EVault Software Course 311 Protecting SQL Server with EVault SQL Plug-In
Table of Contents Objectives... 3 Scenario... 3 Estimated Time to Complete This Lab... 3 Requirements for This Lab... 3 Computers Used in This Lab... 3 Exercise 1 Installing EVault Agent on SQL Server... 4 Exercise 2 Personalize the Environment For Lab Example Only... 9 Exercise 3 Add Agent to CentralControl... 13 Exercise 4 Register Agent to Vault... 16 Exercise 5 Creating a Data Backup Job... 22 Exercise 6 Creating a SQL Backup Job... 31 Exercise 7 Scheduling... 37 Exercise 8 Run an Ad Hoc (Manual) Backup of Each Job... 42 Exercise 9 Modify Table on SQL Server For Lab Example Only... 44 Exercise 9 Restoring a Single Database... 46 Exercise 10 Verify Database Has Been Restored For Lab Example Only... 51 Exercise 11 DR Exercise Shutdown SQL01... 52 Exercise 12 DR Exercise Install Agent on FS02... 53 Exercise 13 DR Exercise - Add Agent to CentralControl... 54 Exercise 14 DR Exercise Re-Register Agent to Vault... 56 Exercise 15 DR Exercise Restore System... 59 Exercise 16 DR Exercise Check Your Work on Recovered Machine... 64 Exercise 17 DR Exercise Recovering Databases... 66 Exercise 18 DR Exercise Verify Databases have been Restored... 74 Conclusion... 75 Appendix A... 76 2 EVault Software - 2011 i365, A Seagate Company
Objectives In this course, you will learn how to protect a SQL Server using the EVault SQL Plug-in. We ll cover not only backing up and restoring an individual database, but we ll setup backup jobs such that we can backup and recover an entire SQL Server. Protecting SQL 2005 and 2008 are nearly identical. SQL 2000 is similar but please refer to the EVault Plug-in user guide for the differences. Scenario The course is composed of a Windows 2003 file server running SQL 2005. We want to use the SQL Plug-in to protect this server. There are several different methods that you can use to backup SQL (Plug-in, Database Dumps, Volume Shadow Copy), but the EVault SQL Plug-in is the most efficient and versatile. Even if you re not familiar with SQL, we will provide the fundamentals on how to create a database and some SQL related data. You do not need to have a SQL background. Estimated Time to Complete This Lab 90 Minutes Requirements for This Lab SQL Server is joined to our domain for this lab, but EVault allows for protection of Workgroup computers as well. Our SQL Server is running Windows 2003 On your productions machines, we recommend that all Windows Updates have been applied Computers Used in This Lab HQ-Vault DR-Vault DC01 SQL01 FS02 3 EVault Software - 2011 i365, A Seagate Company
Exercise 1 Installing EVault Agent on SQL Server In this step, we will install the EVault Agent to the SQL Server that we wish to protect. This will allow us to further configure the protection of our File server through CentralControl. Tasks 1. Initial Logon Detailed Steps a. Once the lab starts, within Surgient, click on the SQL01_Server and choose RDP. SQL01 2. Connect to Download Share a. For the Agent installer, I ve downloaded them to a share found at \\192.168.0.150\c$\Temp\. Normally you would download the Agent from our Customer Service Portal at http://csp.i365.com. b. On SQL01, click the Start Menu and click Run... c. In the Run dialogue, type \\192.168.0.150\c$\Temp\ and click OK. d. Double-click Agent-Windows-6-xxx.exe to launch the Agent Installer. The Agent installer includes most plug-in options as well. 3. Agent Installation Wizard a. On the Open File Security Warning dialogue, click Run. 4 EVault Software - 2011 i365, A Seagate Company
b. On the Choose Setup Language screen, select English and click OK. c. On the Welcome to the InstallShield Wizard for EVault Software Agent screen, click Next >. d. On the Support Information and Release Notes screen, click Next >. e. On the License Agreement screen, click I accept the terms in the license agreement and click Next >. 5 EVault Software - 2011 i365, A Seagate Company
f. On the Setup Type screen, we recommend you click on Custom and then Next > to see what options you have available. g. On the Logon Credentials for Agent Services screen, select Use Local System Account and click Next >. This specifies how EVault s backup service will start. If you need to support UNC backups from this machine, you d want to select Create account automatically. h. On the Destination Folder screen, click Next > to accept the default. Normally, we recommend that you install the Agent on a volume with at least 1 GB free. In the lab, we have plenty of space on our C: 6 EVault Software - 2011 i365, A Seagate Company
i. On the Custom Setup screen, click SQL Server Plug-in and select This feature will be installed on local hard drive. Both the Agent and the SQL plug-in can be installed at the same time. j. On the Custom Setup screen, click Next >. In this lab, we ll install the Agent Assistant, but under normal implementations, you might decide not to install it. The Agent Assistant is not required. k. On the Register Agent with Web CentralControl screen, select Skip Registration and then Next >. In this lab, we ll manage our Agent using the Windows CentralControl. Check the lab titled Web CentralControl to learn how to manage you Agents through that interface. 7 EVault Software - 2011 i365, A Seagate Company
l. On the Ready to Install the Program screen, click Install. m. You ve now completed the Agent installation, click Finish. Next, you ll need to Add Agent to CentralControl. 8 EVault Software - 2011 i365, A Seagate Company
Exercise 2 Personalize the Environment For Lab Example Only In the next steps, we ll personalize our environment by creating our own database. In the following exercises, we ll practice backing up and recovering this database. In your production environment, you ll already have your proprietary databases that you ll want to protect. Tasks 1. SQL01 Detailed Steps a. You should still be logged into the SQL01 server. If you got logged off any point and need to enter login credentials, they are: Username TrainingLab\Administrator Password I365password. 2. Create Database in SQL Server Management Studio a. On the Desktop, double-click SQL Server Management Studio. For SQL2K5 and 2K8, this is the utility that s used to manage ones databases. b. On the Connect to Server screen, click Connect to connect using Windows Authentication. c. In Microsoft SQL Server Management Studio, right-click Databases and select New Database 9 EVault Software - 2011 i365, A Seagate Company
d. On the New Database screen, type Demo for the Database name and click OK. e. In Microsoft SQL Server Management Studio, expand Databases, expand Demo, right-click Tables, and select New Table Every database is made of tables. When creating a new database, there are some default system tables generated, but here we re creating our own proprietary table. f. In the SQL01.Demo dbo.table_1 window, type TV Show for the Column Name and choose varchar(max) for the Data Type. This window is in the middle of the screen. I ve only taken a screenshot of this section. 10 EVault Software - 2011 i365, A Seagate Company
g. On the next row in SQL01.Demo dbo.table_1, type Character Name for the Column Name and choose varchar(max) for the Data Type. h. On the right-hand pane, type Favorite TV Shows for the (Name). This replaces the name Table_1. If this area is greyed out, you might need to click elsewhere on the screen first. I ve only taken a screenshot of the righthand pane. i. Click File / Save All j. In Microsoft SQL Server Management Studio, expand Databases, expand Demo, expand Tables, right-click dbo.favorite TV Shows, and select Open Table. 11 EVault Software - 2011 i365, A Seagate Company
k. Please fill out the table with 3 of your favorite TV shows and corresponding characters in those shows. l. Now, we ll close Microsoft SQL Server Management Studio. Click File \ Exit. m. You ve now completed creating your own database and table. 12 EVault Software - 2011 i365, A Seagate Company
Exercise 3 Add Agent to CentralControl In the next steps, we ll add the Agent we just installed to our Windows CentralControl. CentralControl is EVault s Agent Management interface or GUI. We ve already got it installed on HQ-Vault. We ll need to switch to that box. Tasks 1. Switch Machines HQ-Vault Detailed Steps a. Using the Server drop-down at the top of the Surgient window, choose HQ- Vault-Server to connect to the HQ-Vault. c. The system should automatically log you in, but if you are prompted for login, below are the credentials. Username TrainingLab\Administrator Password I365password. c. On the desktop, double-click EVault Software CentralControl. This is the localized Windows CentralControl. 2. Add Agent to CentralControl a. CentralControl is a place where you can centrally manage your various Agent machines on your network. You can be managing as little as one Agent in CentralControl or you can manage hundreds. b. Right-click the Workspace and choose New Agent... c. For the Description, the best way to describe an Agent machine is by its host name. Type SQL01. d. For the Network Address, this can be one of two things. Either the IP address or the Fully Qualified Domain Name (FQDN). It s preferable to use the FQDN in case of potential IP changes. Type SQL01. e. For the Port, we use 2548 or 808 (depending on the Agent version) for connections between CentralControl and the Agent. The Agent listens on this TCP Port. If there are firewalls between the Agent and CentralControl, they should be opened in that direction. f. For the User name, type Administrator. The user specified here needs to be an existing member of either the Administrators group or Backup Operators. The user can not be a normal Domain User. They need to have backup privileges. g. For the Password, type I365password. This is the password for our Administrator user. h. Click Save password so you won t have to re-enter the Password in the future. 13 EVault Software - 2011 i365, A Seagate Company
i. For the Domain, type TrainingLab. If this were just a Workgroup computer, you would leave this field blank. j. Whenever adding Agent to CentralControl, it s always a good idea to click Get Status. This tests our connection to the given Agent. We would receive an error message if it had problems. Click OK. k. On the Agent Properties screen, click OK to finish adding the Agent to CentralControl. 14 EVault Software - 2011 i365, A Seagate Company
l. Now, click File and then Save Workspace. This saves the Agent that we just added so we don t have to type in its information again. m. Next, we need to Register Agent to the Vault. 15 EVault Software - 2011 i365, A Seagate Company
Exercise 4 Register Agent to Vault In this section, you ll learn how to register your Agent to the Vault. For this step, you ll need to know the Vault account credentials. If you own your own Vault, you would ve created an Account within the Director Console. Otherwise, if you don t own your own Vault and backup to a Vault hosted by i365 or an i365 partner, they would ve created the account for you on their Vault. Tasks 1. Detailed Steps a. At this point, you ve installed the Agent and added it to CentralControl. You should now see the Agent in CentralControl. HQ-Vault b. Right-click SQL01, and choose Agent Configuration. 16 EVault Software - 2011 i365, A Seagate Company
d. On the Vaults tab, click New. This is where you make your Vault connections. In this lab, we ll just register to one Vault, but if you were Dual Vaulting, you would need to register to both your local and remote Vaults. For Replication, you only need to register to your primary Vault. 2. Vault Configuration Wizard a. On the Vault Configuration Wizard Welcome screen, click Next >. b. On the Vault Registration screen, select Register as a new computer and click Next >. You ll always want to select Register as a new computer except under a disaster recovery scenario where a system has failed. After replacing a failed system and loading an Agent, you d want to Re-register previously registered computer to pull down previously created job information. 17 EVault Software - 2011 i365, A Seagate Company
c. On the Profile Name screen, type HQ-Vault for the Profile name for the new Vault and click Next >. We recommend you use the machine name or location for the Vault here. It s simply a description but is referenced later when creating a backup job. d. On the Vault Network Address[es] screen, type HQ-Vault for the New address and then Add. The address can either be the FQDN or IP Address. FQDN is preferable here due to potential IP changes in the future. e. Click Next >. 18 EVault Software - 2011 i365, A Seagate Company
f. On the Ports screen, click Next >. The Agent communicates on TCP Port 2546 to the Vault. The Vault listens on this port. On your network, please ensure that TCP Port 2546 is open in an outbound direction from the perspective of the Agent. Port 807 is a legacy port that is no longer required for Agent version 4 or higher. g. On the Connection Settings screen, click Next >. 19 EVault Software - 2011 i365, A Seagate Company
Reconnection settings If the Agent were to lose network connection in the middle of a backup, the Agent by default will try to reconnect to the Vault every 3 minutes for a window of 3 hours. If the Agent is able to reconnect in this timeframe, it will continue where it left off. If the window is exhausted, that night s backup will fail. You can change the Reconnection settings here, but the defaults are the recommended settings. Over The Wire Encryption Settings This setting encrypts the network tunnel between the Agent and the Vault. This is very similar in technology to SSL security. When backing up over a public internet connection, it is recommended that you Enable this. If you re backing up over a private network connection, you might choose to Disable this as with any type of encryption with add some overhead for the Agent. Honestly, the overhead is very minimal though. h. On the Authentication screen, we ll enter the EVault account credentials that we would ve created on the Vault or that i365/i365 partner would ve provided for us. Account: Acme User name: evault Password: 1234 i. Click Next >. 20 EVault Software - 2011 i365, A Seagate Company
j. On the Vault Configuration Wizard Finish, click Finish. k. On the Agent Configuration screen, you should now have your HQ-Vault listed. l. Please refer to Appendix A in the back of this guide for information on the other tabs listed in Agent configuration. This covers important topics like setting up Notifications and Customizing Retentions. m. Click OK. 21 EVault Software - 2011 i365, A Seagate Company
Exercise 5 Creating a Data Backup Job In this Lab, we ll assume that you want to protect your system from a disaster. This includes protecting not only your SQL databases but also your data files on the C: along with System State. So, on a SQL Server, you ll typically have at least 2 Jobs: a Data Job and a SQL Job. In the course titled EVault - Course 301 Windows File Protection with EVault, you learned how to create a basic Data Job. We ll be doing pretty much the same thing here except making the exclusions for our database files. When going through the Wizard, you might have questions about a certain menu item. You can always click the in the upper left hand corner of the screen and then click the item you are curious about. This will give you a description of that item. Tasks 1. Detailed Steps a. When creating the backup job, we ll continue using CentralControl on the HQ- Vault. b. Right click the Agent SQL01, and select New Job HQ-Vault 2. New Job Wizard a. On the New Job Wizard Welcome screen, click Next >. 22 EVault Software - 2011 i365, A Seagate Company
b. On the New Job Wizard Backup Source Type screen, click Next >. Encoding Here you can choose what types of filenames you wish to support. ANSI All English characters are stored in the ANSI character set. This is sufficient for most, but we typically recommend choosing Unicode just in case. Unicode Along with backing up files using standard English characters, Unicode allows for protection of files with Eastern European characters, Asian Characters, and Macintosh files. This is the default and recommended option. Backups might be slightly larger, but the amount is probably not even noticeable. c. On the New Job Wizard Vault screen, choose Next >. The Destination displays HQ-Vault. This is the Vault Profile we created in the previous step. 23 EVault Software - 2011 i365, A Seagate Company
d. On the New Job Wizard New Job Name screen, type Data for the Name and click Next >. Here, we ve named our job Data. This will signify backing up the C:. For SQL related jobs, we would call my job SQL and similarly for Exchange backups. You can use whatever naming scheme makes sense for you. e. On the New Job Wizard Source screen, you can select what you want to backup. To protect your system from a disaster, using our standard agent (not using Bare Metal Restore), you ll want to select System State along with any other system drives on your system. From there, you can make exclusions for EVault Agent directory and any other directories that are non mission critical. Data Files You can select from the various drives and folders on the Agent machine. Bare Metal Restore This is an add-on product to the Agent and you do need to be licensed for this on the Vault. In times of disaster, our standard Agent requires you to install an Operating System prior to installing the EVault Agent. Building out an Operating System typically takes up to an hour. In some environments, an extra hour of down time is unacceptable. Bare Metal Restore is a product that backs up all of the files on the system including the Operating System files. It allows for recovery to dissimilar hardware. In times of disaster, you would download our EVault System Restore cd from our website. This cd is self bootable and has many of the popular drivers for controllers, NICs, etc included on it. You would load this onto a new machine. It loads an Agent and allows you to connect to the Vault. You would then restore your Bare Metal Restore job from the Vault, reboot your system, and your system should be operational. System State This allows for protection of things like the Registry, System Files, etc. On a Domain Controller, it includes Active Directory. Note: To fully protect a system, System State ALONG 24 WITH any relevent drive data EVault should Software be backed - 2011 up (ie i365, the A c:\). Seagate Company RSM database Typically not backed up. This is a Microsoft database. It stands for Removable Storage Manager. RSM catalogs
System State This allows for protection of things like the Registry, System Files, etc. On a Domain Controller, it includes Active Directory. Note: To fully protect a system, System State ALONG WITH any relevent drive data should be backed up (ie the c:\). RSM database Typically not backed up. This is a Microsoft database. It stands for Removable Storage Manager. RSM catalogs any tapes that might have been used on the system. Event logs Not required for backup. If you feel you need to capture the Windows Event logs in backup, they are reletively small. f. On the New Job Wizard Source screen, select Data Files and click Add g. On the Include / Exclude screen, highlight C and click Include. This is where you make your file selections. We re going to back up the entire C:, but here you could select individual drives, folders, or files. 25 EVault Software - 2011 i365, A Seagate Company
h. On the Confirm Include screen, click Yes. Recursive means to backup the selected drive/folder and all of its subfolders. This is also where you can setup filters to only backup certain files/folders or extentions. i. On the Include / Exclude screen, highlight C and click Exclude. Because we ll be using the SQL Plug-in to protect our databases, we don t want them backed up in our Data Job. The SQL Plug-in is much more efficient and versatile when backing up SQL databases than using just VSS backups. j. On the Confirm Exclude screen, select Exclude on files matching this filter, separated by semi-colons, type *.mdf;*.ldf;*.bak, and click Yes. Recommended SQL Exclusions o Database Files: *.mdf o Transaction Logs: *.ldf o Database Dump Files: *.bak 26 EVault Software - 2011 i365, A Seagate Company
k. On the Include / Exclude screen, expand C, expand Program Files, select EVault Software, and click Exclude. Whenever backing up folder that would include the EVault Agent directory, it s a best practice to exclude the EVault Agent diretory. There are indexes that created and removed within this directory that take up space. We don t want to backup/store unnecessary data on the Vault. l. Click Yes. We want to Recursively exclude this entire directory. m. Click OK. 27 EVault Software - 2011 i365, A Seagate Company
n. On the New Job Wizard Source screen, select System State and click Next >. o. On the New Job Wizard screen click Next >. Here you can change things like the default backup window. For these items, select the if you have questions. Other than the default backup window, we recommend leaving the other options defaulted. p. On the New Job Wizard Encryption screen: This is where you can choose to protect your data by password protecting it. If you ve set a password, upon recovery, you will be prompted for this password. 28 EVault Software - 2011 i365, A Seagate Company
Any encryption change after the initial backup will result in a reseed of data. This means you will be storing double the amount of data than you should be on the EDPM appliance. Encryption changes include: Changing encryption types Changing encryption passwords Changing encryption types Change from no encryption to use encryption or vice versa Please make sure to keep your encryption password in a safe place. If you lose your encryption password, i365 will not be able to recover it for you. This means you will not be able to restore your data without the correct password. In this example, for the Encryption type, please select AES 128 bit. For the password, we ll set the Password and Confirm Password to test and click Next >. 29 EVault Software - 2011 i365, A Seagate Company
q. On the New Job Wizard Log, click Next >. By default Log detail level is set to Summary. This will report any Errors or Warnings encountered. Otherwise, you can increase the verbosity by increasing the detail to either File or Director to report every file or directory backed up. Increasing this setting will create larger log files and should not be changed unless absolutely necessary. r. On the New Job Wizard Finished screen, click Finish to Just exit from this wizard. s. You ve now completed creating your Data Job. The next step is to create your SQL Job. 30 EVault Software - 2011 i365, A Seagate Company
Exercise 6 Creating a SQL Backup Job Your Data Job that you created earlier will protect your C: and System State. You now need to create your SQL Job to protect your SQL databases. Our SQL Plug-in uses Microsoft APIs to talk directly to your SQL databases. This allows you to backup your databases hot (while they re in use). SQL Plug-in backups will not interfere with your users interacting with their databases. When backing up SQL, you should always backup the following the databases to insure protection from a disaster. Master Model MSDB + Any Proprietary Databases Tasks 1. Detailed Steps a. When creating the SQL Job, we ll continue using CentralControl on the HQ- Vault. b. Right click the Agent SQL01, and select New Job HQ-Vault 2. New Job Wizard a. On the New Job Wizard Welcome screen, click Next >. 31 EVault Software - 2011 i365, A Seagate Company
b. On the New Job Wizard Backup Source Type screen, select MS SQL Server for the Backup source type and click Next >. This option became available because we installed the SQL Plug-in when installing the Agent. c. On the New Job Wizard Vault screen, choose Next >. The Destination displays HQ-Vault. This is the Vault Profile we created in the previous step. d. On the New Job Wizard New Job Name screen, type SQL for the Name and click Next >. 32 EVault Software - 2011 i365, A Seagate Company
e. On the New Job Wizard MS SQL Server Instances screen, click Next >. Here, you can select which SQL Instance you want to backup. In this case we only have the <Default> Instance. SQL allows you to potentially have multiple Instances. Each Instance has its own copies of Master, Model, MSDB, and any proprietary Databases. Per any EVault SQL Job, you can only backup one Instance. This means if you have 2 Instances, you ll need to EVault SQL Jobs, one to backup each Instance. Licensing is per SQL Server. Having 2 Instances (2 SQL Backup Jobs) would only require 1 SQL License on the Vault. f. On the New Job Wizard MS SQL Server Login screen, click Next > to use Windows NT Authentication. This is the easiest way to view your databases. In some cases, your DBA might require you to specify a SQL authenticated account or SA account. 33 EVault Software - 2011 i365, A Seagate Company
g. On the New Job Wizard MS SQL Server Database Selection screen, select Backup all existing databases for this instance and click Next>. Here, we re backing up everything. There is a difference between choosing this option and choosing Select All. If you were to compare the EVault configuration files (.vvc), Select All would have individual inclusions for each database vs. Backup all existing databases for this instance will have a wild card inclusion. This allows for additional databases to be added later and automatically included in the wildcard. h. On the New Job Wizard Run As screen, click Next >. The Run as user corresponds with the user specified when adding the Agent to CentralControl. This is the user that will be accessing the database during the backup. You can change the user here if you need to. 34 EVault Software - 2011 i365, A Seagate Company
i. On the New Job Wizard - Options screen, click Next >. Notice that Disable deferring is checked and greyed out. With SQL Plug-in backups, they need to run until they complete. It doesn t make sense to backup a portion of a database. This means that SQL Plug-in backups could potentially be backing up during production hours. j. On the New Job Wizard Encryption screen: Similar to the Data Job, we ll choose the same Encryption options. In this example, for the Encryption type, please select AES 128 bit. For the password, we ll set the Password and Confirm Password to test and click Next >. 35 EVault Software - 2011 i365, A Seagate Company
k. On the New Job Wizard Log, click Next >. l. On the New Job Wizard Finished screen, click Finish to Just exit from this wizard. m. You ve now completed creating your SQL Job. The next step is to create schedules for each the Data and SQL Jobs. 36 EVault Software - 2011 i365, A Seagate Company
Exercise 7 Scheduling In this section, we ll schedule the Job that you created earlier. Please refer to EVault - Course 412 Scheduling Backups with EVault for general guidelines for scheduling your backups. We ll also assume that you ve completed EVault Course 301 Windows File Protection with EVault. SQL Backup Schedules differ and we ll discuss the differences further down in the training. Tasks 1. Detailed Steps a. In CentralControl, right-click SQL01 and select Schedule Entries HQ-Vault 2. Schedule Data Job a. On the Schedule List screen: This is where we can define a schedule such that our backups will run on automatic basis. In this example, we ll schedule the following for the Data Job: i. Daily M F 8PM ii. Weekly Sat 8PM iii. Monthly 1 st 8PM Per Best Practices, we ll schedule the Longest retention first so that it is at the Top. Longest retention in this case being Monthly. You can always reorder them in this list if you had done it wrong. We ll need to schedule each retention separately. We ll start with the Monthly. b. This exact schedule was created in EVault Course 301 Windows File Protection with EVault. If you forgot how to do this or need instructions, please review the instructions in that lab. 37 EVault Software - 2011 i365, A Seagate Company
c. When you re done, your schedule should look like the following: 3. Schedule SQL Job a. On the Schedule List screen: In this example, we ll schedule the SQL Job 1 hour after our Data Job: i. Daily M F 9PM ii. Weekly Sat 9PM iii. Monthly 1 st 9PM Per Best Practices, we ll schedule the Longest retention first so that it is at the Top. Longest retention in this case being Monthly. You can always reorder them in this list if you had done it wrong. We ll need to schedule each retention separately. We ll start with the Monthly. We ll go through one example, the Monthly, and then let you do the rest on your own to compare to ours. b. On the Schedule List screen, click New c. On the Schedule Wizard Welcome screen, click Next >. d. On the Schedule Wizard Command screen, click Next > to schedule a Backup. 38 EVault Software - 2011 i365, A Seagate Company
e. On the Schedule Wizard Job List screen, select the SQL Job and click Next >. f. On the Schedule Wizard Retention screen, select Monthly for the Retention Scheme and click Next >. g. On the Schedule Wizard Options screen, click Next >. This is where the schedule is different. You ll see you have options to do Full or Incremental backups with either SQL or Exchange related database jobs. For our Lab, we ll schedule Fulls for each our Monthly, Weekly, and Daily backups. 39 EVault Software - 2011 i365, A Seagate Company
Full and Incremental Database Backups Do not confuse this terminology with traditional backup terminology. This is database specific. People think that running a Full is backing up a Seed, and an Incremental would be backing up a Delta. IT IS NOT. Full Database level backup that backs up the entire database but deltizes on the previous backup. If you schedule Fulls every day, you are not reseeding every day. In terms of recovery, you select the day you want to recover, and the Vault will send back the entire database (mdf) back to the system. Incremental Transaction log only backup. This will flush the transaction logs after running in a SQL backup. Somewhat smaller than a Full backup but more complicated in terms of restore. When restoring, the Vault/Agent still do everything for you, but when restoring an Incremental backup, the Vault will restore the last good Full backup. Then the Vault will restore the Transaction logs up to the point of your restore. The Agent will then trigger a replay of logs to get you up to your restore time. If running Incremental backups, you need to run periodic Fulls. Typically done either on a Weekly or a Daily basis. Otherwise, replaying more than a week s worth of Transaction logs can take a very long time depending on the system. If running Full backups every day, you will need to have a maintenance routine run on your SQL server to flush logs. Otherwise, you risk filling up your volumes with Transaction logs 40 EVault Software - 2011 i365, A Seagate Company
h. On the Schedule Wizard Command Cycle screen, select Monthly and click Next >. i. On the Schedule Wizard Monthly screen, type 9:00 for the start time and click Next >. j. On the Schedule Wizard Finish screen, click Finish. k. Now, on your own, please complete scheduling the Weekly and Daily schedules for the SQL Job. When you re done, your schedule should look like this: l. On the Schedule List screen, click OK. 41 EVault Software - 2011 i365, A Seagate Company
Exercise 8 Run an Ad Hoc (Manual) Backup of Each Job Normally, you would allow the backup to run per its schedule, but for this lab, we ll run an ad hoc backup of each Job so that we can restore immediately. Tasks 1. Detailed Steps a. In CentralControl, right-click SQL under SQL01 and select Backup HQ-Vault b. On the SQL: Backup Wizard Welcome screen, click Next >. c. On the SQL: Backup Wizard Destination screen, click Backup Now. The default backup destination is to your Vault, but you have options to backup to Directory on Disk (USB) for seeding purposes. Just note that USB backups are intended to be imported into the Vault. d. On the Process Information screen, wait for the Status to say Backup Completed and click Close. e. You ve now completed the seed for the SQL Job. Next, we ll backup the Data Job. 42 EVault Software - 2011 i365, A Seagate Company
2. Run Backup of Data Job a. In CentralControl, right-click Data under SQL01 and select Backup b. On the Data: Backup Wizard Welcome screen, click Next >. c. On the Data: Backup Wizard Destination screen, click Backup Now. d. On the Process Information screen, wait for the Status to say Backup Completed and click Close. This backup will take several minutes to complete. e. You ve now completed seeding both of your Jobs. 43 EVault Software - 2011 i365, A Seagate Company
Exercise 9 Modify Table on SQL Server For Lab Example Only For this exercise, we ll modify the table we had created earlier so that we can restore over it later. Tasks 1. Switch Machines SQL01 Detailed Steps a. Using the Server drop-down at the top of the Surgient window, choose SQL01_Server to connect back to the SQL01 server. b. The system should automatically log you in, but if you are prompted for login, below are the credentials. Username TrainingLab\Administrator Password I365password. 2. Edit Table a. On the Desktop, double-click SQL Server Management Studio. b. On the Connect to Server screen, click Connect. c. In Microsoft SQL Server Management Studio, expand Databases, expand Demo, expand Tables, right-click dbo.favorite TV Shows, and select Open Table. 44 EVault Software - 2011 i365, A Seagate Company
d. On the SQL01.Demo d orite TV Shows screen, we ll delete a row. Rightclick any row and choose Delete. When prompted, click Yes to confirm the deletion. e. On the SQL01.Demo d orite TV Shows screen, we ll add a new TV Show and Character Name at the bottom. Please go ahead and do this on your own. f. Our database and table are now different than when we backed it up. In the next steps, we ll restore over this database. g. In Microsoft SQL Server Management Studio, click File \ Exit. When restoring with the EVault Plug-in, an Administrator can not be accessing the database otherwise the restore will fail. 45 EVault Software - 2011 i365, A Seagate Company
Exercise 9 Restoring a Single Database In the following steps, you ll learn to restore the Demo database we had backed up earlier. Remember when restoring a database, an Administrator can not be accessing the database with Microsoft SQL Server Management Studio. In this example, we ll pretend that the original database became corrupted, and we want to restore over the database with the version from our backup. Otherwise, when restoring, you have options to restore to another database or to a flat file. Tasks 1. Switch Machines HQ-Vault 2. Restore Wizard Detailed Steps a. Using the Server drop-down at the top of the Surgient window, choose HQ- Vault-Server to connect back to the HQ-Vault server. b. The system should automatically log you in, but if you are prompted for login, below are the credentials. Username TrainingLab\Administrator Password I365password. a. In the CentralControl, right click the SQL Job under SQL01 and choose Restore b. On the Restore Wizard Welcome screen, click Next >. 46 EVault Software - 2011 i365, A Seagate Company
c. On the Restore Wizard (safeset 00000001) Select a Source screen, click Next >. This is where you can choose from which safeset you d like to restore from. d. On the Restore Wizard MS SQL Server Database Selection screen, select the Demo database and click Next >. e. On the Restore Wizard MS SQL Server Instances screen, click Next >. On this screen you could potentially choose to restore your database to a specific Instance. 47 EVault Software - 2011 i365, A Seagate Company
f. On the Restore Wizard MS SQL Server Login screen, click Next >. If you needed to, you could choose to restore your database using a SQL authenticated account. g. On the Restore Wizard MS SQL Server Restore Destination screen, select Other database, select Demo, and click Options. We need to this because of how our database was created. You must choose this option if the database is using a full or bulked-logged recovery model. Alternatively, you can normally restore back to the original database or to a flat file. If choosing directory (flat file), the restored file extension will be.full. You can handle this the same way as any database dump (.bak). h. On the MS SQL Server Restore Options screen, select With replace and click OK. i. On the Restore Wizard MS SQL Server Restore Destination screen, click Next >. 48 EVault Software - 2011 i365, A Seagate Company
j. On the Restore Wizard Run As screen, click Next >. Here you can change the user used for the restore. k. On the Restore Wizard Encryption Options screen, type test for the Password and Verify password and click Next >. This is the encryption password we had set earlier when creating the Job. l. On the Restore Wizard Logging Options screen, click Next >. 49 EVault Software - 2011 i365, A Seagate Company
m. On the Restore Wizard Finish screen, click Finish. n. On the Process Information screen, wait for the Status to say Restore completed and click Close. o. You ve just learned how to restore an individual database using EVault. In the next step, we ll simply check our work to make sure that the database is back to the way it was on SQL01. 50 EVault Software - 2011 i365, A Seagate Company
Exercise 10 Verify Database Has Been Restored For Lab Example Only For this exercise, we ll switch back to SQL01 and verify that the Demo database is back to the way it was. Tasks 1. Switch Machines SQL01 2. Verify Database Has Been Restored Detailed Steps a. Using the Server drop-down at the top of the Surgient window, choose SQL01_Server to connect back to the SQL01 server. b. The system should automatically log you in, but if you are prompted for login, below are the credentials. Username TrainingLab\Administrator Password I365password. a. On your Desktop, double-click SQL Server Management Studio. b. On the Connect to Server screen, click Connect. c. In Microsoft SQL Server Management Studio, expand Databases, expand Demo, expand Tables, right-click dbo.favorite TV Shows, and select Open Table. d. In the SQL01.Demo-d orite TV Shows section, you should see that your table is back to the way it was. 51 EVault Software - 2011 i365, A Seagate Company
Exercise 11 DR Exercise Shutdown SQL01 For this exercise, we ll simulate SQL01 has completely failed, and in the subsequent steps, we ll recover all of SQL01 s data to another system, FS02. Tasks 1. SQL01 Detailed Steps a. You should still be on the SQL01_Server within Surgient. b. The system should automatically log you in, but if you are prompted for login, below are the credentials. Username TrainingLab\Administrator Password I365password. 2. Shutdown SQL01 a. Click Start \ Shutdown b. On the Shut Down Windows screen, select Shut down and click OK. c. On the Windows screen, click Yes to continue shutting down. 52 EVault Software - 2011 i365, A Seagate Company
Exercise 12 DR Exercise Install Agent on FS02 In the event of a disaster, you need to rebuild a system matching the original system s Operating System and Service Packs. We have a system loaded called FS02 that matches these criteria. Note that the Hostname of this machine is FS02 and the IP address is 192.168.0.202. Our original machine s Hostname was SQL01 and had an IP address of 192.168.0.5. When doing a System State restore, the target machine will acquire these settings from the backup. One other thing to notice in this setup is that FS02 is not currently joined to the Domain. It is currently a Workgroup computer. Tasks 1. Switch Machines FS02 2. Install Agent on FS02 Detailed Steps a. Using the Server drop-down at the top of the Surgient window, choose FS02_Server to connect to the FS02 server. b. The system should automatically log you in, but if you are prompted for login, below are the credentials. Username Administrator Password I365password. a. To install the Agent on FS02, please repeat Exercise 1 steps 2 and 3 from earlier in the workbook. Make sure you select to install the SQL Plug-in. 53 EVault Software - 2011 i365, A Seagate Company
Exercise 13 DR Exercise - Add Agent to CentralControl Similar to Exercise 3 from earlier in the training, after you install an Agent, you need to add it to CentralControl Tasks 1. Switch Machines HQ-Vault Detailed Steps a. Using the Server drop-down at the top of the Surgient window, choose HQ- Vault-Server to connect to the HQ-Vault. b. The system should automatically log you in, but if you are prompted for login, below are the credentials. Username TrainingLab\Administrator Password I365password. c. If CentralControl is not open still, on the desktop, double-click EVault Software CentralControl. 2. Add Agent to CentralControl a. Right-click the Workspace and choose New Agent... b. For the Description, type FS02. c. For the Network Address, type FS02. d. For the Port, leave the default of 808. e. For the User name, type Administrator. f. For the Password, type I365password. g. Click Save password so you won t have to re-enter the Password in the future. h. For the Domain, leave this blank as FS02 is just a Workgroup computer 54 EVault Software - 2011 i365, A Seagate Company
i. Click Get Status to test our connection to the Agent and click OK. j. On the Agent Properties screen, click OK to finish adding the Agent to CentralControl. k. Now, click File and then Save Workspace. This saves the Agent that we just added so we don t have to type in its information again. 55 EVault Software - 2011 i365, A Seagate Company
Exercise 14 DR Exercise Re-Register Agent to Vault As we learned in on e of the previous exercises, after Adding an Agent to CentralControl, you typically Register the Agent to the Vault. However, when performing a DR restore, you ll want to choose to Re- Register to pull down your previously created Job informatoin Tasks 1. Detailed Steps a. In EVault Software CentralControl, right-click FS02 and choose Agent Configuration... HQ-Vault b. On the Agent Configuration screen, click New to create a new Vault connection. 2. Re-Register Agent to Vault a. On the Vault Configuration Wizard Welcome screen, click Next >. b. On the Vault Registration screen, select Re-register previously registered computer and click Next >. c. In the next steps, we ll fill out all of our EVault account credentials. 56 EVault Software - 2011 i365, A Seagate Company
d. On the Vault Network Address[es] screen, type HQ-Vault for the New address, click Add, and click Next >. e. On the Ports screen, click Next >. f. On the Connection Settings screen, click Next >. g. On the Authentication screen, type the following and click Next >: Account: Acme User name: evault Password: 1234 h. On the Registered Computers screen, select SQL01 and click Next > 57 EVault Software - 2011 i365, A Seagate Company
i. On the Vault Configuration Wizard Finish screen, click Finish. j. On the CentralControl screen, click Yes to replace configuration data. k. You should now notice that the FS02 Agent has a Data Job and a SQL Job. These will now allow us to Restore SQL01 s information from the Vault. 58 EVault Software - 2011 i365, A Seagate Company
Exercise 15 DR Exercise Restore System In this exercise, we ll restore the Data Job of SQL01 to our new system, FS02. Tasks 1. Detailed Steps a. In EVault Software CentralControl, right-click Data under FS02 and choose Restore. HQ-Vault 2. Restore Data Job a. On the Restore Wizard Welcome screen, click Next >. b. On the Restore Wizard (safeset 00000001) Select a Source screen, click Next > to accept the defaults. c. On the Restore Wizard (safeset 00000001) Encryption Options screen, type test for both the Password and Verify Password and click Next >. 59 EVault Software - 2011 i365, A Seagate Company
d. On the Restore Wizard (safeset 00000001) Select Restore Objects screen, click Data Files and click Add e. On the Include/ Exclude screen, expand 00000001, highlight C:, and click Include. f. On the Confirm Include screen, click Yes to accept the Recursive selection 60 EVault Software - 2011 i365, A Seagate Company
g. For This Lab Only Expand C:, expand Windows, expand Assembly, expand GAC_MSIL, expand, IEExecRemote, select 2.0.0.0 b03f5f7f11d50a3a, and click Exclude. This happens to be a reparse point that can t be overwritten by a restore in our lab. Normally, you would not need to do this. h. On the Confirm Exclude screen, click Yes. i. On the Include /Exclude screen, click OK. j. On the Restore Wizard (safeset 00000001) Select Restore Objects screen, select System State and click Next >. 61 EVault Software - 2011 i365, A Seagate Company
k. On the Restore Wizard (safeset 00000001) Destination Options screen, select, Next >. Notice that all of your options are greyed out on this screen. It s because we ve chosen System State for recovery. You can t redirect System State to a different file path or folder location. l. On the Restore Wizard (safeset 00000001) Advanced Restore Options screen, select Yes, overwrite locked files and click Next >. This is because we ll be overwriting files in the Windows and Program Files directories. Whenever performing full DR restores, you want to choose this option. It will require a reboot of the Agent system once completed. m. On the Restore Wizard (safeset 00000001) Finish screen, click Finish. 3. Monitor Restore a. On the Process Information screen, wait for the Status to Disconnected. b. On the Operator Request screen, click Reboot Now. 62 EVault Software - 2011 i365, A Seagate Company
c. On the Operator Request screen, click Yes to confirm the reboot. d. The Restore is now completed and you ve triggered a reboot of the FS02 server. e. CentralControl will show some failures to connect to FS02. This is expected. Just click OK to the various messages you see. This is because we re rebooting the machine, and also, we ve just turned FS02 into SQL01. 63 EVault Software - 2011 i365, A Seagate Company
Exercise 16 DR Exercise Check Your Work on Recovered Machine In the previous exercise, we recovered all of SQL01 s Data Job to FS02 and rebooted the system. We won t be able to connect to that machine via Surgient s drop-down connection at the top. This is because the IP address of the machine is now that of SQL01 s. We ll need to connect via Remote Desktop on our HQ-Vault machine. Remember that the Data Job did not include the databases. We will need to restore those in a following exercise. Tasks 1. Detailed Steps a. Click Start / Run HQ-Vault b. In the Run screen, type mstsc and click OK. c. On the Remote Desktop Connection screen, type SQL01 for the Computer and click Connect. If the connection fails, it probably means that the system hasn t finished rebooting. Wait a minute and try again. d. On the Remote Desktop Connection screen, click Yes to confirm the connection. 64 EVault Software - 2011 i365, A Seagate Company
2. Check Your Work a. On the Log On to Windows screen, type or select the following and click OK: User name: Administrator Password: I365password Log on to: TRAININGLAB b. The Hostname and IP address are that of SQL01. c. Click Start \ Run d. On the Run screen, type cmd and click OK. e. At the command prompt, type ipconfig /all and hit enter. You should see that all of the various attributes are that of SQL01. 65 EVault Software - 2011 i365, A Seagate Company
Exercise 17 DR Exercise Recovering Databases When using the SQL Plug-in and restoring from a disaster, there are several steps that need to be made. These are same DR methodologies that Microsoft uses, and many of the same steps would be used if we were restoring from database dumps vs using the EVault Plug-in. Note that all of the following steps are detailed in depth within the SQL Plug-in guide available on our Customer Service Portal. o o o o o Tasks 1. Rebuild Master from SQL CD In your environment, you will need access to the SQL installation media. Start SQL Server in Single User Mode Required to restore Master database Restore Master Database The Master Database has information about all of its children databases and should always be restored first in a disaster. It will create buckets for us to restore our other databases. Restart SQL Server in Normal Mode After restoring Master, the service will stop. You ll need to restart it. Restore Any Other Databases Since we ve restored Master, you can start restoring your other databases. Detailed Steps a. At this point you should still have a Remote Desktop Connection open to SQL01 and looking at its desktop. SQL01 (Remote Desktop Connection from HQ-Vault) 2. Rebuild Master from SQL CD a. In this lab, the SQL 2005 install CD is mounted as the F:. We ll need to navigate to this drive via command line and run setup.exe with special flags to rebuild the Master Database. 66 EVault Software - 2011 i365, A Seagate Company
b. At the command prompt, type start /wait F:\setup.exe /qn INSTANCENAME=MSSQLSERVER REINSTALL=SQL_Engine REBUILDDATABASE=1 SAPWD=p@ssw0rd 3. Start SQL Server in Single User Mode a. Click Start and click Run b. On the Run screen, type services.msc and click OK. This open the Services snap-in. c. Right click SQL Server (MSSQLSERVER) and select Properties. 67 EVault Software - 2011 i365, A Seagate Company
d. On the SQL Server (MSSQLSERVER) Properties (Local Computer) screen, type m for the Start parameter and click Start. This starts the SQL Server instance in single-user mode. e. On the SQL Server (MSSQLSERVER) Properties (Local Computer) screen, click OK. 4. Restore Master Database a. Click Minimize to minimize your connection to SQL01. You should then be back on the desktop of HQ-Vault. HQ-Vault b. In CentralControl, expand SQL01, right-click SQL, and select Restore The machine that was once FS02 is now SQL01 because of the restore. c. On the Restore Wizard Welcome screen, click Next >. 68 EVault Software - 2011 i365, A Seagate Company
d. On the Restore Wizard Select a Source screen, click Next >. e. On the Restore Wizard MS SQL Server Database Selection screen, select just Master and click Next >. f. On the Restore Wizard MS SQL Server Instances screen, click Next >. We ll be restoring back to the default Instance. g. On the Restore Wizard MS SQL Server Login screen, click Next >. We ll be restoring using Windows NT Authentication. 69 EVault Software - 2011 i365, A Seagate Company
h. On the Restore Wizard MS SQL Server Restore Destination screen, click Next >. i. On the Restore Wizard Run As screen, click Next >. We ll use the default user here. j. On the Restore Wizard Encryption Options screen, type test for both the Password and Verify password and click Next >. 70 EVault Software - 2011 i365, A Seagate Company
k. On the Restore Wizard Logging Options screen, click Next >. l. On the Restore Wizard Finish screen, click Finish. m. On the Process Information screen, wait for the Status to say Restore completed and click Close. 5. Restart SQL Server in Normal Mode a. On the taskbar, click sql01 Remote Desktop to reopen our Remote Desktop Connection to SQL01. SQL01 (Remote Desktop Connection from HQ-Vault) b. On the Services screen, right click SQL Server (MSSQLSERVER) and select Start. After restoring Master, the SQL Server service will be in a stopped state. Previously, we had passed the service the m parameter to start it in single user mode, but that was a one-time parameter. By starting the service like we are here, it will not be using that parameter and will be starting in normal mode. 6. Restore Any Other Databases a. Click Minimize to minimize your connection to SQL01. You should then be back on the desktop of HQ-Vault. HQ-Vault 71 EVault Software - 2011 i365, A Seagate Company
b. In CentralControl, right-click SQL and select Restore. c. On the Restore Wizard Welcome screen, click Next >. d. On the Restore Wizard Select a Source screen, click Next >. e. On the Restore Wizard MS SQL Server Database Selection screen, select all databases except for master and click Next >. f. On the Restore Wizard MS SQL Server Instances screen, click Next >. g. On the Restore Wizard MS SQL Server Login screen, click Next >. h. On the Restore Wizard Run As screen, click Next >. 72 EVault Software - 2011 i365, A Seagate Company
i. On the Restore Wizard Encryption Options screen, type test for both the Password and Verify password and click Next >. j. On the Restore Wizard Logging Options screen, click Next >. k. On the Restore Wizard Finish screen, click Finish. l. On the Process Information screen, wait for the Status to say Restore Completed and click Close. 73 EVault Software - 2011 i365, A Seagate Company
Exercise 18 DR Exercise Verify Databases have been Restored Now that the restore is complete, the last thing we ll do is check that our databases are back the way they were. Tasks 1. Detailed Steps a. On the taskbar, click sql01 Remote Desktop to reopen our Remote Desktop Connection to SQL01. SQL01 (Remote Desktop Connection from HQ-Vault) b. On the desktop, double-click SQL Server Management Studio. c. On the Connect to Server screen, click Connect. d. In Microsoft SQL Server Management Studio, expand Databases, expand Demo, expand Tables, right-click dbo.favorite TV Shows, and select Open Table. 74 EVault Software - 2011 i365, A Seagate Company
e. The table should be the way it was when you backed it up. Conclusion In this lab, you learned how to protect a SQL server using the EVault SQL Plug-in. We went through recovering an individual database as well as recovering an entire server. Please feel free to do further testing in your training lab. For further information about EVault, you can always check our knowledge base and library of user guides available at http://csp.i365.com. You can always send comments and suggestions for this training module to training@i365.com or for support related issues you can contact us at support@i365.com. 75 EVault Software - 2011 i365, A Seagate Company
Appendix A In this section, we ll discuss some of the settings found within Agent Configuration in CentralControl. Items like email notifications and retentions should be reviewed on every implementation. In this example, we ll assume you ve completed all of the above exercises. Tasks 1. Switch Machines HQ-Vault Detailed Steps a. Using the Server drop-down at the top of the Surgient window, choose HQ- Vault-Server to connect to the HQ-Vault. b. The system should automatically log you in, but if you are prompted for login, below are the credentials. Username TrainingLab\Administrator Password I365password. c. On the desktop, double-click EVault Software CentralControl. This is the localized Windows CentralControl. 2. Open Agent Configuration a. Right-click SQL01 and choose Agent Configuration. We re able to choose SQL01 because we ve overwritten FS02 with the restore of SQL01 s data. 3. Vaults Tab a. On the Vaults tab, you can modify existing Vault profiles are add additional Vault Connections. If you were to choose to Dual Vault, you would need t a second Vault profile created here. 76 EVault Software - 2011 i365, A Seagate Company
4. Retentions Tab a. On the Retentions tab, you can modify existing retentions or create new retentions to meet your business and compliance needs. Please review the course titled EVault - Course 411 (Understanding EVault Retentions) for more information. 5. Open File Tab a. On the Open File tab, you can manage either Open File Manager or Open Transaction Manager. These products are used for pre-volume Shadow Copy systems and are add-on products that allow you to protect open files on those systems.. 77 EVault Software - 2011 i365, A Seagate Company
6. Notification Tab a. On the Notifications tab, you should always have emails sent when there s a failure. It s up to you if you want emails sent on error or success as well. You will need to fill out the email settings according to your environment. EVault sends its notifications similar to an anonymous email (sendmail). If you need to provide an authenticated an account, you can do so at the bottom. I ve filled out some fictitious information below. 7. Advanced Tab a. On the Advanced tab, you can change: Execution priority (CPU priority) Recommend leaving at the default but you have options to change the settings here. Bandwidth This is where you can set bandwidth throttling. Bandwidth throttling is on a per Agent basis and does not take into account other Agents sharing a network connection. If you need to have throttling on a site basis, you should use Quality of Service on your Firewall and throttle TCP port 2546 as a bulk item. This is the port that backup traffic traverses across. 78 EVault Software - 2011 i365, A Seagate Company
8. Plug-in Tab a. On the Plug-in tab, there is a place to entire a license key. These are really for versions of version 5 Vaults and prior. Starting with version 5.2 and above Vaults, all Plug-in licenses are managed on the Vault itself. 9. Power Management Tab a. The Power Management tab is only available if you ve installed the Agent Assistant at time of Agent install. This was one of options you had when installing the Agent. It provides additional features to do things like prevent shutdown when a backup is running. Really these settings were taken from our Desktop Agent. Most server Agents should be operational all the time and not shut down. 79 EVault Software - 2011 i365, A Seagate Company