Managing CommCell Policies in the Global Command Center

Using the CommCell policies, you can simultaneously apply activity control, email, security, or additional settings to multiple CommCells.

For example, if you turn off the Data restore activity control setting, the CommCell administrator cannot restore data from the service CommCell associated with the CommCell policy.

Use the following CommCell policies to apply activity control, email, security, or other additional settings to multiple CommCells:

• Activity control settings:

  • All job activity: When enabled, all operations in the associated service CommCell are allowed. When disabled, data management, data recovery, auxiliary copy, data aging, deduplication, Disaster Recovery backup, scheduled export media, scheduled reports, quick and complete inventory (in a blind library), and content indexing operations cannot occur. Additionally:

    • CommCell operations cannot be started, and are skipped.

    • Running and waiting operations can run to completion.

    • Operations in a pending, queued, or suspended state cannot be resumed until this option is enabled. (Job states are indicated by the Job Controller.)

    • Pending operations cannot run until this option is enabled.

    • Index restore jobs, immediate export media jobs and reports are still enabled.

  • Data backup: When enabled, backup operations are allowed in the service CommCell. When disabled, backup operations are not allowed. Additionally:

    • Backup operations cannot be started and are skipped.

    • Running and waiting backup operations can run to completion.

    • Backup operations in a pending, queued, or suspended state cannot be resumed until this field is enabled. (Job states are indicated by the Job Controller.)

    • Pending backup operations cannot run until this field is enabled.

  • Data restore: When enabled, restore operations are allowed in the service CommCell. When disabled, restore operations are not allowed. Additionally:

    • Restore operations cannot be started and are skipped.

    • Running and waiting restore operations can run to completion.

    • Pending restore operations cannot run until this field is enabled.

  • Data aging: When enabled, data aging operations are allowed in the service CommCell. When disabled, data aging operations are not allowed. Additionally:

    • Running data aging operations might run to completion.

    • Physical pruning of data that is marked aged is skipped.

    • None of the CommCell entities can be deleted. For example, you will not be able to delete the storage policy copies, subclients, backupsets and libraries etc.

  • Auxiliary copy: When enabled, auxiliary copy operations are allowed in the service CommCell. When disabled, auxiliary copy operations are not allowed. Additionally:

    • Auxiliary copy operations cannot be started and are skipped.

    • Running and waiting auxiliary copy operations can run to completion.

    • Auxiliary copy operations in a pending, queued, or suspended state cannot be resumed until this field is enabled. (Job states are indicated by the Job Controller.)

    • Pending auxiliary copy operations cannot run until this field is enabled.

  • Scheduler: When enabled, all scheduled jobs are allowed to occur in the service CommCell. When disabled, all the scheduled jobs cannot be started and are skipped.

  • Data verification: When enabled, data verification operations run on backup and archive operations.

    During a data verification operation, data is checked to see that it is valid for recovering and for being successfully copied during an auxiliary copy operation. Note that the data verification is not set by default for any agents.

• Email settings: To send email messages from the Command Center, you must set up an email server. For example, when you send log files, you can send email notifications to users.

  You can use classic authentication via username and password for most email servers.

• Security settings:

  • General:

    • Requires authcode for installation: A company authcode is required if you plan to mass distribute or run a silent installation of the installation package for end users.

    • Two-factor authentication: You can use two-factor authentication (which is a form of multi-factor authentication) to add an extra level of security to the service CommCell login requirements. Passwords alone might not provide enough security to protect your service CommCell environment from unauthorized access.

    • Limit user logon attempts: You can limit the number of times a user can attempt to log on. After the limit is reached, the user account is locked for the time period that you specify.

  • Privacy:

    Allow users to enable data privacy: Use the privacy feature at the service CommCell level to enable administrators and users to protect their servers by preventing others from viewing and downloading the server data.

    Before privacy can be set for servers, privacy must be enabled at the service CommCell level. If privacy is disabled at the service CommCell level, locked servers remain locked but no new servers can be locked.

  • Passkey:

    Allow users to enable passkey:

• Settings: Use settings to configure UI functionality such as password complexity requirement or session timeout value.

Before You Begin

• You must be the CommCell administrator or a part of the master user group on the service CommCell.

• Enable active management of relevant service CommCells.

Procedure

1. From the Global Command Center navigation pane, go to Manage > Config blueprint > CommCell policies.

   The CommCell policies page appears.

2. On the top right corner of the page, click Add.

   The Add CommCell policy dialog appears.

   1. In the Name box, enter the policy name.

   2. From the Type list, select one of the following policy types:

   * Activity Control

   * Email settings

   * Rate Limiter
   For more information, see Controlling API requests with a rate limiter policy

   * Security

   * Settings

   3. Click Add.

3. Based on your policy type selection, one of the following pages appears:

   • If you selected Activity control, the activity control policy page appears.

     1. On the Configuration tab, disable any one of the activity control settings that are enabled by default.

     2. On the Targets tab, on the top right corner of the page, click Add.

        The Add dialog box appears.

     3. From the Service CommCells list, search and select the service CommCells.

   • If you selected Email settings, the email settings policy page appears.

     1. On the Configuration tab, in the Email settings section, click edit .

        The Configure email page appears.

     2. Enter the details for the email server:

        Note

        If you change the default mail server port number or disable or enable SSL, on the CommServe computer, restart the Server Event Manager (EvMgrS) service. For instructions about restarting services, see Using Process Manager to View and Manage Commvault Services.

        1. In the SMTP server box, enter the name of the mail server.
           For example, enter smtp.office365.com for the Microsoft Office 365 email server.

        2. In the SMTP port box, enter the mail server port.

           Note

           • The default port is 25.

           • For the Microsoft Office 365 email server, enter port 587.

        3. In the Sender email box, enter an email address.

        4. In the Sender name box, enter the sender name.

        5. To specify authentication options for the mail server, move the Use authentication toggle key to the right.

           • Enter the user name and password recognized by the mail server.

     3. On the Targets tab, on the top right corner of the page, click Add.

        The Add dialog box appears.

        • From the Service CommCells list, search and select the service CommCells.

   • If you selected Rate Limiter, the API rate limiter page appears that allows you to configure the API rate limiter policy for service CommCells:

     1. On the Configuration tab, click the Add button .

     2. In the Request per second box, enter the time in seconds.

     3. In the Burst capacity box, enter the time in seconds.

     4. Click Save.

     5. On the Targets tab, in the top-right corner of the page, click Add.

        The Add dialog box appears.

     6. From the Service CommCells list, search and select the service CommCells.

     7. Click Save.

   • If you selected Security, the security policy page appears:

     1. On the Configuration tab, enable or disable security policies, such as, Limit user logon attempts and Allow users to enable passkey.

     2. On the Targets tab, on the top right corner of the page, click Add.

        The Add dialog box appears.

     3. From the Service CommCells list, search and select the service CommCells.

   • If you selected Settings, the settings policy page appears:

     1. On the Configuration tab, in the Settings section, click Add.

        The Add setting dialog box appears.

     2. In the Name box, enter the setting name.

     3. Click Save.

     4. On the Targets tab, on the top right corner of the page, click Add.

        The Add dialog box appears.

     5. From the Service CommCells list, search and select the service CommCells.