This post covers the installation of the vRealize Data Protection Extension from Dell EMC.
The vRealize Data Protection Extension from Dell EMC provides VMware vRealize Automation users with role-based integrated data protection backup and recovery services with Dell EMC Avamar and/or Networker systems. This extension can be downloaded from the VMware Solution Exchange.
From here on I will refer to this as the vRA DPE as that expanded title is far too much effort to retype and reread for all involved! (A quick google for vRA DPE indicates this acronym is fine)
The context of this installation is that we are installing the vRA DPE into a VVD on VxRail environment, using an AvamarVE appliance, deployed and running in the CMP.
The Avamar Virtual Edition (AVE) appliance is located on the VxRail hosting the VVD Cloud Management Platform.
The Avamar VE appliance (0.5 TB AVE) is deployed with minimum specs , purely for lab purposes
Some important versioning details:
- Avamar v18.1.0-33
- vRA DPE v4.0.5-1
- vSphere/vCenter v6.5.0 U2
- vRA/vRO v7.4
- Embedded vRO
- Clustered vRA/vRO
Before we get into the installation, some general pre-reqs:
- vRA Tenants are fully configured, along with associated agents, endpoints, reservations, blueprints, as well as the required XaaS configuration between vRA and vRO.
- vSphere vCenter Plugin successfully installed in vRO
- NSX Load Balancer properly configured for vRO nodes and ports
- vRA user with the following vRA roles assigned:
- Infrastructure Architect
- Tenant Administrator
- XaaS Architect
- AvamarVE fully deployed
- vCenter Server registered/configured in Avamar
- Avamar Proxy VMs deployed and registered with vCenter
The official vRA DPE Installation and Admin Guide on support.emc.com covers how to validate and configure these as required.
Install the Restore Client
Before installing the vRA DPE itself, first install the Dell EMC Data Protection Restore Client. This file (EDP-FLR.rpm) is downloaded in the same zip file with the vRA DPE software and docs.
- Copy the EDP-FLR.rpm file to the Avamar server, log in to the Avamar server via SSH
- Stop the Apache Tomcat
- emwebapp.sh –stop
- Install the EDP-FLR.rpm file
- rpm -ivh edp-flr.x86_64-4.0.5-1
- Restart the Apache Tomcat
- emwebapp.sh –start
Install vRA-DPE vmoapp
The vRA-DPE is packaged as a vmoapp for vRealize Orchestrator, containing a vRO Plugin as well as a package of workflows and actions. The vmoapp can be installed via command line or using the vRO Control Center (which is recommended is using clustered vRO behind a load balancer).
As per VVD architecture, we are using clustered vRO behind a load balancer (NSX), so we used the vRO Control Center method.
To install the vmoapp file, browse to the vRO Control Center using the vRA load balancer e.g. https://vralb.cse.lab and select Manage Plug-Ins, as displayed below
Browse to and Upload the edp4vcac-4.0.5-1.vmoapp file
On the Install Plugin window, accept the EULA for EDP 184.108.40.206 EMC vRealize Data Protection Extension, and click Install.
This will bring you back to the Manage Plugins page, where hopefully you will see, as shown below, the EDP 4.0.5-1 installed in the list of Plug-Ins, as well as the informational messages at the top of the page.
The vco-server and vco-configurator services will be restarted as part of this process.
Check Data Protection configuration
Our next step was to run the Check Dell EMC data protection configuration workflow in the vRO Client, and ensure that no errors are found.
Navigate to vRO Client > Workflows > Library > EMC > Data Protection > vRA then right-click and run the Check Dell EMC data protection configuration workflow, as shown below
Note that this workflow will prompt you to disable workflow validation before it can run. To do this, go to the Tools dropdown menu in the top-right of the screen, select Preferences, and uncheck Validate a workflow before running it. Click Save & Close.
Installing the vRA DPE Admin Services to vRA Tenant
Now we need to install the vRA DPE admin services into our vRA Tenant, for which we need the following vRA objects to be in place:
- A vRA Tenant, containing a vRA user with Infrastructure Architect, Tenant Administrator, and XaaS Architect roles
- A vRA Business Group to which the data protection services will be entitled
From the vRO Client (Load balancer address e.g. https://vralb.cse.lab)
- Select the Workflows tab
- Navigate to Library > EMC > Data Protection > vRA > Installation
- Right-click the Install default setup for tenant workflow
Page 1 – vCloud Automation Center
In our case we left the initial vCAC host blank so that we would create a new host name connection for the vRA DPE.
- New vCAC host ‘DellEMCedp’
- vCAC url (using the vRA Load balancer address) ‘https://vralb.cse.lab‘
- vCAC Tenant ‘dellemc’
- vCAC user/password ‘email@example.com’
- This AD user has vRA Infrastructure Architect, Tenant Administrator, and XaaS Architect roles
Page 2 – Catalog Service
We created the new ‘Backup as a Service’ service for the vRA Catalog
Page 3 – Administrator Entitlement
We created and named a new vRA Entitlement ‘Data Protection Admin’, and assigned it to the existing ‘Data-Protection-Operations’ vRA Business Group.
Note that this vRA BG will contain Data Protection Administrator Users and User Groups to whom Backup Services will be made available. This BG will not be used to deploy virtual machines, and so will not require any vRA resource reservations.
Page 4 – User Entitlement
Here we created another vRA Entitlement called ‘Data Protection Users’, which will be used later to assign VM-level actions to VM owners in vRA.
Note that the actual vRA users, or user groups, must be added to the Entitlement before they can be viewed in the vRA catalog.
Page 5 – Data Protection
In this section we entered the details of the Avamar system already installed, including
- System Type: Avamar
- System Hostname: vvdavamar01.cse.lab
- System Port: <default>
- System Username/Password: firstname.lastname@example.org
- This user is an AD user
Once the workflow is complete, switch to the vRO Client Inventory tab you to see the new entries for vRA Host and EMC Data Protection, as highlighted below
At this stage the installation of the new Data Protection services is complete, but we need to configure vRA Entitlements in order for those services to be viewed and consumed from the vRA portal.
Go to the vRA portal, logging in as a Tenant Admin, and navigate to Administration > Catalog Management > Entitlements select the Data Protection Admin entitlement and click Edit, as shown below
From the Users and Groups search bar, locate the Data Protection Admins entitlement as required. In our case, this was the email@example.com user group in AD
<Optional> Click on Entitled Items to view what services are available with this new Backup as a Service. By leaving this section blank, then all related services will be available to the entitled users. If you choose to select any of these items individually, then only those selected items will be available to the entitled users.
Log out of vRA and log back in as an entitled user for this Backup as a Service. In our case this was firstname.lastname@example.org.
Click on Catalog, and you should see the new vRA DPE/Backup as a Service catalog items, as shown below
If further branding of the vRA service and related catalog items is required, take a look here.
The vRA Service Blueprints available with the vRA DPE are as follows:
Of course there is more work required in order to configure data protection services for VM blueprints, providing vRA Users with the ability to assign data protection to their virtual machines at deployment time. This will be covered very soon in a separate post.