Acronis

Acronis provides data protection to enable partners to protect their clients’ data no matter where it might reside across physical, virtual, and cloud-based environments. Backup and recovery capabilities include the ability to bring data back in whatever form it is needed: full image, file-based, and more. Disaster recovery minimizes downtime with the ability to quickly spin-up workloads in case of a DR event, and offers runbooks and test failover to help ensure everything will work when needed.

Prerequisites

• Acronis Agent is installed.

• ARTESCA is installed.

• ARTESCA root certificate is installed on Cohesity server.

• Install ARTESCA Root Certificate Authority to ensure a successful connection between ARTESCA and CloudArchive.

Storage Profile

Acronis writes to ARTESCA’s’ buckets with an average object size of 64MB.

Integration

Configure ARTESCA for Acronis

1. Create an Account for Acronis.

2. Create a Bucket to be used with Acronis.

3. Create an IAM user for Acronis.

4. Create IAM Policies to grant Acronis access and management permission to the S3 bucket.

   Note

   Replace bucketname with your bucket’s name

   Object Lock Enabled

   {
       "Version": "2012-10-17",
       "Statement": [
           {
               "Sid": "VisualEditor0",
               "Effect": "Allow",
               "Action": [
                   "s3:GetBucketLocation",
                   "s3:GetObject",
                   "s3:PutObject",
                   "s3:DeleteObject",
                   "s3:GetBucketVersioning",
                   "s3:GetBucketObjectLockConfiguration",
                   "s3:ListBucketVersions",
                   "s3:GetObjectVersion",
                   "s3:GetObjectRetention",
                   "s3:GetObjectLegalHold",
                   "s3:PutObjectRetention",
                   "s3:PutObjectLegalHold",
                   "s3:DeleteObjectVersion"
               ],
               "Resource": [
                   "arn:aws:s3:::bucketname/*",
                   "arn:aws:s3:::bucketname"
               ]
           },
           {
               "Sid": "VisualEditor1",
               "Effect": "Allow",
               "Action": [
                   "s3:ListAllMyBuckets",
                   "s3:ListBucket"
               ],
               "Resource": "*"
           }
                      ]
   }
   
   Object Lock Not Enabled

   {
     "Version": "2012-10-17",
        "Statement": [
            {
                "Sid": "SecureBucketPolicy0",
                "Effect": "Allow",
                "Action": [
                    "s3:PutObject",
                    "s3:GetObject",
                    "s3:DeleteObject",
                    "s3:GetBucketLocation",
                    "s3:GetBucketVersioning",
                    "s3:GetBucketObjectLockConfiguration"
                ],
                "Resource": [
                    "arn:aws:s3:::bucketname/*",
                    "arn:aws:s3:::bucketname"
                ]
            },
            {
                "Sid": "SecureBucketPolicy1",
                "Effect": "Allow",
                "Action": [
                    "s3:ListAllMyBuckets",
                    "s3:ListBucket"
                ],
                "Resource": "*"
            }
                      ]
   }
   

5. Attach Policies to the IAM user previously created.

6. Create Access Keys for the IAM user.

Configure ARTESCA as an Archive Location in Acronis

Important

The bucket must be created in ARTESCA prior to creation of the archive location.

1. In the Acronis Cyber Protect Cloud UI, on the side bar, navigate to BACKUP STORAGE -> Backups.

   

2. Go to the top right and click on Actions then click Add location.

   

3. Select Public Cloud.

   

4. Select S3 Compatible then click Connect.

   

5. Enter the following details:

   • Access Key ID - Access Key of the IAM user created.

   • Access Key Secret - Secret of the IAM user created.

   • ENDPOINT URL - URL of the ARTESCA S3 endpoint including the protocol.

     Host name of the ARTESCA S3 endpoint must be resolvable by the Acronis Agent.

   • Authentication Protocol - Select AuthV4.

   

6. Select the Bucket, and the Backup immutability period.

   

Create a Protection Plan

1. Navigate to MANAGEMENT -> Protection Plans.

   

2. In the top right, select Actions, then click Create Plan.

   

3. Define the destination and the rules.

   

4. Go to DEVICES and choose the machines to be protected with the plan.