Forum Discussion

JimmyB2's avatar
JimmyB2
Level 4
4 years ago

Veritas System Recovery adding cloud storage issue

Hi all,

I would like to add S3 compatible cloud storage as my backup destination.

Firstly, I have created a cloud instance as per https://www.veritas.com/support/en_US/doc/38007533-136670227-0/v132418412-136670227

Since I dont have Certificate Authority (CA)-signed certificate, I have to use SSL: 0 (disabled).

However, when I tried to add cloud backup destination, in the packet received from the cloud library I see this message: The authorization mechanism you have provided is not supported. Please us AWS4-HMAC-SHA256

Unfortunately, on the cloud library (netapp) there is not possible to change the configuration.

Do you think that there is any workaround to the issue in such situation?

Thanks for your opinions.

 

Cloud
S3
Windows 10
  • akihiro1's avatar
    akihiro1
    4 years ago

    I got more info.

    It looks like that the message "The authorization mechanism you have provided is not supported. Please us AWS4-HMAC-SHA256" means AWS signature version 4.

    ------------------------------
    <Authenticating Requests: Using the Authorization Header (AWS Signature Version 4)>
    https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-auth-using-authorization-header.html

    AWS4-HMAC-SHA256
    The algorithm that was used to calculate the signature. You must provide this value when you use AWS Signature Version 4 for authentication. The string specifies AWS Signature Version 4 (AWS4) and the signing algorithm (HMAC-SHA256).
    ------------------------------

    On the other hand, VSR support only version 2 as below.

    ------------------------------
    <VSR 21 User's guide>
    https://www.veritas.com/content/support/en_US/doc/38007533-139298167-0/v132418408-139298167

    Veritas System Recovery supports only signature Version 2 for the S3-compatible cloud storage.
    ------------------------------

    Please check the signature version for your s3 compatible device.

5 Replies

Sort By
  • akihiro1's avatar
    akihiro1
    Moderator
    4 years ago

    I tested minio as a private cloud software with VSR 21.2 in-house. Sorry that I do not know about the other cloud software.

    <Minio>
    https://min.io/

    <Setup minio>
    1. Download minio.exe. (https://dl.min.io/server/minio/release/windows-amd64/minio.exe)
    2. Copy minio.exe to E:\.
    3. Create E:\data.
    4. Open Command Prompt.
    5. Run "minio.exe server E:\data".

    Endpoint: http://10.0.0.10:9000 http://127.0.0.1:9000
    RootUser: minioadmin
    RootPass: minioadmin

    6. Open Chrome.
    7. Access http://10.0.0.10:9000
    8. Login using Access Key: minioadmin and Secret Key: minioadmin
    9. Press "+" icon, and press "Create bucket".
    10. Type "test" as bucket name, and press Enter key.

    <Setup VSR>
    1. Open Command Prompt.
    2. Run below.
      cd "C:\Program Files\Veritas\Veritas System Recovery\Agent"
    3. Run "cloudinstance -addinstance".
    4. Type below.

    CloudInstance Name: minio
    CloudInstance Provider: compatible-with-s3
    CloudInstance ServiceHost: 10.0.0.10
    SSL Supported (0\1\2): 0
    HTTP Port: 9000
    HTTPS Port: 443

    5. Confirm the below message.

    Instance minio added successfully

    CloudInstance Name: minio
    CloudInstance Provider: compatible-with-s3
    CloudInstance ServiceHost: 10.0.0.10
    CloudInstance SSL Mode: 0
    CouldInstance URL Style: 2
    CouldInstance HTTP Port: 9000
    CouldInstance HTTPS Port: 443
    CouldInstance End Point:

    Press Enter key to continue...

    6. Open VSR console.
    7. Create a backup job.
    8. In "Backup Destinations" screen, press "Browse for OpenStorage Destination" icon.
    9. Type below.

    Server type: S3
    Server name: compatible-with-s3:minio
    User name: minioadmin
    Password: minioadmin

    10. Click Drop-down list in "Logical storage unit:".
    11. Select "test".
    12. Press "OK" button.
    13. Finish the backup job.
    14. Run the backup job.



  • akihiro1's avatar
    akihiro1
    Moderator
    4 years ago

    I got more info.

    It looks like that the message "The authorization mechanism you have provided is not supported. Please us AWS4-HMAC-SHA256" means AWS signature version 4.

    ------------------------------
    <Authenticating Requests: Using the Authorization Header (AWS Signature Version 4)>
    https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-auth-using-authorization-header.html

    AWS4-HMAC-SHA256
    The algorithm that was used to calculate the signature. You must provide this value when you use AWS Signature Version 4 for authentication. The string specifies AWS Signature Version 4 (AWS4) and the signing algorithm (HMAC-SHA256).
    ------------------------------

    On the other hand, VSR support only version 2 as below.

    ------------------------------
    <VSR 21 User's guide>
    https://www.veritas.com/content/support/en_US/doc/38007533-139298167-0/v132418408-139298167

    Veritas System Recovery supports only signature Version 2 for the S3-compatible cloud storage.
    ------------------------------

    Please check the signature version for your s3 compatible device.

    • JimmyB2's avatar
      JimmyB2
      Level 4
      4 years ago

      That's exactly how it is. It looks that the issue boils down to the version 2 or 4 used by the software.

      Thanks for the post with guidlines for installation minio cloud compatible storage. I did manage to set up this cloud storage as the destination for backup. Actually, I used minio as part of the freenas software and just disabled https by renaming cert files. It works brilliantly.