Loading...

Adding an Amazon Hypervisor

Add an Amazon hypervisor to support data protection operations for all virtual machines hosted or managed by the hypervisor.

Before You Begin

  • The hypervisor represents an Amazon Web Services (AWS) account.

    Be prepared to enter a key pair (Access Key and Secret Key) obtained from the Amazon EC2 website section on Security Credentials.

    Alternatively, you can configure a proxy to use an IAM role for authentication, as described below.

  • For accounts that use data protection resources from another account, you can specify an Admin account that provides the data protection resources. For more information, see Using Resources from an Admin Account.

    First, create a hypervisor for the admin account (for example, for the MSP). After you create the admin hypervisor, create a hypervisor for the tenant account, and refer to the admin account using the Use admin account backup resources option.

    Note: For deployments that use an Admin account, configure both the virtualization clients (hypervisors) for the Admin account and the tenant account to authenticate using an access key and secret key pair.

Procedure

  1. From the navigation pane, go to Solutions > Virtualization.

    The Hypervisors tab appears.

  2. On the Hypervisors tab, click Add hypervisor.
  3. For Select type, select Amazon.
  4. For Hypervisor name or Client name, type a descriptive name for the hypervisor.
  5. Enter host or account information:
    • IAM role: If you select this option, select a proxy instance that has an IAM role associated with it in the AWS Console.

      Note: If IAM Role authentication is selected for the Amazon client, but a proxy that is not associated with the IAM role is used for a backup or restore, the operation fails.

    The IAM role must have appropriate permissions, which can be any of the following:

  6. If you already configured a hypervisor for an Admin account, you can select the Use admin account backup resources option and then select the Admin account from the Account list.

    This option applies only in environments where data protection resources are provided by a separate Admin account.

    If another Amazon hypervisor is not already configured, this field does not appear.

  7. From the Proxy list, select a previously deployed Amazon instance in the region to be protected.
  8. Click Save.

Last modified: 9/30/2019 4:19:29 PM