create.
16. From the Home > Overview pane, wait until Your deployment is underway is replaced by Your deployment is complete.
    NOTE:This takes approximately 35 minutes if automatic configuration is enabled and approximately 20 minutes if automatic configuration is not enabled.