NetApp AltaVault AVA400, Administration Manual

Page: 28 / 276

28
NetApp AltaVault Cloud Integrated Storage Administration Guide
Beta Draft
Using the AltaVault configuration wizards Using the Wizard Dashboard
– Add a symmetric key (KMIP key) as the encryption key.
– Add a secret data key (KMIP key) for each of the authentication fields.
2. Specify the Location from the drop-down list.
3. Storage Class - Specify the storage class from the drop-down list:
– Standard (Standard storage class)
– Nearline
4. Project ID - Specify the unique project ID associated with the bucket.
5. Client email - Specify the service account email address value from the API Manager > Credentials page of the
Google developers console.
6. Private Key - Select Browse to specify the private key for your Google Cloud Storage service provider account.
Google provides the private key in JSON and PKCS12 format. The AVA cloud credentials page requires a
private key with a required extension of .pem or .json. You can read the client email and project ID from the
.json file.
Note: When connecting to Google Cloud storage with FIPS enabled, AltaVault requires all imported and generated keys sizes for
RSA-based and DSA-based certificates to be 2048 bits or higher. Connections to using 1024-bit certificates will not complete. It is
recommended to generate a new private key (2048-bit or higher) for Google Cloud Storage, save it in a.json file, and upload that
file when configuring AltaVault with Google Cloud Storage.
7. Specify the hostname.
8. Specify the bucket name associated with your cloud service provider account. If Nearline is selected as Storage
Class, the bucket should not be created through Google Developers Console. The Nearline bucket will
automatically be created by AltaVault. You can use buckets to organize your data and control access to your data,
but bucket cannot be nested.
For more information on bucket name restrictions, see Google documentation .
9. Specify the port number. Port 80 is not supported.
10. Enable Archiving - Enable this option if you are using the
AltaVault
for cold storage mode. For more information
about cold storage mode, see “Deployment guidelines” on page 13 .
11. Enable Cloud Deduplication - Enabling this option may improve deduplication rates for repetitive backup datasets,
lowering cloud storage costs. Disabling this option is recommended for Amazon Glacier to improve recovery of
recently written data from cache, but can decrease deduplication rates and increase cloud storage costs.
12. Enable Cloud CA Certificate - Specify a cloud CA certificate that will be used to validate the server certificate of
cloud provider. This must be a .pem or .json extension file.
13. Select the Enable Proxy check box to enable proxy server settings and specify:

Hostname/IP address - Specify the hostname or the IP address.

Ports - Specify the port numbers for access.

Username - Specify the name of the user for access.