Dell PowerProtect Data Manager Appliance 5.13.0.0 Administrator Guide for DM5500

Appliance protection

The following prerequisites apply for Isilon/PowerScale appliances:

The Isilon OneFS Web Administration Guide and Isilon OneFS CLI Administration Guide provide more information and instructions, where not otherwise indicated here.

1. Enable basic authentication. Enable Isilon/PowerScale basic authentication provides instructions.
2. Create a NAS protection user in the System access zone with both of the following roles: BackupAdmin and SystemAdmin.

   The NAS protection user needs read/write Windows ACL NTFS and share permissions.
   

   Supply the NAS protection user credentials as the management credentials when you add the NAS appliance, when you add CIFS shares to a protection policy, and when you set asset level credentials.
   

3. Some required paths are not shared by default.
   • To protect CIFS shares, create a CIFS share for /ifs with the name ifs.

     Provide full access for the NAS protection user. For added security, you can limit access to only the NAS protection user.
     

4. For NFS shares, add clients to the exports for other shares, as required. Files with restricted permissions provides more information.
5. For NFS shares, change the global settings to enable NFS export services. Enable NFSv3 or NFSv4, as required.
6. For SMB shares, configure the following settings in the PowerScale UI SMB server settings area:

   Table 1. Isilon/PowerScale SMB settingsIsilon/PowerScale SMB settings

   Setting	Value
   Visible at Root	Yes
   Accessible at Root	Yes
   Visible in Subdirectory	No
   Accessible in Subdirectory	Yes

Notes

1. A trial license is provided with the PowerProtect Data Manager Appliance software. Contact Customer Support for assistance with a permanent PowerProtect Data Manager Appliance license.
2. When signing occurs during certificate exchange between PowerProtect Data Manager Appliance and NAS asset sources, if you have specified a hostname or fully qualified domain name (FQDN) with an underscore (_), then communication happens by IP address, as provided during registration.