This article provides instructions and requirements for creating an encrypted Acronis Backup Vault for seeding, as well as a description of creating a backup job to the Seed-Vault.
Understanding the requirements
Acronis has an option to encrypt its archives when a backup plan is specified on an Acronis Agent. However, if agent encryption is enabled, Acronis cannot perform deduplication on the archives after they are written to the ASN Backup Vault because the node does not store the archive encryption key.
Note: It is very important that you do not use agent encryption when creating your archives because the data cannot be deduplicated.
The recommended method for protecting your archives is to use Storage Node-side encryption on the Cloud ASN vault. Doing this ensures that anything written to the vault will be encrypted and anything read from it will be decrypted transparently by using a vault-specific encryption key stored on the Storage Node. This allows the deduplication of unencrypted archives to function properly while still protecting the Acronis archive data
Step 1: Creating an encrypted Acronis Backup Vault for seeding
IMPORTANT: You must seed your archive data in an encrypted Acronis Backup Vault. If Axcient receives a drive with raw Acronis archive data (files with a *.tib file extension), the data will not be processed. To ensure you have correctly created the seed, please follow the instructions below carefully:
1. Connect to your local Acronis Management Server and create a vault to store your seed backups by clicking Vaults, then Centralized on the left-side menu. Then click Create from the top menu in the main window.
2. Fill in the Create a centralized vault form by completing the following steps:
- Enter a name for the Seed-Vault in the Name field. IMPORTANT: The name of this vault should be the name of your Axcient Acronis Cloud Node (such as acr-mynode1).
- Change the vault type to Managed by selecting the drop-down option under Type.
- Select the storage node desired from the Storage Node drop-down menu.
- Next, ensure that Deduplication is set to Off.
- Enable encryption by clicking the blue Encryption link in the main window. The vault encryption dialog box appears.
- In the Select the encryption algorithm drop-down list, select the AES 256 option. Enter the encryption password you want to use for this vault. IMPORTANT: This password should be the same one you provided when requesting a preload drive from Axcient.
3. Next, specify the path to store the vault in the Path field by clicking on the blue Required link. In the Vault Path dialog box that opens up, expand the volume where your data will be stored and create a folder in the root directory called Seed-Vault. Select the newly created folder and click OK to continue.
4. In the Path field, disable the option Place deduplication database along with backups by unchecking the checkbox next to it.
5. Edit the location of the Catalog database from its default location by clicking the blue Catalog database link. This should be stored in the Seed-Vault directory on your preload drive.
Important: Deduplication must be turned off when creating the initial backup job to the Seed-Vault.
If deduplication is turned on, it will significantly increase the amount of time it takes for Axcient to process your preload. Deduplication of the data will occur once it has been imported into your Acronis Cloud Node vault.
Tip: The Seed-Vault on your preload drive can be used for multiple sites and servers that need to be sent offsite. This means that you can fit up to 4TB of backup data onto a single Axcient Preload Drive. Consolidating all of your offsite seed-backups into a single Seed-Vault will greatly reduce the amount of time it takes to process your data.
Step 2: Creating a backup job to the Seed-Vault
- Using the Acronis Console, connect to your locally installed AMS. Click Backup plans and tasks in the left navigation window; then, click New and Backup plan to create a new backup plan.
- In the What to back up section of the Create backup plan window, click the blue Required link to open the Data to Back Up dialog box. Now, expand the Machines with agents group to locate and select the machine(s) that you are going to include in this backup plan. Then click OK.
- In the Where to back up section, click the blue Required link to open the Location dialog box. Ensure that the top radio button labeled Store all machines’ archives in a single location is selected. Then expand the Centralized group from the left window and select the Seed-Vault you created previously. Then click OK to continue to the next step.
- In the Single-pass disk and application backup section, decide whether to enable or disable the single-pass backup.
- Click Backup scheme and select Manual Start on the drop-down menu. In the Plan name field, name this backup plan to Preload; then, click Save.
- In the Backup plans and tasks window, select the Preload backup plan and click Run/Full backup (‘once later’ scheme) to initiate your preload to the seed vault.
- After the preload backup job is complete, you must detach the seed vault from the storage node. In the left navigation window, expand Vaults/Centralized, right click on your seed vault, and click Detach. After you click Detach, a conformation dialog box appears. Click Yes to detach the seed vault.
IMPORTANT: If you plan to provide granular recovery to an Exchange Information Store, you must back up that Exchange server with a local backup. Performing granular recovery to an Exchange Information Store is not supported from Acronis backups that are backed up to the Axcient Cloud.