NetApp AltaVault AVA400, Administration Manual

Page: 27 / 276

NetApp AltaVault Cloud Integrated Storage Administration Guide 27
Beta Draft
Using the Wizard Dashboard Using the AltaVault configuration wizards
– Add a symmetric key (KMIP key) as the encryption key.
– Add a secret data key (KMIP key) for each of the authentication fields.
2. If your provider is AT&T, specify the following settings:
Storage Policy - Select one of the following storage policies from the drop-down list:

Local Replication - Stores data stored in one location and protects it using erasure coding.

Remote Replication - Stores data in two locations maintains a copy in one data center and replicates it to a
geographically remote data center.
3. Specify the following settings:

Subtenant ID - Specify the subtenant ID that EMC Atmos uses to authenticate each request.

UID - Specify the user ID that EMC Atmos uses to authenticate each request.

Shared Secret - Specify the shared secret that EMC Atmos uses to authenticate each request. When the client
application builds a Web service request, EMC Atmos uses the shared secret to create a signature entry as a
part of the request. The shared secret must be associated with the subtenant ID and application ID created by
the EMC Atmos-based storage provider.
4. Specify the hostname.
5. Specify the bucket name associated with your cloud service provider account. You can use buckets to organize
your data and control access to your data, but they cannot be nested. If the bucket name does not exist, the bucket
is created during initial
AltaVault
replication.
6. Specify the port number.
7. Enable Archiving - Enable this option if you are using the
AltaVault
for cold storage mode. For more information
about cold storage mode, see “Deployment guidelines” on page 13 .
8. Enable Cloud Deduplication - Enabling this option may improve deduplication rates for repetitive backup datasets,
lowering cloud storage costs. Disabling this option is recommended for Amazon Glacier to improve recovery of
recently written data from cache, but can decrease deduplication rates and increase cloud storage costs.
9. Enable Cloud CA Certificate - Optionally, specify a cloud CA certificate that will be used to validate the server
certificate of cloud provider. This must be .pem extension file.
10. Select the Enable Proxy check box to enable proxy server settings and specify:

Hostname/IP address - Specify the hostname or the IP address.

Ports - Specify the port numbers for access.

Username - Specify the name of the user for access.

Password - Specify the user’s password.
Configuring Google Cloud Storage
1. Select yes or no to use keys from KMIP server from the drop-down list. When configuring the KMIP server, you
must:
– Use the same username and password as created in KMS.
– Upload the same certificate as downloaded from KMS after signing it.