Module 6: Manage Data

Introduction
In this module you learn about managing data with a
EMC Data Domain system

Objectives
Describe & perform snapshots

Describe & perform a fastcopy

Describe retention lock

Describe & perform data sanitization

Describe & perform encryption for data at rest

EMC Education Services

Lesson 1: Snapshots

original copy

/data/ col1 /backup

/data/ col1 /backup/files

snapshot taken at 22:24 GMT

EMC Education Services

snapshot copy

/data/ col1 /backup / .snapshot

/data/ col1 /backup/files/ .snapshot

22:24 GMT snapshot saved

Manage Snapshots

EMC Education Services

Lab 6.1: Configure Snapshot

1.

2.

3.

4.

Locate your lab guide

Go to Lab 6.1 Configure
Snapshot
Follow instructions in lab
guide
Consult instructor if you
have questions

EMC Education Services

Lesson 2: Fastcopy

source
directory

copy

target
directory

If you change source or target directory

while copying, they wont be equal

EMC Education Services

Perform Fastcopy

EMC Education Services

Lab 6.2: Perform Fastcopy

1.

2.

3.

4.

Locate your lab guide

Go to Lab 6.2 Perform
Fastcopy
Follow instructions in lab
guide
Consult instructor if you
have questions

EMC Education Services

Lesson 3: Retention Lock

Protects against

User errors

Malicious activity

Protects locked files in these formats

Readable

Non-writeable

Non-erasable

Fully integrated with Data Domain replication

Sets/enforces lock set by user/software

EMC Education Services

Retention Lock (Continued)

User/software initiates

Retention Lock locks

Protects locked files for up to 70 years

You specify retention period

You set minimum/maximum retention periods globally

You can

Override retention settings

Update permissions on locked files

Rename empty directories

EMC Education Services

Retention Lock (Continued)

safety margin
(min-retention-period)

valid atime period

max-retention-period (up to 70 years)

current time

To lock a file, user/software must set last access time (atime)

Atime must be set to time beyond current date/time & beyond

configured minimum retention period

Defaults

Minimum retention period = 12 hours

Maximum retention period = 5 years

EMC Education Services

10

Configure Retention Lock

EMC Education Services

1.

Select system in navigation pane

2.

Data Management > MTree

3.

Go to Retention Lock area

4.

Click Edit

5.

Check box to enable retention lock

6.

Enter retention period or select Default

7.

Click OK

11

Lesson 3: Sanitization
Also called electronic shredding

Overwrites deleted files (no residual data remains)

Included with retention lock

Is often a government requirement

Used to resolve classified message incidents (CMIs)

Data not extracted or deleted

Use command system sanitize start

EMC Education Services

12

Lab 6.3: Configure Sanitization

1.

2.

3.

4.

Locate your lab guide

Go to Lab 6.3 Configure
Sanitization
Follow instructions in lab
guide
Consult instructor if you
have questions

EMC Education Services

13

Lesson 4: Encryption of Data at Rest

Also called inline data encryption

Requires software license

Enables data on system drives or external storage to

be encrypted, while being saved & locked, before its
moved to another location

Do not lose filesys encryption lock passphrase!

All data encrypted (cant encrypt more granularly)

Data in system before encryption enabled not

automatically encrypted, but it can be later

EMC Education Services

14

Encryption Flow

data enters
NFS, CIFS, VTL
DD Boost

segm
ent
fingerprint
deduplicate (globally compress)
group
locally compress
encrypt

EMC Education Services

15

Configure Encryption
1. Disable file system
2. Enable encryption

3. Display relevant encryption & algorithm configuration (optional)

4. Select alternative cryptographic algorithm (optional)

5. Enable file system

EMC Education Services

16

Apply Encryption Changes

1.

If security officer authorization not enabled,

enable

2.

Log in as security officer

3.

Enable authorization

EMC Education Services

17

Deactivate Encryption

Only administrative users can deactivate encryption

The command is

If security officer authorization not enabled, enable

Log in as security officer

Enable authorization

EMC Education Services

18

Lab 6.4: Configure Encryption

1.

2.

3.

4.

Locate your lab guide

Go to Lab 6.4 Configure
Encryption
Follow instructions in lab
guide
Consult instructor if you
have questions

EMC Education Services

19

Lesson 5: File System Cleaning

Cleaning reclaims physical storage occupied by deleted objects

SW backups to Data Domain

file A deleted with no retention lock

file A deleted at next cleaning

file B deleted, retention lock initiated

file B maintained until retention lock period ends

EMC Education Services

20

Cleaning
container 2

container 1

disk block

container 1

disk block

free space

dead segment

valid segment

Reclaims space

Deletes duplicate segments if they exist

EMC Education Services

21

Lab 6.5: Configure File System Cleaning

1.

2.

3.

4.

Locate your lab guide

Go to Lab 6.5 Configure
File System Cleaning
Follow instructions in lab
guide
Consult instructor if you
have questions

EMC Education Services

22

Lesson 6: Monitor File-System Space Usage

Factors effecting how fast data on disk grows

Size of data sets getting backed up

Compressability of data getting backed up

Retention period specified in backup software

Monitor disk use closely when you backup large data

sets that show low compression factors & have large
retention times

EMC Education Services

23

File System Summary Tab

filesys
show
space
filesys
show
compression

EMC Education Services

24

Space Usage Tab

Amount of data footprint reduction

Space
used
local
compression,
or
data sent
to after
Data deduplication,
Domain system
before
deduplication,
both
local compression, or both

EMC Education Services

25

Space Consumption Tab

EMC Education Services

26

Daily Written Tab

EMC Education Services

27

Module Review
Snapshots enable you to save directories & files at a
specific time

Fastcopy enables you to save an entire directory

Retention lock prevents locked files from being

deleted/modified for up to 70 years

Sanitization overwrites deleted files

Encryption for Data at Rest enables you to encrypt

data while saving & locking

EMC Education Services

28

Module Review (Continued)

The compression factor is pre-compression divided by
data collection

Cleaning reclaims Data Domain system space

EMC Education Services

29