Creating a protected vault mirror

Edit online

Before you begin

To create a protected mirror, the system must have Vault Protection enabled. For more information, see Configuring vault protection.

About this task

CAUTION:
The individual vaults can differ in settings (such as IDA and SecureSlice). The mirror displays data that is stored in both underlying vaults with two caveats:
  • Usable Capacity is limited to the size of the smaller vault.
  • Used Capacity is reported as the greater used capacity of the vaults.

It is highly recommended that the storage pools are equal usable capacity, as any "extra" capacity in one or the other storage pools is unusable by the vault mirror.

Attention: Vault mirrors cannot be created if the system has reached the vault limit.

Versioning, Delete Restricted, Recovery Listing, SSE-C settings, and read or delete synchronous action do not apply for mirrored protected vaults.

Procedure

  1. Navigate to the Configure tab.
  2. Click Create Mirror under the Summary heading.
    The Create Mirror page appears.
  3. Click Protected Mirror and then click Next.
  4. Enter a name for the protected mirror in the Name field.
    Attention: Once you name the protected mirror, it cannot be renamed later.
  5. Enter a description in the Description field.
  6. Select from one of the three Mirror Write Configurations: Asynchronous, Synchronous, or Hard Synchronous:
    Asynchronous

    (Writes and Synchronous Deletes)

    A write response is returned once either vault has confirmed the write was successful. A delete response is returned once both vaults have responded, only one vault needs to confirm the delete was successful.

    Synchronous

    (Writes and Deletes)

    A response is returned once both vaults have responded, only one vault needs to confirm the operation was successful. This means the mirror can handle one vault being inaccessible and hence is more tolerant to outages.

    Hard Synchronous

    (Writes and Deletes)

    A response is returned once both vaults have responded, both vaults need to confirm the operation was successful. This means the mirror cannot handle any vaults being inaccessible and hence is not tolerant to outages.

  7. Optional: Enable Restrictive Access Control.
    When Restrictive Access Control is enabled, vault access permissions do not automatically provide equivalent object access permissions. Object read, metadata write, and access control updates can only be performed by the owner of the object in a protected vault or any user authorized by the owner. If this setting is not enabled, users with vault permissions inherit equivalent object permissions such as the ability to modify object protection. Once enabled, you cannot disable Restrictive Access Control.
  8. Optional: Select the operations on the mirror that should be synchronous.
  9. If a protected vault exists that should serve as one of the vaults in the protected mirror, select that vault from the Basis vault menu.
    Only protected vaults can serve as the base vault. You cannot use an existing protected vault that is deployed to an access pool as the base vault. You must first undeploy the access pool before you can use it as the base vault.
  10. In the Protection section, configure the mirror's retention settings.
    If you are creating a new protected vault as the first vault, then the vault inherits the retention settings of the mirror. If you selected a basis vault, then the basis vault's Data Retention Duration values appear and cannot be changed.
    • Select Allow permanent retention of objects in this vault if you want the ability to create permanently retained objects in this vault. Once permanent retention of objects is allowed on the vault, it cannot be disabled.
    • In the Data Retention Durations section, accept the displayed values or specify custom values:
      • Retention Duration: The default retention period (in days) for an object in a vault in this mirror. Protected objects that are created without a specified retention period are given this value as a retention period.
        Choose one of the following default retention durations:
        • A finite retention period. Accept the default or update the value to a number of days between the Minimum Duration and Maximum Duration.
        • Permanent retention, if it is enabled on this mirror.
      • Minimum Duration: The minimum retention period (in days) for an object in a vault in this mirror. When a protected object is created, this is the minimum value that can be specified for its retention period.
      • Maximum Duration: The maximum retention period (in days) for an object in a vault in this mirror. When a protected object is created, this is the maximum value that can be specified for its retention period.
  11. Click Save to create the protected vault mirror.
    The Mirror:<Mirror Name> page displays with an alert that indicates:
    Mirror setup successful.
  12. If an existing protected vault was used as the basis of the protected mirror, skip to step 13, otherwise follow these steps:
    1. Click Vault 1: Create Vault to add the first vault to the vault mirror.
      The Create New Vault page displays.
    2. Select a storage pool and click Continue to begin creating the vault.
    3. Follow the steps in Creating vaults to create the vault.
      Note: You cannot create mirrored protected vaults using a protected vault template.
      The Mirror:<Mirror Name> page displays.
  13. Click Vault 2: Create Vault to create the second vault of the protected mirror.
    You cannot add an existing vault as the second vault.
    The Create New Vault page displays.
  14. Select a storage pool and click Continue to begin creating the vault.
    Note: The second vault must be in a different storage pool than the first vault.
  15. Follow the steps in Creating vaults to create the vault.
    Note: You cannot create mirrored protected vaults using a protected vault template.
  16. Click Save.