Managed Backup Services - Service Provider

Overview Server Setup On boarding Tenants Additional Resources

Installing Components for Server Setup

The server side setup will involve installing and configuring the following components:

CommServe

The CommServe will be installed inside your secure network and used to control all operations of the CommCell.

Web Proxy

The Web Proxy will be installed outside of your network in the DMZ and be exposed to external users. It will provide them access to the Web Console to allow users to browse and restore backup data and optionally the Java Console for more advanced configuration access if you choose to provide it.

Media Agent

One Media Agent installed locally to the CommServe will be required to provide DR backup for the CommServe. If your service also involves providing the backup storage, additional media agents and libraries configured locally with the CommServe may be needed.

1. Install the following within a secure area inside your network:
  • CommServe
  • Web Server
  • MediaAgent
 
  • While installing Web Server, Web Client automatically gets selected, make sure to clear Web Client as it is not required to be installed on the CommServe computer.
  • After installing the MediaAgent, make sure you have Libraries configured for Disaster Recovery Backup.
See Install the CommServe, Install the Web Server and Install the MediaAgent for step-by-step instructions.
2. Configure a computer as Calypso proxy in a Demilitarized Zone (DMZ) and install the following:
  • Windows File System iDataAgent
  • Web Client
  • CommCell Console

Note the value of Tomcat port while installing the Web Client (step 11) as it will be required while configuring to use the Web Console through the Proxy.

 See Operating Through a DMZ Using Calypso Proxy for step-by-step instructions.

See Install the Windows File System iDataAgent, Install the Web Client and Install the CommCell Console for step-by-step instructions.

 

Configuring the CommServe

1. Perform the following:
  • Enable Require Authentication for Agent Installation.
  • Disable Automatically add new users to the “View All” group.
  1. Right click the CommServe name in the CommCell Console, and select Properties.
  2. Select the CommCell Properties (Security) and do the following:
    • Select Require Authentication for Agent Installation checkbox.
    • Clear Automatically add new users to the “View All” group checkbox.
  3. Click OK.
2.
  • Create a client computer group named WaitingRoom.

    Right click the client group and disable activity for this group.

  • Create another client computer group named FireWallSettings.
  Configure the same firewall settings on both the WaitingRoom and FireWallSettings client groups to define how computers outside of your network will reach the CommServe.
See Create a Client Computer Group for step-by-step instructions.

Setup firewall configurations for the CommServe and Client Groups:

  • CommServe

    Add the Proxy computer, WaitingRoom group and FireWallSettings group as BLOCKED to the “Incoming connections” tab.

    On the “Outgoing routes” tab add an entry for the WaitingRoom and FireWallSettings client groups.

    Under Route Settings section set Route Type as Via Proxy and select the Proxy computer in the Proxy Settings tab under Remote proxy drop down menu.

  • Client Groups

    Add the Proxy computer and the CommServe as BLOCKED to the Incoming connections tab.

    On the Outgoing routes tab add the CommServe computer.

    Under Route Settings section set Route Type as Via Proxy and select the Proxy computer in the Proxy Settings tab under Remote proxy drop down menu.
3. Enable Provide user with MediaAgent management rights additional capabilities for libraries, data paths, and storage policies option to set additional MediaAgent Management permissions.
  1. From the CommCell Console, select Tools | Control Panel.
  2. Click Media Management.
  3. In the Service Configuration tab, set the value of Provide user with MediaAgent management rights additional capabilities for libraries, data paths, and storage policies as 1.
  4. Click OK.
4. As the CommServe administrator, configure and enable the following as it will be required to run the CommServe on behalf of your Tenants:
  • Storage Policy for Disaster Recovery Backup.
  • Schedule for a Disaster Recovery Backup.
  • E-Mail Settings.
  Tenants will be able to configure things that do not affect ALL users or ALL aspects of the CommCell, hence it is required to configure these settings for the tenants. You can view the differences by logging in as a tenant account equivalent to be aware of what your tenants can and cannot do.
See Creating the Disaster Recovery Backup Storage Policy to create a Storage Policy for a Disaster Recovery Backup.

See Schedule Disaster Recovery Backups to schedule periodic backups for CommServe Disaster Recovery.

See E-Mail Server Configuration to setup internal e-mail server (Exchange, Lotus Notes, etc.) to send e-mails.

Configuring Web and Java Consoles

You setup to use the Web Console or the Java Console or both Java and Web Console.

  Option 1: Configurations for using Web Console and Search Console through the Proxy

Option 2: Configurations for Using Java Console through alternate IIS on the Proxy

Configurations for Using Web Console And Search Console through Proxy

If you wish to access your Web Console and Search Console through Proxy, proceed to steps below, else proceed to Configurations for Java Console.

1. Make sure the Web Client (the proxy) can reach the Web Server (also the CommServe computer) on port 81.
  Port 81 on the CommServe is also the Web Server port on IIS (this is the port selected while installing the Web Server package).

Tomcat Port 8830 on the Web Client is the External port open to the world. This is the port selected while installing the Web Client package as in step2 above.
 
2. In a supported Web Browser open the URL to use Web Console by typing <proxy.domainname.companyname.com>:<installation_port_number>/webconsole in the address line.  

Configurations for Using Java Console through alternate IIS on the Proxy

If you wish to access your Java Console through Proxy, proceed to steps below, else proceed to Configurations for Web Console.

1. Make sure port 8401 is open to the CommServe (also the Web Server) computer for any client using Java Console.  
2. In a supported Web Browser open the URL to use Java Console by typing <proxy.domainname.companyname.com>/console in the address line.  

Report Configurations

Follow the steps below to configure reports to flow through alternate IIS using Web Proxy:

1. Change the IIS configurations in the Control Panel.
  1. From the CommCell Console, select Tools | Control Panel.
  2. Click E-Mail & IIS Configuration.
  3. In the IIS Server tab, select Use Alternate IIS Server and do the following:
    • In the IIS Server Name box, enter the fully qualified domain name of the Web Client (the proxy). You may also provide the IP address of the Web Client computer.
    • In the Alias box, enter the alias name that will be used for the reports.
    • In Software Installation path on IIS Server, enter the path to the reports folder as published through IIS on the Proxy (also the Web Client) computer.

      For example: \\webproxy\C$\Program Files\Bull Calypso\Calypso\Reports\

        Make sure this path is accessible from the CommServe (also the Web Server).
  4. Click OK.

Creating Installation Packages for Tenant Computers

1. Create Custom Install "seed" Package for clients minimally including Windows File System iDataAgent. See Custom Package for step-by-step instructions.
2. During Package creation select the client computer group as WaitingRoom (created in step 2 above) to be joined by the tenant computer once it is installed.