{"id":9527,"date":"2020-05-26T18:20:02","date_gmt":"2020-05-26T08:20:02","guid":{"rendered":"https:\/\/nsrd.info\/blog\/?p=9527"},"modified":"2020-05-26T18:20:06","modified_gmt":"2020-05-26T08:20:06","slug":"using-networker-with-data-domain-retention-lock","status":"publish","type":"post","link":"https:\/\/nsrd.info\/blog\/2020\/05\/26\/using-networker-with-data-domain-retention-lock\/","title":{"rendered":"Using NetWorker with Data Domain Retention Lock"},"content":{"rendered":"\n<p>You know when you&#8217;ve got a secret herb or spice you use in a recipe that turns it from &#8220;this is good&#8221; to &#8220;holy cow this is great!&#8221;? <span id='easy-footnote-1-9527' class='easy-footnote-margin-adjust'><\/span><span class='easy-footnote'><a href='https:\/\/nsrd.info\/blog\/2020\/05\/26\/using-networker-with-data-domain-retention-lock\/#easy-footnote-bottom-1-9527' title='For me, that&amp;#8217;s got to be powdered French Onion soup mix on slow baked lamb.'><sup>1<\/sup><\/a><\/span> Well, I&#8217;ll let you in on a little secret: Data Domain retention lock is like that.<\/p>\n\n\n\n<p>Data Domain is good by itself \u2013&nbsp;but when you bring retention lock into the mix, it&#8217;s just a stellar tool for data immutability within your organisation. Both NetWorker and PowerProtect Data Manager support retention lock straight out of the box, and in this post I&#8217;ll take you through getting it running with NetWorker.<\/p>\n\n\n\n<p>The overview of the process is:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Enable retention lock for your NetWorker Mtree on the Data Domain.<\/li><li>Create Data Domain boost device(s) with retention lock enabled.<\/li><li>Start backing up with retention lock automatically applied to successful savesets.<\/li><li>Whee! (OK, this part is optional, but I do find backup <em>exciting<\/em>.)<\/li><\/ol>\n\n\n\n<p>Now, obviously, enabling retention lock is something you should think very carefully about. So I&#8217;m going to run through the steps, but if you want to work with retention lock, please be sure you read the NetWorker and Data Domain documentation about it before you configure it.<\/p>\n\n\n\n<p>Before I get started \u2013\u00a0the second edition of <strong>Data Protection: Ensuring Data Availability<\/strong> has been released. <em><a aria-label=\"You can check out what's new here (opens in a new tab)\" href=\"https:\/\/nsrd.info\/blog\/2020\/05\/12\/data-protection-ensuring-data-availability-2nd-edition\/\" target=\"_blank\" rel=\"noreferrer noopener\" class=\"aioseop-link\">You can check out what&#8217;s new here<\/a><\/em>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">On the Data Domain<\/h2>\n\n\n\n<p>On your Data Domain, log into System Manager, then:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Go to Data Management &gt; Mtree<\/li><li>If the first Mtree gets selected and it&#8217;s not your NetWorker Mtree, deselect it.<\/li><li>Find your NetWorker Mtree and select it so the information panels under the Mtree list is populated with its details.<\/li><li>Scroll down in the information panels to the Retention Lock section and click the &#8220;Edit&#8221; button to adjust the settings.<\/li><li>Enable Retention lock in either Governance or Compliance Mode (Governance will be enough for many companies), choose the minimum\/maximum length of time, but leave the use at &#8220;Manual&#8221;, then click OK to apply.<\/li><li>You should then see retention lock enabled.<\/li><\/ol>\n\n\n\n<p>I&#8217;ve encapsulated that process in the gallery below:<\/p>\n\n\n\n<div class=\"wp-block-jetpack-slideshow aligncenter\" data-effect=\"slide\"><div class=\"wp-block-jetpack-slideshow_container swiper-container\"><ul class=\"wp-block-jetpack-slideshow_swiper-wrapper swiper-wrapper\"><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"627\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9503\" data-id=\"9503\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_01-Mtree-View-1024x627.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_01-Mtree-View-1024x627.png 1024w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_01-Mtree-View-300x184.png 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_01-Mtree-View-768x470.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_01-Mtree-View.png 1432w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">Browse to and select the Mtree<\/figcaption><\/figure><\/li><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"629\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9504\" data-id=\"9504\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_02-Mtree-View-Retention-Lock-Disabled-1024x629.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_02-Mtree-View-Retention-Lock-Disabled-1024x629.png 1024w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_02-Mtree-View-Retention-Lock-Disabled-300x184.png 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_02-Mtree-View-Retention-Lock-Disabled-768x471.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_02-Mtree-View-Retention-Lock-Disabled.png 1432w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">Scroll down in System Manager and Click to Enable Retention Lock<\/figcaption><\/figure><\/li><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"387\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9505\" data-id=\"9505\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_03-Mtree-Enable-Retention-Lock.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_03-Mtree-Enable-Retention-Lock.png 600w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_03-Mtree-Enable-Retention-Lock-300x194.png 300w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">Turn Retention Lock on and adjust minimum\/maximum, but leave the setting to Manual, then click OK<\/figcaption><\/figure><\/li><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"561\" height=\"188\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9506\" data-id=\"9506\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_04-Mtree-Retention-Lock-Enabled.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_04-Mtree-Retention-Lock-Enabled.png 561w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_04-Mtree-Retention-Lock-Enabled-300x101.png 300w\" sizes=\"(max-width: 561px) 100vw, 561px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">You should see it now enabled<\/figcaption><\/figure><\/li><\/ul><a class=\"wp-block-jetpack-slideshow_button-prev swiper-button-prev swiper-button-white\" role=\"button\"><\/a><a class=\"wp-block-jetpack-slideshow_button-next swiper-button-next swiper-button-white\" role=\"button\"><\/a><a aria-label=\"Pause Slideshow\" class=\"wp-block-jetpack-slideshow_button-pause\" role=\"button\"><\/a><div class=\"wp-block-jetpack-slideshow_pagination swiper-pagination swiper-pagination-white\"><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">In NetWorker<\/h2>\n\n\n\n<p>Now, in my example, I&#8217;ve got a NetWorker server already configured with <em>regular<\/em> Boost devices. I.e., no retention lock. So with the Data Domain now configured for retention lock, I&#8217;ll be adding a new device, and with it a retention lock-enabled pool.<\/p>\n\n\n\n<p><strong>Aside<\/strong>: <br>That&#8217;s the great thing about retention lock: it doesn&#8217;t have to be an &#8220;all or nothing&#8221; approach. Of course, you can use retention lock on all your backups, but if you want to use it on just a subset, you can. You might, for instance, configure a pool for backup testing that has no retention lock, so you can delete those backups whenever you want.<\/p>\n\n\n\n<p>Here&#8217;s a view of the device creation wizard process:<\/p>\n\n\n\n<div class=\"wp-block-jetpack-slideshow aligncenter\" data-effect=\"slide\"><div class=\"wp-block-jetpack-slideshow_container swiper-container\"><ul class=\"wp-block-jetpack-slideshow_swiper-wrapper swiper-wrapper\"><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"716\" height=\"364\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9507\" data-id=\"9507\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_05-New-Device-Wizard-01.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_05-New-Device-Wizard-01.png 716w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_05-New-Device-Wizard-01-300x153.png 300w\" sizes=\"(max-width: 716px) 100vw, 716px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">New device wizard<\/figcaption><\/figure><\/li><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"557\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9508\" data-id=\"9508\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_06-New-Devices-Wizard-02-1024x557.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_06-New-Devices-Wizard-02-1024x557.png 1024w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_06-New-Devices-Wizard-02-300x163.png 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_06-New-Devices-Wizard-02-768x418.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_06-New-Devices-Wizard-02.png 1052w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">Make it a Data Domain Boost device<\/figcaption><\/figure><\/li><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"432\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9509\" data-id=\"9509\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_07-New-Device-Wizard-03-1024x432.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_07-New-Device-Wizard-03-1024x432.png 1024w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_07-New-Device-Wizard-03-300x127.png 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_07-New-Device-Wizard-03-768x324.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_07-New-Device-Wizard-03.png 1054w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">Get your details ready<\/figcaption><\/figure><\/li><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"774\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9510\" data-id=\"9510\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_07-New-Device-Wizard-04-1024x774.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_07-New-Device-Wizard-04-1024x774.png 1024w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_07-New-Device-Wizard-04-300x227.png 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_07-New-Device-Wizard-04-768x580.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_07-New-Device-Wizard-04.png 1052w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">Populate the authentication and choose your Data Domain<\/figcaption><\/figure><\/li><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"993\" height=\"1024\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9511\" data-id=\"9511\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_08-New-Device-Wizard-05-993x1024.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_08-New-Device-Wizard-05-993x1024.png 993w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_08-New-Device-Wizard-05-291x300.png 291w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_08-New-Device-Wizard-05-768x792.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_08-New-Device-Wizard-05.png 1051w\" sizes=\"(max-width: 993px) 100vw, 993px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">Create a new folder &#8211; best practice would be to name it in a way that makes it easier to see it&#8217;s going to be used with retention lock<\/figcaption><\/figure><\/li><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"988\" height=\"1024\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9512\" data-id=\"9512\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_09-New-Device-Wizard-06-988x1024.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_09-New-Device-Wizard-06-988x1024.png 988w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_09-New-Device-Wizard-06-290x300.png 290w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_09-New-Device-Wizard-06-768x796.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_09-New-Device-Wizard-06.png 1051w\" sizes=\"(max-width: 988px) 100vw, 988px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">Configure the pool<\/figcaption><\/figure><\/li><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"989\" height=\"1024\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9513\" data-id=\"9513\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_10-New-Device-Wizard-07-989x1024.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_10-New-Device-Wizard-07-989x1024.png 989w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_10-New-Device-Wizard-07-290x300.png 290w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_10-New-Device-Wizard-07-768x795.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_10-New-Device-Wizard-07.png 1051w\" sizes=\"(max-width: 989px) 100vw, 989px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">Choose the storage node and make it a retention lock pool<\/figcaption><\/figure><\/li><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"991\" height=\"1024\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9514\" data-id=\"9514\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_11-New-Device-Wizard-08-991x1024.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_11-New-Device-Wizard-08-991x1024.png 991w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_11-New-Device-Wizard-08-290x300.png 290w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_11-New-Device-Wizard-08-768x794.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_11-New-Device-Wizard-08.png 1052w\" sizes=\"(max-width: 991px) 100vw, 991px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">Configure Simply Not My Problem<\/figcaption><\/figure><\/li><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"989\" height=\"1024\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9515\" data-id=\"9515\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_12-New-Device-Wizard-09-989x1024.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_12-New-Device-Wizard-09-989x1024.png 989w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_12-New-Device-Wizard-09-290x300.png 290w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_12-New-Device-Wizard-09-768x795.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_12-New-Device-Wizard-09.png 1049w\" sizes=\"(max-width: 989px) 100vw, 989px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">Review the settings<\/figcaption><\/figure><\/li><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"991\" height=\"1024\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9516\" data-id=\"9516\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_13-New-Device-Wizard-10-991x1024.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_13-New-Device-Wizard-10-991x1024.png 991w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_13-New-Device-Wizard-10-290x300.png 290w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_13-New-Device-Wizard-10-768x794.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_13-New-Device-Wizard-10.png 1052w\" sizes=\"(max-width: 991px) 100vw, 991px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">Check the results<\/figcaption><\/figure><\/li><\/ul><a class=\"wp-block-jetpack-slideshow_button-prev swiper-button-prev swiper-button-white\" role=\"button\"><\/a><a class=\"wp-block-jetpack-slideshow_button-next swiper-button-next swiper-button-white\" role=\"button\"><\/a><a aria-label=\"Pause Slideshow\" class=\"wp-block-jetpack-slideshow_button-pause\" role=\"button\"><\/a><div class=\"wp-block-jetpack-slideshow_pagination swiper-pagination swiper-pagination-white\"><\/div><\/div><\/div>\n\n\n\n<p>The quick overview:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Start the New Device Wizard<\/li><li>Choose Data Domain Boost device<\/li><li>Choose your Data Domain, enter your Boost credentials and choose the &#8220;Browse and Select&#8221; option \u2013&nbsp;we&#8217;ll be creating a new folder in the NetWorker Mtree.<\/li><li>Create a new folder and select it. I gave it a name of &#8220;boostRL&#8221;. I think if you&#8217;re going to have a mix of retention lock and non-retention lock pools\/devices\/volumes, making sure you&#8217;ve got an easy way to usually identify them is important.)<\/li><li>Select the option to create and use a new pool, giving that pool an appropriate name.<\/li><li>Pick the storage node and enable Data Domain retention lock.<\/li><li>Step through the rest of the device configuration as normal.<\/li><\/ol>\n\n\n\n<p>Once you&#8217;ve got this done, you&#8217;ve got a Data Domain Boost device created, with a volume labelled in a pool that has retention lock enabled. The next step is using it!<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Configuring Backup with Retention Lock<\/h2>\n\n\n\n<p>I wanted a simple test, so I created a folder on my backup server and dropped a couple of files in it, then created a new client instance with a saveset of just that folder. I didn&#8217;t think to grab screenshots but it&#8217;s a pretty straight forward process.<\/p>\n\n\n\n<p>The next step is to create a backup policy that will enable retention lock as part of the backup process.<\/p>\n\n\n\n<div class=\"wp-block-jetpack-slideshow aligncenter\" data-effect=\"slide\"><div class=\"wp-block-jetpack-slideshow_container swiper-container\"><ul class=\"wp-block-jetpack-slideshow_swiper-wrapper swiper-wrapper\"><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"542\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9517\" data-id=\"9517\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_14-New-Workflow-1024x542.jpg\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_14-New-Workflow-1024x542.jpg 1024w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_14-New-Workflow-300x159.jpg 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_14-New-Workflow-768x407.jpg 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_14-New-Workflow-1536x813.jpg 1536w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_14-New-Workflow.jpg 1700w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">Create a new workflow, and point it to a group that has your retention lock client.<\/figcaption><\/figure><\/li><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"931\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9518\" data-id=\"9518\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_15-Action-01-1024x931.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_15-Action-01-1024x931.png 1024w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_15-Action-01-300x273.png 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_15-Action-01-768x698.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_15-Action-01.png 1079w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">Action: Configure the schedule<\/figcaption><\/figure><\/li><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"847\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9519\" data-id=\"9519\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_16-Action-02-1024x847.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_16-Action-02-1024x847.png 1024w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_16-Action-02-300x248.png 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_16-Action-02-768x635.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_16-Action-02.png 1059w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">Action: Enable Retention, and Retention Lock<\/figcaption><\/figure><\/li><li class=\"wp-block-jetpack-slideshow_slide swiper-slide\"><figure><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"851\" alt=\"\" class=\"wp-block-jetpack-slideshow_image wp-image-9520\" data-id=\"9520\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_17-Action-03-1024x851.png\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_17-Action-03-1024x851.png 1024w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_17-Action-03-300x249.png 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_17-Action-03-768x638.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_17-Action-03.png 1156w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-block-jetpack-slideshow_caption gallery-caption\">Action: Confirm and Create<\/figcaption><\/figure><\/li><\/ul><a class=\"wp-block-jetpack-slideshow_button-prev swiper-button-prev swiper-button-white\" role=\"button\"><\/a><a class=\"wp-block-jetpack-slideshow_button-next swiper-button-next swiper-button-white\" role=\"button\"><\/a><a aria-label=\"Pause Slideshow\" class=\"wp-block-jetpack-slideshow_button-pause\" role=\"button\"><\/a><div class=\"wp-block-jetpack-slideshow_pagination swiper-pagination swiper-pagination-white\"><\/div><\/div><\/div>\n\n\n\n<p>So the process here was:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Create a new policy, or choose an existing policy.<\/li><li>Create a new workflow for retention lock backups.<\/li><li>Create a backup action, setting schedules\/etc. appropriately.<\/li><li>Configure the retention for the backup, and enable retention lock, specifying the retention lock settings as well.<\/li><li>Review the settings and complete the creation of the Policy\/Workflow\/Action.<\/li><\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Backing up with Retention Lock<\/h2>\n\n\n\n<p>Once you&#8217;ve got a workflow\/action configured with retention lock, backing up is <em>no different<\/em> from normal. NetWorker automatically applies retention lock to successful savesets (so if the saveset fails halfway through and would normally be deleted, don&#8217;t worry, it&#8217;ll still get deleted, since retention lock won&#8217;t have been applied).<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"918\" height=\"564\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_18-Run-Backup.png\" alt=\"Running a backup with retention lock is no different from running a regular backup\" class=\"wp-image-9521\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_18-Run-Backup.png 918w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_18-Run-Backup-300x184.png 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_18-Run-Backup-768x472.png 768w\" sizes=\"auto, (max-width: 918px) 100vw, 918px\" \/><figcaption>Running a backup with retention lock is no different from running a regular backup<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Verifying it&#8217;s Locked<\/h2>\n\n\n\n<p>To verify the backup I&#8217;d just taken had retention lock applied, I figured I&#8217;d try to delete it. To start with, that meant finding the saveset ID:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"344\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_19-Backup-Complete-1024x344.png\" alt=\"Finding the saveset ID for the completed backup\" class=\"wp-image-9522\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_19-Backup-Complete-1024x344.png 1024w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_19-Backup-Complete-300x101.png 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_19-Backup-Complete-768x258.png 768w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_19-Backup-Complete.png 1182w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption>Finding the saveset ID for the completed backup<\/figcaption><\/figure>\n\n\n\n<p>So, with that saveset ID in hand, what happens if I try to delete it? Well, NetWorker says no:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"980\" height=\"298\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_20-Try-to-delete-using-nsrmm.png\" alt=\"nsrmm won't let you delete a backup with retention lock enabled\" class=\"wp-image-9523\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_20-Try-to-delete-using-nsrmm.png 980w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_20-Try-to-delete-using-nsrmm-300x91.png 300w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_20-Try-to-delete-using-nsrmm-768x234.png 768w\" sizes=\"auto, (max-width: 980px) 100vw, 980px\" \/><figcaption>nsrmm won&#8217;t let you delete a backup with retention lock enabled<\/figcaption><\/figure>\n\n\n\n<p>If you try to use nsrmm for instance to delete a saveset that has retention lock enabled, NetWorker firmly says no. Now note in this case it&#8217;s saying &#8220;One or more clones&#8221;: this is because if you <em>just<\/em> give the saveset ID to nsrmm to delete, it&#8217;ll delete <em>all<\/em> the instances of the saveset. (If you had an original backup with retention lock enabled but a clone without retention lock enabled, you&#8217;d still be able to delete the clone by specifying a SSID\/CloneID combination to nsrmm.)<\/p>\n\n\n\n<p>So I can&#8217;t delete the saveset. What about the volume?<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"397\" height=\"535\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_21-Try-to-label-volume.png\" alt=\"Try to label a volume with a retention locked saveset\" class=\"wp-image-9524\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_21-Try-to-label-volume.png 397w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_21-Try-to-label-volume-223x300.png 223w\" sizes=\"auto, (max-width: 397px) 100vw, 397px\" \/><figcaption>Try to label a volume with a retention locked saveset<\/figcaption><\/figure>\n\n\n\n<p>Well, you can <em>try<\/em>, but NetWorker still says:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"755\" height=\"130\" src=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_22-Label-volume-error.png\" alt=\"NetWorker doesn't allow you to delete a volume that has retention locked savesets on it\" class=\"wp-image-9525\" srcset=\"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_22-Label-volume-error.png 755w, https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/RL_22-Label-volume-error-300x52.png 300w\" sizes=\"auto, (max-width: 755px) 100vw, 755px\" \/><figcaption>NetWorker doesn&#8217;t allow you to delete a volume that has retention locked savesets on it<\/figcaption><\/figure>\n\n\n\n<p>That&#8217;s a pretty secure backup at this point. Short of someone racing into your datacentre and taking an axe to the Data Domain, it&#8217;s going to be preserved.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Some Notes and Considerations<\/h2>\n\n\n\n<p>One thing I hope you&#8217;ll see from this process is that it&#8217;s <em>easy<\/em>. Enabling using Data Domain retention lock with your NetWorker server is really quite simple to get up and running, and you get a level of data immutability that most other backup products just can&#8217;t deliver. With Boost enabled devices, your backup volumes don&#8217;t &#8220;appear&#8221; on host operating systems as shares anyway, but this is a further way of guaranteeing that malware isn&#8217;t going to destroy your backups. Some backup products get taken out during a ransomware attack by the backup data being targeted for encryption. Data Domain Boost devices prevent that in normal operations, but even more so in this case, even if you find malware that tries to tell NetWorker to delete the backups, <em>it&#8217;s not going to be able to<\/em>. <\/p>\n\n\n\n<p>Obviously this was a test server for me. The thing to keep in mind with retention lock is: once it&#8217;s locked, it&#8217;s locked. You can have multiple retention lock times associated with backups, but you do want to ensure you don&#8217;t lock something for longer than you really mean.<\/p>\n\n\n\n<p>A few general architectural considerations it&#8217;s worth knowing about:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Your NetWorker retention and Data Domain Retention Lock don&#8217;t have to match. (For example, you might prefer to keep certain backups for 3 months, but only want retention lock enforced for the first month.)<\/li><li>You can retention lock on the backup copy, the clone, or both.<\/li><li>You can still Cloud Tier with retention lock enabled.<\/li><\/ul>\n\n\n\n<p>That&#8217;s all there is to it!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>You know when you&#8217;ve got a secret herb or spice you use in a recipe that turns it from &#8220;this&hellip;<\/p>\n","protected":false},"author":1,"featured_media":9528,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[1181,16,21],"tags":[1385],"class_list":["post-9527","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-domain-2","category-networker","category-security","tag-retention-lock"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/nsrd.info\/blog\/wp-content\/uploads\/2020\/05\/bigStock-Vault.jpg","jetpack_shortlink":"https:\/\/wp.me\/pKpIN-2tF","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/9527","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/comments?post=9527"}],"version-history":[{"count":5,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/9527\/revisions"}],"predecessor-version":[{"id":9539,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/9527\/revisions\/9539"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/media\/9528"}],"wp:attachment":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/media?parent=9527"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/categories?post=9527"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/tags?post=9527"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}