Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products

PowerProtect Data Manager 19.15 Administrator Guide

Retention locking

Retention locking prevents the deletion or alteration of data on a protection storage system for a user-defined period of up to 70 years. PowerProtect Data Manager supports both governance mode and compliance mode retention locking for backups and replicas.

The PowerProtect DD documentation provides more information about each retention lock mode, including the differences between modes. Retention locking requires enablement and licensing on the protection storage system before use with PowerProtect Data Manager.

Retention locking is a two-stage process:

  1. Create a storage unit on which you set the appropriate retention lock mode. Setting the retention lock mode enables but does not activate retention locking.
  2. Configure primary backup objectives that both target this storage unit and activate retention locking. Toggling on the retention lock setting for a primary backup objective activates retention locking in accordance with the configured retention lock mode of the selected storage unit.

For more information about configuring a primary backup objective, see the appropriate publication.

Table 1. Protection-policy asset typesProtection-policy asset types
Asset type Publication
Block volumes PowerProtect Data Manager Storage Array User Guide
File System data PowerProtect Data Manager File System User Guide
Kubernetes cluster namespaces and PVCs PowerProtect Data Manager Kubernetes User Guide
Microsoft Exchange Server databases PowerProtect Data Manager Microsoft Exchange Server User Guide
Microsoft SQL Server databases PowerProtect Data Manager Microsoft SQL Server User Guide
Network Attached Storage (NAS) share and appliance data PowerProtect Data Manager Network-Attached Storage User Guide
Oracle RMAN databases PowerProtect Data Manager Oracle RMAN User Guide
SAP HANA databases PowerProtect Data Manager SAP HANA User Guide
Virtual machines PowerProtect Data Manager Virtual Machine User Guide

When you set the retention lock mode on a storage unit, you can never disable or change it. To use a different retention lock mode with a primary backup, target a different storage unit. The original retention lock mode persists for existing backups or replicas that were created before the change.

The choice of retention lock mode can impact which protection policies and primary backup objectives share a storage unit. Consider the retention lock settings when you design your storage unit architecture.

Compliance mode

Observe the following details before you configure or activate compliance mode retention locking:

  • Compliance mode requires DDOS 7.10 or later. Earlier versions support only governance mode.
  • Compliance mode requires the security officer credentials for the associated protection storage system. PowerProtect Data Manager does not store the security officer credentials.
  • Setting a compliance mode retention lock on an asset storage unit automatically sets a compliance mode retention lock on the associated server DR storage unit.
  • The option to create a storage unit through the selection drop-down list during protection policy configuration does not support compliance mode, only governance mode. To use compliance mode, create and configure a storage unit before you configure an associated protection policy.
  • Deleting a storage unit with compliance mode enabled requires the security officer credentials for the associated protection storage system.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\