01-27-2021 03:45 AM
Hi all,
I would like to add S3 compatible cloud storage as my backup destination.
Firstly, I have created a cloud instance as per https://www.veritas.com/support/en_US/doc/38007533-136670227-0/v132418412-136670227
Since I dont have Certificate Authority (CA)-signed certificate, I have to use SSL: 0 (disabled).
However, when I tried to add cloud backup destination, in the packet received from the cloud library I see this message: The authorization mechanism you have provided is not supported. Please us AWS4-HMAC-SHA256
Unfortunately, on the cloud library (netapp) there is not possible to change the configuration.
Do you think that there is any workaround to the issue in such situation?
Thanks for your opinions.
Solved! Go to Solution.
02-02-2021 06:31 PM
I got more info.
It looks like that the message "The authorization mechanism you have provided is not supported. Please us AWS4-HMAC-SHA256" means AWS signature version 4.
------------------------------
<Authenticating Requests: Using the Authorization Header (AWS Signature Version 4)>
https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-auth-using-authorization-header.html
AWS4-HMAC-SHA256
The algorithm that was used to calculate the signature. You must provide this value when you use AWS Signature Version 4 for authentication. The string specifies AWS Signature Version 4 (AWS4) and the signing algorithm (HMAC-SHA256).
------------------------------
On the other hand, VSR support only version 2 as below.
------------------------------
<VSR 21 User's guide>
https://www.veritas.com/content/support/en_US/doc/38007533-139298167-0/v132418408-139298167
Veritas System Recovery supports only signature Version 2 for the S3-compatible cloud storage.
------------------------------
Please check the signature version for your s3 compatible device.
02-01-2021 08:10 PM - edited 02-01-2021 08:23 PM
I tested minio as a private cloud software with VSR 21.2 in-house. Sorry that I do not know about the other cloud software.
<Minio>
https://min.io/
<Setup minio>
1. Download minio.exe. (https://dl.min.io/server/minio/release/windows-amd64/minio.exe)
2. Copy minio.exe to E:\.
3. Create E:\data.
4. Open Command Prompt.
5. Run "minio.exe server E:\data".
Endpoint: http://10.0.0.10:9000 http://127.0.0.1:9000
RootUser: minioadmin
RootPass: minioadmin
6. Open Chrome.
7. Access http://10.0.0.10:9000
8. Login using Access Key: minioadmin and Secret Key: minioadmin
9. Press "+" icon, and press "Create bucket".
10. Type "test" as bucket name, and press Enter key.
<Setup VSR>
1. Open Command Prompt.
2. Run below.
cd "C:\Program Files\Veritas\Veritas System Recovery\Agent"
3. Run "cloudinstance -addinstance".
4. Type below.
CloudInstance Name: minio
CloudInstance Provider: compatible-with-s3
CloudInstance ServiceHost: 10.0.0.10
SSL Supported (0\1\2): 0
HTTP Port: 9000
HTTPS Port: 443
5. Confirm the below message.
Instance minio added successfully
CloudInstance Name: minio
CloudInstance Provider: compatible-with-s3
CloudInstance ServiceHost: 10.0.0.10
CloudInstance SSL Mode: 0
CouldInstance URL Style: 2
CouldInstance HTTP Port: 9000
CouldInstance HTTPS Port: 443
CouldInstance End Point:
Press Enter key to continue...
6. Open VSR console.
7. Create a backup job.
8. In "Backup Destinations" screen, press "Browse for OpenStorage Destination" icon.
9. Type below.
Server type: S3
Server name: compatible-with-s3:minio
User name: minioadmin
Password: minioadmin
10. Click Drop-down list in "Logical storage unit:".
11. Select "test".
12. Press "OK" button.
13. Finish the backup job.
14. Run the backup job.
02-02-2021 12:27 AM - edited 02-17-2021 04:38 PM
https://www.veritas.com/content/support/en_US/article.100044854
02-02-2021 06:31 PM
I got more info.
It looks like that the message "The authorization mechanism you have provided is not supported. Please us AWS4-HMAC-SHA256" means AWS signature version 4.
------------------------------
<Authenticating Requests: Using the Authorization Header (AWS Signature Version 4)>
https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-auth-using-authorization-header.html
AWS4-HMAC-SHA256
The algorithm that was used to calculate the signature. You must provide this value when you use AWS Signature Version 4 for authentication. The string specifies AWS Signature Version 4 (AWS4) and the signing algorithm (HMAC-SHA256).
------------------------------
On the other hand, VSR support only version 2 as below.
------------------------------
<VSR 21 User's guide>
https://www.veritas.com/content/support/en_US/doc/38007533-139298167-0/v132418408-139298167
Veritas System Recovery supports only signature Version 2 for the S3-compatible cloud storage.
------------------------------
Please check the signature version for your s3 compatible device.
02-17-2021 06:13 AM
That's exactly how it is. It looks that the issue boils down to the version 2 or 4 used by the software.
Thanks for the post with guidlines for installation minio cloud compatible storage. I did manage to set up this cloud storage as the destination for backup. Actually, I used minio as part of the freenas software and just disabled https by renaming cert files. It works brilliantly.
02-17-2021 04:34 PM - edited 02-17-2021 04:38 PM
I published an article for this issue. And linked 100044854 and 100049556 each other.