Dell Emc Powerprotect DP Series Appliance: Installation Guide For Dp4400

Dell EMC PowerProtect DP series appliance
Installation Guide for DP4400

2.6.1
February 2021
Rev. 01
Notes, cautions, and warnings
NOTE: A NOTE indicates important information that helps you make better use of your product.
CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid
the problem.
WARNING: A WARNING indicates a potential for property damage, personal injury, or death.
© 2017 - 2021 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
Other trademarks may be trademarks of their respective owners.
Contents
Chapter 1: Introduction................................................................................................................. 6
Document scope and audience........................................................................................................................................ 6
Product features..................................................................................................................................................................6
Detailed configuration.........................................................................................................................................................8
Chapter 2: Preinstallation requirements........................................................................................ 9

Install Network Validation Tool.........................................................................................................................................9
Prepare the site and unpack the system ...................................................................................................................... 9
Prepare the network environment.................................................................................................................................10
Network connectivity overview...................................................................................................................................... 11
Separate management network requirements............................................................................................................13
Data and control flow..................................................................................................................................................13
Cable connectivity........................................................................................................................................................14
IP address requirements............................................................................................................................................. 14
Online Support.................................................................................................................................................................... 15
Chapter 3: Install the PowerProtect Appliance.............................................................................16

Installation overview..........................................................................................................................................................16
Install the rails..................................................................................................................................................................... 16
Secure the rails to the cabinet....................................................................................................................................... 18
Install the system in the cabinet.....................................................................................................................................18
Install the bezel..................................................................................................................................................................20
Connect the system to the network............................................................................................................................. 21
DP4400 ports............................................................................................................................................................... 22
Connect the power cables and power on....................................................................................................................22
Configure iDRAC................................................................................................................................................................23
Chapter 4: Install PowerProtect DP4400 Software...................................................................... 24

Connect to the ACM........................................................................................................................................................ 24
Network Configuration wizard....................................................................................................................................... 25
Secure Remote Services (SRS).....................................................................................................................................26
Prepare the PowerProtect environment for SRS registration......................................................................... 27
Install and deploy PowerProtect....................................................................................................................................27
Retry installation.......................................................................................................................................................... 29
Rollback installation.....................................................................................................................................................30
Troubleshoot Health monitoring.............................................................................................................................. 30
Troubleshooting..................................................................................................................................................................31
Configure the ACM settings for separate management networks........................................................................ 31
Configure the DataProtection-ACM for separate management networks by using the configuration
wizard...............................................................................................................................................................................32
PowerProtect post installation tasks........................................................................................................................... 32
Configure crontab for DP Advisor database backup.......................................................................................... 33
Configure SRS after deployment.............................................................................................................................33
Contents 3
Chapter 5: License activation...................................................................................................... 34
In-product activation........................................................................................................................................................ 34
Manual activation.............................................................................................................................................................. 34
Chapter 6: Storage expansion for DP4400................................................................................... 36

Remove the front bezel to access front panel hard drives.................................................................................... 36
Install the expansion hard drives................................................................................................................................... 36
Install the front bezel....................................................................................................................................................... 38
Storage expansion and upgrade.................................................................................................................................... 39
Chapter 7: Update the PowerProtect Firmware ...........................................................................41

Overview.............................................................................................................................................................................. 41
Prerequisites........................................................................................................................................................................41
Prepare the Environment................................................................................................................................................ 42
Install the DPATools Package...................................................................................................................................42
Install the Firmware Update Package.....................................................................................................................42
Prepare the Firmware Upgrade..................................................................................................................................... 43
Perform the Required Checks on PowerProtect Point Products ........................................................................ 43
Checks on Data Domain Virtual Edition (DDVE)..................................................................................................43
Checks on Avamar Virtual Edition (AVE).............................................................................................................. 43
Update the Firmware ...................................................................................................................................................... 45
Chapter 8: Upgrade the PowerProtect software ......................................................................... 47

Supported Upgrade Path.................................................................................................................................................47
Upgrade components....................................................................................................................................................... 47
Upgrade Prerequisites...................................................................................................................................................... 47
Upgrade the appliance software .................................................................................................................................. 49
Upgrade Avamar external proxy servers..................................................................................................................... 50
Upgrade Avamar backup clients.................................................................................................................................... 53
Upgrade Postrequisites .................................................................................................................................................. 53
Upgrade CDRA manually............................................................................................................................................54
Upgrading the CDRS.................................................................................................................................................. 54
Upgrading the CDRA ................................................................................................................................................. 54
Troubleshooting component software upgrades.......................................................................................................55
Retry upgrade process...............................................................................................................................................55
Rollback is Successful................................................................................................................................................ 56
Rollback Failed............................................................................................................................................................. 56
Backup server upgrade error.................................................................................................................................... 57
Upgrade log files..........................................................................................................................................................58
Chapter 9: Manage IDPA System Manager post PowerProtect installation ................................. 60

Performing a VM backup.................................................................................................................................................60
VM backups overview................................................................................................................................................ 60
Define vCenter and VMware clients.......................................................................................................................60
Deploy an Avamar proxy............................................................................................................................................ 63
Create and run the backup policy............................................................................................................................64
Restoring a VM backup....................................................................................................................................................64
Restore a Virtual Machine ........................................................................................................................................64
4 Contents
Restore using Instant Access................................................................................................................................... 66
Restore specific files...................................................................................................................................................67
Generating reports............................................................................................................................................................ 67
Generate a report........................................................................................................................................................ 67
Chapter 10: Additional resources................................................................................................. 69

PowerProtect training resources.................................................................................................................................. 69
Index........................................................................................................................................... 70
Contents 5
1
Introduction
Topics:
• Document scope and audience
• Product features
• Detailed configuration
Document scope and audience

This document describes the PowerProtect DP series appliance and explains how to install the hardware and perform the initial
software configuration after the appliance hardware is set up.
The target audience for this document includes field personnel, partners, and customers responsible for managing and operating
PowerProtect.
Product features
PowerProtect provides a simplified configuration and integration of data protection components in a consolidated solution.
Integrated solution
The PowerProtect is a converged solution that offers complete backup, replication, recovery, deduplication, instant access,
restore, search, reporting and analytics, cloud readiness with disaster recovery and long-term retention to the cloud-all in a
single appliance. The appliance is available in various configurations based on your requirements and storage capacity.
● DP4400
● DP5900
● DP8400
● DP8900
PowerProtect DP4400 model is a hyperconverged, 2U system that a user can install and configure onsite.
The DP4400 includes a virtual edition of Avamar server (AVE) as the Backup Server node, a virtual edition of Data Domain
system (DDVE) as the Protection Storage node, Cloud Disaster Recovery, IDPA System Manager as a centralized system
management , an Appliance Configuration Manager(ACM) for simplified configuration and upgrades, Search, Reporting and
Analytics, and a compute node that hosts the virtual components and the software.
DP4400 contains an ESXi server (hypervisor), which hosts all these virtual editions of the point products mentioned above.
NOTE: The Cloud Disaster Recovery node is available in the appliance based on the license that you have.
The Search, Reporting and Analytics, and CDRA components are optional. Also, you can perform the Search, Reporting and
Analytics, and CDRA functions in a central corporate implementation with IDPA System Manager.
If your organization enables communication through the Internet, as part of the initial configuration of the system, you can
register the PowerProtect Appliance, Avamar, Data Domain and Reporting and Analytics components with Secure Remote
Services (formerly ESRS). The Secure Remote Services is a secure, IP-based, distributed customer service support system that
provides Dell EMC customers with command, control, and visibility of support-related activities.
Centralized management
The IDPA System Manager provides advanced monitoring and management capabilities of the PowerProtect from a single pane
of glass and includes the following features.
6 Introduction
● A comprehensive dashboard that allows you to manage and includes information about Avamar, Data Domain, Search, and
Data Protection Advisor components.
○ Backup activities
○ Replication activities
○ Assets
○ Capacity
○ Health
○ Alerts
● Advanced search and recover operations through integration with Search.
● Comprehensive reporting capabilities
● Cloud backups.
Appliance administration
The ACM provides a web-based interface for configuring, monitoring, and upgrading the appliance.
The ACM dashboard displays a summary of the configuration of the individual components. It also enables the administrators
to monitor the appliance, modify configuration details such as expanding the Data Domain disk capacity, change the common
password for the appliance, update customer information, and change the values in the General Settings panel. The General
Settings panel on the ACM Dashboard allows you to change the LDAP settings, displays the time zones, NTP server status,
external LDAP server status, status of FIPS, and so on. The ACM dashboard enables you to upgrade the system and its
components. It also displays the health information of the Appliance Server and VMware components.
Backup administration
The PowerProtect uses Avamar Virtual Edition (AVE) servers for the DP4xxx models perform backup operations, with the data
being stored in a Data Domain system.
You can also add an Avamar NDMP Accelerator (you must manually configure the NDMP Accelerator) to enable backup and
recovery of NAS systems. For more information about the configuration details, see Configuration options for the DP4400
model on page 8. The Avamar NDMP Accelerator uses the network data management protocol (NDMP) to enable backup
and recovery of network-attached storage (NAS) systems. The accelerator performs NDMP processing and then sends the data
directly to the Data Domain Server (Data Domain Virtual Edition Storage).
Reporting and Analytics

The Reporting and Analytics feature offers a robust reporting functionality with dedicated sections for various features. These
reports help you retrieve information about the Data Domain (DDVE) and Avamar (AVE). Using these reports, you can identify
outages in the environment, diagnose problems, plan to mitigate risks, and forecast future trends. You can also run system and
customized reports, dashboard templates, and schedule the reports generation as per your requirements.
Search
The Search feature provides a powerful way to search backup data within the PowerProtect and then restore the backup
data based on the results of the Search. Scheduled collection activities are used to gather and index the metadata (such as
keyword, name, type, location, size, and backup server/client, or indexed content) of the backup, which is then stored within
the PowerProtect.
Disaster recovery
The CDRA is a solution, which enables disaster recovery of one or more on-premise virtual machines (VMs) to the cloud. CDRA
integrates with the existing on-premise backup software and a Data Domain system to copy the VM backups to the cloud. It can
then run a disaster recovery test or a failover, which converts a VM to an Amazon Web Services Elastic Compute Cloud (EC2)
instance, and then runs this instance in the cloud.
NOTE:
Introduction 7
Installing CDRA components, Search, and Reporting and Analytics (based on Data Protection Advisor) is optional. Also,
if these components are already configured in your environment, then the appliance can be configured to use the
central implementation in your environment. You do not need to configure the optional components that are bundled in
PowerProtect again.
NOTE: While configuring the network, if you select IPv6 network protocol, then CDRA and Search are disabled.
However, the dashboard does not display any data that is associated with external CDRA, Search, and Data Protection
Advisor. Moreover, you must manage and configure any such external instances. Also, PowerProtect does not support local
Search and Analytics (not part of PowerProtect but are centrally implemented at the customer environment) when these
functions are performed by external implementations.
Scalability
The PowerProtect models are designed to be scalable so it can scale up with ever-changing needs. See the Expanding storage
capacity section in the Dell EMC PowerProtectInstallation Guide for more information about how to add storage capacity.
● For the DP4400 model with a capacity from 8 TB to 24 TB, you can expand the storage capacity in multiples of 4 TB
increments up to 24 TB. By adding the Disk Expansion Kit, you can also expand the capacity beyond 24 TB in 12 TB
increments.
● For the DP4400 model with a capacity from 24 TB to 96 TB, you can expand the storage capacity in 12 TB increments, and
you can expand the capacity up to a maximum of 96 TB.
The following table details the configuration for the PowerProtect models.
Table 1. Configuration for PowerProtect Model

Model Configuration Details
DP4400 From 8 TB up to 24 TB
From 24 TB up to 96 TB
Unified support
The same Customer Support team supports both the hardware and the software that is used in the appliance.
Detailed configuration
The PowerProtect is available in the following models:
Table 2. Configuration options for the DP4400 model

Model Protec Protection Storage Backup Server Avamar Accelerator
tion configuration options Node for NDMP/NAS
Storag (usable TB) Backup (optional)
e
model
DP4400 Data 24, 36, 48, 60, 72, 84, or Avamar Virtual Edition 3 NDMP Accelerator (1)
Domain 96 TB TB
Virtual
Edition
DP4400 Data 8, 12, 16, 20 or 24 TB Avamar Virtual Edition 3 NDMP Accelerator (1)
Domain TB
Virtual
Edition
8 Introduction
2
Preinstallation requirements
Before you install PowerProtect follow the preinstallation requirements in the following topics.
Topics:
• Install Network Validation Tool
• Prepare the site and unpack the system
• Prepare the network environment
• Network connectivity overview
• Separate management network requirements
• Online Support
Install Network Validation Tool

The Network Validation Tool (NVT) for PowerProtect runs multiple automated tests to validate the network configuration. You
must run the NVT for PowerProtect from a system on the management network.
Before you install PowerProtect, network configuration must be completed for the data center. After completing all network
configurations required for PowerProtect installation, install and run the Network Validation Tool to validate the network
requirements for a successful deployment of PowerProtect in the data center. To download the NVT, and for more information
about NVT, see https://psapps.emc.com/central/solution/NVT-IDPA.
Prepare the site and unpack the system
Prerequisites
Verify that you have the following components:
● 2U DP4400 system
● Rail kit, including:
○ Two sliding rails
○ Two velcro straps
○ Four screws
○ Four washers
● Two power cables
● Bezel
● Phillips-head screwdriver with magnetic tip (not provided)
● Qualified Ethernet cables:
Type of switch NIC Type Speed Cable Required
10 Gb SFP+ SFP+ (optical) 10 Gb LC-to-LC with SR optical

GBICs or twinax
1 Gb or 10 Gb RJ45 SFP+ with 1GbBASE-T GBIC 1 Gb UTP with RJ45 (Cat5e or

Cat6)
1 Gb or 10 Gb RJ45 10 GbBASE-T (RJ45) 1 Gb or 10 Gb (depending on UTP/STP with RJ45 (Cat6a

the switch) or Cat7)
● Anti-static wrist strap and conductive foam pad
Preinstallation requirements 9
Prepare the network environment
Prerequisites
You must have a computer at the install location with:
● A power adapter, C13 to NEMA 5–15 (if based in North America or country-specific cord in other geographical locations), or
a power cable for your laptop power adapter with a C13 plug, to power your laptop from a rack PDU
● An Ethernet port
● Latest version of Google Chrome or Mozilla Firefox
● Open the required firewall ports. For more information, see the Network ports section in the Dell EMC PowerProtect DP
series appliance Security Configuration Guide.
● Ensure that ICMP is enabled in your network environment. If ICMP is disabled, the deployment of the appliance fails.
About this task

The following steps must be completed before starting initial configuration with the Appliance Configuration Manager:
Steps
1. Identify 13 unassigned IP addresses for the PowerProtect components. To simplify configuration, select a range of 13
contiguous addresses.
2. Register the 13 IP addresses in DNS with forward and reverse lookup entries for each address.
NOTE: When you reserve the IP addresses, you must assign the IP addresses to hostnames in the DNS server. The
following types of characters are supported for the hostname.
● Lower case letters (a-z)
● Numbers (0-9)
● Hyphen (-)
Ensure that the hostnames do not have an underscore (_) or the at (@) characters. If the hostnames have an
underscore (_) or the at (@) characters, the configuration fails.
NOTE: When you configure the DNS server settings during appliance configuration, ensure that you configure the
settings properly. After you configure the hostname and domain name of the point products, you cannot modify the
hostnames for the point products. You can modify the DNS server IP address on the point products after the appliance
is configured. Ensure that the new DNS server has the same hostname and domain names that are associated with the
corresponding point product IP addresses. For more information about modifying the DNS server IP address, see KB
537628.
3. Download the license files for Data Domain Virtual Edition (DDVE), Avamar Virtual Edition (AVE), and Data Protection
Advisor (DP Advisor) from the Dell EMC Software Licensing Central.
NOTE: During the initial activation, the license keys are automatically downloaded from the ELMS server if the appliance
is connected to the network with Internet access. If the licenses are not activated automatically, you need to manually
activate the licenses. For more information about activating the licenses manually, see Manual activation on page 34
The contact person who is mentioned on your sales order should have received the License Authorization Code (LAC)
letter through an email during the order fulfillment process. The LAC letter includes the license authorization code that is
associated with your order, instructions for downloading software binaries, and instructions for activating the entitlements
online through Dell EMC Software Licensing Central.
Follow the steps mentioned in the LAC letter to activate the software and download the license keys. For additional
information, see the Standard Activation Process section in the License Activation Guide.
NOTE: The LAC letter has the link https://licensing.emc.com/deeplink/<LAC> which directs you to Dell
EMC Software Licensing Central. <LAC> is a unique alphanumeric value that is mentioned in your LAC letter.
After the activation is complete, download the license keys that are generated for Data Domain Virtual Edition (DDVE),
Avamar Virtual Edition (AVE), and Data Protection Advisor (DP Advisor). Use these license keys during the PowerProtect
configuration. For more information on License activation, see License activation on page 34
10 Preinstallation requirements
Network connectivity overview
The tables below detail the IP addresses required by PowerProtect for various components. These can be assigned either as
a range of addresses or as individual, non-contiguous addresses. Using a range is the preferred method as it simplifies the
assignment and reduces the chance for errors while entering the IP addresses. When a range of IP addresses is used during the
PowerProtect configuration, the IP addresses are assigned in a standard order.
The initial deployment of PowerProtect using ACM supports both IPv4 and IPv6-enabled networks. However, you must manually
configure the dual stack networks.
NOTE: The Search and CDRA components do not support IPv6-enabled networks.
The below tables are separated to provide you a model-wise information on the IP address that must be allocated to a
component. The first column in each table under "IP address range assignments" is the value that must add to the first IP
address in the range.
DP4400
PowerProtect DP4400 model has the following tables:
● IP address range assignments on page 11
● Management IP address range assignments with Dedicated Backup Network on page 11
● Backup IP address range assignments with Dedicated Backup Network on page 12
NOTE: The number of IP addresses required in the IP address range assignments table may vary based on the optional
components you have selected.
Table 3. IP address range assignments

IP Range Example Component Assigned Field
Allocation
+0 192.0.2.1 vCenter VMware vCenter Server VM
+1 192.0.2.2 Protection storage Management IP
+2 192.0.2.3 Protection storage Backup IP 1
+3 192.0.2.4 Protection storage Backup IP 2
+4 192.0.2.5 Backup application Server IP
+5 192.0.2.6 Backup application Avamar Proxy VM
+6 192.0.2.7 IDPA System Manager IDPA System Manager VM
+7 192.0.2.8 Reporting and Analytics (optional) Application Server Host VM
+8 192.0.2.9 Reporting and Analytics (optional) Datastore Server Host VM
+9 192.0.2.10 Search (optional) Index Primary Node Host VM
+10 192.0.2.11 DD Cloud DR CDRA (optional) Data Domain Cloud Disaster Recovery (DD Cloud
DR) Cloud DR Add-on (CDRA) virtual appliance
NOTE: For more information on the network and firewall ports that are used in PowerProtect, see Network ports in the
PowerProtect Security Configuration Guide.
Table 4. Management IP address range assignments with Dedicated Backup Network

Management IP Range Allocation Component Assigned Field
+0 vCenter VMware vCenter Server VM
+1 Protection storage Management IP
+2 Backup application Server IP
+3 Backup application Avamar Proxy VM
Table 4. Management IP address range assignments with Dedicated Backup Network (continued)
Management IP Range Allocation Component Assigned Field
+4 IDPA System Manager IDPA System Manager VM
+5 Reporting and Analytics Application Server Host VM
+6 Reporting and Analytics Datastore Server Host VM
+7 Search Index Primary Node Host VM
+8 DD Cloud DR CDRA (optional) Data Domain Cloud Disaster Recovery
(DD Cloud DR) Cloud DR Add-on
(CDRA) virtual appliance
Table 5. Backup IP address range assignments with Dedicated Backup Network

Backup IP Range Allocation Component Assigned Field
+0 Protection storage Backup IP 1
+1 Protection storage Backup IP 2
+2 Backup application Avamar Proxy VM
NOTE: For more information on the network and firewall ports that are used in PowerProtect, see Network ports in the
PowerProtect Security Configuration Guide.
Separate management network requirements
You can configure separate management network on PowerProtect DP series appliance during the appliance installation.
Data and control flow

In PowerProtect DP series appliance, backup server (Avamar) stores only the metadata information about the backup, and
actual backup data in stored on Protection storage (Data Domain). In a separate management network, the backup server
remains on management network and protection storage is configured with both management and backup IPs.
Figure 1. Data and control flow
1. User initiates the backup request from backup server UI.

2. Backup server initiates communication with client over management network.
3. Client receives the protection storage details for backing up the data, and starts the data back up through the backup
network.
NOTE: The management (or corporate network) as well as the backup network should be accessible from client.
Cable connectivity
The following image shows the location of DP4400 network ports and iDRAC port.
Figure 2. DP4400 network and iDRAC connections

1. Connect ports 2 and 9 to management network VLAN
2. Connect ports 3 and 8 to backup network VLAN
NOTE: All ports on switch should be in "Access mode or untagged". All switch ports should be active and should not be
configured in LACP.
IP address requirements
This section describes the IP requirements for different components and which one should have IP from management and
backup subnets.
Table 6. Management network IP address requirements for the DP4400

Number of IP addresses required Component DNS entry required
1 Appliance Configuration Manager Yes
1 PowerProtect DP appliance ESXi Yes
1 PowerProtect DP appliance vCenter Yes
1 Protection storage Yes
1 Backup server Yes
1 Backup server internal proxy Yes
1 PowerProtect System Manager Yes
2 Reporting and analytics Yes
1 Search Yes
1 Cloud disaster recovery Yes
Table 7. Backup network IP address requirements for the DP4400

Number of IP addresses required Component DNS entry required
2 Protection storage No
1 Backup server internal proxy No
NOTE: To configure the separate management network using the configuration wizard, see Configure the DataProtection-
ACM for separate management networks by using the configuration wizard on page 32.
Online Support
Record the following information related to your Online Support account:
Online Support credentials

To create an Online Support account, go to https://www.dell.com/support. Your username and password is required for Secure
Remote Services (formerly ESRS) configuration.
Site ID
A Site ID is created in Support systems for each location within your organization where Dell EMC products are installed. Your
Site ID is required during initial configuration. Verify your Site ID number on Online Support:
1. Log in to Online Support with your credentials.
2. Hover over your username and select Manage Company Information.
3. Click View Sites.
NOTE: You can also search for a site and add it to the My Sites list. If a site ID is not available or the correct site ID is not
listed, you must notify your local field representative to request one.
3
Install the PowerProtect Appliance
The following topics describe how to install the PowerProtect Appliance.
Topics:
• Installation overview
• Install the rails
• Secure the rails to the cabinet
• Install the system in the cabinet
• Install the bezel
• Connect the system to the network
• Connect the power cables and power on
• Configure iDRAC
Installation overview
This guide is designed for personnel who install, configure, and maintain the PowerProtect DP4400. To use this hardware
publication, you should be familiar with digital storage equipment and cabling.
Prerequisites
Gather the required materials and configure your network environment as specified in Prepare the site and unpack the system
on page 9.
NOTE: The Install, Deploy, and Upgrade procedures documented here are specific to DP4400, unless otherwise specified.
About this task

Use the following sequence of actions as a guide to install the system.
Steps
1. Install and secure the rails.
2. Install the system in the cabinet and attach the bezel.
3. Connect the system to the network.
4. Connect the power cables and power on.
Results
The system is ready for initial configuration. For additional help and resources, review the information in https://
psapps.emc.com/central/solution/NVT-IDPA.
Install the rails
About this task

The rails are labeled left and right, and cannot be interchanged. The front side of each rail is labeled Left Front or Right Front
when viewed from the cabinet front.
16 Install the PowerProtect Appliance

Steps
1. Determine where to mount the system, and use masking tape or a felt-tip pen to mark the location at the front and back of
the cabinet.
NOTE: Install the left rail assembly first.
2. Fully extend the rear sliding bracket of the rail.

3. Position the rail end piece labeled Left Front facing inward and orient the rear end piece to align with the holes on the rear
cabinet flanges.
4. Push the rail straight toward the rear of the rack until the latch locks in place.
Figure 3. Installing the rear end of the rail
5. For the front end piece, rotate the latch outward and pull the rail forward until the pins slide into the flange, and release the
latch to secure the rail in place.
Figure 4. Installing the front end of the rail
6. Repeat the preceding steps to install the right rail assembly.
Install the PowerProtect Appliance 17

Secure the rails to the cabinet
The supplied screws and washers are used to secure the rail assemblies to the front and rear of the cabinet.
About this task

NOTE: For square hole cabinets, install the supplied conical washer before installing the screw. For unthreaded round hole
cabinets, install only the screw without the conical washer.
Steps
1. Align the screws with the designated U spaces on the front and rear rack flanges.
Ensure that the screw holes on the tab of the system retention bracket are seated on the designated U spaces.
2. Insert and tighten the two screws using the Phillips #2 screwdriver.
Figure 5. Installing screws
Install the system in the cabinet
About this task

WARNING: The system is heavy. To avoid personal injury and/or damage to the equipment, do not attempt to
install the system in a cabinet without a mechanical lift and/or help from another person.
Steps
1. At front of the cabinet, pull the inner slide rails out of the cabinet until they lock into place.

Figure 6. Pull the inner rails out of the cabinet
2. Locate the rear rail standoff on each side of the system. Position the system above the rails and lower the rear rail standoffs
into the rear J-slots on the slide assemblies.
3. Rotate the system downward until all the rail standoffs are seated in the J-slots.
Figure 7. Install the system in the rails
4. Push the system inward until the lock levers click into place.
5. Pull the blue slide release lock tabs forward on both rails and slide the system into the cabinet. The slam latches will engage
to secure the system in the cabinet.
NOTE: Ensure that the inner rail slides completely into the middle rail. The middle rail locks if the inner rail is not fully
engaged.

Figure 8. Slide the system into the cabinet
Install the bezel
Steps
1. Align and insert the right end of the bezel onto the system.
2. Press the release button and fit the left end of the bezel onto the system.
3. Lock the bezel by using the key.
Figure 9. Installing the front bezel

Connect the system to the network
The following figure shows the location of the DP4400 network ports and iDRAC port.
About this task
Steps
1. Use a Cat5e or Cat6 UTP copper Ethernet cable to connect a 1 GbE port (10) to the service computer.
2. If the DP4400 contains 10 Gb SFP network cards, use fiber cables with a 10 Gb optical SFP to connect the four required 10
GbE ports (2, 3, 8, 9) to access ports on the switch in your network.
3. If the DP4400 contains 10 Gb BASE-T network cards, use Cat6a UTP or Cat7 copper cables to connect the four required 10
GbE ports (2, 3, 8, 9) to access ports on the switch in your network
4. Use a Cat5e or Cat6 copper Ethernet cable to connect the iDRAC port (1) in the lower left of the system chassis to the
network.

DP4400 ports
About this task
Table 8. DP4400 port types

Callout number Port type
1 iDRAC
2 10 GbE (required)
3 10 GbE (required)
4 10 GbE (unused)
5 10 GbE (unused)
6 10 GbE (unused)
7 10 GbE (unused)
8 10 GbE (required)
9 10 GbE (required)
10 1 GbE
11 1 GbE (unused)
NOTE: Ports 2 and 9 are a vSwitch0 network team. Ports 3 and 8 are a vSwitch1 network team and are used during
appliance configuration.
NOTE: Ensure that the four required 10 GbE ports (2, 3, 8, and 9) are connected to the access ports on the switch in your
network.
NOTE: For more information about Separate Management Network prerequisites and procedure, see Separate
management network requirements on page 13.
NOTE: Switch MTU should be 1528 or higher. Jumbo frames are not supported. PowerProtect DP4400 sometimes may fail
with the following error message:
Adding back-end storage. Exception occurred while executing Avamar integration task.
Failed to add Data Domain as Avamar back-end storage.
To resolve this problem, you must either remove the MTU or increase it to 1518 or higher.
See KB Article 539946 for a detailed information on this.
Connect the power cables and power on

This topic describes how to connect the power cables and power on the system
About this task
NOTE: Use an uninterruptible power supply (UPS) to protect against data loss caused by unplanned power outages.
Steps
1. Connect the power supply units to the rack.
The system may not power on automatically after plugging in the AC power cords. The system identification button located
on the rear of the chassis, on the lower left-hand side illuminates blue when power is on.
2. If the system does not power on automatically after connecting the power cables, press the power button on the right
control panel at the front of the chassis to power on the system .

Configure iDRAC
You must configure the Integrated Dell Remote Access Controller (iDRAC) for system upgrade and maintenance operations.
Additionally, PowerProtect supports the use of iDRAC to change security settings and enables you to remotely power the
system on.
Prerequisites
Connect to the unit using a VGA monitor with a keyboard or a serial port, power on the appliance, and perform the following
steps:
NOTE: Do not use iDRAC to change the storage configuration, system settings, or BIOS settings, as making changes to
these will impact the system functionality. Contact Support if changes are required in any of these areas.
Steps
1. During the system boot process, press F2 to access the BIOS menu.
2. In the System Setup Main Menu page, click iDRAC Settings.
The iDRAC Settings page is displayed.
3. Click Network.
The Network page is displayed.
4. Under IPv4 Settings, specify static IP address details.
5. Press Esc to return to the previous menu.
6. Select User Configuration.
a. Enable the root user.
b. Change the root user password.
Note that the default password is Idpa_1234.

4
Install PowerProtect DP4400 Software
The following topics describe how to install and configure PowerProtect.
Topics:
• Connect to the ACM
• Network Configuration wizard
• Secure Remote Services (SRS)
• Install and deploy PowerProtect
• Troubleshooting
• Configure the ACM settings for separate management networks
• Configure the DataProtection-ACM for separate management networks by using the configuration wizard
• PowerProtect post installation tasks
Connect to the ACM

Connect to the ACM user interface and begin the configuration process. For a seamless experience, enable both private and
public network connections to your service computer.
Prerequisites
● After powering on the appliance, wait 5 minutes for startup to finish.
● Verify that the service computer is connected to the 1 GbE port identified as (10) in DP4400 network and iDRAC
connections on page 24.
● On the service computer, record the IP address settings for the Ethernet interface that is connected to the DP4400.
NOTE: PowerProtect uses the 192.168.100.xxx IP addresses for the internal components. Ensure that 192.168.100
network is not used in your environment. If the network addresses are in use, contact Customer Support for assistance.
Steps
1. On the service computer, assign the static IP address 192.168.100.98 and the subnet mask 255.255.255.224 for the
Ethernet interface that is connected to the DP4400.
A default gateway is not required.
2. Verify that the ACM responds to a ping on the default ACM IP address, 192.168.100.100.
3. To connect to the ACM user interface, type https://192.168.100.100:8543/ in a browser window.
4. Log in to the ACM with the default system account username and password:
24 Install PowerProtect DP4400 Software

● User Name: root
● Password: Idpa_1234
5. After a successful login, the Change Appliance Password screen is displayed. You must specify both your existing as well as
the new password for the root user. Also, you must specify security credentials for Data Domain.
NOTE: This password will be assigned to all appliance components. It must contain 9–20 characters and include at least
one of each type of supported character. The following types of characters are supported:
● Uppercase letters (A–Z)
● Lowercase letters (a–z)
● Numbers (0–9)
● Special characters: period (.), hyphen (-), and underscore (_)
The password must not include common names or usernames such as root or admin. Also, the password must not
start with a hyphen (-) and end with a period (.).
The system logs you out after changing the password. Log back in with the new password.
6. On the End User License Agreement screen, accept the EULA.
Results
The Network Configuration screen appears.
Network Configuration wizard

After accepting the EULA, configure initial connectivity to the DP4400 appliance.
About this task

Provide the information required in the steps below to configure the network.
NOTE: PowerProtect supports both IPv4 and IPv6-enabled networks. However, you must manually configure the dual stack
networks.
Steps
1. Depending on the type of network you have selected (IPv4 or IPv6), provide the following information to configure the
network settings:
● IPv4 network
Subnet mask IP address mask that identifies the range of IP addresses in the subnet where the appliance is
connected.
● IPv6 network
Prefix Length IP address length that identifies the range of IP addresses where the appliance is connected.
Gateway IP Default gateway IP address of the appliance.

address
Primary DNS The primary DNS server for your network environment.
server IP address
Secondary DNS The secondary DNS server for your network environment.
server IP address
Domain name The domain name for your network environment.
Appliance The IP address to assign to the ACM. This is the first IP address of the 13 IPs that is reserved for the
Configuration ACM.
Manager
IP Address/
Hostname
Install PowerProtect DP4400 Software 25

ESXi IP Address/ The IP address to assign to the ESXi server. This is the second IP address of the 13 IPs that is
Hostname reserved for ESXi.
NTP server The NTP server IP address for your network environment.
IP Address/
Hostname
If you want to configure the separate management and backup network, perform the following actions.
2. Click Separate Management Network check box to configure the separate management and backup network settings.
a. Provide the following information to configure the Management network settings.
connected.
Gateway IP Default gateway IP address of the appliance.
address
Primary DNS The primary DNS server for your network environment.
server IP address
Secondary DNS The secondary DNS server for your network environment.
server IP address
Domain name The domain name for your network environment.
Appliance The IP address to assign to the ACM. This is the first IP address of the 13 IPs that is reserved for
Configuration the ACM.
Manager
IP Address/
Hostname
ESXi IP Address/ The IP address to assign to the ESXi server. This is the second IP address of the 13 IPs that is
Hostname reserved for ESXi.
NTP server The NTP server IP address for your network environment.
IP Address/
Hostname
b. Provide the following information to configure the Backup network settings
connected.
3. Click Submit.
Results
● After you configure basic networking, your web browser automatically redirects to the ACM IP address assigned during
network configuration.
NOTE: For automatic forwarding to work correctly, the computer you use to complete the configuration must be
connected to the same network as the configured ACM IP address.
● If you cannot have connections to both public and private networks simultaneously, disconnect from the private appliance
configuration network and then connect to the network that the ACM IP address is on to complete the rest of the
configuration.
● Once the network configuration is complete, revert the network adapter IP address settings on the service computer to their
previous state.
● If the network configuration fails, you can click Rollback to revert all the settings. You must review the settings, make any
changes if required, and then configure the network settings again.
Secure Remote Services (SRS)

Secure Remote Services (SRS) delivers a secure, IP-based, distributed remote service support solution that provides command,
control, and visibility of remote services access.
Complete information about SRS is available from the Online Support site at https://support.emc.com. The SRS registration is
done by the Customer Service (CS) during deployment or by the Solution Architect (SA).

It is recommended to complete the SRS registration process, which enables you to have the following advantages:
● Dell EMC delivers product event reports such as error alerts, thus greatly increasing the availability of your information
infrastructure.
● Dell EMC provides rapid remote services either through automated recognition and notification or through interpretation and
response when a support event occurs, eliminating the need for on-site support visits.
● Provides increased protection of your information
● Reduced risk
● Improved time-to-repair
If the customer opts not to deploy the SRS, the Project Manager (PM) must log in to http://gcsdocs.corp.emc.com and
complete the details in the opt-out form.
Prepare the PowerProtect environment for SRS registration

To prepare the PowerProtect environment for SRS registration, add the customer site IDs to the SRS gateway and confirm the
siteID is visible through ServiceLink.
The DataProtection-ACM can be configured with SRS during the installation process or can be configured later from the ACM
dashboard. For more information about Configuring SRS, see Configure SRS after deployment on page 33.
Ensure that the requirement of DNS registration of the SRS gateway hostnames is met.
Install and deploy PowerProtect

This procedure provides you information about how to install and deploy the PowerProtect appliances. The GUI helps you in
setting up PowerProtect and prepares the appliance for use.
About this task

To install and deploy the PowerProtect, complete the following actions.
NOTE: This procedure is applicable for the PowerProtect DP4400 model. The other models are preconfigured and installed
by the Professional Services (PS) team.
Steps
1. Click Submit once you have specified all the required information.
2. In the Dell EMC Secure Remote Services configuration for PowerProtect page, perform the following actions.
a. Enter the SRS Gateway IP.
b. Enter the online support credentials in the Username and Password fields.
c. Click Configure.
The PowerProtect configuration page is displayed.
NOTE: You can skip the Secure Remote Services configuration and configure it from the ACM dashboard later.
3. In the PowerProtect configuration page, perform the following actions.
NOTE: Ensure that you click the prerequisites link available on the Welcome page and read them before you continue.
a. In the Welcome page, select the Optional components that you want to install in the configuration and click Next.
NOTE: If you have selected IPv6 as your network, then the optional components Search and CDRA are not available
to install as they do not support IPv6-enabled networks.
NOTE: If you are connected to the network with an Internet connection, the system automatically downloads
the licenses for Protection Storage, Backup Server, and Reporting and Analytics point products. For more
information about In-product activation, see In-product activation on page 34. In-product activation is not
supported on IPv6 enabled network.

NOTE: If you are not connected to the network or the licenses are not downloaded from the ELMS server, click
Browse to locate and upload the licenses manually. For more information about manually activating the licenses, see
Manual activation on page 34
NOTE: The system validates the license file with the following checks.
● The maximum storage capacity for the appliance cannot be more than 24 TB (appliance with 8 TB to 24 TB
capacity) and 96 TB (appliance with capacity of 24 TB to 96 TB) based on the appliance you have. Depending on
the appliance you have, you can upgrade the storage capacity from 8 TB to 24 TB in increments of 4 TB or 24 TB
to 96 TB in increments of 12 TB.
● The license file should not have the hash (#) character.
● The license must be in multiples of 4 TB.
b. Click Next.
c. In the General settings page, perform the following actions.
i. Verify the number in the Serial Number field, which is the Locking ID mentioned in the Dell EMC software license
activation notification email.
ii. Select the Time zone from the list.
iii. Select and enter the IP address in the IP address range (11) field.
NOTE: If you have configured Separate Management Network, enter the IP addresses in the IP address
range (9) and IP address range (3) fields in the Management network settings and Backup network
settings sections respectively. For more information about manually configuring the ACM, see Configure the
ACM manually for Separate management networks.
NOTE: The system automatically assigns 11 IP addresses in chronological order, which is based on the IP address
that you enter to configure the other components of the appliance. For example, if you enter 10.200.1.10 the system
automatically generates a range of IP address from 10.200.1.10 to 20.
NOTE: If you do not select the IP address range check box, you must manually configure and enter the IP
addresses in the other sections. See, Step 9.
d. Click Validate.
The system validates the availability of the IP addresses and allocates them to the PowerProtect components. To view
the list of IP addresses allocated to the individual components, hover on the green check mark.
e. Click Next.
The Customer information settings page is displayed.
4. If you have not selected the Separate Management Network check box, you can configure the settings manually . To
configure the settings manually, perform the following actions.
a. In the Protection storage configuration page, under the Data network section, enter valid IP addresses for Backup
IP 1 address and Backup IP 2 address.
b. In the Backup server page, enter valid IP addresses in the following.
● Avamar server IP address in the Backup node section
● Image Proxy IP address in the PowerProtect backup
c. In the IDPA System Manager page, enter the IP address in the Server IP Address field.
d. In the Reporting and Analytics page, enter the IP addresses in the Application server IP address and Datastore
server IP address fields.
e. In the Search page, enter the IP address in the Index Primary Node IP address.
f. In the Cloud Disaster Recovery page, enter the IP address in the Cloud DR Add On IP address.
NOTE: If you select the optional components in the Welcome page, the Reporting and Analytics, Search, and Cloud
Disaster Recovery pages are displayed during configuration.
The Configuration progress page is displayed. You can view the configuration progress for each component along with the
configuration progress for the appliance.
NOTE: For more information about manually configuring the ACM after you have configured the separate management
networks, see Configure the ACM manually for Separate management networks.
5. In the Customer information settings page, perform the following actions.
a. In the Customer information section, enter information in the mandatory fields.
● Enter the name of the company in the Company name field.

● Enter the name of the administrator in the Admin contact name field.
● Enter the contact number of the administrator Admin contact number field.
● Enter the location in the Location field.
● Enter the site ID in the Site ID field.
b. In the Email Configuration section, enter information in the mandatory fields.
NOTE: If you select the Email notification check box, the Email Configuration section is displayed .
● Enter the SMTP server IP address in the SMTP server field.

● Enter the port number in the Port field.
NOTE: The Port field is auto populated and is the default SMTP port.
● Enter the email address of the administrator in the Administrator email field.
NOTE: Click Test Email to send an email to the administrators email address.
6. Click Next.
7. In the Summary page, review the information that you entered and click Submit to start the configuration.
8. In the Configuration progress page, you can perform the following actions.
NOTE: You can perform these actions after the installation is complete.
a. Click Download Solution ID to download the solution ID.

b. Click Download Configuration to download the configuration.
c. Click Download configuration XML to download the configuration XML file.
NOTE: You can perform the above actions when PowerProtect is configured successfully.
d. View the Errors, Warnings, and Diagnostic report only if the configuration fails.
9. Click Finish.
The PowerProtect is installed and deployed. You are prompted to log in to the IDPA System Manager in a new browser tab
or window. The default username for the IDPA System Manager is Idpauser. In case it take longer, refresh the browser
and login to ACM dashboard. For more information about performing a VM backup, restoring a VM backup and generating
reports for Avamar and Data Domain systems on the IDPA System Manager, see Manage IDPA System Manager post
PowerProtect installation on page 60
NOTE: If the installation fails, you can perform the following actions.
● Click Download log bundle to download the logs of the installation and then click Retry to install the critical
components that have failed to install from the point the installation failed. For more information about retry
installation, see Retry installation on page 29
● Click Download log bundle to download the logs of the installation and then click Rollback to review or modify the
settings if required on the Welcome page and then configure the settings. Ensure that you download the logs before
you rollback the installation. For more information about rolling back the installation, see Rollback installation on page
30
NOTE: If you have selected Optional components such as Search, Reporting and Analytics, or CDRA, and if any of
these components fail during installation, the configuration of the other components continues until it finishes. After the
configuration process for the required components is completed, you must log in to the ACM dashboard to configure the
failed components.
Retry installation
If the installation fails, you can continue from the point where the installation failed.
About this task

During the appliance deployment, if any of the critical components fail to install you can retry the installation of the component
from the point where the installation failed. To retry the installation, perform the following actions.
Steps
1. Click Retry on the Configuration progress page.

The Retry Configuration dialog box is displayed.
NOTE: The ACM reverts the changes that are made to the component that failed during installation and resumes the
appliance configuration.
2. Click Yes to continue the installation.

The Configuration progress page is displayed. The installation continues from the point where the installation failed.
NOTE: If the ACM is rebooting or the ACM web service is restarting during PowerProtect deployment the Retry option
is not available, you can only Rollback the installation.
Rollback installation
If the installation fails, you can rollback the installation and follow the wizard to set up and deploy the PowerProtect appliance.
Prerequisites
Ensure that you click Download log bundle to download the logs before you start the rollback.
About this task

The rollback feature reverts the changes that are made to the appliance configuration. You can review the settings and start the
appliance installation and configuration again.
To rollback the appliance configuration, perform the following actions.
Steps
1. Click Rollback on the Configuration progress page.
The Rollback Configuration page is displayed.
NOTE: The ACM reverts the changes that are made to the appliance configuration.
2. Click Yes to continue the installation.

The Configuration progress page is displayed. The system reverts all the changes that are made to the appliance.
NOTE: You can see the details of the rollback progress of all the components on the Configuration progress page.
Results
After the rollback is successful, the Configuration Welcome page is displayed. Configure the appliance from the
Configuration Welcome page . To configure and deploy the appliance follow Step 8 through Step 13 in the Install and deploy
section.
Troubleshoot Health monitoring

After installing the PowerProtect if you access the Health tab and see a Service Down - Message broker error message, then
you need to run commands on the ACM to resolve the error.
About this task

To resolve the Service Down - Message broker error on the Health tab, perform the following actions on the ACM.
Steps
1. Log in to the ACM using SSH.
2. Run the following command to restart the RabbitMQ service.
#service rabbitmq-server restart
3. Run the following command to check if the RabbitMQ service is running.
#service rabbitmq-server status
4. Run the following command to restart the Data Protection web application after the RabbitMQ service starts.
#service dataprotection_webapp restart
5. Refresh the browser and verify that there are no errors on the Health tab.

Troubleshooting
This section provides information on how to troubleshoot some of the issues in PowerProtect.
Creating and downloading a log bundle

You can create and download a log bundle that can be analyzed or sent to customer support.
1. In the ACM dashboard, click the log bundle icon in the upper right and select Create log bundle.
2. On the Create log bundle dialog, select the components you want included in the log bundle and click OK.
3. When the log bundle is created, reselect the log bundle icon and select Download log bundle. Then specify the download
location and click OK.
Accessing vCenter
If you need to log in to vCenter to troubleshoot an issue encountered during installation, use the user idpauser@localos and the
common password for the PowerProtect. This user account has limited privileges, but has access to information that can help
identify and address problems.
Configure the ACM settings for separate management

networks
This section provides information about the configuration differences in configuring ACM manually after you have configured
the separate management network from the network configuration wizard.
About this task

NOTE: The options in the following procedure are available after you have configured the separate management network
during network configuration. For more information, see Network configuration wizard.
Steps
1. In the General Settings page, ensure that you do not select the IP address range check box in the Management
network settings and Backup network settings sections.
2. Click Next.
The vCenter configuration page is displayed.
3. In the vCenter configuration page, enter the unique IP address in the IP address field to configure the internal vCenter.
4. Click Next.
The Protection Storage configuration page is displayed.
5. In the Protection Storage configuration page, enter unique IP addresses under the Protection Stoarge and Backup
Network sections for the following fields.
● Management Network IP address
● Backup IP address1
● Backup IP address 2
6. Click Next.
The Backup Server configuration page is displayed.
7. in the Backup Server configuration page, enter unique IP addresses under the Backup node and PowerProtect backup
section for the following fields.
● Backup Node IP
● Image Proxy IP address
● Backup Proxy IP address
8. Click Next.
The IDPA System Manager page is displayed.
9. In the IDPA System Manager page, enter the unique IP address in the Management Network IP field.

Configure the DataProtection-ACM for separate
management networks by using the configuration
wizard
This section summarizes the configuration differences in the configuration wizard when you configure the separate management
network from the backup network.
Prerequisites
Ensure that you read the prerequisites before you configure the network settings.
Steps
1. In the Network Configuration page, you can select either IPv4 or IPv6-enabled networks. Select Separate Management
Network check box, under the Management network settings and click Submit.
Depending on the type of network you have selected (IPv4 or IPv6), provide the following information to configure the
network settings:
● IPv4 network
○ Subnet mask
● IPv6 network
○ Prefix Length
● Gateway IP address
● Primary DNS server IP address
● Secondary DNS server IP address
● Domain Name
● Appliance Configuration Manager IP Address/Hostname
● ESXi IP Address/Hostname (only for Management network settings)
● NTP server IP Address/Hostname (only for Management network settings)
a. Provide the following information to configure the Backup network settings
connected.
2. In the General Settings page, perform the following actions:

a. Select the IP address range in the Management network settings and Backup network settings section.
b. Click Validate.
The system validates the availability of the IP addresses and allocates them to the PowerProtect components. To view
the list of IP addresses allocated to the individual components, hover on the green check mark.
Results
DP Advisor communicates with the Avamar storage nodes and Data Domain system over the management network. As a result,
the wizard automatically assigns IP addresses from the management network, if you enabled a management network IP address
range.
PowerProtect post installation tasks

After you install the PowerProtect software in your appliance, you need to complete the following tasks.
This section includes the following topics.

Configure crontab for DP Advisor database backup
Create a job to backup the DP Advisor database in the crontab of the DP Advisor database VM.
About this task

Perform the following steps from the ACM.
Steps
1. Log in to the DP Advisor database VM by using SSH.
2. Create dbbkp folder under /data01.
mkdir -p /data01/dbbkp
3. Create a shell script with the name vi /data01/dbbkp/dbbkp.sh with the following:
#!/bin/sh
#Take backup of DPA database
/opt/emc/dpa/services/bin/dpa.sh datastore export /data01/dbbkp
#Delete the files older than 3 days
find /data01/dbbkp/datastore* -type d -mtime +2 | xargs rm –rf
4. Run the following command to make the executable script:
chmod +x /data01/dbbkp/dbbkp.sh
5. Edit the crontab by typing the following command:
crontab -e
6. Add a line in the crontab file for the backup job.
For example, to create a job that runs daily at 7 P.M, type the following:
00 19 * * * /usr/bin/sh /data01/dbbkp/dbbkp.sh >> /tmp/dpabkp.log 2>&1
7. Save the change and exit crontab by typing the following command:
:wq
Results
The cron job creates a subfolder in the /data01/dbbkp directory for each backup on the DPA datastore virtual machine,
which contains the backup data. For example: data01/dbbkp/datastore-6_3_0_7-2017-04-25-1155/
Configure SRS after deployment

If SRS was not configured during the deployment, it can be configured later from the ACM dashboard.
Steps
1. Log in to the DataProtection-ACM. On your laptop, open the Chrome web browser, and then type the following URL:
https://acm_ip_address:8543/
2. On the ACM dashboard, select Enable remote support in the panel for which SRS should be enabled: Customer Support,
Protection Storage, or Reporting and Analytics.
The SRS configuration for PowerProtect window appears.
3. Enter the SRS gateway IP address and your RSA Secure ID credentials, then click Configure.
The service is registered with Secure Remote Services.

5
License activation
You need a license to use PowerProtect. To use all the features of PowerProtect you need to activate the license that you have
received. To activate the licenses you need to be connected to a network with an internet connection for In-product activation
or you must have received the License Activation Code (LAC) letter through email during the fulfillment process to manually
activate the licenses. The LAC letter includes the license authorization code that is associated with your order, instructions
for downloading software binaries, and instructions for activating the entitlements online through Dell EMC Software Licensing
Central.
This section provides information on the various ways in which you can activate your license.
Topics:
• In-product activation
• Manual activation
In-product activation
The In-product license activation is a feature where the ACM automatically downloads the licenses for Protection Storage,
Backup Server, and Reporting and Analytics point products from the ELMS server.
NOTE: In-product activation is not supported on IPv6 enabled network.
Ensure that the appliance is connected to a network with a working Internet connection to automatically download the licenses.
After the licenses are successfully downloaded, the License tab on the PowerProtect Configuration page is not displayed. If
the licenses are not downloaded successfully during network configuration, the License tab is displayed on the PowerProtect
Configuration page with a Check online for licenses button. You can click Check online for licenses to download the
licenses from the ELMS server.
NOTE: If the system is unable to download the licenses automatically from the ELMS server, an error message is displayed,
and you must manually activate the licenses. For more information about how to manually activate the licenses, see Manual
activation on page 34.
Manual activation
The manual license activation feature enables you to upload and activate the licenses that you have downloaded from the ELMS
server.
Prerequisites
● Ensure that you have the email with the License Authorization Code (LAC) letter that you have received during the order
fulfillment process.
● The LAC letter (for initial activations, this is the serial number of the appliance) includes the license authorization code (for
initial activations, this is the serial number of the appliance) that is associated with your order, instructions for downloading
software binaries, and instructions for activating the entitlements online through Dell EMC Software Licensing Central. For
more information, see the Software Licensing Central Activation, Entitlements, Rehost and Regeneration Guide on https://
community.emc.com/community/labs/tes.
About this task

To manually activate the licenses on the PowerProtect configuration page, complete the following actions.
Steps
1. In the Welcome page, select the optional components that you want to install in the configuration and click Next.
2. In the License page, click Browse on the Protection Storage, Backup Server, and Reporting and Analytics sections.
34 License activation
The Open dialog box is displayed.
3. Locate and select the licenses for the respective point products and click Open.
The licenses are activated, and a green tick appears beside Browse.
Results
The licenses are activated for the point products. To continue with the configuration, follow the steps from 8 in the Install and
deploy PowerProtect on page 27.
License activation 35
6
Storage expansion for DP4400
You can upgrade the storage capacity of the DP4400 appliance to 96 TB. You can expand the storage capacity in multiples of 4
TB (for the appliance with 8 TB to 24 TB capacity) up to 24 TB and multiples of 12 TB (for the appliance with capacity of 24 TB
and above) up to a maximum of 96 TB.
Topics:
• Remove the front bezel to access front panel hard drives
• Install the expansion hard drives
• Install the front bezel
• Storage expansion and upgrade
Remove the front bezel to access front panel hard

drives
The procedure to remove the front bezel with the LCD panel and the front bezel without the LCD panel is the same.
Steps
1. Unlock the bezel by using the bezel key.
2. Press the release button, and pull the left end of the bezel.
3. Unhook the right end, and remove the bezel.
Figure 12. Removing the front bezel
Install the expansion hard drives

About this task
Install the expansion hard drives into slots 4-11 on the front of the system.
36 Storage expansion for DP4400

CAUTION: Dell recommends that you install only the hard drives provided by Dell in the disk expansion kit.
Figure 13. Hard drive slots
Steps
1. Remove the hard drive blank.
Figure 14. Removing a drive blank
2. Press the release button on the front of the hard drive to open the release handle.
Figure 15. Opening the release handle
3. Insert the hard drive into the hard drive slot and slide until the hard drive connects with the backplane.
4. Close the hard drive release handle to lock the hard drive in place.
Storage expansion for DP4400 37

Figure 16. Installing a hard drive
Install the front bezel

The procedure to install the front bezel with the LCD panel and the front bezel without the LCD panel is the same.
Steps
1. Align and insert the right end of the bezel onto the system.
2. Press the release button and fit the left end of the bezel onto the system.
3. Lock the bezel by using the key.
Figure 17. Installing the front bezel

Storage expansion and upgrade
You can expand the storage capacity by obtaining the required additional licenses through ELMS (an electronic license
management system). The storage capacity of the DP4400 appliance with a capacity of 8 TB to 24 TB can be expanded
beyond 24 TB by adding disk drives to the appliance using the disk expansion kit. You can upgrade the appliance using the ACM
and then install the disk drives. If you have an appliance with 8 TB to 24 TB capacity, you can expand the storage capacity using
the disk expansion kit.
Prerequisites
The following prerequisites are required when expanding the DP4400 (8 TB to 24 TB) model beyond 24 TB using the disk
expansion kit:
● Ensure that you have PowerProtect version 2.6.
● Ensure that the storage capacity in the new license is not less than the capacity in your current license.
● Ensure to clear browser cache.
● If the original DDVE license includes license for cloud tier, then the new storage expansion license must include the license
for the cloud tier.
About this task

To expand the storage capacity of the appliance, perform the following actions.
Steps
1. Log in to the ACM UI.
The ACM dashboard Home page is displayed.
2. Click the Gear icon and select Expand storage in the Protection Storage panel.
The Storage expansion window is displayed.
3. Click Browse on the License file field in the Protection Storage section.
The Open dialog box is displayed.
4. Select the license file for disk expansion that you have downloaded.
NOTE: If the license is valid, a green tick is displayed.
5. Select the I agree that the expansion operation overwrites data on the additional 8 drives check box to overwrite the
existing data on the new drives.
NOTE: This check box is available only when you are expanding your storage capacity from the 8 TB - 24 TB appliance
beyond 24 TB.
6. Select the I agree to restart Protection Storage server or I agree to restart Protection Storage file system check
box to restart the protection storage server for adding the SCSI controller and restart file system service to enable the cloud
feature during the storage expansion.
NOTE: This option is applicable only when you are expanding your storage capacity from the 8 TB - 24 TB appliance
beyond 24 TB.
NOTE: The I agree to restart Protection Storage server or I agree to restart Protection Storage file system
check box is not displayed when the SCSI controller was added previously and if there is no change in the cloud tier
enabled status.
NOTE: The I agree to restart Protection Storage file system check box enables the cloud feature on the protection
storage server during storage expansion.
NOTE: The I agree to restart Protection Storage server check box adds the SCSI controller to the protection
storage server and to change the cloud tier enabled status (if applicable) during the storage expansion.
NOTE: Ensure that there is no active I/O operation running on Protection Storage server.
7. Click Expand.
The Storage expansion window displays the progress bar. You can see the details of the storage expansion.
8. Click Finish.
Storage expansion for DP4400 39

The ACM dashboard Home page is displayed.
Results
The storage capacities are updated in the Total backup storage, Available backup storage, and the Cloud Storage fields in
the Protection Storage panel.
NOTE: The Cloud Storage field is updated if you have added the cloud feature during storage expansion.
NOTE: The check boxes in Step 5 and Step 6 are displayed if you are expanding the storage capacity of the appliance
beyond 24 TB.

7
Update the PowerProtect Firmware
This chapter describes how to update the PowerProtect firmware on DP4400 models.
Topics include:
Topics:
• Overview
• Prerequisites
• Prepare the Environment
• Prepare the Firmware Upgrade
• Perform the Required Checks on PowerProtect Point Products
• Update the Firmware
Overview
Before upgrading the PowerProtect software, the PowerProtect system must have its firmware updated to the latest DP4400
firmware package.
NOTE: Failing to update the firmware before running the software upgrade workflow causes loss of capability of receiving
hardware fault alerts on the ACM.
The topics below describe how to update the PowerProtect firmware on DP4400 models for all the required PowerProtect
hardware components, so that you can seamlessly upgrade to the latest version of PowerProtect.
The DP4400 firmware update is three-stage process, which consists of the following:
● If you have successfully configured the ACM and it is up and running, you can perform the required checks on the
PowerProtect point products to ensure that all activity on the PowerProtect is quiesced, all the services on ACM have green
checkmarks, and so on.
● Update the remaining firmware packages.
NOTE: The firmware update process takes more than two hours to complete, it is recommended that you keep a four-hour
window to complete the process.
Prerequisites
The following are required to successfully complete the firmware update procedure, so that you can upgrade to the latest
versions of PowerProtect:
● Obtain the latest firmware update package from https://www.dell.com/support/home/en-us/product-support/product/
integrated-data-protection-appliance/drivers and download the zip file to your local folder.
To verify the integrity of the downloaded file, use the sha256 checksum validation process as described below.
○ In the Download list table, click IDPA - PowerProtect DP Series Appliance Firmware < update version >.
○ Click the Checksum Values link to show the SHA256 checksum value.
○ Verify that the checksum of the downloaded file is the same as that displayed on the Dell EMC Support site.
For Windows computers, users can right-click the downloaded file, select CRC SHA from the context menu and click
SHA-256 to calculate the checksum value.
For Linux computers, users can run the sha256sum command as follows to calculate the checksum value: sha256sum
<downloaded file name>
● Obtain the latest PowerProtect DPATools package from https://www.dell.com/support/home/en-us/product-support/

product/integrated-data-protection-appliance/drivers and download the zip file to your local folder.
To verify the integrity of the downloaded file, use the sha256 checksum validation process as described below.
Update the PowerProtect Firmware 41

○ In the Download list table, click IDPA - PowerProtect DP Series Appliance DPA Tools < version >.
○ Click the Checksum Values link to show the SHA256 checksum value.
○ Verify that the checksum of the downloaded file is the same as that displayed on the Dell EMC Support site.
For Windows computers, users can right-click the downloaded file, select CRC SHA from the context menu and click
SHA-256 to calculate the checksum value.
For Linux computers, users can run the sha256sum command as follows to calculate the checksum value: sha256sum
<downloaded file name>
● iDRAC - Ensure that you are connected and have configured iDRAC. If you chose to enable and use the FIPS Compliance
Mode, ensure that the PowerProtect system must have iDRAC firmware updated to version 4.10.10.10 or later. However,
you cannot directly update to iDRAC firmware version 4.10.10.10 if you are using iDRAC firmware version that is earlier than
3.30.30.30. You must first update your iDRAC firmware version to 3.36.103.36 and then update to iDRAC firmware version
4.10.10.10 or later using dpatools to initiate the update.
● ACM – Ensure that the ACM is up and running.
● ESXi server – Ensure that you have valid connection points to the required ESXi server.
Prepare the Environment
Prerequisites
● Ensure that you have full administrator privileges or be a root user to perform these tasks.
● To connect to Appliance Configuration Manager (ACM) and other components, you must have an SSH client.
NOTE: The Appliance Configuration Manager SSH session is configured to time out after 10 minutes of inactivity. Either
refresh the session to keep it alive or change the timeout value. For more information, see the Session timeout section in
the PowerProtect Security Configuration Guide.
Install the DPATools Package

Steps
1. Using an SSH client, connect to the ACM as a root user.
2. Create a new directory:
mkdir /root/firmware/
3. From the latest dpatools package that you downloaded from the Dell EMC Support website, copy the dpatools-
<version>.rpm to the new /root/firmware/ directory.
4. On the SSH session, verify the version of DPATools that is installed on the ACM.
rpm -qa dpatools
dpatools-2.2.1-2.noarch
5. If the version that you downloaded is a later version than the one already installed, then upgrade the dpatools package.
rpm -Uvh --force dpatools-<version>.rpm
Install the Firmware Update Package

Steps
1. Using an SSH client, connect to the ACM as a root user.
2. Verify the firmware version on the PowerProtect.
dpacli -fwversions
The dpacli -fwversions command displays the firmware version of all components on the PowerProtect server.
3. From the latest firmware upgrade package that you downloaded from the Dell EMC Support website, using WinSCP or any
other terminal emulation applications, copy the dpafw-<version>.rpm to the root directory.
4. Run the following command:
42 Update the PowerProtect Firmware

rpm -Uvh --force dpafw-<version>.rpm
Prepare the Firmware Upgrade
Steps
1. Connect to the ACM using an SSH client.
2. Run the following command to verify the version of PowerProtect that is installed on the ACM:
dpacli -fwversions.
Verify that the firmware version is the same on the server also.
3. On ACM, from the /usr/local/dpatools/bin/ directory, run the dpacli -fwworkflow /usr/local/
dpatools/bin/payload/IDPA-<version>-<version>.tar.gz command to prepare the system for the firmware
update.
Perform the Required Checks on PowerProtect Point

Products
Once the ACM is successfully configured and is up and running, perform the following checks:
● Ensure that all activity on PowerProtect is quiesced including the VMs. See Checks on Data Domain Virtual Edition (DDVE)
on page 43 and Checks on Avamar Virtual Edition (AVE) on page 43.
● Ensure that there is no operation in progress on the ACM dashboard.
● Make sure that all the services on ACM have green checkmarks indicating that they are all healthy, up and running, and
properly configured. If any of the services are not in green, you must log on to that particular service and restart it.
● On the ACM GUI, click the Download current configuration file, which is required for enabling the service-mode. This file
is automatically generated for IDPA version 2.5 and later.
Checks on Data Domain Virtual Edition (DDVE)

You must perform the following checks on DDVE.
Steps
1. Ensure that DDVE storage consumption is less than 99 percent.
2. Using an SSH client, connect to DDVE.
3. Ensure that the file system is up and running, file system cleaning is not happening, and there are no
critical alerts by running the following commands respectively:
● filesys status
● filesys clean status
● alerts show current
Checks on Avamar Virtual Edition (AVE)

You must perform these required checks on Avamar Virtual Edition (AVE).
Steps
1. Ensure that there is at least 38 GB free space on the /space directory on the AVE server.
2. Ensure there is a recent (no older than 24 hours) validated checkpoint on the Avamar server. Upgrading PowerProtect
requires that a validated checkpoint exist. Additionally, you must have performed HFScheck within the last 36 hours on the
Avamar server.
Use the status.dpn command to verify if there is a valid checkpoint and to verify the HFScheck status.

The status.dpn command output should be similar to the bold text in the following sample output where:
All reported states=(ONLINE)
runlevels=(fullaccess)
modes=(mhpu+0hpu+0hpu)
System-Status: ok
Access-Status: full
Last checkpoint is (OK)
Last hfscheck is (OK)
admin@ic-idpa4400-1-ave:~/>: status.dpn
Thu Dec 17 11:54:31 PST 2020 [IC-IDPA4400-1-AVE.DATADOMAIN.COM] Thu Dec 17 19:54:31
2020 UTC (Initialized Tue Nov 24 02:27:11 2020 UTC)
Node IP Address Version State Runlevel Srvr+Root+User Dis Suspend Load UsedMB Errlen
%Full Percent Full and Stripe Status by Disk
0.0 10.200.186.79 19.1.0-38_HF316324 ONLINE fullaccess mhpu+0hpu+0hpu 1 false 0.48
10187 1209326 0.0% 0%(onl:12 ) 0%(onl:10 ) 0%(onl:10 )
Srvr+Root+User Modes = migrate + hfswriteable + persistwriteable + useraccntwriteable
System ID: 1606184831@00:50:56:9B:77:8C
All reported states=(ONLINE), runlevels=(fullaccess), modes=(mhpu+0hpu+0hpu)

System-Status: ok
Access-Status: full
Last checkpoint: cp.20201217170300 finished Thu Dec 17 09:03:19 2020 after 00m 19s
(OK)
Last GC: finished Thu Dec 17 08:00:20 2020 after 00m 02s >> recovered 91.27 KB (OK)
Last hfscheck: finished Thu Dec 17 09:02:43 2020 after 01m 56s >> checked 31 of 31
stripes (OK)
Maintenance windows scheduler capacity profile is active.

The maintenance window is currently running.
Next backup window start time: Thu Dec 17 20:00:00 2020 PST
Next maintenance window start time: Fri Dec 18 08:00:00 2020 PST
admin@ic-idpa4400-1-ave:~/>:
If there is no recent checkpoint, use the following steps to create a checkpoint on the Avamar server.
a. Log in to the AVE server via SSH using the Avamar IP address and the admin user account.
b. Verify if a validated checkpoint was created in the last 24 hours:
mccli checkpoint show
c. If required, create a checkpoint:
mccli checkpoint create --wait=0 --override_maintenance_scheduler=true
d. View the checkpoint.
cplist --lscp
e. Validate the checkpoint:
mccli checkpoint validate --cptag=<cp_tag> --checktype=full --wait=0 --
override_maintenance_scheduler=true
3. Note the current state of all policies on the Avamar server. It is recommended to disable all policies before performing the
upgrade.
4. Wait for any current jobs to complete.
5. Ensure that no replication jobs are triggered from the source Avamar server while the upgrade is in progress either on the
source or destination Avamar servers.
6. The PowerProtect upgrade must be performed during the Avamar maintenance window, when no other maintenance
activities are occurring. To ensure this is the case, perform the following steps.
a. Execute the opstatus.dpn command to verify that the server status is idle.
admin@AV_server:~/>: opstatus.dpn
server up: idle
b. Check to see if any jobs are running.
avmaint sessions | grep path

c. If any jobs are running, terminate them.
avmaint sessions | grep sessionid | awk -F"=" '{print $2}' | xargs avmaint kill 0
--ava --waittime=1
All running backup, restore, and replication sessions are terminated.
7. Verify if all the AVE services are up and running by running the following command:
dpnctl status
Once this command successfully executes, an output similar to the following is displayed:
Identity added: /home/admin/.ssh/admin_key (/home/admin/.ssh/admin_key)

dpnctl: INFO: gsan status: up
dpnctl: INFO: MCS status: up.
dpnctl: INFO: emt status: up.
dpnctl: INFO: Backup scheduler status: up.
dpnctl: INFO: Maintenance windows scheduler status: enabled.
dpnctl: INFO: Unattended startup status: disabled.
dpnctl: INFO: avinstaller status: up.
dpnctl: INFO: ConnectEMC status: up.
dpnctl: INFO: ddrmaint-service status: up.
If any AVE services are down run thedpnctl start command.
Other Recommended Checks on AVE

The following are some of the recommended checks that you can perform on AVE:
About this task

● ddrmaint cplist - Displays a list of checkpoints.
● cplist -lscp - Queries the checkpoint information from the running gsan processes on the data nodes.
● mccli dd show-prot - View the Data Domain system information, such as hostname, capacity, usage, stream limits,
DDOS version, monitor status, cloud tier settings, and so on.
● mccli dd show-prop - Displays information such as, hostname, total capacity, server utilization, user name, and so on.
● dpnctl start sched - Starts the MCS and the scheduler.
Update the Firmware
Steps
1. Using an SSH client, connect to the ACM.
2. Tail the dpacli log file by running the following command:
tail -f /usr/local/dpatools/logs/dpacli.log
3. Run the # dpacli -fwprecheck command on ACM to perform the essential pre-update validation checks.
This command performs the essential pre-update validation checks on the ESXi node without actually doing the firmware
update. If the pre-update validation checks fail, some components need firmware update message is displayed.
If the pre-update validation checks are successful, no components need firmware update message is displayed.
4. On the ACM, start the firmware update workflow by running the following command:
dpacli -fwworkflow /usr/local/dpatools/bin/payload/IDPA-<version>-<version>.tar.gz .
The fwworkflow command automatically detects the PowerProtect model, performs specific prechecks on the firmware,
executes the required tasks, and then applies model-specific firmware upgrade. If the firmware update is successful, the
fwworkflow displays the same message fwprecheck.
For example, dpacli -fwworkflow /usr/local /dpatools/bin/payload/IDPA-2.306-2.306.tar.gz
For example, dpacli -fwupdate /usr/local/dpatools/bin/payload/IDPA--2.306-2.306.tar.gz

Results
Optionally, you can monitor the progress of the firmware update on the iDRAC GUI by navigating to Maintenance Job Queue.
The firmware update process including restarting the server can take up to 45 minutes to complete.
● After a system restart, you lose connectivity to the ACM.
● The firmware update packages will be scheduled and will start getting installed once the reboot is complete.
● After some time, ACM displays the services coming back online and vSphere displays all the VMs coming back online.
● Run the dpacli -fwprecheck command on the ACM to verify that the firmware is successfully updated.

8
Upgrade the PowerProtect software
This chapter describes how to upgrade the PowerProtect software on DP4400 models.
Topics include:
Topics:
• Supported Upgrade Path
• Upgrade components
• Upgrade Prerequisites
• Upgrade the appliance software
• Upgrade Avamar external proxy servers
• Upgrade Avamar backup clients
• Upgrade Postrequisites
• Troubleshooting component software upgrades
Supported Upgrade Path

You an upgrade from version 2.6 to 2.6.1.
NOTE: Failing to update the firmware before running the software upgrade workflow causes loss of capability of receiving
hardware fault alerts on the ACM.
Upgrade components
This topic describes the list of core components that are required for the upgrade process.
Upgrade of the software for various core components of PowerProtect happens in this sequence:
1. Backup Server (Avamar), IDPA System Manager, Reporting and Analytics (Data Protection Advisor), Search , CDRA, and
ACM.
2. Protection Storage (Data Domain)
3. VCSA (vCenter Server Appliance) and Compute node (ESXi)
Upgrade components:
● Backup Server (Avamar)
● IDPA System Manager
● Reporting and Analytics (Data Protection Advisor)
● Search
● Protection Storage (Data Domain)
● CDRA
● ACM
● VCSA
● Compute node (ESXi)
Upgrade Prerequisites
This section provides you information about the prerequisites that you need to complete before you begin the upgrade
procedure.
● Ensure that the PowerProtect firmware is updated.
Upgrade the PowerProtect software 47

NOTE: All the existing Avamar packages and the snapshots are deleted before the upgrade.
● Ensure that the IP addresses 192.168.100.108 (used by vCenter component) and 192.168.100.113 (used by ACM component)
are unused and available. These IP addresses are used temporarily for upgrading the components.
● Review the PowerProtect Release Notes for information specific to the current release.
● If you have NDMP Accelerator nodes added to PowerProtect, you must manually upgrade the NDMP accelerator nodes.
To upgrade NDMP accelerator nodes, see the Upgrading the accelerator software section in the Dell EMC Avamar NDMP
Accelerator for Dell EMC NAS Systems User Guide.
● An upgrade should be started only during a software upgrade maintenance window. Ensure that no other maintenance or
backup activity is occurring on Avamar or Avamar Virtual Edition during the upgrade process (Avamar jobs should not be
running and Avamar Server status should be idle). You can check the server status by running the following command on the
Avamar server:
admin@vdppunvm140:~/>: status.dpn
● Ensure that you note down the Search settings before starting the upgrade procedure because as part of the upgrade,
Search is also upgraded. Search upgrade comprises of deleting the old Search VM and adding the new Search VM, which will
delete all the Search settings such as the custom user permissions and email notifications after the upgrade. Similarly, the
LDAP settings are stored on ACM, and ACM restores the previous LDAP settings on the new Search VM after the upgrade.
● Ensure that all the ESXi passwords are synchronized with ACM. If you have changed the ESXi passwords, see ESXi settings
under the section Change passwords and synchronize components in the PowerProtect Product Guide to synchronize them.
● Make sure that the ACM Dashboard is not displaying any Password out of sync for any of the components.
● Ensure that the VCenter passwords are synchronized with ACM. If you have changed the VCenter password, see the
vCenter Settings under the section Change passwords and synchronize components in the PowerProtect Product Guide.
● Ensure that vCenter server administrator and root account passwords are the same.
● Ensure that the ESXi server is up and running, by verifying on the vCenter UI.
● Verify that the hostname (short and FQDN) are set correctly on the ESXi server.
● There must not be any non-PowerProtect VMs deployed on the PowerProtect.
● Ensure that Avamar and Data Domain storage consumption is less than 85 percent. Refer to Monitoring the system with
the Avamar Administrator Dashboard and Monitoring Data Domain system capacity sections in the Dell EMC Avamar Data
Domain System Integration Guide for more information.
● Disable all the backup policies through the Avamar UI. Refer to the section Enabling and disabling a backup policy in the Dell
EMC Avamar Administration Guide.
● Restart MCS on Avamar before starting the upgrade process to ensure Avamar is quiesced, so that the upgrade does not
fail due to Avamar being busy. To restart MCS on Avamar , login to the Avamar Utility node with SSH (ssh login credential is
admin and the password is the common appliance password that you would have provided) by using the Avamar IP address
and run the dpnctl stop mcs command to stop and then run the dpnctl start mcs command to restart the Avamar
server.
● Make sure that you check the health of the vCenter before the upgrade procedure. To check the health of the vCenter,
login to the vCenter Web interface. If there are any critical alerts requiring user action, you must first fix those critical alerts
before starting the PowerProtect upgrade procedure.
● On the vCenter server, ensure that the used storage space is less than 90%. If the used space is 90% or more, then perform
the following steps to delete the unwanted files to free storage space:
1. Connect to the vCenter server VM as a root user using a SSH client.
2. Switch to the Shell prompt: shell
3. Verify the size of the /storage/log partition:
df -h
NOTE: You must delete the unwanted files to bring the percentage value below 90% to ensure that the upgrade
validations are successful.
4. Identify the top 20 files with high disk usage:

du -a /storage/log | sort -n -r | head -n 20
5. Delete the files listed in the output.

6. Verify that the percentage value for the /storage/log partition is below 90%.
df -h
7. Repeat the steps 4 and 5 until the /storage/log partition is below 90%.
48 Upgrade the PowerProtect software

Upgrade the appliance software
Upgrade the software for the components of PowerProtect from the Upgrade tab of the ACM.
Steps
1. Download the upgrade package file from Dell EMC Support.
The name of the file is in the format IDPA_Upgrade_<version>.tar.gz.
2. Copy the file to /data01/upgrade on the ACM.
NOTE: Ensure that only the upgrade file exists in this folder and no other post or prepatch packages exist.
3. Ensure that you have the executable permission for the upgrade package that you copied to the /data01/upgrade
directory. If you do not have the executable permission, type the chmod 644 IDPA_Upgrade_<version>.tar.gz
command to obtain the permission.
4. Log in to the ACM Dashboard UI.
Ensure that no errors are displayed and that no operations are in progress on the ACM Dashboard.
5. Click the Upgrade tab.
6. Verify that the correct upgrade tar.gz file is auto-populated in the Upgrade File Location field.
7. Click the Upgrade Readiness button.
The upgrade readiness progress is displayed. After the upgrade readiness completes successfully, the End User License
Agreement page is displayed.
8. On the End User License Agreement page, read the agreement and click Agree to continue with the upgrade validations.
If you click Disagree, the Upgrade Cancel Confirmation dialog is displayed to confirm the upgrade cancellation.
9. On the Validation Progress page, the software verifies the requirements for performing the upgrade.
NOTE: If the UI does not auto-redirect to the Validation Progress page, verify that port 9443 is open.
After you ensure port 9443 is open, you can access the Upgrade UI from https://
<ACM_FQDN_OR_IP_ADDRESS>:9443/dataprotection-upgrade
The system validates the following:
● Validates the connection to all components.
● Validates if Avamar services are running.
● Validates to ensure that no backup jobs are running on Avamar.
● Validates if the DD capacity used is less than 99%.
● Avamar Checkpoint validation
● Validates if the vCSA root account password is expired.
● Validates if the vCSA administrator and root user account passwords are synchronized.
10. If one or more validations fail, perform corrective actions and then re-validate to ensure the appliance is ready for the
upgrade.
11. After all the validations succeed, click Upgrade.
A confirmation pop-up dialog appears. Acknowledge the message and continue with the upgrade.
The Upgrade Progress page displays the upgrade progress. The process takes several minutes.
12. Optional: After the upgrade process completes, click Download Logs to collect the logs.
13. Click Finish to complete the upgrade operation.
A pop-up message appears stating that the ACM server will restart. Acknowledge the message and continue with the
restart. The ACM performs post-upgrade cleanup activities after the restart.
NOTE: After clicking the Finish button, it is only the ACM server VM that restarts. There is only one ESXi server in the
DP4400 appliance. The ESXi server restarts along with all the server VMs hosted on it after clicking the Finish button.
The DP4400 appliance takes approximately 45 minutes to start up.
14. Once the ACM server comes up, close the existing browser window and open the ACM UI in a new browser window and
login to the ACM UI.
15. Verify that all the components started up and that there are no errors displayed on the ACM Dashboard.

NOTE: Refer the Troubleshooting component software upgrades section in the Dell EMC PowerProtect Installation
Guide if you encounter any issues.
Results
The following components are updated:
● Backup Server (Avamar)
● IDPA System Manager (Data Protection Central)
● Reporting and Analytics (Data Protection Advisor)
● Search
● Protection Storage (Data Domain)
● ACM
● VCSA (vCenter Server Appliance)
● Compute nodes (ESXi)
The dashboard with all the products and their upgraded versions are displayed along with the newly configured ACM. If the
upgrade process does not complete as expected, see Troubleshooting component software upgrades in the PowerProtect
Product Guide.
If the upgrade for any component fails, then the upgrade process is stopped until you troubleshoot and resolve the failure.
However, if there are any noncritical warnings, the upgrade process continues. These warnings must be resolved once the
upgrade process is completed to ensure a trouble-free operation of PowerProtect.
Upgrade Avamar external proxy servers

You must upgrade the Avamar proxy servers deployed in your environment (except the one deployed in the PowerProtect).
Prerequisites
Make sure that any Avamar version upgrade activity has completed and that no VMware backup or restore is in progress.
Upgrading the Avamar proxy servers using the Proxy Deployment Manager will only work if the proxies were previously deployed
using Proxy Deployment Manager.
About this task

Perform the following steps using the Proxy Deployment Manager to upgrade the Avamar proxy servers deployed in your
environment. You must upgrade the Avamar proxy servers before you apply hotfix 324867 on the internal Avamar proxy server
and install the Avamar Security Patch Rollup for SuSE Linux Enterprise Server.
Steps
1. Log in to the Avamar administrator and select VMware to access the Proxy Deployment Manager.

2. Select the correct vCenter from choose a vCenter: and click Create Recommendation.
3. Once the recommendation has been created, the Proxy that needs to be upgraded is shown with an upward arrow, as shown
in the following screenshot. Click Apply.

4. Confirm the upgrade by clicking Continue.
5. The Proxy Deployment Manager contacts vCenter in the background and upgrades the proxy.

6. Verify that the upgraded proxy is deployed in vCenter.
Upgrade Avamar backup clients

You must upgrade the Avamar backup clients deployed in your environment. See the Dell EMC Avamar Backup Clients User
Guide for details on how to upgrade specific backup clients.
Upgrade Postrequisites
After you have successfully completed the upgrade procedure, ensure that you are aware/perform the following:
● To save the log files from the upgrade process, click Download logs when the upgrade is complete. When you have
finished, click Finish.
● Close the browser and start a new browser session before you relogin to ACM.

● Creating the Security Officer user account on Protection Storage (Data Domain) system is optional. However, it is
recommended to create this user account. For more information about creating the Security Officer user account, see
Data Domain Product Security Guide.
● The Upgrading proxies section of the Avamar for VMware User Guide provides instructions for upgrading the Avamar
proxies. The upgrade must be performed on each Avamar proxy in the environment.
○ NOTE: Verify if the old Avamar proxy VMs still exist in your vCenter, and if they do, delete them from your vCenter
after they are successfully replaced by the upgraded Avamar proxy VMs. To completely delete the old Avamar proxy
VMs, click the Delete from disk option.
● If the upgrade operation fails and if you attempt to upgrade again after two or three days using the Retry button, the
upgrade operation fails with a message No validated checkpoint found. For more information on this, see the
Knowledge Base article 535533.
Upgrade CDRA manually

This section provides information on how to upgrade CDRA manually only if CDRA is integrated with CDRS.
If your existing CDRA is not configured to communicate with CDRS, then your CDRA instance is replaced with the CDRA
that is bundled within the PowerProtect release package. However, if your existing CDRA is configured to communicate with
CDRS, then the PowerProtect release package does not upgrade the CDRA. You must manually upgrade the CDRA after the
PowerProtect is upgraded, using the PowerProtect user interface by first upgrading the CDRS, which in turn notifies you to
upgrade the appropriate CDRA version.
NOTE: For more information about the CDRA compatibility for various PowerProtect versions, see the PowerProtect
Software Compatibility Guide.
NOTE: For detailed information about how to upgrade CDRA/CDRS, see the Upgrading the CDRS and CDRAs chapter in
the Dell EMC Cloud Disaster Recovery Installation and Administration Guide.
Upgrading the CDRS

To upgrade the CDRA/CDRS to PowerProtect 2.6.1, perform the following steps:
Prerequisites
Download the upgrade package (CDRS or CDRA, or both) from the Dell EMC Support site.
Ensure that there is no rapid recovery process running.
Steps
1. From the CDRS System menu option, select Upgrades.
NOTE: If a disaster recovery operation is in progress, the upgrade process is disabled.
2. Click Upgrade Cloud DR Server.

3. In the Cloud DR Server Upgrade dialog box, click Upgrade.
Expect a short downtime during the upgrade while the CDRS restarts. You cannot perform disaster recovery operations until
the upgrade completes, and you restart the browser.
4. Restart the browser and log in to the CDRS interface.
Upgrading the CDRA

To upgrade the CDRA/CDRS to PowerProtect 2.6.1, perform the following steps:
Prerequisites
Download the upgrade package (CDRA or CDRS, or both) from the Dell EMC Support site.
Ensure that there is no rapid recovery process running.

Steps
1. From the CDRA System menu option, select Upgrades.
The Upgrades page displays and provides information about the current version and upgrade status of the CDRA.
2. Click Upgrade Cloud DR Add-on.
The CDRA is upgraded to the new version. A short downtime is possible during upgrade while the CDRA restarts. At the end
of the upgrade process, the CDRA login page appears.
3. Restart the browser and log in to the CDRA interface.
Troubleshooting component software upgrades

You can troubleshoot the upgrade failures using the different options available.
Retry upgrade process

When there is an upgrade failure for a component, the progress bar is displayed in red and you can see the RETRY and
DOWNLOAD LOGS buttons. To retry the upgrade again, click the RETRY button.
Alternatively, you can click DOWNLOAD LOGS to download the logfiles.
Avamar
About this task
If the Backup Server (Avamar) upgrade fails while upgrading the PowerProtect appliance software, and if you retry the Backup
Server upgrade from the IDPA Upgrade Progress page after 24 hours of failure, then the Avamar upgrade may fail during
the RETRY operation, with a message Validated checkpoint not found. You must manually resolve this issue by
performing the following steps.
Steps
1. On the IDPA Upgrade Progress page, in the Backup Server panel, click Rollback.
Performing a rollback operation ensures that the Backup Server system is back to the last known good state.
2. Create a checkpoint on the Backup Server. To create a checkpoint on the Avamar Server, see Checks on Avamar Virtual
Edition (AVE) on page 43.
3. Once a valid checkpoint is created, connect to the vCenter Server UI using https://<vCenter Server IP
address>.
4. Log in using root credentials.
5. From the Hosts and Clusters menu, in the left pane, navigate and locate the AVE VM.
6. Right-click the AVE VM, select Power, and select Shut Down Guest OS.
7. Right-click the AVE VM again, click Snapshots, and click Manage Snapshots.
8. In the Manage Snapshots window, if a snapshot named BeforeUpgrade exists, delete it.
9. Create a new snapshot named BeforeUpgrade.
10. After the snapshot is successfully created, click Done.
11. Power on the AVE VM. Right-click the AVE VM, select Power, and click Power On.
12. After the AVE VM is powered up, use an SSH client to connect to the AVE server as the admin user.
13. Start all AVE services.
dpnctl start all
14. Stop the Backup Scheduler service.
dpnctl stop scheduler
15. Connect to the ACM Upgrade Progress Page and click RETRY to retry the AVE upgrade.
If the failure persists:
a. Manually upgrade AVE using the Avamar Installation Manager.
b. After the AVE is successfully upgraded, connect to the ACM Upgrade Progress Page, and select the Troubleshooting
(Support only) checkbox at the top. The Sync button is now available in the Backup Server panel.

c. Click the Sync button to continue with the upgrade of the other components.
vCenter
In case if the vCenter is rebooted when any of the component product upgrade is in progress, then the upgrade process stops.
You must wait until the services on the vCenter server are up and running, and then attempt a retry of the upgrade for that
component.
To verify that the vCenter server services are up and running, try logging into the vSphere client console. A successful login
indicates that the services on the vCenter server are started.
Rollback is Successful
PowerProtect is rolled back to its previous state.
No manual action is required from your side. You can login to dashboard to ensure that all the services are up and running.
Optionally, after analyzing the logs, if you find any issues with the upgrade, you can go to upgrade once again.
You can download the logs from the upgrade progress user interface. Alternatively, you can also retrieve the logs from /
data01/upgradeLogs directory on the Appliance Configuration Manager.
Rollback Failed
If the PowerProtect rollback fails during the upgrade procedure, you need to perform the following manual steps.
About this task

Many of these steps are most likely completed by the PowerProtect upgrade workflow as PowerProtect upgrade does not stop
operations if an error is encountered.
Steps
1. Check for all the products in VMware vCenter to ensure that there is no snapshot by the name BeforeUpgrade. If the
BeforeUpgrade snapshot exists, you must delete that snapshot. To delete the BeforeUpgrade VMware vCenter snapshots
from all the components, perform the following steps on each of the component where BeforeUpgrade snapshot exists:
● Avamar Proxy:
a. Revert to the snapshot and then delete the snapshot.
● AVE Server:
a. Shut down the AVE VM.
b. Revert to the snapshot and delete the snapshot.
c. Change all the data disks to independent-persistent.
d. Power on the AVE VM to verify if all the AVE services are up and running.
● DPA VMs:
a. Revert to snapshots of all DPA VMs such as DPA Datastore Server, DPA Application Server, DPA Agent, DPA DD
Processor Tool, and so on.
b. Delete the snapshots.
c. Log in using putty to the DPA Datastore Server and note down the datastore directory in /data01 with the name
datastore-xxxx
d. Execute following command:
/opt/emc/dpa/services/bin/dpa.sh datastore import /data01/datastore-*/
e. Log in to the DPA Application Server using putty and run the following command:
/opt/emc/dpa/services/bin/dpa.sh service start
f. Verify that the services are correctly starting by going to https://dpaAppServerIp:9002
● DPS VMs:
a. Stop the DPS Services.
b. Shutdown or power off the DPS Vapp.
c. Revert to the snapshot BeforeUpgrade.

d. Delete the snapshot BeforeUpgrade from all DPS VMs.
e. Change hard disk 3 mode to independent-persistent for all the DPS VMs.
f. Power on the DPS VApp.
g. Ensure that all DPS Services are up and running.
● DPS Index Primary Node Services:
a. Log in to DPS Primary Index Node using putty.
b. Execute the following commands:
● service dpworker status
● service unicorn status
● service elasticsearch status
● Data Domain: If there is a failure in the Data Domain upgrade, contact Customer Support.
2. Start the Avamar scheduler service by logging in to Avamar using putty and running the dpnctl start scheduler
command:
3. Uninstall the dataprotection-upgrade RPM from ACM
To uninstall the dataprotection-upgrade RPM, on ACM, run the rpm -qa | grep dataprotection-upgrade
command to check if any dataprotection-upgrade RPM is present. If it is present, note down its name and uninstall it
by using the –e dataprotection-upgrade-rpm-name command.
4. Use create tar command to create a tarball of /data01/tmp/patch/logs folder and save it to the /data01/
upgradeLogs folder.
5. Restart the tomcat service on ACM using following commands:
● service dataprotection_webapp stop
● service dataprotection_webapp start
Backup server upgrade error

This section describes the troubleshooting steps for backup server upgrade failure.
About this task

The backup server upgrade may fail with the following error: Failed to start Backup Server upgrade because
the required version of avi-cli is not installed on the Appliance Configuration Manager.
Perform the following steps on the ACM VM to resolve the error.
Steps
1. Connect to the ACM as a root user using a SSH client.
2. Verify that the following binaries are installed:
rpm -qa emc-avi-cli emc-ruby emc-tools
3. Note down the versions of the binaries.
4. Go to the folder:
cd /data01/tmp/patch/products/ACM/AVICLI/binaries/
5. List the files in the folder:
ls
This folder contains the relevant versions of the rpms required to install avi-cli.
6. Verify the version numbers of the binaries installed on the ACM VM from Step 3 with the corresponding versions of the files
in the current folder.
If the rpm version values are the same as the ones in the current folder, then contact Support for assistance.
If the rpm version values are different than the ones in the current folder, then continue with the following steps to update
the binaries from the current folder.
7. Uninstall the existing outdated binaries:

a. Uninstall the existing emc-avi-cli binary.
rpm -e emc-avi-cli

b. Uninstall the existing emc-ruby binary.
rpm -e emc-ruby
c. Uninstall the existing emc-tools binary.
rpm -e emc-tools
8. Install the relevant rpms from the current folder:
a. Install the required emc-tools rpm.
rpm -ivh /data01/tmp/patch/products/ACM/AVICLI/binaries/emc-tools.rpm --force
b. Install the required emc-ruby rpm.
rpm -ivh /data01/tmp/patch/products/ACM/AVICLI/binaries/emc-ruby.rpm --force
c. Install the required emc-avi-cli rpm.
rpm -ivh /data01/tmp/patch/products/ACM/AVICLI/binaries/emc-avi-cli.rpm --force
Upgrade log files

If both the upgrade process and snapshot recovery fail, collect the log files in the following locations and contact Customer
Support:
● Log files for the most recent upgrade process are located in /data01/tmp/patch/logs and include the following:
○ ACM—acm_upgrade.log
○ Data Domain—dd_precheck.log, dd_upgrade.log
○ DP Advisor—dpa_upgrade.log
○ Search—dps_upgrade.log
○ AVE—AvamarServerUpgrade.log, av_upgrade.log
○ IDPA System Manager—dpc_deploy_config.log
○ Common logs for all components—appLevelUpgrade.log, detailed_upgrade_logs.log
● Log files for past upgrades are archived in /data01/upgradeLogs, in the format
idpa_upgradeLogs<date>_<time>.tgz.
Log file details

The following log file content is extraneous and can be ignored:
In the log file /data01/tmp/patch/logs/appLevelUpgrade.log
RUNNING,26,Please Contact Dell/EMC Support to upgrade Physical Backup server and NDMP
RUNNING,74,Performing post upgrade operations
RUNNING,74,Please login again to Appliance Management deployment and configuration page
In the log file /data01/tmp/patch/logs/detailed_upgrade_logs.log
ERROR : Couldn't upgrade avi-cli to 0.2.1-44.

Performing post upgrade operations
Check if the dataprotection-upgrade package deployed successfully on tomcat.
Dataprotection-upgrade package deployed successfully.
Old Version , New Version

Updateing Appliance status for Old Version .., New Version ..
Input oldVersion .., newVersion ..
No implementation for given version ..
Appliance status updated Failed.
In the log file /data01/tmp/patch/logs/acm_upgrade.log
Error: Could not open input file: /usr/java/jdk1.8.0_131/lib/tools.pack

plugin.jar...
Error: Could not open input file: /usr/java/jdk1.8.0_131/jre/lib/plugin.pack
javaws.jar...
Error: Could not open input file: /usr/java/jdk1.8.0_131/jre/lib/javaws.pack
deploy.jar...
Error: Could not open input file: /usr/java/jdk1.8.0_131/jre/lib/deploy.pack

rt.jar...
Error: Could not open input file: /usr/java/jdk1.8.0_131/jre/lib/rt.pack
jsse.jar...
Error: Could not open input file: /usr/java/jdk1.8.0_131/jre/lib/jsse.pack
charsets.jar...
Error: Could not open input file: /usr/java/jdk1.8.0_131/jre/lib/charsets.pack
localedata.jar...
Error: Could not open input file: /usr/java/jdk1.8.0_131/jre/lib/ext/localedata.pack
warning: file /usr/local/dataprotection/var/configmgr/server_data/config/

InfrastructureComponents_Template.xml: remove failed: No such file or directory

9
Manage IDPA System Manager post
PowerProtect installation
After you successfully install PowerProtect, the system opens IDPA System Manager in a new browser window or tab. You can
perform a VM backup, restore a VM backup and generate reports for Avamar and Data Domain using the IDPA System Manager.
This section contains the following topics:
Topics:
• Performing a VM backup
• Restoring a VM backup
• Generating reports
Performing a VM backup
This section provides you information on how to backup a VMware client using the IDPA System Manager UI.
VM backups overview
As soon as your environment is up and running, you can follow the steps in this section to backup a VMware client.
If you are using Avamar for the first time, the section includes preparatory tasks, such as defining vCenter and VMware clients
and deploying an Avamar proxy.
The entire process is organized into the following procedures:
● Define vCenter and VMware clients.
● Deploy the Avamar proxy.
● Create and run the backup policy
Further information about Avamar backups is available in the Avamar documentation, including the Avamar Administration Guide
and the Avamar Backup Clients User Guide.
Define vCenter and VMware clients

This procedure shows you how to create the vCenter and VM clients, and add a dataset to the VM client.
About this task

To create the vCenter and VM clients and add a dataset to the VM client, perform the following actions.
Steps
1. Open a browser and enter https://<ACM IP address>:8543 to access the ACM UI.
2. Click IDPA System Manager Web UI and log in to the System Manager.
The IDPA System Manager dashboard page is displayed.
3. Click System Management on the left pane to display the System Manager page.
4. Click the vertical ellipsis for the Avamar-Backup Server and select Avamar Restore.
The Asset Management page on the Avamar UI is displayed.
5. To add the vCenter client, perform the following actions.
a. Click the vertical ellipsis beside ADD CLIENT and select Add VMware vCenter.
60 Manage IDPA System Manager post PowerProtect installation

NOTE: Ensure that you are on the root domain.
The New vCenter Client window is displayed.

b. Select or enter the details that are required in the fields to create a vCenter client using the following table. Click Next
to continue to the next page.
Table 9. Adding vCenter Clients

Page Field Description
Client Information Client Type Select VMware vCenter.
New Client Name or IP Client name or IP address.
Client Domain Domain name.
vCenter Information User Name The user name of the vCenter server
administrator.
Password The administrator password.
Verify Password Enter the same password to verify if they
are identical.
Port The vCenter HTTPS port number.
Advanced Auto Discovery Select the check box to enable the
● Enable Dynamic VM import by options. This an optional field.
rule NOTE: The Enable Changed Block
● Enable Changed Block Tracking Tracking checkbox is enable only
when you select Enable Dynamic VM
import by rule.
Optional Information Optional Information Enter the relevant information in the

● Contact fields. All fields are optional for this task.
● Phone
● Email
● Location
c. Click ADD on the Summary page. Then refresh the screen to verify the new vCenter client.
d. Click OK on the Finish page.
The vCenter client is added and the Asset Management page is displayed
NOTE: Refresh the page to verify if the vCenter client is added.
6. To add the VMware client, perform the following actions.

a. In the Domain pane, expand the new vCenter client and click VirtualMachines.
b. In the Asset Management pane, click ADD CLIENT.
The Select VMware Entity page is displayed.
c. On the Select VMware Entity window, expand the host or cluster tree and select the cluster hosting the VM that you
want to back up.
NOTE: To view the host or cluster details toggle the Host/Cluster button.
The VMs assigned to the cluster are displayed in the right panel.
d. In the right panel, click the + icon to select the VM you want to back up and click YES.
7. To add the dataset perform the following actions.
a. Click Setting under the Adminstration section on the left pane.
NOTE: Ensure that you are on the root domain.
b. Click the Dataset tab in the Setting pane. and then click the plus sign (+) to display the Create DataSet window.
c. Click + ADD.
The Create DataSet window is displayed.
d. In the Dataset Name field, enter the dataset name.
Manage IDPA System Manager post PowerProtect installation 61

e. Select Windows VMware Image from the list of Plugins available.
NOTE: You can select a different plugin from the list of plugins available. The setting options and source data are
different for the different plugins.
The Windows VMware Image options are displayed under the Options tab.
f. Select the Index VMware Image Backups checkbox.
g. Click Source Data tab to view the setting options.
The options available in the source data tab allows you to backup the source data based on your selection.
h. Click Submit.
The application displays Dataset created successfully message on the Avamar dashboard page.
NOTE: Indexing is used for restoring specific files and is optional for backing up entire VMs. Selecting it here will allow
you to restore specific files as described in Restore specific files.

Deploy an Avamar proxy
This section provides you information about how to deploy the Avamar proxy.
About this task

Deploy the Avamar proxy on each vCenter that you intend to protect.
Steps
1. Open a browser and enter https://<ACM IP address>:8543 to access the ACM UI.
3. Click System Management on the left pane to display the System Manager page.
4. Click the vertical ellipsis for the Avamar-Backup Server and select Avamar Proxy Deployment.
The Proxy Management page on the Avamar UI is displayed.
5. In the right pane, click the vertical ellipsis in front of the PowerProtect Backup Server and select Avamar Proxy
Deployment.
6. In the Config section, perform the following actions. Data Change Rate, and Backup Window. Then select the checkbox.
a. Select the vCenter that you added. For more information about adding a vCenter, see Define vCenter and VMware
clients
b. Enter the data change rate in the Data Change Rate (%) field.
c. Enter the number of minutes in the Backup Window (minutes) field.
d. Select the Protect Virtual Machines on Local Storage checkbox.
7. Click CREATE RECOMMENDATION.
The Recommendations section displays the proposed new proxies under each host.
8. Expand the listings in the Recommendations section and select New proxy under the ESXi server host.
9. Click .
The Proxy window is displayed.
a. Enter the proxy hostname in the Name field.
b. Select an Avamar server Domain where this proxy resides.
c. Enter the IP address in the IP field.
d. Select a datastore from the Datastore list.
e. Select a network from the Network list.
f. Enter the server name or IP address in the DNS field.
g. Enter the network gateway IP address in the Gateway field.
h. Enter the network mask in the Netmask field.
i. Enter the IP address in the NTP field.
j. Click SAVE.
10. Click on the Recommendations section to deploy the proxy.
The proxy deployment is displayed in the lower panel.

Create and run the backup policy
This section provides you information about how to create a backup policy. The backup policy is created to protect the VMware
client.
About this task

To create the policy, perform the following actions.
Steps
2. Click System Management on the left pane to display the System Managerpage.
3. Click the vertical ellipsis for the Avamar-Backup Server and select Manage Policies.
The System Management > Manage Policies page is displayed.
4. In the Manage Policies page, click plus (+).
The Add policy window is displayed.
5. Select or enter the details that are required in the fields to create a new backup policy using the following table. Click Next
to continue to the next page.
Table 10. Adding Policies

Page Field Description
Information Name The policy name.
Domain Accept the default entry.
Enabled Click to enable the policy.
Dataset Select VMware Image Dataset.
Schedule Select Daily Schedule.
Retention Select Default Retention.
Clients (Optional) Available clients Select the VM client defined earlier in this guide.
Proxies (Optional) Available proxies Select the proxy defined earlier in this guide.
6. Click Finish.
The new policy is displayed in the policy list.
7. To run the policy, select the policy from the list and click BACKUP NOW.
8. Monitor the policy by clicking Systems under Job Activities in the left pane.
Restoring a VM backup
This section describes the three different methods of restoring the VM backup uisng the IDPA System Manager UI.
● Restore a Virtual Machine on page 64
● Restore using Instant Access on page 66
● Restore specific files on page 67
Restore a Virtual Machine

This section provides you information about the basic VM restore procedure.
Prerequisites
A backup of the VM must exist in order to perform a restore.

About this task
To restore a virtual machine, perform the following actions.
Steps
4. Expand the vCenter that you added in the Domain pane and select Virtual Machines to display the VM clients belonging to
that vCenter.
5. In the client list, select the VM client that you want to restore.
6. Click VIEW MORE to view the list of all the backups.
7. Select the latest backup from the list and click RESTORE.
The Select Restore Content window is displayed.
8. Select the content that you want to restore and click NEXT.
The Restore window is displayed.
9. Select or enter the details that are required in the fields to restore from a virtual machine using the following table. Click
Next to continue to the next page.
Use following table to complete each wizard page, clicking NEXT to proceed to the next page.
Table 11. Restoring from a VM

Wizard page Field Description
Basic Config Destination Select Restore to new Virtual Machine.
Post Restore Options Select Do not power on VM after restore.
Proxy Select Automatic.
Use CBT to increase Select the checkbox to increase the performance using CBT.
performance
Advanced Config vCenter Select the IP address of the vCenter to manage the restored VM.
VM Name Enter a name for the restored VM.
Location Expand the tree and select the VM where you want to perform the
restore.
Host/Cluster Expand the tree and select the ESXi host/cluster.
Resource Pool Expand the tree and select the resource pool.
Datastore Select the destination ESX datastore.
NOTE: The options in the Restore wizard change based on the options you select during the restore procedure.
10. On the Summary page, review your entries and click FINISH to perform the restore.
NOTE: To monitor the results, click Activity in the Avamar UI navigation tree and view the processing results on the
right Activity pane.

Restore using Instant Access
You can use the instant access feature to perform near real-time recovery of a VM. Avamar mounts a VM backup image on a
NFS share in your backup environment and powers on the VM so that it can be managed in vCenter.
About this task

To restore a virtual machine using the instant access feature, perform the following actions.
NOTE: After you complete these steps, you should move the VM from your backup environment to the production system
Steps
4. Expand the vCenter that you added in the Domain pane and select Virtual Machines to display the VM clients belonging to
that vCenter.
5. In the client list, select the VM client that you want to restore.
6. Click RESTORE.
The Quick Restore dialog box is displayed.
NOTE: The quick restore feature restores the latest backup.
7. Click OK.
The Select Restore Content window is displayed.
8. Select the content that you want to restore and click NEXT.
The Restore window is displayed.
9. Select or enter the details that are required in the fields to restore from a virtual machine using the following table. Click
NEXT to continue to the next page.
Use following table to complete each wizard page, clicking NEXT to proceed to the next page.
Table 12. Restore Using Instant Access

Wizard page Field Description
Basic Config Destination Select Instant Access.
Proxy Select Automatic.
Advanced Config vCenter Select the IP address of the vCenter to manage the restored VM.
VM Name Enter a name for the restored VM.
Location Expand the tree and select the VM where you want to perform the
restore.
Host/Cluster Expand the tree and select the ESXi host/cluster.
Resource Pool Expand the tree and select the resource pool.
NOTE: The options in the Restore wizard change based on the options you select during the restore procedure.
10. On the Summary page, review your entries and click FINISH to perform the restore.
NOTE: To monitor the results, click Activity in the Avamar UI navigation tree and view the processing results on the
right Activity pane.

Restore specific files
You can restore specific files directly from search results.
Prerequisites
Ensure that Avamar is indexing your backed-up VM images. For instructions, see the Dell EMC Search Administration Guide.
About this task

In this procedure, the Search application is used to search for and restore specific files in a VM backup. To restore specific files,
perform the following actions.
Steps
2. Click Search and Recovery on the left pane.
The application opens the Search page.
3. In the Search field, enter a query to retrieve specific files and click Search. (You can also use filter options to refine the
search results.)
The application displays the list of files based on your query.
4. Select one or more files that you want to restore and click Restore to display the Restore dialog.
5. Select or enter the details that are required in the fields to restore from the search results using the following table. Click
Next to continue to the next page.
Table 13. Restore Specific Files

Field Description
Original path / Destination path Select the restore location. When applicable, click Overwrite and
select Restore Access Control List to protect the file with the
same access control list settings
Client When Destination Path is selected, select the client where you
want to save the file.
Restore to Specify the path where you want to save the file.
Username / Password Specify the VM user name and password.
6. Click Restore to initiate the restore process.

7. To monitor the results, click View Jobs under the Search field, refreshing the screen to view ongoing actions.
Generating reports
This section provides information on how to generate reports using the IDPA System Manager UI.
Generate a report
This feature enables you to generate reports for Avamar and Data Domain systems. There are 11 preconfigured reports that you
can generate.
About this task

For more information about these reports, see the Dell EMC Data Protection Advisor Product Guide.
If you want to generate your own reports, see the Dell EMC Data Protection Custom Report Guide.
Steps

2. Click Reports on the left pane.
On the right pane, each type of report is displayed. The pane displays both Avamar and Data Domain reports. You can select
the Avamar and Data Domain, or both check boxes in the upper right to filter the reports shown.
The report period for each report is displayed in the lower right. The default report period is the previous week, but you can
change the time period by clicking LAST WEEK list and selecting a different period.
3. To generate a report, click RUN REPORT under the report name.
PowerProtect generates the report and displays the View Last Report with the timestamp on completion.
4. Click View Last Report to display the report in a new window.

10
Additional resources
Topics:
• PowerProtect training resources
PowerProtect training resources

Video walkthroughs, demonstrations, and explanations of product features are available online.
You can obtain additional PowerProtect training and information at https://education.emc.com.
Additional resources 69
Index
A N
ACM manual settings 31 Network configuration 25
add dataset 60 Network Validation Tool 9
audience 6 NVT 9
Avamar proxy 63
Avamar proxy server 50
P
B Postrequisites 53
power on 22
backup policy 64 Preinstall IDPA 21
Preinstallation 9
Prerequisites 47
C Proxy Deployment 63
Capacity 36, 39
CDRA 54 R
CDRS 54
clients 60 Reports 67
Create backup policy 64 requirements 9
Crontab 33 Restore 64, 66, 67
restore specific files 67
Restore using instanty access 66
D Restore VM 64, 66, 67
Deploy IDPA 27 Retry installation 29
Deploy IDPA Appliances 27 Rollback installation 30
Deploy proxy 63
DP Advisor 33 S
Scope 6
E Secure Remote Services 27
Expansion 36, 39 separate backup network 32
Separate management network 31
specific files 67
G Storage 36, 39
Storage expansion 36, 39
Generate Reports 67
System Manager 64
H T
Health error 30
Troubleshoot 30
Health tab 30
Troubleshoot health 30
I U
IDPA 64
upgrade 50
Install IDPA 24, 27
Upgrade
Instant access 66
critical components 47
non-critical components 47
L retry 55
Upgrade Avamar backup clients 53
License activation 34 Upgrade CDRA 54
Upgrade CDRS 54
M Upgrade DP4400 47
Manage Policies 64
V
vCenter 60
Virtual Machine 64, 66, 67
VMware 60

Dell Emc Powerprotect DP Series Appliance: Installation Guide For Dp4400

Uploaded by

Copyright:

Available Formats

Dell Emc Powerprotect DP Series Appliance: Installation Guide For Dp4400

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Dell Emc Powerprotect DP Series Appliance: Installation Guide For Dp4400

Uploaded by

Copyright:

Available Formats

Dell EMC PowerProtect DP series appliance

Installation Guide for DP4400

Chapter 2: Preinstallation requirements........................................................................................ 9

Chapter 3: Install the PowerProtect Appliance.............................................................................16

Chapter 4: Install PowerProtect DP4400 Software...................................................................... 24

Chapter 6: Storage expansion for DP4400................................................................................... 36

Chapter 7: Update the PowerProtect Firmware ...........................................................................41

Chapter 8: Upgrade the PowerProtect software ......................................................................... 47

Chapter 9: Manage IDPA System Manager post PowerProtect installation ................................. 60

Chapter 10: Additional resources................................................................................................. 69

Document scope and audience

Reporting and Analytics

Table 1. Configuration for PowerProtect Model

Table 2. Configuration options for the DP4400 model

Install Network Validation Tool

Prepare the site and unpack the system

Type of switch NIC Type Speed Cable Required

10 Gb SFP+ SFP+ (optical) 10 Gb LC-to-LC with SR optical

1 Gb or 10 Gb RJ45 SFP+ with 1GbBASE-T GBIC 1 Gb UTP with RJ45 (Cat5e or

1 Gb or 10 Gb RJ45 10 GbBASE-T (RJ45) 1 Gb or 10 Gb (depending on UTP/STP with RJ45 (Cat6a

● Anti-static wrist strap and conductive foam pad

About this task

Table 3. IP address range assignments

Table 4. Management IP address range assignments with Dedicated Backup Network

Table 5. Backup IP address range assignments with Dedicated Backup Network

Data and control flow

Figure 1. Data and control flow

1. User initiates the backup request from backup server UI.

Figure 2. DP4400 network and iDRAC connections

Table 6. Management network IP address requirements for the DP4400

Table 7. Backup network IP address requirements for the DP4400

Online Support credentials

About this task

Install the rails

About this task

16 Install the PowerProtect Appliance

2. Fully extend the rear sliding bracket of the rail.

Figure 3. Installing the rear end of the rail

Figure 4. Installing the front end of the rail

6. Repeat the preceding steps to install the right rail assembly.

Install the PowerProtect Appliance 17

About this task

Figure 5. Installing screws

Install the system in the cabinet

About this task

18 Install the PowerProtect Appliance

Figure 7. Install the system in the rails

Install the PowerProtect Appliance 19

Install the bezel

Figure 9. Installing the front bezel

20 Install the PowerProtect Appliance

About this task

Figure 10. DP4400 network and iDRAC connections

Install the PowerProtect Appliance 21

Table 8. DP4400 port types

See KB Article 539946 for a detailed information on this.

Connect the power cables and power on

About this task

22 Install the PowerProtect Appliance