You can modify steps and configuration settings for a cleanroom runbook, including recovery options, auto-scaling, security, and post-recovery validation.
Go to the runbook
-
In the Command Center navigation pane, go to Secure > Cleanroom recovery.
-
On the Recovery groups tab, click the recovery group that contains the runbook.
-
Click the runbook.
Steps tab
-
Reorder steps: Add a priority step, or reorder steps.
-
Skip: To skip a step, expand the phase it's in, and then enable Skip.
-
Reset overridden options: When you modify a recovery option for a cleanroom site, you can apply that change to all resources in the associated runbook:
-
Reset static IP address settings: Resets static IP addresses on resources.
-
Reset repave options: Resets the Repave VM with new secure image setting on resources.
-
Configuration tab
Recovery options
-
Cleanroom site: To select a different cleanroom site, click the edit button, select a site, and then confirm the change.
-
Recovery point: To select a recovery point, click the edit button, and then select one of the following:
-
Latest: Use the most recent recovery point.
-
Point in time: Use a specific recovery point. A default time is selected. To change the time, click the calendar icon and select a date and time.
-
-
Storage copy type: To select a different storage copy type, click the edit button, and then select one of the following:
-
Auto: Let Commvault select a cloud or AGP copy.
-
Microsoft Azure Storage / Amazon S3: Select a cloud copy.
-
Air Gap Protect: Select an AGP copy.
Resource readiness, recovery backup time, and last full backup time reflect the selected storage copy type. A full backup copy must be available for the selected type. If no backup copy is available, the resource readiness displays a not ready status.
-
Access node auto-scaling (recommended in most cases)
By default, Commvault auto-scales access nodes for cleanroom operations. Auto-scaling allocates access nodes dynamically, based on demand, and then decommissions the access nodes when they're not needed.
If you want to configure custom auto-scaling for security reasons, disable default auto-scaling. When you disable default auto-scaling, the recovery group inherits access nodes from its cleanroom site's hypervisor and threat scan is also disabled because it requires auto-scaling.
For details about the resources that Commvault SaaS creates in your cleanroom recovery Azure subscription when you use default auto-scaling, see Resources automatically created in your Azure or Commvault subscription for cleanroom recovery.
Security
You can associate users or groups with roles to determine which actions users can perform. You can also assign users or groups as owners that have management permissions for the resources in a runbook.
You can use predefined roles, modify predefined roles, and create new roles.
-
Associations: Associations between users and user groups with security roles.
-
Owners: Users and user groups who can access the runbook.
-
Permissions: Permissions (such as add, edit, or delete) that owners have.
Important
Users and associations that are created before recovery are disabled in your recovered control plane. After the control plane is recovered, you can't create additional users.
Customization options
-
Delay between priorities (in minutes): The number of minutes that Commvault waits for higher priority VMs to start before processing the next set of machines.
-
Continue to next priority on failure: Proceed to the next priority when a VM can't be processed successfully.
-
Power off the recovered VM after recovery and validation: Power off recovered VMs after they're validated.
Cleanup options
For information about cleanup, see Clean up recovered resources for cleanroom.
Validation options
-
Run threat scan: Run a threat scan on recovered VMs.
Every 7 days, the count of discovered threats is reset to 0.
-
Run Windows Defender: Run a Microsoft Windows Defender Antivirus scan on recovered Windows VMs.
-
Custom scripts: Scripts that validate recovered VMs.
You can upload a file or enter a UNC path and credentials to access the path.
-
Windows PowerShell: Enter as
[file].ps1. -
Linux shell: Enter as
\\[path]\[file].sh.
If you have multiple scripts, to change the order they run in, click Reorder, and then drag and drop the scripts.
-
Jobs tab
The Jobs tab lists the jobs that are associated with the runbook.