Contents Beta Draft Contents Chapter 1 - Introduction of NetApp AltaVault Cloud Integrated Storage ..........11 Overview of AltaVault............................11 Supported backup applications and cloud destinations ................11 AutoSupport ............................11 System requirements and specifications......................11 Documentation and release notes ........................12 Chapter 2 - Deploying the AltaVault appliance ..................13 Deployment guidelines ...........................13...
Page 4
Contents Beta Draft Editing an NFS configuration........................44 Troubleshooting NFS ..........................45 Configuring OST ............................45 Configuring SnapMirror ..........................47 Enabling SnapMirror service........................47 Monitoring and deleting SnapMirror shares and Snapshots on AltaVault ..........48 Enabling long-term retention........................49 Enabling SnapCenter access........................50 Chapter 5 - Modifying networking settings.................... 51 Modifying general host settings ........................51 Modifying management interfaces ........................53 Modifying data interfaces ..........................54...
Page 5
Configuring SSH Access ..........................100 Chapter 8 - Configuring AltaVault appliances for FIPS-compliant cryptography......103 What is FIPS? ...............................103 Understanding FIPS on AltaVault ........................103 NetApp Cryptographic Security Module....................104 Compliant FIPS cryptography features ....................104 Noncompliant FIPS cryptography features ...................104 Configuring AltaVault for FIPS compliance ....................105 Configuring AltaVault appliances for FIPS-compliant cryptography ............105...
Page 6
Contents Beta Draft License limits............................117 Model upgrades on the virtual AltaVault appliances................117 Upgrading your software ..........................117 Rebooting and shutting down AltaVault appliance ..................118 Viewing the current user settings........................119 Managing configuration files........................119 Chapter 10 - Viewing reports and logs ....................121 About reports ..............................122 Viewing the storage optimization report.......................125 Viewing the front-end throughput report......................126 Viewing the back-end throughput report ......................127...
Page 7
Contents Beta Draft Viewing the verify tool diagnostics ......................157 Chapter 11 - Transferring data to the cloud using Amazon Snowball ..........159 Prerequisites..............................159 Guidelines for using Snowball with AltaVault .....................159 Seeding data using Snowball ........................160 Creating a Snowball job in AWS......................160 Transferring data from AltaVault to Snowball ..................161 Managing data transfers on AltaVault ....................162 Verifying and completing data transfer ....................163...
Page 8
Changing the shelf ID for a disk shelf ......................215 Adding an additional RAID group to a configured appliance..............216 Replacing a faulty hard disk drive on an AltaVault AVA400 or AVA800 appliance ........218 Replacing internal FRUs ..........................218 Replacing a boot device in a controller ......................219 Replacing system DIMMs ..........................223...
Page 9
Contents Beta Draft Appendix A - Administrator’s configuration worksheet ..............231 Configuration worksheet ..........................231 Appendix B - AltaVault appliance MIB ....................235 Accessing AltaVault appliance MIB......................235 SNMP traps..............................235 Appendix C - Amazon AWS IAM and S3 bucket policies..............247 Typical AltaVault setup..........................247 IAM policies for AltaVault ...........................247 Sample of IAM policy ...........................248 Bucket policies for AltaVault ........................249 Sample of bucket policy ........................249...
Interoperability Matrix Tool (IMT) on the NetApp Support site to validate that the product and versions that can be used to construct configurations that are supported by NetApp. Specific results depend on each customer's installation in accordance with published specifications.
For system requirements for physical appliances, see Chapter 15, “System components AVA-400, AVA-800.” Documentation and release notes To obtain the most current version of all NetApp documentation, go to the NetApp Support site at https:/ mysupport.netapp.com. NetApp AltaVault Cloud Integrated Storage...
NetApp Support site to validate that the exact product and feature versions described in this document are supported for your specific environment. The NetApp IMT defines the product components and versions that can be used to construct configurations that are supported by NetApp.
Page 14
AltaVault exports its configuration to a file called altavault_config_(HOSTNAME)_(DATETIME).tgz. NetApp recommends that you store the configuration file in different physical locations. The configuration file contains information about the configuration, including the encryption key. Alternatively, you can just export the encryption key alone.
In the event of a catastrophic event, it might be necessary to recover your configuration if previously saved to another location using the Export Wizard. To recover a saved configuration, see Chapter 14, “Disaster recovery.” NetApp AltaVault Cloud Integrated Storage Administration Guide...
1. Complete the configuration wizard steps on the client side and server side. Wizard prompt Description Example Step 1: Admin password? NetApp requires that you change the default Step 1: Admin password? administrator password ( ) at this time. xxxxyyyy...
The <domain> variable is the full domain name for the appliance. You can also specify the IP address instead of the host and domain name. 2. In the Username text box, specify the user login. The default login is admin. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Cloud Information - Displays the status of the cloud connection that the appliance is configured to communicate with. Navigating in the Management Console You navigate to the tools and reports available to you in the Management Console using cascading menus. NetApp AltaVault Cloud Integrated Storage Administration Guide...
The Help page provides the following options: Online Help - View browser-based online help. Technical Support - View links and contact information for NetApp Support. Appliance Details - View appliance information such as the model number, hardware revision type, serial ...
Specify this option to automatically obtain the IPv4 address from a valid DHCP server. Enable IPv4 Dynamic DNS Enable IPv4 Dynamic DNS - Select this option to enable IPv4 dynamic DNS on the primary interface. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Cloudwatt Object Storage - see “Configuring SWIFT-based storage” on page 30 Dunkel Cloud Storage - see “Configuring S3-based storage” on page 30 EMC Atmos- see “Configuring Atmos-based storage” on page 26 NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 23
AltaVault appliance. 5. On the Confirmation page verify the information, and click Save and Apply. Note: It is recommended to use a firewall to prevent unauthorized connections to the AltaVault. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 24
Bucket names must be a series of one or AltaVault more labels separated by a period 5. Port - Specify the port through which replication occurs. Ports 80 or 443 are available. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 25
Bucket names must be a series of one or AltaVault more labels separated by a period. 9. Port - Specify the port through which replication occurs. Ports 80 or 443 are available. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 26
1. Select yes or no to use keys from KMIP server from the drop-down list. When configuring the KMIP server, you must: – Use the same username and password as created in KMS. – Upload the same certificate as downloaded from KMS after signing it. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 27
1. Select yes or no to use keys from KMIP server from the drop-down list. When configuring the KMIP server, you must: – Use the same username and password as created in KMS. – Upload the same certificate as downloaded from KMS after signing it. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 28
13. Select the Enable Proxy check box to enable proxy server settings and specify: Hostname/IP address - Specify the hostname or the IP address. Ports - Specify the port numbers for access. Username - Specify the name of the user for access. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 29
8. Enable Cloud CA Certificate - Optionally, specify a cloud CA certificate that will be used to validate the server certificate of cloud provider. This must be .pem extension file. 9. Select the Enable Proxy check box to enable proxy server settings and specify: NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 30
Password - Specify the user’s password. Configuring SWIFT-based storage 1. Select yes or no to use keys from KMIP server from the drop-down list. When configuring the KMIP server, you must: NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 31
Ports - Specify the port numbers for access. Username - Specify the name of the user for access. Password - Specify the user’s password. 11. Click Apply to apply your changes to the running configuration. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 32
After you configure a private cloud, the cloud appears as the cloud provider in the cloud settings page. To customize a private cloud 1. Contact NetApp Support to convert a cloud to a private cloud. NetApp AltaVault Cloud Integrated Storage Administration Guide...
2. After you configure a private cloud using the CLI, it appears in the Cloud Settings page and the dashboard in the Cloud Information section as the Provider. For more information on CLI, see the NetApp AltaVault Cloud Integrated Storage Command-Line Interface Reference Guide.
If an encryption key passphrase is configured on AltaVault at the time you export the configuration, the configuration file will require this passphrase when imported to another AltaVault appliance. For more information about the encryption key passphrase, go to “Configuring encryption” on page NetApp AltaVault Cloud Integrated Storage Administration Guide...
This setting enables you to access the storage and software through the Internet. For more details on cloud provider settings, see “Using the Cloud Settings wizard” on page Only users who have Read-Only Replication Settings permission or Read and Write Replication Settings permission can access and configure the Cloud Settings Page. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Only users who have Read-Only Replication Settings permission or Read and Write Replication Settings permission can access and configure the Bandwidth Limit Settings Page. To configure bandwidth limits 1. Choose Configure > Cloud Settings. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Note: If you are upgrading to AVA4.2 or later releases, migration of your CIFS configuration from earlier AVA releases to AVA SMB is supported. For detailed SMB deployment information, see the NetApp AltaVault (Formerly SteelStore) Cloud-Integrated Storage Appliances SMB Deployment Guide (Technical Report 4511).
Page 38
Password Optionally, specify the user’s domain password. Leave Domain Attempt to remove AltaVault from the domain. Reboot all client machines that were used to connect to the AltaVault to delete cached domain credentials. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 39
Adds the SMB share to the AltaVault. Remove Selected Deletes the selected SMB share. The share you configured appears in the list of shares on the page along with the option to add a local user. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 40
Note: Permission settings are hierarchical; that is, Read permission provides read-only access to the share. Write permission provides read and write access to the share. Modify permission provides full control of the share. Apply Applies the changes to the SMB share users. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 41
SMB multichannel is a feature that allows SMBv3 shares to be accessed via multiple network interfaces from Windows hosts that support SMBv3. 1. Multichannel support is disabled for all interfaces by default. To enable an interface (e0a, e0b, e0c), select the checkbox for the interface and click Enable. NetApp AltaVault Cloud Integrated Storage Administration Guide...
NFSv4 export. If you select no, the export will be configured as NFSv3 export. Kerberos Authentication Kerberos authentication works only with NFSv4 exports. It is optional. If you are not using Kerberos, AltaVault does not use any other means of authentication for NFSv4 exports. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 43
10 seconds. Although there is a window of time (after the server responds with success for an fsync request, and before the data is written to disk), this window is small and performance benefits are large. NetApp recommends exporting NFS asynchronously. Allow Specified Clients Specify which clients can connect to the NFS share.
The default value is 10 seconds. Although there is a window of time (after the server responds with success for an fsync request and before the data is written to disk), this window is small and performance benefits are large. NetApp recommends exporting NFS asynchronously.
“To edit OST user” on page 47 For information on configuring up the AltaVault OST Plug-in for communication with AltaVault, see the NetApp AltaVault OST Plug-in Deployment Guide. To configure OST share 1. The OST page does not appear until the Storage Optimization Service is started. If needed, choose Maintenance >...
Page 46
Type the user name that you would use for authenticating the share from NetBackup. Password Specify the new password for the user. Password confirm Re-enter the password. Add User Adds the OST user. NetApp AltaVault Cloud Integrated Storage Administration Guide...
The Whitelist specifies which addresses are authorized to communicate with AltaVault. 5. Enter the IP addresses of ONTAP intercluster LIFs from which AltaVault will accept connections for backup and restore operations, and click Add. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Shares on the AltaVault have no size limitation but are bound by the AltaVault’s cache capacity. The size of source volume, change rate, and number of Snapshots will impact the number and size of SnapMirror shares on the AltaVault. NetApp AltaVault Cloud Integrated Storage Administration Guide...
The retention method used for Snapshot retention applies to all SnapMirror shares created on the AltaVault. To enable long-term retention mode 1. Under Long Term Retention, click Enable. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Name - Modify the hostname. DNS Settings - NetApp recommends that you use DNS resolution. Hosts - If you do not use DNS resolution, or if the host does not have a DNS entry, you can assign a host-IP ...
Page 52
2. Under Web/FTP Proxy, complete the configuration as described in this table. Control Description Enable Web Proxy Enables the appliance to use a Web proxy to contact NetApp. Web proxy access is disabled by default. Web/FTP Proxy Specify the IP address for the Web or FTP proxy.
Obtain IPv4 Address Automatically Automatically obtain an IPv4 address from a DHCP server. • Enable IPv4 Dynamic DNS - Select this option to enable IPv4 dynamic DNS on the primary interface. NetApp AltaVault Cloud Integrated Storage Administation Guide...
Modifying data interfaces You can view and modify settings for the data interfaces in the Configure > Data Interfaces page. To display and modify the configuration for data interfaces 1. Choose Configure > Data Interfaces. NetApp AltaVault Cloud Integrated Storage Administation Guide...
Page 55
• IPv4 Address Specify an IPv4 address. • IPv4 Subnet Mask Specify a subnet mask. • IPv4 Gateway Specify the gateway IP address. • MTU - Specify the MTU value. The default value is 1500. NetApp AltaVault Cloud Integrated Storage Administation Guide...
Control Description Enable VIF Enables VIF feature. Virtual Interface Name Specify a name for the virtual interface. Member Interfaces Specify a comma-separated list of the data interfaces that are members of this VIF. NetApp AltaVault Cloud Integrated Storage Administation Guide...
Select the check box next to the name and click Remove Selected. Note: A restart of AltaVault is required before performing any further networking changes. 4. Choose Maintenance > Service and click Start for the changes to take effect. NetApp AltaVault Cloud Integrated Storage Administation Guide...
Type a message in the text box to appear on the Home page as the message of the day. 3. Click Apply to view the message before saving. Configuring alarm settings You can set alarms in Configure > Alarms page. Enabling alarms is optional. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 60
The child alarm of a disabled parent appears on the System Status report with a suppressed status. Disabled children alarm of an enabled parent appears on the System Status report with a disabled status. To set alarm parameters Choose Configure > Alarms. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 61
This alarm might also trigger when replication is too slow. View the Eviction Optimization report (choose Reports > Eviction) to determine how much disk cache is available. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 62
Shelf Power Supply - Enables an alarm when shelf power supply is needed. Inconsistent Cloud Enables an alarm when the connection to the cloud provider is inconsistent. Connectivity Inconsistent Cloud Data Enables an alarm when inconsistency in the data stored in the cloud is detected. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 63
The alarm clears when the rate drops below 0.05%. You can change the default alarm thresholds by entering the alarm link_errors err-threshold xxxxx CLI command at the system prompt. For details, see the NetApp AltaVault Cloud Integrated Storage Command-Line Interface Reference Guide.
Page 64
AltaVault is not replicating data in the cloud. By default, this alarm is enabled. System Reserved Space Indicates that the space used for internal data structures is full. De-duplication performance is Full impacted while the appliance is in this state. NetApp AltaVault Cloud Integrated Storage Administration Guide...
You set the system date and time in the Configure > Date and Time page. You can either set the system date and time by entering it manually, or by assigning an NTP server to the AltaVault. By default, the appliance uses the NetApp-provided NTP server. To set the date and time manually 1.
Page 66
Configure the NTP server with the key ID. NTP servers NetApp recommends synchronizing the AltaVault to an NTP server of your choice. To add an NTP server 1. Choose Configure > Date and Time. 2. Under Requested NTP Servers, complete the configuration as described in this table.
AltaVault supports the following SNMP Basic settings: SNMP Version 1 SNMP Version 2c SNMP Version 3, which provides authentication through the User-based Security Model (USM) View-Based Access Control Mechanism (VACM), which provides richer access control NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 68
Password/Password Confirm (Appears only when you select v3 and Supply a Password). Specify a password. The password must have a minimum of eight characters. Confirm the password in the Password Confirm text box. NetApp AltaVault Cloud Integrated Storage Administration Guide...
4. Configure the SNMP-server access policies that contain a set of rules defining access rights. Based on these rules, the entity decides how to process a given request. To create users for SNMP v3 1. Choose Configure > SNMP v3. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 70
Supply a Password, or Supply a Key. Adds the user. Remove Selected Select the check box next to the name and click Remove Selected. 3. Click Apply to apply your changes to the running configuration. NetApp AltaVault Cloud Integrated Storage Administration Guide...
An access policy is the configurable set of rules, based on which the entity decides how to process a given request. To set secure usernames 1. Choose Configure > SNMP ACLs. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 72
To add another Security Model and Name pair, click the plus sign (+). Adds the group name and security model and name pairs. Remove Selected Select the check box next to the name and click Remove Selected. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 73
Select a view from the drop-down list. Adds the policy to the policy list. Remove Selected Select the check box next to the name and click Remove Selected. 3. Click Apply to apply your changes to the running configuration. NetApp AltaVault Cloud Integrated Storage Administration Guide...
1. Choose Configure > Logging. 2. To rotate the logs immediately, under Log Actions at the bottom of the page, click Rotate Logs. After the logs are rotated, the following message appears: logs have been successfully rotated NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 75
1. Under Remote Log Servers, complete the configuration as described in this table. Control Description Add a New Log Server Displays the controls for configuring new log servers. Server IP Specify the server IP address. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 76
AltaVault might not be able to sustain the flow of logging data that the service is committing to disk. Log filters enable you to specify the logging level of individual processes independently. To filter a log 1. Choose Configure > Logging. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 77
Adds the filter to the list, after which it logs at the selected severity and higher. Remove Selected Select the check box next to the name and click Remove Selected to remove the filter. 3. Click Apply to apply your changes to the running configuration. NetApp AltaVault Cloud Integrated Storage Administration Guide...
TACACS+ server: service = rbt-exec { local-user-name = “monitor” Replace with for write access. monitor admin To set general security settings 1. Choose Configure > General Settings. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 80
Any vendor attributes received by an authentication server are ignored. Default User Optionally, select Admin or Monitor from the drop-down list to define the default authentication policy. 3. Click Apply to apply your changes to the running configuration. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Specify the new password. The password cannot be “password” or any case combination of “password” for any user including admin and root and must be at least 6 characters long. This password can be different from the AD password. New Password Confirm Confirm the new password. NetApp AltaVault Cloud Integrated Storage Administration Guide...
3. Select the user to display Edit User section. 4. Click Clear Login Failure Details to unlock the user account. When you log in to your account successfully, AltaVault resets the login failure count. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Minimum special characters (0) Minimum character difference between passwords (0) Maximum consecutively repeating characters (no limit) Choose whether to prevent dictionary words (yes) 6. Click Apply to save your settings. NetApp AltaVault Cloud Integrated Storage Administration Guide...
8. Click Add to save user roles and permissions. 9. Repeat steps 6 through 8 to add additional users. 10. From the Management Console, choose Configure > General Settings. NetApp AltaVault Cloud Integrated Storage Administration Guide...
2. Under Default RADIUS Settings, complete the configuration as described in this table. Control Description Set a Global Default Key Enables a global server key for the RADIUS server. Global Key Specify the global server key. Confirm Global Key Confirm the global server key. NetApp AltaVault Cloud Integrated Storage Administration Guide...
You can prioritize local, RADIUS, and TACACS+ authentication methods for the system and set the authorization policy and default user for RADIUS and TACACS+ authorization systems in the General Settings page. NetApp AltaVault Cloud Integrated Storage Administration Guide...
The secure vault contains sensitive information from your AltaVault configuration, including the encryption key. These configuration settings are encrypted on the disk at all times, using 256-bit AES encryption. You can unlock and change the password for the secure vault in the Secure Vault page. NetApp AltaVault Cloud Integrated Storage Administration Guide...
1. Choose Configure > Web Settings. 2. Under Web Settings, complete the configuration as described in this table. Control Description Default Web Login ID Specify the username that appears in the authentication page. The default value is admin. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Issued On - Specifies the date the certificate was issued. Expires On - Specifies the date the certificate expires. Fingerprint SHA1 - Specifies the SSL fingerprint. Type - Specifies the key type. Size - Specifies the size in bytes. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 92
Common Name Specify the common name. Organization Name Specify the organization name (for example, the company). Organization Unit Name Specify the organization unit name (for example, the section or department). Locality Specify the city. NetApp AltaVault Cloud Integrated Storage Administration Guide...
“Troubleshooting KMIP” Using the Management Console to configure KMIP This section includes the following information: “To add a KMIP server” on page 94 “To add KMIP keys” on page 94 NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 94
This field displays only when the Register Key is set to Yes, and the Type is set to Secret Data. UUID Specify the UUID from your server. The UUID field displays only if the Register Key is set to No. NetApp AltaVault Cloud Integrated Storage Administration Guide...
4. Select the symmetric key name that corresponds to the AES-256 key. Using CLI to configure KMIP You can use CLI to configure KMIP. For more information, see the NetApp AltaVault Cloud Integrated Storage Command-Line Reference Guide available on the NetApp Support at https://mysupport.netapp.com...
Page 96
Configuring security settings Configuring KMIP Beta Draft Example of a successful command NetApp AltaVault Cloud Integrated Storage Administration Guide...
When you add an appliance to be monitored by the AltaVault, you must generate an API access code to enable authenticated communication between the monitoring master appliance and the monitored peer appliance. 1. Log in to the monitored AltaVault appliance. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 98
Adds the API access code to the AltaVault appliance. Remove Selected Appliances Select an access code from the table below and click Remove Selected Appliances to delete the selected REST API access code. NetApp AltaVault Cloud Integrated Storage Administration Guide...
IP packet. When you add a rule on a AltaVault, the destination specifies the AltaVault itself, and the source specifies a remote host. To add an ACL management rule 1. Choose Configure > Management ACL. NetApp AltaVault Cloud Integrated Storage Administration Guide...
(username/password) or the client public key. This section describes how to use AltaVault CLI commands to the configure SSH access using public keys. To enable SSH access via public key 1. Log in to the AltaVault with the login name and password. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 101
To delete an authorized public key (disabling SSH access for a given user), enter the index number of the public key. For example, the first key added would have index value 1. CLI (config) # no ssh server user admin authorized-key 1 NetApp AltaVault Cloud Integrated Storage Administration Guide...
Understanding FIPS on AltaVault This section describes the NetApp Cryptographic Security Module as well as the system features that are FIPS compliant and those that are not. AltaVault offers end-to-end security for data at rest and in flight using FIPS 140-2 level 1-compliant encryption with the NetApp Cryptographic Security Module.
NetApp Cryptographic Security Module The NetApp Cryptographic Security Module is the part of AltaVault software that separates the cryptography that is FIPS compliant from the rest of the AltaVault. The NetApp Cryptographic Security Module is compatible with FIPS 140-2 Level 1 requirements.
Configuring AltaVault for FIPS compliance Configuring AltaVault appliances for FIPS-compliant cryptography Beta Draft Features That Use Cryptographic Libraries Outside the NetApp Cryptographic Security Module Boundary Kerberos SSH with unapproved ciphers Features with Protocol Specifications That Can Use Noncompliant Hash Algorithms Some cloud providers (that you use with the AltaVault) are not fully supported in FIPS mode ...
Verifying that your system uses FIPS-compliant encryption To verify that your system is FIPS compliant 1. Connect to the CLI. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Note: The commands in the following sections are configuration commands. You need to run these from configuration mode in the CLI. For detailed information, see the NetApp AltaVault Cloud Integrated Storage Command-Line Reference Guide. Account passwords FIPS compliance requires that passwords for user accounts are encrypted using an SHA256-based or SHA512-based hash.
In addition to self-signed certificates, you can import certificates using the web ssl cert import-cert * and web ssl cert import-cert-key * commands or the Configure > Web Settings page in the Management Console. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Mar 18 16:05:10 amnesiac snmpd[31709]: NET-SNMP version 5.3.1 For more information about system logs, see “Viewing system logs” on page 142. SSH requires the use one of the following ciphers to run in FIPS mode: NetApp AltaVault Cloud Integrated Storage Administration Guide...
(config) # write memory To verify your settings, enter the following command: amnesiac (config) # show telnet-server Telnet server enabled: no Web proxy Web proxy functionality for licensing is not FIPS compliant. NetApp AltaVault Cloud Integrated Storage Administration Guide...
File transfers, such as configuration fetch, run in FIPS mode and are FIPS compliant. To verify, look for file transfer entries in the syslog when initiating a file download. Ensure these entries have FIPS_mode_set(1). For example: Mar 18 16:28:34 amnesiac curl: FIPS_mode_set(1) NetApp AltaVault Cloud Integrated Storage Administration Guide...
Mar 18 16:22:11 amnesiac httpd: [Mon Mar 18 16:22:11 2013] [notice] Apache/2.2.23 (Unix) mod_ssl/ 2.2.23 OpenSSL/1.0.1c-fips configured -- resuming normal operations FIPS CLI For information about FIPS CLI commands, see the NetApp AltaVault Cloud Integrated Storage Command-Line Reference Guide. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Note: Prior to stopping or restarting Storage Optimization Service, quiesce all backup applications. To start, stop, or restart the Storage Optimization Service 1. Choose Maintenance > Service. 2. Click Stop, Start, or Restart. NetApp AltaVault Cloud Integrated Storage Administration Guide...
WAN bandwidth and data to be restored. If the replay process is very slow or seems to be stuck, contact NetApp Support at https://mysupport.netapp.com. 3. To verify that the service is running again, go to Home > Optimization Service. You should see that Service is running and Status is ready.
“Managing licenses using the command-line” on page 116 “Managing licenses using the Management Console” on page 117 “License limits” on page 117 “Model upgrades on the virtual AltaVault appliances” on page 117 NetApp AltaVault Cloud Integrated Storage Administration Guide...
Capacity: <capacity in TB> Version: <software version> Type: Capacity” Installation: <date/time> Expiration: <date> This command does not require the optimization service to be shutdown. If there is no license, the following command displays: NetApp AltaVault Cloud Integrated Storage Administration Guide...
The AltaVault license limit controls the amount of data you can back up to the cloud from the AltaVault. The license limit varies for each AltaVault model. For details, see the NetApp AltaVault Cloud Integrated Storage Installation and Service Guide for Virtual Appliances.
If you specify a URL in the URL text box, the image is uploaded and installed and the system is rebooted at the time you specify. Use the image.img file for upgrades, found on the NetApp support site. From Local File Select this option and type the path, or click Browse to go to the local file directory.
Each AltaVault has an active, running configuration and a written, saved configuration. The default configurations are as follows: Configuration Description initial This is the initial configuration. initial.bak This is the backup of the initial configuration. To manage configurations 1. Choose Configure > Configurations. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 120
3. Click Activate to change the active configuration to the configuration you select. 4. Restart the AltaVault service on the Maintenance > Service page. Click the configuration name to display the configuration settings in a new browser window. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Plot area Navigator Control panel The summary tables, which appeared under the graphs in the legacy report style, have been removed. The summary statistics appear in the control panel legend. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 123
You can also click the data display portion of the navigator (not the scroll bar) and the chart window moves to wherever you clicked. NetApp AltaVault Cloud Integrated Storage Administration Guide...
You can hide and show individual data series. When a white check box icon appears next to the data series name, you can hide the series from the plot area. To hide individual series from the plot area Clear the check box next to the data series name. NetApp AltaVault Cloud Integrated Storage Administration Guide...
For Custom, enter the Start Time and End Time and click Go. Use the following format: YYYY/ MM/DD HH:MM:SS. Refresh Select a refresh rate from the drop-down list. To turn refresh off, click Off. Displays the report. NetApp AltaVault Cloud Integrated Storage Administration Guide...
What is the average front-end (SMB/NFS/OST/SnapMirror) data read by the backup server? What was the peak amount of data transmitted? To view the Front-End Throughput Optimization report 1. Choose Reports > Front-End Throughput. NetApp AltaVault Cloud Integrated Storage Administration Guide...
What is the average back-end data that the AltaVault writes to the cloud? What was the peak amount of data transmitted? To view the Back-End Throughput Optimization report 1. Choose Reports > Back-End Throughput. NetApp AltaVault Cloud Integrated Storage Administration Guide...
What is the average of the most recent data (calculated using the date and time it was created) leaving the AltaVault local storage disk? To view the Eviction report 1. Choose Reports > Eviction. NetApp AltaVault Cloud Integrated Storage Administration Guide...
What is the estimated time for replication to complete? How much data ingested until the specified time is replicated to the cloud? To view the Replication report 1. Choose Reports > Replication. NetApp AltaVault Cloud Integrated Storage Administration Guide...
What are the total put operations? What are the total head operations? What are the total post operations? What are the total get operations? What are the total delete operations? NetApp AltaVault Cloud Integrated Storage Administration Guide...
How much data is replicated to the cloud? What is the time to complete replication? What are the pending replication bytes? How much disk storage is used? How much disk storage is free? NetApp AltaVault Cloud Integrated Storage Administration Guide...
The system sends an email to all email addresses on the Configure > Email page appearing under Report Events via Email. The email notifies users that the trigger has fired. 2. To generate share statistics, use the following CLI command: share-stats generate NetApp AltaVault Cloud Integrated Storage Administration Guide...
The Alarm Status report takes a current snapshot of the system to provide a single report you can use to check for any issues with the AltaVault. The report examines the status of key system components. Use this report to gather preliminary system information before calling NetApp Support to troubleshoot an issue. Alarm...
Page 134
Fan Error - Indicates that the system has detected a problem with the fans. Fans for many systems can be replaced. Contact NetApp Support at https://mysupport.netapp.com and file a trouble ticket to order a replacement fan. IPMI - Indicates that there has been a physical security intrusion, triggering an Intelligent Platform Management Interface (IPMI) error.
Page 135
0.05%. You can change the default alarm thresholds by entering the alarm link_errors err- threshold xxxxx CLI command at the system prompt. For details, see the NetApp AltaVault Cloud Integrated Storage Command-Line Interface Reference Guide. To troubleshoot, try a new cable and a different switch port. Another possible cause is electromagnetic noise nearby.
60 to 70 percent capacity during peak hours. No single AltaVault CPU usage should exceed 95 percent. The CPU Utilization report answers the following questions: How much of the CPU is being used? What is the average and peak percentage of the CPU being used? NetApp AltaVault Cloud Integrated Storage Administration Guide...
Specifies the rate at which pages swapped. If 100 pages are swapped every couple of hours, the AltaVault is functioning properly. If thousands of pages are swapped every few minutes, contact NetApp Support at https://mysupport.netapp.com. The Memory Paging report answers the following questions: NetApp AltaVault Cloud Integrated Storage Administration Guide...
Number of packets transmitted by the interface. It also provides details such as the number of packets discarded, packet errors, packet overruns, packet frames, and packets multicast. The Interface Statistics report answers the following questions: NetApp AltaVault Cloud Integrated Storage Administration Guide...
The rate at which the AltaVault can write to the internal disk subsystem characterizes the performance by which the AltaVault can serve write requests from the client machines and retrieve data from the cloud storage provider. To view the Disk Throughput report 1. Choose Reports > Disk Throughput. NetApp AltaVault Cloud Integrated Storage Administration Guide...
What is the average write IOPS that the AltaVault is experiencing at the specified time? The average disk IOPS is a measure of performance that help you to discover disk-based bottlenecks. To view the Disk IOPS report 1. Choose Reports > Disk IOPS. NetApp AltaVault Cloud Integrated Storage Administration Guide...
What is the availability of AltaVault services to process I/O requests? How well are the AltaVault services using the internal disk subsystem? To view the Disk Utilization report 1. Choose Reports > Disk Utilization. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Select one of the following options from the drop-down list: • Page - Specify the number of the page that you want to display. • Time - Specify the time for the log that you want to display. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Select one of the following options from the drop-down list: • Page - Specify the number of the page that you want to display. • Time - Specify the time for the log that you want to display. NetApp AltaVault Cloud Integrated Storage Administration Guide...
To download user logs 1. Choose Maintenance > User Logs Download. 2. Click the name of the log to display the dialog box to display or save the log to disk. NetApp AltaVault Cloud Integrated Storage Administration Guide...
2. Click the name of the system dump file and then click Download System Dump to download it. 3. Optionally, under Upload to NetApp Support, type the support case number, click Upload to upload the system dump to the NetApp Support site.
1. Choose Maintenance > TCP Dumps. 2. Under TCP Dumps Currently Running, complete the configuration as described in this table. Control Description Add a New TCP Dump Displays the controls for creating a capture file. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 147
(for example, lan0_0, wan0_0), and timestamp is in the YYYY-MM-DD-HH-MM-SS format. If this capture file relates to an open NetApp Support case, specify the capture filename case_number where number is your NetApp Support case number. For example, case_12345. The .cap file extension is not included with the filename when it appears in the capture queue.
Page 148
Specify a positive integer to set how long the capture runs, in seconds. The default value is 30. (Seconds) Specify 0 or continuous to initiate a continuous trace. For continuous capture, NetApp recommends specifying a maximum capture size and a nonzero rotate file number to limit the size of the TCP dump. Maximum Capture Size Specify the maximum capture file size, in megabytes.
Page 149
GRE-encapsulated packets that some modes of AltaVault communications use, such as WCCP deployments or Interceptor connection-setup traffic. NetApp recommends using bidirectional filters by specifying endpoints. For complete control of your filter expression, use the CLI tcpdump command. For details, see the NetApp AltaVault Cloud Integrated Storage Command-Line Interface Reference Guide.
Page 150
When the scan stops, the system sends an email to all email addresses on the Configure > Email page appearing under Report Events via Email. The email notifies users that the trigger has fired. NetApp AltaVault Cloud Integrated Storage Administration Guide...
2. Select the capture filename in the Running Capture Name list. 3. Click Stop Selected Captures. Uploading a TCP dump NetApp offers several methods to upload capture files to the support server for sharing with the support team while diagnosing issues. NetApp AltaVault Cloud Integrated Storage Administration Guide...
The capture appears as a download link in the list of Stored TCP Dumps. 2. Select the capture filename. 3. Optionally, specify a case number that corresponds to the capture. NetApp Support recommends using a case number. For example, 194170.
Page 153
AltaVault storage available, total bytes pending replication to the cloud for all monitored appliances in the network. To configure appliance monitoring 1. Choose Reports > Appliance Monitoring. NetApp AltaVault Cloud Integrated Storage Administration Guide...
The top right LED is the power LED. If the disk is online, it is constantly green. If the disk is offline, it is amber. For details, see the NetApp AltaVault Cloud Integrated Storage Installation and Service Guide for Physical Appliances.
2. Click the filename to open an Offline File System Check log file or save the file to disk. 3. To remove an entry, select the box next to the name and click Remove Selected. NetApp AltaVault Cloud Integrated Storage Administration Guide...
1. Choose Maintenance > Online File System Check. 2. Under Online File System Check Actions, click Start Data Integrity Check to start the check. -or- Click Stop Data Integrity Check to stop the check. NetApp AltaVault Cloud Integrated Storage Administration Guide...
4. Open and check the Verify log file. If all data in the local disk is replicated in the cloud, the file displays the following result: Verification complete: collection is properly replicated. Otherwise, the log file displays an error message. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 158
Viewing reports and logs Viewing the verify tool diagnostics Beta Draft NetApp AltaVault Cloud Integrated Storage Administration Guide...
Seeding data from AltaVault to the cloud is generally a one-time operation that is done after initially configuring a cloud service provider. It assumes no data exists in the cloud bucket. NetApp AltaVault Cloud Integrated Storage Administration Guide...
8. Under Give job details, specify the job information: Job information Description Import job name Specify a name to apply to the job. This can be the same as the bucket name. Region Select a destination region from the pull-down menu. NetApp AltaVault Cloud Integrated Storage Administration Guide...
5. Click Download manifest to download a copy of the file to a server that can be accessed by AltaVault. 6. Log in to the AltaVault CLI. 7. Upload a copy of the manifest file to the AltaVault: hostname (config)# seed snowball manifest-file fetch <manifest-file-url> NetApp AltaVault Cloud Integrated Storage Administration Guide...
Status Description Not started Snowball copy is not started. AltaVault can also enter this state after successfully stopping or canceling a job. Copying data Copying data to Snowball is in progress. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Snowball actions on AltaVault. To verify the data transfer 1. Check that Storage Optimization Service is running: hostname (config)# show service If service is not running, start the service: NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 164
After stopping the process, AltaVault cleans up related files, including deletion of the manifest file. 5. Start the replication service on AltaVault: hostname (config)# replication service enable Normal backup operations to the cloud resume, including any data that was not copied to the cloud using Snowball. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Be aware that replication is suspended during cloud migration. Therefore, if the AltaVault cache becomes full (since data from the cache cannot be evicted if it is not replicated yet), then backup application attempts to write to the AltaVault cache will fail, leading to failure of backup applications. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Enter the authentication type and security credentials for the new cloud to which you are migrating: CLI (config)# replication migrate-to auth type <authentication-type> acc-key-id <access-key> secret-acc-key <secret-key> c. Optionally, enter the proxy name and credentials for the cloud to which you are migrating and enable the proxy: NetApp AltaVault Cloud Integrated Storage Administration Guide...
To wipe out any data transferred to the new bucket, enter the command. replication migrate-to format Amazon S3 or S3-IA to Glacier migration If you are migrating from Amazon S3 or S3-infrequent access storage classes to Amazon Glacier, perform the following steps: NetApp AltaVault Cloud Integrated Storage Administration Guide...
If you are migrating from Amazon S3-IA to S3, enter the following command: CLI (config)# replication provider type s3 storage-class standard 5. Start the AltaVault Storage Optimization Service: hostname (config) # service enable NetApp AltaVault Cloud Integrated Storage Administration Guide...
In all cases, the cache size on the target appliance must be equal to or larger than the source. Additionally, for physical appliances the number of RAID groups on the target appliance must be equal to or larger than the source appliance. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Connectivity can include switches, but for best performance it is recommended to use direct connections between appliances using crossover cables. If connections use static routes, all interfaces can be on the same subnet. If connections use dynamic routing, NetApp recommends that interfaces be on separate subnets. The diagrams cover the following connections: “SteelStore physical appliance to AltaVault physical appliance”...
Page 171
Data migration connection diagrams Migrating data between appliances Beta Draft SteelStore physical appliance to AltaVault physical appliance SteelStore or AltaVault virtual appliance to AltaVault physical appliance NetApp AltaVault Cloud Integrated Storage Administration Guide...
The source appliance needs to be decommissioned according to your company’s appliance practices regarding decommissioned hardware. If the source appliance will be reset and used in a new data protection capacity, contact NetApp support for assistance on steps needed to redeploy the appliance. Prerequisites The following describes the prerequisites required of the source and target appliances prior to performing data migration.
Note: File System Check and Verify operations can take several days to run depending on the amount of storage that must be scanned. NetApp AltaVault Cloud Integrated Storage Administration Guide...
If cloud deduplication is enabled, AltaVault displays a message asking if you want to disable cloud deduplication: If prompted, enter (no). The cloud deduplication status is needed in Step 3 for determining whether to use the metadata-only option. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 175
7. To reset and restart data migration from the beginning, issue the following CLI commands on both on the source and target appliances. After entry, repeat step 1 and step 2 to initiate a new data migration. <target appliance (config)> # datamigration receive reset NetApp AltaVault Cloud Integrated Storage Administration Guide...
4. When migrating from a SteelStore appliance, after the migration to AltaVault 4.1.1 is complete, you can upgrade to later versions of AltaVault software. For AltaVault software upgrade instructions, see “Upgrading your software” on page 117. NetApp AltaVault Cloud Integrated Storage Administration Guide...
You can also use AltaVault-v at Site B, depending on the size of the data that you need to restore. AltaVault-v can store data up to 32 TB. NetApp recommends that you use an appliance in the disaster recovery site (Site B) that has the same or greater local storage capacity as the affected AltaVault (in Site A).
For details on exporting your configuration file, see the section Using the export configuration wizard in the NetApp AltaVault Cloud Integrated Storage User’s Guide. Disaster recovery testing If you are restoring data for disaster recovery testing, you must first disable replication on AltaVault at site A and then restore your data at site B.
NFS mounts. To speed up the recovery process, you can prepopulate data to the cache, which allows AltaVault to request recovery of data segments in parallel. For more information, see “Restoring data from the cloud using the prepopulation page” on page 252. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Disaster recovery Disaster recovery actions must be performed as follows to enable a new AltaVault appliance for recovery of data backed up by the original AltaVault appliance lost in the disaster. NetApp AltaVault Cloud Integrated Storage Administration Guide...
NFS mounts. To speed up the recovery process, you can prepopulate data to the cache, which allows AltaVault to request recovery of data segments in parallel. For more information, see “Restoring data from the cloud using the prepopulation page” on page 252. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Beta Draft System components AVA-400, AVA- CHAPTER 15 This section provides system specifications for the NetApp AltaVault appliance. It includes the following sections: “AltaVault appliance components” on page 183 “Using LEDs to check the status of the system” on page 185 ...
You can hot-swap failed hard drives on an AltaVault expansion shelf, but you must run a CLI command to add it to the RAID array. For more information see, NetApp AltaVault Cloud Integrated Storage User’s Guide. You must add a drive to the RAID controller using the Management Console or the command-line interface. New ...
• Controller A activity (controller installed in the top bay only with no secondary controller) Note: When the bezel is removed, the system LEDs on the chassis are arranged in the same order as on the bezel, but in a top-to-bottom vertical orientation. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 186
The system is operating normally. Activity Blinking green The AltaVault OS is running. The length of time that the light remains on is proportional to the controller’s activity. Clear (off) There is no activity on the controller. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Field-replaceable units (FRUs) are components that can be replaced at your site. There are two types of FRUs: Hot-swappable FRUs: Component which can be replaced while the system is still powered. Non hot-swappable FRUs: Component which cannot be replaced while the system is still powered. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Fan modules and their LEDs If the controller does not detect the presence of the associated fan module, the system fails to boot. Each fan module is a hot-swappable field-replaceable unit (FRU) that contains two fans. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 189
The following table displays the fan module components and descriptions: Component Description Cam handle Fan module Cam handle release latch Fan module attention LED To locate the fan modules and their LEDs 1. Remove the front bezel. NetApp AltaVault Cloud Integrated Storage Administration Guide...
The fans speed has fallen below the critical low threshold. One or both fans in the fan module have stopped spinning. The fan module is not present. The fans in the module are malfunctioning. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Power supply LED behaviors This section describes the AltaVault system LEDs, their behavior, and information about the power supplies used in the system. You must power off the controller before powering off the AVA10S shelves. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 192
Description Value AC input power frequency 50 to 60 Hz AC input power voltage/operating range (auto-ranging) 100 to 120 VAC 200 to 240 VAC AC output power 1300 W PSU output power 1050W NetApp AltaVault Cloud Integrated Storage Administration Guide...
Controller left side ports and LEDs This section describes the controller ports and LEDs on the left side of the controller faceplate. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 194
Controller attention LED Amber A problem has occurred in the controller. This in turn has caused the system attention LED on the chassis front to become illuminated. The controller is functioning properly. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 195
Management Ethernet port (wrench icon) LEDs Management Ethernet port (wrench icon) Private management Ethernet port (wrench lock icon) LEDs (not used) Private management Ethernet port (wrench lock icon) (not used) USB port (not used) Console port NetApp AltaVault Cloud Integrated Storage Administration Guide...
The controller has a FRU map printed on the CPU cover. This FRU map lists all the internal FRUs in the controller and their general location on the board and their corresponding LEDs. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 197
The attention LED is next to the battery on Riser-R. For more information on replacing specific internal FRUs, see “Replacing internal FRUs” on page 218. NetApp AltaVault Cloud Integrated Storage Administration Guide...
“Replacing the RTC clock coin battery” on page 227 “Replacing disk shelf power supplies and other FRUs” on page 230 “Replacing a faulty hard disk drive on an AltaVault AVA400 or AVA800 appliance” on page 218 “Returning failed parts” on page 230 ...
SP is established via the cabling to the Management Port (wrench port) on the AltaVault, and therefore the IP address assigned to the SP should be in the same subnet as the Management port or be routable to the Management port on the AltaVault. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 201
Do you want to enable IPv6 on the SP? [y/n] n Output sample: Service Processor New Network Configuration Ethernet Link: up, full duplex, auto-neg complete Mgmt MAC Address: 00:A0:98:5D:34:BC IPv4 Settings Using DHCP:NO IP Address:172.16.100.4 NetApp AltaVault Cloud Integrated Storage Administration Guide...
Up, 1000Mb, Full-Duplex, Auto-neg enabled,completed Using DHCP: IPv4 configuration: IP Address: 172.16.33.154 Netmask: 255.255.240.0 Gateway: 172.16.33.1 IPv6 configuration: Disabled 3. Enter the following IPMI command to test the Service Processor feature: SP> system sensors Sample output (truncated): NetApp AltaVault Cloud Integrated Storage Administration Guide...
These instructions describe how to replace an AltaVault controller in the case of an RMA (Return Merchandise Authorization). Caution: In most cases, replacing an AltaVault controller is performed by NetApp Support. Only experienced technicians should attempt to replace a controller because of the risk of loosing data.
Page 204
1. Ensure that the current configuration from the source appliance has been exported. For details, see the section, Using the Export Configuration Wizard, in the NetApp AltaVault Cloud Integrated Storage User’s Guide. Ensure that the exported configuration from the source appliance is safe and accessible.
Page 205
Keep track of which RAID cards you have swapped. 3. Reconnect the Storage Shelves to the target controller in the same configuration as the source controller. NetApp AltaVault Cloud Integrated Storage Administration Guide...
To install a Controller in a Chassis 1. Align the controller module with the opening in the chassis and then gently push the controller module halfway into the system. 2. Re-cable the system: NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 207
Note: Power on the disk shelf attached to the AltaVault system and set the disk shelf ID before powering on the controller. For information on setting the disk shelf ID, see the “NetApp AltaVault Cloud Integrated Storage Poster.” 8. Turn the on/off switch on the power source and the power supply to the ON (|) position to start the boot process for the system.
3. Set the power supplies aside. You will re-install them in the replacement chassis. 4. Removing the controller module from the chassis requires assistance from NetApp Support. 5. Set the controller module aside. You will re-install it in the replacement chassis.
Beta Draft Installing the chassis Before you begin, verify that the replacement chassis you are installing is an approved part from NetApp. To install the chassis 1. With the help of two or three people, slide the replacement chassis into the rack or cabinet by guiding the chassis onto the rails or brackets.
Page 210
Note: Controller fan modules are short. Always support the bottom of the module with your free hand, so that it does not suddenly drop free from the chassis. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 211
4. Swing the cam handle up to its closed position, as shown below. Make sure that the cam handle release latch clicks into the locked position. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Note: Replace a failed power supply promptly to minimize disruption to the controller's airflow. The system continues to function normally, but the AltaVault OS logs alert messages in the event log file about the degraded power supply until the power supply is replaced. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 213
Make sure that you support the power supply with your free hand. 7. Identify power supply components as described in this table: Component Description Power supply Cam handle release latch Power and fault LEDs Cam handle Power cord locking mechanism NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 214
6. Reconnect the power cord, and secure it to the power supply using the power cord retainer clip. 7. Reconnect the power supply cable to the power source. NetApp AltaVault Cloud Integrated Storage Administration Guide...
2. Attach the power cable to the new shelf. To power on the disk shelf for both power supplies, flip the power switches to the on (|) position, as seen below. 3. a. Remove the left ear cover by using one hand to hold the left ear cover between your thumb and index finger. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Note: Removing a drive out of a RAID group and moving it to a different RAID group is not supported. The disk drives have been formatted to a unique RAID configuration and should not be reused for hot-swappable drive replacements. Refer to HW Universe for drive information. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 217
6. Confirm that the RAID group has been imported by running the following command: show raidgroups For information on replacing a faulty disk drive, see “Replacing a faulty hard disk drive on an AltaVault AVA400 or AVA800 appliance” on page 218.
An alarm is raised when a disk drive fails. The alarm indicates which drive has failed and the state of the RAID being degraded. For information on replacing a faulty hard disk drive on an AltaVault AVA400 or AVA800 appliance, see the KB Article on the NetApp Support site.
ERROR: Error booting OS on: 'boot0' file: fat://boot0/mars/image1/vmlinuz (boot0,fat) Autoboot of PRIMARY image failed. Device not found (-6) Unrecoverable write errors messages Alerts from mDir service concerning configuration backup (configbkp) or boot device. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 220
“Shutting down the AltaVault controller” on page 203. 4. Remove the controller from the chassis using the steps described in the procedure, “Replacing internal FRUs” on page 218. 5. If you are not already grounded, properly ground yourself. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 221
Note: Re-installing the OS is not a supported procedure in this release. Contact technical support to help you determine if you need to replace this field-replaceable unit (FRU) and to assist you during the replacement procedure. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 222
6. Check the boot device to make sure that it is seated squarely and completely in the socket or connector. If necessary, remove the boot device and reseat it into the socket. 7. Close the boot device cover. NetApp AltaVault Cloud Integrated Storage Administration Guide...
shutdown and disconnection power, see “Shutting down the AltaVault controller” on page 203. Remove the controller requires assistance from NetApp support. To remove a system DIMM 1. If you are not already grounded, properly ground yourself. 2. Open the CPU cover in the AltaVault controller to access DIMMs 1, 2, 5, and 6.
Page 224
6. Press down simultaneously on the two DIMM ejector tabs on either side of the DIMM to eject the DIMM from its slot, and then carefully lift it out of the slot. All system DIMMS have white ejector latches, shown in the image below. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 225
8; left side panel for DIMMs 3 and 4, and right side panel for DIMMs 7 and 8. 3. Locate the slot where you will be installing the new DIMM. 4. Ensure that the latches are in the open position. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 226
12. To ensure that the system has booted correctly, verify that the System attention LED on the chassis front and Controller attention LED on chassis rear are not lit after the system has finished booting. NetApp AltaVault Cloud Integrated Storage Administration Guide...
RAID Controllers are assigned to slots 1 and 3 in the controller. The BBU cards are located in brackets that are attached to the existing controller shelves behind the installed cards. For information on replacing a RAID controller, contact NetApp support. The procedure is complex and should only be done by field support.
Page 228
Before you begin, verify that the RTC battery you are installing is supported by your controller model. To install an RTC battery 1. If you are not already grounded, properly ground yourself. 2. Remove the replacement battery from the anti-static shipping bag. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 229
Dispose of batteries according to local regulations regarding battery recycling or disposal. If you cannot properly dispose of the battery, return it to NetApp, as described in the RMA instructions shipped with the kit. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Dispose of batteries according to local regulations regarding battery recycling or disposal. If you cannot properly dispose of the battery, return it to NetApp, as described in the RMA instructions shipped with the kit. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Credentials to Cloud Object Storage: For example, Amazon S3 access and secret key. Bucket name: The bucket name must be unique (across all of AWS). NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 232
Describe the LAN topology for Backup Data to the Appliance: Flat LAN or VLANs. Will Data Interfaces be connected to different subnets / VLANs? AltaVault supports VLAN tagging. Note the VLAN IDs associated with each data interface. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 233
2. Provide up to 4 x IP addresses / NetMask/Gateway for each 4x10Gbe port. Specify the type of SFP for 10Gbe Optical NICs. Advance features Notes Bandwidth throttling for replication to cloud Alarms, Announcements, Logging, Scheduled Reports SNMP NetApp AltaVault Cloud Integrated Storage Administration Guide...
For most events, when the condition clears, the system clears the alarm and also sends out a clear trap. The clear traps are useful in determining when an event has been resolved. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 236
Degraded - The AltaVault is optimizing storage but the system has detected an issue. Critical - The AltaVault might not be optimizing storage and a critical issue needs to be addressed. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 237
If this event triggers at any other time, generate a debug sysdump report and send it to NetApp Support. No other action is required because the alarm clears automatically.
Page 238
A scheduled job has A scheduled job on the system (for (1.3.6.1.4.1.17163.1.102.4.0.14) failed during execution. example, a software upgrade) has failed. To determine which job failed, use the CLI or the Management Console. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 239
See the system log for more information. No other action is necessary. portalUnreachable The NetApp Cloud Portal The AltaVault cannot access the NetApp (1.3.6.1.4.1.17163.1.102.4.0.28) is unreachable. Cloud Portal. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 240
This alarm is useful in detecting whether the appliance is undersized relative to your normal workload. If the alarm is constantly triggered, then you should consider moving your data to a AltaVault model with a larger disk cache. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 241
The space reserved for The space reserved for metadata is full. metadata is full. (1.3.6.1.4.1.17163.1.102.4.0.44) inodesThresholdReached The maximum inodes The maximum inodes limit has been limit has been reached. reached. (1.3.6.1.4.1.17163.1.102.4.0.45) NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 242
All system fans are now A fan on the appliance had failed, but now (1.3.6.1.4.1.17163.1.102.4.0.10008) functioning normally. all fans are functioning normally. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 243
(1.3.6.1.4.1.17163.1.102.4.0.10027) initialized properly. optimization service, but this is now corrected. portalUnreachableClear The NetApp Cloud Portal The AltaVault could not access the NetApp (1.3.6.1.4.1.17163.1.102.4.0.10028) is now reachable. Cloud Portal, but this is now corrected. rplctdBytesPendingClear Number of bytes pending The number of bytes pending replication (1.3.6.1.4.1.17163.1.102.4.0.10029)
Page 244
The cloud data consistency has been consistency. restored. (1.3.6.1.4.1.17163.1.102.4.0.10047) softwareUpdateAvailableClear Software update available The software update alarm has been alarm cleared. cleared. (1.3.6.1.4.1.17163.1.102.4.0.10048) firmwareUpgradeClear Firmware upgrade alarm The firmware upgrade alarm is cleared. cleared. (1.3.6.1.4.1.17163.1.102.4.0.10049) NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 245
Description Appliance State controllerPowerSupplyErrorClear All power supplies are All the power supplies are functioning. now functioning (1.3.6.1.4.1.17163.1.102.4.0.10050) normally. controllerFanErrorClear All controller fans are All the controller fans are functioning. now functioning (1.3.6.1.4.1.17163.1.102.4.0.10051) normally. NetApp AltaVault Cloud Integrated Storage Administration Guide...
For more details about Amazon’s best practices, see http://docs.aws.amazon.com/IAM/latest/UserGuide/IAMBestPractices.html. For more information on Amazon AWS, see the NetApp AltaVault Cloud Integrated Storage Installation and Service Guide for Cloud Appliances. This appendix includes the following sections: “Typical AltaVault setup”...
AltaVault pinned data is always held on local cache and is never evicted, allowing administrators to have immediate access to these server backups immediately and without any delays associated with accessing data stored in Amazon Glacier. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Amazon S3. It is likely that over time, only a subset of a backup will reside on Amazon S3 awaiting migration, but a majority of the data will reside in Amazon Glacier since it hasn't changed. Refer to the NetApp AltaVault Cloud Integrated Storage Command-Line Interface Reference Guide for more details.
Page 253
6. Click OK to prepopulation of the selected files. AltaVault displays the Prepopulation Report Status page, providing information related to each job: Field Description Job ID AltaVault assigned job number associated with each retrieval operation. Progress Percent of job downloaded from the cloud to the AltaVault local cache. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Populates only file3 and file7 using Expedited retrieval. datastore prepop pattern smb/ directory1/file3|/smb/directory2/ file7 retrieval-type expedited The datastore prepop command operates from the local pathname for each SMB share created. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 257
After this process finishes, you can initiate a restore process using the restore feature of the backup application. For details about how to restore your backups, refer to the relevant documentation for your backup application. NetApp AltaVault Cloud Integrated Storage Administration Guide...
1. Stage a saveset restore operation, by issuing the following command from the Networker command line: Networker User > Operation > Save Set Recover > Source Client (oak-cs.cb2k3r2.com) Save Set Name: D:\ (number of versions: Version Date: NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 259
252, and wait until the files migrate from Glacier to the AltaVault cache. 6. Initiate your restore from Networker User as you normally would to complete the recovery. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Super-bitfile: 6783, Offset: 2000, Length 694, Deduped: F show bfo 6783 Bitfile Object: 6783 **Super-bitfile 6783 contains following aggregated bitfiles, Bitfile Id, offset, length, active state or owner, link bfid 6783 Active 6784 Active NetApp AltaVault Cloud Integrated Storage Administration Guide...
To identify which media volumes are required for restore 1. Go to the Catalog menu item from the NetBackup GUI and search for the backup from which you want to restore data. NetApp AltaVault Cloud Integrated Storage Administration Guide...
2. Select the server from which you want to restore objects. 3. Select the Job History tab from the left side. 4. Select the backup job you want to restore from the list of backups that display. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Note: Note that all of the files and folders are time stamped automatically starting from Veeam 5. To locate the backup required for prepopulation 1. Locate which backup job to which the VM belongs. NetApp AltaVault Cloud Integrated Storage Administration Guide...
Page 264
The figure below shows an example of how to prepopulate the current Veeam backup files needed to restore the most recent version of the VM named vbr6_cert3. Initiate your restore from the Veeam Backup and Replication GUI as you normally would to complete the recovery. NetApp AltaVault Cloud Integrated Storage Administration Guide...
NetApp. The use or purchase of this product does not convey a license under any patent rights, trademark rights, or any other intellectual property rights of NetApp.
OnTap, Unbound Cloud, and WAFL and other names are trademarks or registered trademarks of NetApp, Inc., in the United States, and/or other countries. All other brands or products are trademarks or registered trademarks of their respective holders and should be treated as such. A current list of NetApp trademarks is available on the web.
Your feedback is important in helping us to provide the most accurate and high-quality information. If you have suggestions for improving this document, send us your comments by email to doccomments@netapp.com. To help us direct your comments to the correct division, include in the subject line the product name, version, and operating system.
Page 270
How to Send Your Comments Beta Draft NetApp AltaVault Cloud Integrated Storage Administration Guide...
Beta Draft Index Numerics secure vault 135 802.3ad 57 software update available 135 system disk full 64, 136 Alarm status Access Control List 99 link duplex error 134 Access Key 24, 26, 32 link I/O error 135 access policy 71 Alarm Status report adding 73 definition of 133...
Page 272
Index Beta Draft report 127 definition of 136 Bandwidth Limit, setting 37 viewing 137 battery Created 115 disposal 229, 230 Critical 75, 76, 77 BBU card Current Configuration 120 location 227 Current Password 90 boot device 219 install 221 data removal 220 preservation 204 boot image 219...
Page 273
Index Beta Draft Error 75, 76, 77 chassis 209 Event and failure notification, setting 74 controller in chassis 206 Eviction Optimization report fan module 211 definition of 128 Interface 53, 100 viewing 128 management 53 Execute Now 115 interface Executes On 115 primary 53 Expanded Data 125 Interface Statistics report...
Page 274
Index Beta Draft connecting to 18 Pages and reports, printing 20 navigating 19 PAP 88 Management interfaces, modifying 53 Password 90 Manually specifying password primary interface IPv4 address 22, 54 service processor 200 Max Pinnable Limit 63 password policy 85 Maximum No.
Page 275
Index Beta Draft disk replacement 216 Schedule Upgrade for Later 118 update 206 Scheduled Reports RAID6 184 purpose 131, 132 Read Only 39 Scheduled reports Read-Only Community String 68 configuring 132 real-time clock 188 Scheduling, replication 36 replacement 227 Secret (Text) 67 Reboot 118 Secret Key 28, 30 Receiver 68...
Page 276
Index Beta Draft secure groups, setting 72 Traps 67 secure views, setting 73 Traps, summary of SNMP traps sent 237 setting trap receivers 67 supported versions 67 UID 27, 29 testing a trap 69 Unlock Secure Vault 90 traps, summary of sent 237 User logs Snowball 159 downloading 144...
Need help?
Do you have a question about the AltaVault AVA400 and is the answer not in the manual?
Questions and answers