The Data Immutability feature in HPE StoreOnce Catalyst Storage (HPE StoreOnce software version 4.3.2 or higher) prevents the backup applications from modifying or deleting StoreOnce Catalyst items during a specific (immutable) period. Additionally, it protects data from accidental deletion and modification through various security attacks like ransomware.
Once an item is marked as immutable, its data cannot be modified and its immutable (retention) time cannot be reduced.
Maximum ISV Controlled Data Immutability Retention
This setting on the HPE StoreOnce console (in the Security section under the Catalyst store) enables the backup software to control data immutability on a per item basis. To get the benefit of having the data stored on the HPE StoreOnce appliance being made immutable, set the Maximum ISV (Independent Software Vendor) Controlled Data Immutability Retention (Days) period to a value greater than the retention period set in Commvault. For example, if your storage pool in Commvault has a 30 day retention, set the Maximum ISV Controlled Data Immutability Retention value to 31 days.
Within Commvault, you would also need to enable WORM Storage lock. For more information, see Configuring WORM Storage Mode on Disk Libraries.
When WORM mode is configured, HPE StoreOnce items written will have immutable tags which displays the date on which the WORM Storage lock expires. For example, Immutable 1646762500.
Troubleshooting
If the Maximum ISV Controlled Data Immutability Retention is set to a value less than the Commvault retention period, the following error occurs:
Error Code: [62:3200]
Description: Error occurred in Disk Media, Path [demoworm\U3QYQM_09.30.2022_14.23\CV_MAGNETIC\V_1042] [Maximum ISV controlled data immutability retention configured is lower than the copy retention. Failed to set retention lock on the object. Please review and configure data immutability retention and copy retention correctly.]. For more help, please call your vendor's support hotline.