Use this dialog box to establish or change system options at the CommCell level. This dialog box includes the following tabs:
System (General)
For information about this tab, please see System (General).
System (Change Password)
Use this dialog box to modify the Media and Network Passwords.
Change Media Password
-
Enter New Media Password
Type the new name of the media password.
-
Confirm New Media Password
Type the media password again for confirmation.
-
Enter Old Media Password
Type the old media password here.
Change Network Password
-
Change password for computer
When selected, you can change the password used by client computers.
-
New Password
Type the new password.
-
Confirm Password
Re-type the new password for confirmation.
System (Advanced)
Currency
-
Currency Symbol
The currency option assigns a currency type to cost settings, for example, resources in VM Lifecycle Policies.
Key Performance Indicators (KPIs)
This section allows you to configure options for reports.
-
Strike
This section allows you to configure the setting for strikes that affect the Service Level Agreement (SLA) calculation.
-
Exclude strikes older than N Days
Allows you to exclude failed backup jobs (strikes) from the Strike Count Report after they reach a specified age.
-
-
SLA
This section allows you to configure settings for the SLA calculation used in Reports.
-
SLA for Last N Days
The SLA (Service Level Agreement) option allows you to specify the time range used to calculate SLA for all clients in the CommCell.
The formula used to calculate SLA is: Number of Clients that Met SLA / Total Number of Clients. A client meets SLA when all of its subclients and databases are protected by at least one successful full, incremental, differential, or log backup job during the specified time range. A client misses SLA when there are no successful jobs run during the specified time range. The default setting is 30. This option can be overwritten by the SLA option at the Client Group level.
-
Include Snap Jobs with no Backup Copy as Met SLA
When selected, counts snap backup jobs that have no backup copy as Met SLA.
-
Grace Period for New Clients N Days
When selected, allows you to configure the number of days that newly added clients will not be considered as part of the SLA calculation.
-
-
Laptop Clients
This section allows you to configure settings for laptop clients that contribute to the SLA calculation.
-
Include All Laptops
When selected, includes all laptop clients in the SLA calculation.
-
Exclude Laptops Offline Over N Days
When selected, allows you to configure the number of days laptops must be offline before they are excluded from the SLA calculation.
-
Exclude Laptops Offline Over Applicable SLA Days
When selected, any laptop clients that have been offline over the number of days configured in the SLA for last N Days option will be excluded from the SLA calculation.
For example: if the SLA for last N Days option is set to 60, any laptops that have been offline for 61 days will be excluded from the SLA calculation.
-
-
Exclude DB (Command Line) Subclients
When selected, allows you to exclude Command Line backups of database agents.
Copy Redundancy
Allows you to specify the minimum number of copies required to meet the copy redundancy SLA that is calculated in the Copy Redundancy SLA Report.
Maximum Allowed Auxiliary Copy Fallen Behind
The maximum time interval that auxiliary copy can fall behind before it goes into Warning/Critical status in the Fallen Behind Secondary Copies tile in the Health Report.
Recovery Point Objective (RPO)
Enter the number of days, hours, and minutes that make up the RPO. The RPO is the maximum number of hours that data can be lost during a service disruption. These settings will be used to calculate the data that appears in the Recovery Point and Time Report.
Recovery Time Objective (RTO)
Enter the number of days, hours, and minutes that make up the RTO. The RTO is the maximum amount of time allowed to restore after a service disruption. These settings will be used to calculate the data that appears in the Recovery Point and Time Report.
System (Security)
To modify the settings in this dialog box, you must have administrative privileges.
Enable Two Factor Authentication
To put the CommCell environment into a security mode, where users are required to log on using a PIN along with their passwords, select this check box. Before you select this check box, you must configure the following in the CommCell environment:
-
A mail server, using the E-Mail & Web Server Configuration option in the Control Panel.
-
CommCell users must have a valid email address specified in their profile.
Allow users to enable data privacy
To allow client owners to use the Privacy feature on their clients, select this check box. The Privacy feature prevents users who are not client owners from seeing the data on the client. If the Allow users to enable data privacy check box is cleared, locked clients remain locked, but no new clients can be locked.
Number of previous passwords you cannot reuse
Specify the number of previous passwords the user cannot reuse at the CommCell level. For instructions to enable this option, see Enabling Password History.
System (Encryption)
Use this tab to configure global level encryption settings for the software encryption.
Software Encryption
Use this tab to configure the global level settings for software encryption for the new storage policy copies. You can also prevent the users from modifying the encryption settings once configured for a storage policy copy.
Primary Copy encryption for standalone copies and Global copies
You can choose to encrypt or not encrypt the data for a standalone storage policy primary copy, a global secondary copy policy and a global deduplication policy. Select one of the following options:
-
Encrypt Data: Select this option to encrypt the data.
-
Do not encrypt: Select this option to not encrypt the data.
Auxiliary copy encryption
Select one of the following options for to configure data encryption for data copied to a secondary copy:
-
Preserve encryption mode as in source: System preserves the same encryption cipher used on the primary copy while copying the data to the secondary copy.
-
Re-encrypt data using selected cipher: System encrypts the data again using a new cipher other than the cipher used on the primary copy while copying the data to the secondary copy.
-
Store plain text: System stores the data as plain text.
- Encrypt on network using selected cipher: System encrypts the data while transferring on the network, and then stores the data on the secondary copy as plain text.
Data Encryption Algorithm
If you selected the option Encrypt Data, Re-encrypt data using selected cipher or Encrypt on network using selected cipher, select the following:
-
Cipher: Select appropriate encryption algorithm.
-
Key Length: Select appropriate key length.
Key Management Server
You can select a key management server.
Direct Media Access (External Restore Tools)
Select one of the following storage options to store the data encryption keys on the media:
- Via Media Password: System stores the data encryption keys scrambled on the media.
No Access: System does not store the data encryption keys on the media.
Select a Key Management Server: Select a key management server to store the encryption keys. For information about key management servers, see Managing a Key Management Server.
Prevent changes to copy software encryption settings: Select this option to disallow any changes to the encryption settings on a storage policy copy after the user configures the settings.
Hardware Encryption
Use this tab to configure the global level settings for hardware encryption for the new storage policy copies. You can also prevent the users from modifying the encryption settings once configured for a storage policy copy.
Use Hardware Encryption: Select this option to enable hardware encryption. Clear the checkbox to disable.
Direct Media Access (External Restore Tools)
Select one of the following storage options to store the data encryption keys on the media:
-
Via Media Password: System stores the data encryption keys scrambled on the media.
-
No Access: System does not store the data encryption keys on the media.
Enable Encryption on Chunkmap trailers: Select this option to encrypt the chunkmap trailers that contains the metadata of the chunks created for the backup data. When you select this option, the options in Direct Media Access (External Restore Tools) are disabled.
Note
If you enable chunkmap trailer encryption, the data cannot be restored by using the Media Explorer and the Tape Catalog feature.
Prevent changes to copy hardware encryption settings: Select this option to disallow any changes to the encryption settings on a storage policy copy after the user configures the settings.