Veritas System Recovery adding cloud storage issue

[JimmyB2]

Hi all,

I would like to add S3 compatible cloud storage as my backup destination.

Firstly, I have created a cloud instance as per https://www.veritas.com/support/en_US/doc/38007533-136670227-0/v132418412-136670227

Since I dont have Certificate Authority (CA)-signed certificate, I have to use SSL: 0 (disabled).

However, when I tried to add cloud backup destination, in the packet received from the cloud library I see this message: The authorization mechanism you have provided is not supported. Please us AWS4-HMAC-SHA256

Unfortunately, on the cloud library (netapp) there is not possible to change the configuration.

Do you think that there is any workaround to the issue in such situation?

Thanks for your opinions.

[akihiro1]

I tested minio as a private cloud software with VSR 21.2 in-house. Sorry that I do not know about the other cloud software.

<Minio>
https://min.io/

<Setup minio>
1. Download minio.exe. (https://dl.min.io/server/minio/release/windows-amd64/minio.exe)
2. Copy minio.exe to E:\.
3. Create E:\data.
4. Open Command Prompt.
5. Run "minio.exe server E:\data".

Endpoint: http://10.0.0.10:9000 http://127.0.0.1:9000
RootUser: minioadmin
RootPass: minioadmin

6. Open Chrome.
7. Access http://10.0.0.10:9000
8. Login using Access Key: minioadmin and Secret Key: minioadmin
9. Press "+" icon, and press "Create bucket".
10. Type "test" as bucket name, and press Enter key.

<Setup VSR>
1. Open Command Prompt.
2. Run below.
  cd "C:\Program Files\Veritas\Veritas System Recovery\Agent"
3. Run "cloudinstance -addinstance".
4. Type below.

CloudInstance Name: minio
CloudInstance Provider: compatible-with-s3
CloudInstance ServiceHost: 10.0.0.10
SSL Supported (0\1\2): 0
HTTP Port: 9000
HTTPS Port: 443

5. Confirm the below message.

Instance minio added successfully

CloudInstance Name: minio
CloudInstance Provider: compatible-with-s3
CloudInstance ServiceHost: 10.0.0.10
CloudInstance SSL Mode: 0
CouldInstance URL Style: 2
CouldInstance HTTP Port: 9000
CouldInstance HTTPS Port: 443
CouldInstance End Point:

Press Enter key to continue...

6. Open VSR console.
7. Create a backup job.
8. In "Backup Destinations" screen, press "Browse for OpenStorage Destination" icon.
9. Type below.

Server type: S3
Server name: compatible-with-s3:minio
User name: minioadmin
Password: minioadmin

10. Click Drop-down list in "Logical storage unit:".
11. Select "test".
12. Press "OK" button.
13. Finish the backup job.
14. Run the backup job.

[akihiro1]

I also found the below article. 

How to use Veritas System Recovery (VSR) with S3 compatible Cloud Storage Provider

https://www.veritas.com/content/support/en_US/article.100044854

[akihiro1 · Accepted solution]

I got more info.

It looks like that the message "The authorization mechanism you have provided is not supported. Please us AWS4-HMAC-SHA256" means AWS signature version 4.

------------------------------
<Authenticating Requests: Using the Authorization Header (AWS Signature Version 4)>
https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-auth-using-authorization-header.html

AWS4-HMAC-SHA256
The algorithm that was used to calculate the signature. You must provide this value when you use AWS Signature Version 4 for authentication. The string specifies AWS Signature Version 4 (AWS4) and the signing algorithm (HMAC-SHA256).
------------------------------

On the other hand, VSR support only version 2 as below.

------------------------------
<VSR 21 User's guide>
https://www.veritas.com/content/support/en_US/doc/38007533-139298167-0/v132418408-139298167

Veritas System Recovery supports only signature Version 2 for the S3-compatible cloud storage.
------------------------------

Please check the signature version for your s3 compatible device.

[JimmyB2]

That's exactly how it is. It looks that the issue boils down to the version 2 or 4 used by the software.

Thanks for the post with guidlines for installation minio cloud compatible storage. I did manage to set up this cloud storage as the destination for backup. Actually, I used minio as part of the freenas software and just disabled https by renaming cert files. It works brilliantly.

[akihiro1]

I published an article for this issue. And linked 100044854 and 100049556 each other.

Unable to back up to a private cloud storage which is S3 compatible device.

https://www.veritas.com/content/support/en_US/article.100049556