HYCU

Data Protection
for Enterprise
Clouds
Set the document title under File > Info > Properties.

Implementation guide
When done, refresh the Document title field in the footer to display the name:

1. Double-click the header or the footer on the next page.

2. Right-click the Document title.

3. Click Update Field.

Table of Contents
Overview........................................................................................................... 4

Objectives and Goals.......................................................................................... 4

Planning ........................................................................................................... 4

Prerequisites ..................................................................................................... 4

Design .............................................................................................................. 5

Target Sizing ..................................................................................................... 6

Sizing resources for your HYCU backup infrastructure ....................................... 6

Adjusting firewall configuration ......................................................................... 8

Installation/Deployment of HYCU .....................................................................10

Configure Source and Discover Virtual Machines Nutanix AHV and Nutanix
ESX .............................................................................................................12

Licensing .....................................................................................................13

Data used (add additional fields as needed) ...................................................14

Configuration of HYCU .....................................................................................16

Configure Target ..........................................................................................16

Configure and Assign Policies.......................................................................17

Backup/Restore of Virtual Machines .................................................................20

Backup of VM ..............................................................................................20

Restore of VM ..............................................................................................21

Adding a File server ..........................................................................................22

Nutanix File Server on AHV Cluster ..............................................................22

Protect File Shares with Exclude Option ........................................................23

Protecting Netapp Ontap and generic Shares ................................................24

Protecting Powerscale OneFS Shares ............................................................26

Backup/Restore of Applications ........................................................................28

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 1
HYCU Appliance Protection ..............................................................................29

Backup of the HYCU Backup Controller ........................................................29

Restore of the HYCU Backup Controller ........................................................29

Disaster Recovery of HYCU Backup Controller by Importing Its Target ..........30

System Management ........................................................................................31

Email Notifications ......................................................................................31

Teams or Slack Notifications ........................................................................32

Viewing Events ............................................................................................32

Reporting .........................................................................................................33

Built-In Reports ...........................................................................................33

Custom Reports ...........................................................................................33

Logging ............................................................................................................34

Telemetry ....................................................................................................34

Adjust the Log File .......................................................................................34

User Management ............................................................................................35

Authentication Type – AD/Non-AD ...............................................................35

Roles ...........................................................................................................35

Different Authentication Options and Multifactor Authentication ..................36

Logging a support ticket ...................................................................................37

HYCU Learning center and certification ............................................................37

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 2
Copyright notice
© 2023 HYCU. All rights reserved.

This document contains proprietary information, which is protected by

copyright. No part of this document may be photocopied, reproduced,
distributed, transmitted, stored in a retrieval system, modified or translated to
another language in any form by any means, without the prior written consent of
HYCU.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 3
Overview
HYCU is a high performing backup and recovery solution for Nutanix. It is the
first data protection solution that is fully integrated with Nutanix. HYCU makes
data protection easy to deploy and simple to use and supports AHV and any
vSphere deployments for both Nutanix and non-Nutanix workloads.

Objectives and Goals

The purpose of this document is to provide a framework for customers of HYCU.
After executing the procedures described in the document you will be able to
demonstrate HYCU’s functionality and ability as a backup and recovery solution
for your organization.

Planning
You chose HYCU to solve the business need as per your data protection policy.
The goal is to gain the access to your data when needed and ensure your business
data is protected as per your organization’s data protection and disaster recovery
policy. We recommend using the following checklist prior to deploying HYCU:

• Enter proper HYCU sizing requirements (depends on VM count and RPO)

• Target Sizing

• Resolving firewall and permission prerequisites

• List all targets and their locations based on your RPO and RTO.

• List the Backup and Recovery business requirements (RPO/RTO)

• List a subset of applications you want to backup and restore.

Prerequisites
• Nutanix AHV

• iSCSI Data Services IP is configured on Nutanix cluster

• Download the HYCU disk image from Product download – HYCU Customer
Support and follow the deployment instructions.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 4
 • HYCU VM should be running the same subnet as Nutanix Prism/Admin so
that HYCU can access the Nutanix cluster and discover VMs.

• Make sure you have an IP address (for the HYCU VM) allocated and that
there is a DNS entry for the host name (attached to the IP address). You will
also need the IP address for the gateway, DNS server, subnet mask and the
search domain for the HYCU VM.

• Have the access details for the backup target or targets you want to
configure. The supported targets are: NFS, SMB, iSCSI, Azure, or Amazon S3
and S3 compatible.

Please consult HYCU User Guide and HYCU Compatibility Matrix for list of
supported Application as well as any additional prerequisites.

Design

HYCU recommends having backup target and BC installation on your DR cluster. Copy
target recommended as a failsafe.

For more information regarding reference designs visit https://support.hycu.com/hc/en-

us/articles/360009334100-Deployment-Models-and-Reference-Architecture

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 5
Target Sizing
When sizing your backup and archive target for HYCU backups please consult
HYCU Support or Customer Success team. To achieve best estimation when sizing
targets following data needs to be available.

• Number of VMs/Shares

• Average size

• Average change rate

• Backup/ Archiving Frequency

• Retention times

Sizing resources for your HYCU

backup infrastructure
Before you deploy the HYCU virtual appliance, size the resources needed by your
HYCU backup infrastructure as follows and ensure that other related
requirements are met:

• HYCU virtual machine (HYCU backup controller, HYCU instance, HYCU

Manager):

• Network connection:

Make sure that you reserve an IP address for your virtual machine.

• System requirements:

• Minimum requirements are 8 CPU cores and 16 GiB of RAM.

• The minimum data disk size is 32 GB.

• For deploying in the HYCU Backup Controller mode: Keep in mind that
aspects beyond the size of your data protection environment effect the
system requirements. Performance of the sources, target efficiency,
the chosen backup strategy, and backup data compression may all
increase or decrease the need for specific resources. For example, if
you plan to copy and archive backup data, the number of required
targets increases. Similarly, if you specify a short RPO or a small
backup threshold, the load on your backup infrastructure increases

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 6
 and HYCU requires more storage and compute resources. Consider the
following recommendations:

System requirements
Size of environment
Storage CPU cores Memory

Small (100–200 VMs) 20–40 GiB 8 16 GiB

Medium (200–500 VMs) 100–200 GiB 8 32 GiB

System requirements
Size of environment
Storage CPU cores Memory

The figures vary. Contact HYCU Customer

Large (more than 500 VMs)
Success team

Various HYCU configuration settings also impact HYCU’s resource requirements.

Make sure you follow these additional recommendations:

If x is concurrency settings of all HYCU targets combined, make sure HYCU is

configured with x+1 vCPU, if using cloud or tape targets, minimum recommended
vCPU and memory is 16. If using HYCU compression add 1 GB of memory per job
and 1 vCPU for two jobs utilizing compression.

If Nutanix files are to be protected by HYCU, HYCU instance will be deployed

(process is explained on page 16). Additional IP reservation is needed. Instance
has to have a direct access to client side networking IP's of your shares (this might
require additional network adapter and another IP). To avoid problems please
consult following link Nutanix Files - Shares are not accessible from clients that
are on the same subnet with Nutanix Files storage network

Sizing of instance:

System requirements
Size of environment
Storage CPU cores Memory

Shares with under 1 MIO files 32 GiB 8 16 GiB

Shares with 1 MIO files and 64 GiB 8 32 GiB

larger

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 7
More on sizing : https://support.hycu.com/hc/en-us/articles/360009409199-How-to-size-
HYCU-virtual-appliance-

Adjusting firewall configuration

Each deployed HYCU virtual machine includes a firewall with all the necessary
ports already open. However, other firewalls installed on your network may block
network traffic between specific Nutanix, vSphere, or HYCU communication
endpoints. For HYCU to operate properly, you must adjust the firewall rules and
open the ports listed in the HYCU Network diagram.

Firewalls installed on the source endpoints see the traffic as outbound, whereas
firewalls installed on the destination endpoints see the traffic as inbound. If
firewalls are installed elsewhere, they must be adjusted to allow connections in
both directions.

Note HYCU does not require internet access for its operations. Unavailable
features in this case are Telemetry and direct sending of operational logs. Use of
O365 SMTP server is unavailable unless relevant IP's and ports are open for
HYCU.

Enabling telemetry:

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 8
Notes:

k The host name is an alias and resolves to an IP address reported by the DNS
server. Keep in mind that the IP address is not static and might change over time.
l The host name is an alias and resolves to an IP address from an IP address set
that is generated from ip-ranges (as published at https://ip-
ranges.amazonaws.com/ip-ranges.json) filtered by the region (eucentral-1) and
the service (S3). Keep in mind that the IP address changes regularly.

For more details, consult https://support.hycu.com/hc/en-

us/articles/360009331600-What-about-HYCU-network-.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 9
Installation/Deployment of
HYCU
Deploy HYCU Appliance – Nutanix AHV cluster
1. Download latest HYCU qcow2 image for AHV from
Steps Product download portal.
2. Import the file into Nutanix cluster image
repository.
3. From the drop-down menu choose VM, and select
+Create VM from the upper right corner.
4. Enter the Name and the vCPU values, remove
predefined CD-ROM, and click +Add New Disk with
options:
• Type: DISK
• Operation: Clone from Image Service
• BUS Type: SCSI
• Image: Choose your uploaded image
5. Click Add.
6. Create the data disk with 32 GB (minimum – change
as per your requirements) and 16 GB RAM
(minimum) and 8 core CPU (at minimum).
7. Create NIC for the VM with DHCP enabled.
8. VM is created and HYCU is deployed.
9. Open console, select option 1 Backup Controller,
Enter Name, IP, Subnet, DNS,.. and confirm.
• Create a new static Host A record in your DNS to
Login
access HYCU via name otherwise use IP address
• Open the HYCU portal through
Chrome/Safari/FF/Edge
(https://<hostname>or<IP>:8443)*, and log in with
default credentials, admin user name and admin
password.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 10
Deploy HYCU Appliance – Nutanix ESX cluster
or Vsphere ESX environment
1. Download latest HYCU ovf and vmdk image for
Steps Vmware from Product download portal.
2. Import the file into Vcenter Content Library (if
Content Library is not configured, create a new
one).
3. Login to Vcenter, right click on selected Datacenter
and select New Virtual Machine
4. Select Deploy from template → Next
5. Select previously imported HYCU image from
Content Library → Next
6. Select the VM Name and folder
7. Select Compute Resource
8. Review details and proceed
9. Select HYCU Backup Controller and proceed
10. Select Storage and Network
11. Enter all Network Settings in Customize template →
review details and Deploy
12. VM is created and HYCU is deployed.
• Create a new static Host A record in your DNS to
Login
access HYCU via name otherwise use IP address
• Open the HYCU portal through
Chrome/Safari/FF/Edge
(https://<hostname>or<IP>:8443)*, and log in with
default credentials, admin user name and admin
password.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 11
Configure Source and Discover
Virtual Machines Nutanix AHV and
Nutanix ESX
1. Login to your Nutanix Prism Elements and navigate
Steps to Administration-Local User Management-Create
new user (HYCU) – fill details and add only Cluster
and Backup Admin role (User Admin is not needed)
2. Login to your HYCU Appliance web portal
(https://<HycuIP-or-hostname>:8443).
3. Click Administration button, then select Sources.
4. In the Source dialog box choose option +New.
5. Enter the name of Nutanix Prism Elements or Prism
Elements IP address (can be located in the upper
right corner Administration button, Cluster details)
(https://< host-name>:9440).
Important: Same procedure to be used with Nutanix
ESX as VirtualCenter will be autodiscovered.
6. Vsphere: Enter the name of Vcenter or Vcenter's IP
address
7. Enter the user name and password with the cluster
administrative rights. (Best practice is not to use
built-in admin account, but to use newly created
one as explained in first step.)
8. Click Save.
9. If Prism Central is present it will be autodiscovered
by HYCU (create same local account as for Prism
Elements)
10. As soon as you add the Sources, auto-discover will
show all Virtual Machines in the HYCU VM panel.

Example:

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 12
Licensing
When all sources are added please activate your HYCU licenses. Please take a
look at our video guide.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 13
Data used (add additional fields as
needed)
TOPIC QUESTION ANSWER

HYCU VM(s) IP address(s)

Hostname (registered in DNS)

DNS server

Gateway address

Subnet

Domain

Nutanix Cluster (s) IP address/URL of Prism Element

IP address/URL of Prism Element

User name (non-default admin

with Cluster admin role)

Hypervisor

Async PDs in use Yes/No

Near-Sync PDs in use Yes/No

Nutanix cluster nodes PROD Yes/No

DR Yes/No

DEV/TEST Yes/No

Network CVM VLAN

Targets on different VLANs Yes/No

Client VMs on different VLANs Yes/No

Active Directory Domain

LDAP / LDAPS url

AD Groups

Discovery Firewalls

Windows: WinRM enabled in

VMs

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 14
 WinRM version

Linux: SSH user/pass allowed

SQL Server OS Credentials

DB sysadmin OS Credentials

OS version(s)

SQL Version(s)

Size of Database (GB)

Multiple instances on one VM

Always on Availability group

SQL Failover cluster

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 15
Configuration of HYCU
Configure Target
• Choose the Target menu option from the left
Steps
pane.
• Click +New button in the top right corner.
The target will be used to store backups
made by HYCU, and restores will be pulled
from the target if the snapshot is not already
available on the Nutanix cluster.
• Enter the Name, choose the type (the
supported targets are SMB, NFS, iSCSI
shares, Nutanix cluster storage or cloud –
Amazon S3, Azure and Google Cloud) and
enter valid data into the fields:
• For the NFS and SMB targets enter the NFS/
SMB server name or IP address, and shared
folder (enter the SMB credentials, if any)
• For Nutanix cluster target enter the URL of
cluster, and then enter user name and
password with administration rights
• For the AWS target enter the Bucket name,
Access Key ID, and Secret Access Key
• For the Azure target enter Storage Account
Name, Secret Access Key, and Storage
Container Name
• For Google Cloud target enter bucket name
and previously created Cloud Account (by
using dropdown Settings menu)
• For the iSCSI target:
• iSCSI target is configured and accessible.
• The iSCSI target has NOT been initialized
yet.
• The HYCU iSCSI Initiator secret is added on
the iSCSI server if you want to enable mutual
authentication between HYCU and the iSCSI
server.
• Add HYCU IP address to the iSCSI server
white list
• The iSCSI Data Service IP address must be
specified on the Nutanix cluster (the Cluster
Details menu option).

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 16
 • Click Save.

Configure and Assign Policies

1. Choose the Policy menu option from the left pane.
Steps 2. Click +New button in the top right corner.
3. Enter the Name, and choose the desired Enabled
Option. Then enter the desired RPO and RTO and
the Backup Threshold. Click Save.
4. Choose the Virtual Machines menu option from the
left pane.
5. Simply, highlight the machine, as shown above,
click Polices in the top right corner, and select one
of the polices. You can apply the predefined backup
policy, or the one you created. The out-of-the-box
policies will automatically select the target that will
meet the objectives in the policy.
• Gold predefined policy: Data is backed up
every 4 hours and restored within 4 hours.
• Silver predefined policy: Data is backed up
every 12 hours and restored within 12 hours.
• Bronze predefined policy: Data is backed up
every 24 hours and restored within 24 hours.
6. As soon as the policy gets assigned, the backup
process will start, and you can track its status by
clicking Jobs in the main left side menu.
7. Full VM backups are created by default initially
because there are no previous backups available for
that particular VM (only the blocks that contain data
will be backed up). The next backup will be the
incremental backup of the same VM (Changed
Block Tracking is used so only the changed blocks
are backed up). New full backups will occur after
25% (default backup threshold) of the data changes
(this is configurable) or if the RTO calculation
indicates a full backup is needed.
8. In the Start new backup chain box the number of
backups in the chain can be set as well. After
exceeding the specified number, the new backup
chain will be started.
9. Click Virtual Machines in the top left menu, and
select the VM you just made the backup of.
10. The bottom part of the screen will show all available
backups (restore points) made for the selected VM.
By clicking Backup in the top right corner, you can

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 17
 manually trigger additional backups when and if
needed.
11. By hovering your mouse over the Backup status
icon, you can see which type of backup was
executed, and all the important details of that
backup. Notice that the new backup is incremental.

Configure and Assign Backup Window

1. Choose the Policy menu option from the left pane.
Steps 2. Click Backup Window button in the top right
corner.
3. Click +New.
4. Enter the Name, and choose the desired backup
option: Full/Incremental or Incremental Only. Then
select desired day in the week and desired time for
backup.
5. Click Save.
6. Choose the appropriate policy and click Edit.
7. Check the Backup Window checkbox and choose
the right one from the dropdown menu at the end of
the Edit policy window.
8. Click Save.

Configure Target and policy for Archiving

1. Choose the Target menu option from the left pane.
Steps 2. Click +New button in the top right corner.
3. Enter the Name, choose the type (the supported
targets are SMB, NFS, iSCSI shares or cloud –
Amazon S3 and Azure) and enter valid data into the
fields.
4. Select the Use for archiving switch to reserve this
target for data archives. The target that you use for
archiving data cannot be used for backing up data
or storing copies of backup data.
5. Click Save.
6. Choose the Policy menu option from the left pane.
7. In the Policies panel click Archiving.
8. Click +New button in the top right corner.
9. Enter the Name, and choose the desired Enabled
Option:
• Daily: Allows daily archives (if not using S3
compatible Archive target, this option has
very high storage requirements)

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 18
 • Weekly: Allows you to create a weekly
archive of data.
• Monthly: Allows you to create a monthly
archive of data.
• Yearly: Allows you to create a yearly archive
of data.
10. Specify the hour and the minute the job should
begin, and retention period to be used, and assign
the previously created archiving target.
11. Then select the backup policy, and assign the
previously created archived policy by highlighting
and selecting the ARCHIVING Enabled Option and
the Archiving policy under the data archive option.
12. Note: Only one Archiving policy can be assigned to
backup policy.
13. Click Save.

For more details regarding policies consult: https://support.hycu.com/hc/en-

us/articles/360009412739-Anything-special-about-the-policies-

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 19
Backup/Restore of Virtual
Machines
Backup of VM
1. Start by clicking Virtual Machines in the main top
Steps left menu.
HYCU synchronizes virtual machines on regular
intervals, but you can also trigger synchronization
manually by clicking Synchronize in the top left
corner.
2. A backup can be triggered for a virtual machine or
for a specific application using the Applications
view. We will focus on backing up virtual machines
from the Virtual Machines view, but same
principles apply to applications as well (after the
applications have been successfully discovered).
3. Simply, highlight the machine, click Polices in the
top right corner, and select one of the polices.
4. The backup process will start automatically, but can
be run manually also.
• The VM should be protected by the HYCU
Result
software. You should be able to manage your
backup files, or perform restore.

Backup with Configuration Options

For MySQL, PostgreSQL and other applications which are not supported out of
the box, Pre/Post backup scripts can be used to ensure Application Consistent
backup of your Application. If backup of certain disks is not needed, they can be
excluded from backup.

1. Select VM from the Virtual Machines left pane.

Steps 2. Click Configuration option.
3. On the Pre/Post Scripts tab enable one of the
offered options: Run Pre-backup script; Run Pre-
snapshot script; Run Post-backup script; or Run
Post-snapshot script
4. On the Exclude/Include VDISK tab select the
desired disk for exclusion.
5. Click Save.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 20
 • Execution of the pre or post scripts should be
Result
successful.
• With the exclude from backup option the specified
disks can be backed up only, regardless of the type
of the Nutanix cluster (AHV or ESXi) on which VMs
are located.

Restore of VM
1. Choose the Virtual Machines menu option from the
Steps left pane.
2. In the Details section that appears at the bottom of
the screen, select the desired restore point.
3. Click and select Restore VM, then click Next.
4. Choose the restore location, by default the original
location is selected.
5. Use the Power Virtual Machine switch if you want
to turn it on after the restore.
6. Click Restore.
• The VM will be restored from the certain point in
Result
time, and with selected options.

Clone VM
1. Choose the Virtual Machines menu option from the
Steps left pane.
2. In the Details section that appears at the bottom of
the screen, select the desired restore point.
3. Click Restore VM, select Clone VM, then click Next.
4. Choose the restore location, by default the original
location is selected.
5. Use the Power Virtual Machine switch if you want
to turn it on after the restore.
6. If you choose to power on the restored VM, the
original VM will be turned off automatically.
7. By enabling the option ‘Clone Volume Groups’ all
Volume Groups will be cloned to the original
machine.
8. Click Restore.
• The VM should be cloned successfully.
Result

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 21
Adding a File server
HYCU enables you to protect SMB and NFS file shares on file servers. You can add
one or more file servers that host file shares you want to include in the backup.
For information on supported file servers, see the HYCU Compatibility Matrix.

For protecting file shares, a HYCU instance is introduced in the data protection
environment. The HYCU instance is a virtual machine that HYCU uses for
performing file server data protection operations, taking the load off the HYCU
backup controller. You can have one or more HYCU instances in your data
protection environment, depending on your business need

Nutanix File Server on AHV Cluster

• The Nutanix File Server must be configured with its
Prerequisites
own IP address (minimum 3 nodes), and with its
Shares.
• HYCU needs to access data access IPs (it can not be
IPs used for Nutanix Files Backplane Operations)
• RestAPI access user is created
1. Login to your HYCU Appliance web portal
Steps https://<HycuIP-or-hostname>:8443
2. Click the Administration button and select Sources
3. In the Sources dialog box, click the File Servers tab,
and then click + New
4. Enter the name of the NFS server (https://<NFS-
server-hostname>:port) and enter Rest API access
username and password continue and enter
username and password with Shares admin access.
5. Click Save.
6. Source will be added with warning that without
HYCU instance backup can not be performed.
7. Navigate to Administration → Instances and then
click + New.
8. Select the name For Instance and decide if DHCP or
STATIC IP settings are to be used (IP needs to be in
user segment, if not reachable from management
network)
9. Select Cluster where to deploy Instance (for best
performance select same cluster where Nutanix FS
service is running)

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 22
 10. In the Shares panel you can select the one from the
NFS server, assign a policy, and backup will start
automatically.
• After you add a Nutanix Files server to HYCU, all
Result
its SMB and NFS file shares are listed in the Shares
panel and you can continue with protecting your
data.

Protect File Shares with Exclude

Option
1. Login to your HYCU Appliance web portal
Steps https://<HycuIP-or-hostname>:8443
2. In the Shares panel select the desired File share
(e.g. HYCU).
3. Click on the Configuration button.
4. Enter the path of the folder to exclude (e.g. /test).
5. Click Save.
6. Assign the appropriate policy and perform backup.
• Backup of the File share should be successful, but
Result
the offered recovery point should not contain the
excluded folder.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 23
Protecting Netapp Ontap and
generic Shares
NetApp ONTAP user permissions: The following is a list of the required endpoint
rights for REST API access on the file server:

• For NetApp ONTAP and generic SMB file shares:

Prerequisites
The SMB user must have full read and write access
to all the file shares that you plan to back up. If the
user belongs to an Active Directory domain, the
user must be a member of the Backup Operators
group.
• For NetApp ONTAP NFS file shares: The export
policy for the file shares that are going to be backed
up must include a rule that allows super user access
from the HYCU backup controller, and HYCU
instance subnets or IP addresses.

1. Login to your HYCU Appliance web portal

Steps https://<HycuIP-or-hostname>:8443
2. Click the Administration button and select Sources
3. In the Sources dialog box, click the File Servers tab,
and then click + New
4. Enter the hostname or IP address of File server in
the following format (https://<hostname>:port)
Entering the port is optional if default port is used.
5. Specify the user name and password of a user with
administrative rights for REST API access on the file
server.
6. Click Next.
7. Enable the Use SMB protocol for accessing shares
switch if you plan to protect SMB file shares. Enter
the user name and password of a server or backup

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 24
 administrator with access to all SMB file shares
within the file server. Keep in mind that you cannot
assign credentials to each share individually.
8. Enable the Use NFSv4 protocol for accessing
shares switch if you plan to protect NFS file shares.
9. Click the Administration button and select
Instances.
10. Click + New to perform HYCU Instance
deployment. (IP can be DHCP or static.)
11. After instance is successfully deployed navigate to
Shares panel where Share(s) from the File server
can be selected, assigned a policy, and backup will
start automatically.
• After you add a Files server to HYCU, all its SMB
Result
and NFS file shares are listed in the Shares panel
and you can continue with protecting your data.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 25
Protecting Powerscale OneFS Shares
Dell PowerScale OneFS user permissions

If you plan to protect file shares in the System zone: Create a user and assign this
user the following permissions:

o Job Engine – write

o NFS – Read
o Platform API – Read
o SMB – Read
o Snapshot – Write

If you plan to protect file shares in a non-System zone: Create a user in both the
System zone and the non-System zone and, depending on the zone in which the
user is created, assign each user the required permissions:

System zone permissions Non-System zone permissions

Job Engine – Write SMB – Read

Platform API – Read NFS – Read

Snapshot – Write Platform API – Read

• Depending on size of the shares sizing needs to be

Prerequisites
done to determine number of HYCU Instances
needed (for more information contact
customer.success@hycu.com )

1. Login to your HYCU Appliance web portal

Steps https://<HycuIP-or-hostname>:8443
2. Click the Administration button and select Sources
3. In the Sources dialog box, click the File Servers tab,
and then click + New
4. Enter the hostname or IP address of the Dell
PowerScale OneFS access zone in the following
format (https://<hostname>:port) Entering the port
is optional if the default value is used (8080).
5. Specify the user name and password of a user with
administrative rights for REST API access on the file
server.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 26
 6. Click Next.
7. Under System zone credentials, enter the System
zone URL, and the System zone user name and
password.
8. Enable the Use SMB protocol for accessing shares
switch if you plan to protect SMB file shares. Enter
the user name and password of a server or backup
administrator with access to all SMB file shares
within the file server. Keep in mind that you cannot
assign credentials to each share individually.
9. Enable the Use NFSv4 protocol for accessing
shares switch if you plan to protect NFS file shares.
10. Repeat steps 3-9 to add additional zones.
11. Click the Administration button and select
Instances.
12. Click + New to perform HYCU Instance
deployment. (IP can be DHCP or static.)
13. After instance is successfully deployed navigate to
Shares panel where Share(s) from the File server
can be selected, assigned a policy, and backup will
start automatically.
• After you add a Files server to HYCU, all its SMB
Result
and NFS file shares are listed in the Shares panel
and you can continue with protecting your data.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 27
Backup/Restore of
Applications
HYCU supports the following Applications:

• Microsoft Active Directory

• Microsoft SQL server (AAG)

• Microsoft Exchange

• Oracle running on Linux servers

Other applications can also be protected in an Application consistent state with

the help of Pre/Post Backup scripts.

Example
• MySQL
• Postgres
• Oracle 12c on Windows Server
• DB2

Application discovery is triggered by the Discovery process (auto start after

Credentials are assigned).

Prerequisites and additional info can be found in HYCU User Guide and Best
practices guide on HYCU support web page.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 28
HYCU Appliance Protection
Backup of the HYCU Backup
Controller
1. Start by clicking Virtual Machines in the main top
Steps left menu.
2. Assign desired policy to the backup controller. The
policy must have one selected target to send
backups on. A new full backup will be performed
every time the target is changed.
3. The backup is the same as for other VMs, it will start
automatically after policy is assigned.
4. To be certain the backup of HYCU Backup
Controller itself contains all retention points. The
backup policy needs to be configured in such a
manner that backup frequency is twice as frequent
as your strictest policy.
• The HYCU Backup Controller is protected. You are
Result
able to manage your backup files, or perform
restore from the multiple restore points list.

Restore of the HYCU Backup

Controller
1. Choose the Virtual Machines menu option from the
Steps left pane.
2. In the Details section that appears at the bottom of
the screen, select the desired restore point.
3. Click and select Restore VM, then click Next.
4. Choose the restore location, by default, the original
location is selected.
5. Use the Power Virtual Machine switch if you want
to turn it on after the restore.
6. Click Restore.
• The VM should be restored from the certain point
Result
in time, and with selected options.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 29
Disaster Recovery of HYCU Backup
Controller by Importing Its Target
1. Deploy new »temporary« HYCU Backup Controller
Steps (use DHCP or some other IP not to cause any
network issues)
2. Choose the Target menu option from the left pane.
3. Click Import button in the top right corner.
Enter the Type, IP address and the target path.
4. Target should be added successfully (mounted as
Read Only).
5. Choose the desired restore point of the HYCU
controller.
6. Click Restore.
7. Restored HYCU VM should be displayed in the
Virtual Machines window.
8. After succesfull restore Temporary HYCU BC can be
shutdown and deleted.
• The HYCU VM target should be imported
Result
successfully, and all backup files of the HYCU
controller should be listed. HYCU VM should be
restored successfully.
• In case you lost your Nutanix cluster, it is possible
to recover the HYCU VM using this Import target
option.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 30
System Management
Email Notifications
1. Access HYCU Appliance by GUI
Steps 2. Edit predefined configurations based on the
occurrence of the events.
3. You can also configure the SMTP server name and
port choosing the Administration menu option.
Then select SMTP Server Settings, and enter all
required fields
4. If using O365 SMTP server please consult our User
Guide how to add SMTP server into HYCU
5. Select the Events panel on the left pane, and click
Email Notifications from the upper right corner.
6. Click +New and enter the Subject name, select
Categories, select Status, and then enter the email
address the message should be sent to.
• IP address and port of the SMTP server should be
Result
configured properly, and you should be able to
receive the e-mail notification.

Example:

When selecting status please do not select all as this might result in large number
of emails or notifications.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 31
Teams or Slack Notifications
If Teams or Slack is preferred over email notification please consult our
Knowledge base articles:

https://support.hycu.com/hc/en-us/articles/4718187425308-Webhook-
notifications-To-MS-Teams

https://support.hycu.com/hc/en-us/articles/4721959726236-Webhook-
Notifications-to-Slack

Viewing Events
1. Select the Events panel on the left pane.
Steps 2. The following information of events is available:
• Status : Severity level – Success, Warning,
Failed
• Message: Description of the event.
• Category: To which the event belongs –
Policies, Backup, Credentials.
• Timestamp: Event creation time
3. Check the status of processes that are currently
running, or are completed or stopped.
4. Click View Report. To save report click Copy to
clipboard and save the copied version.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 32
Reporting
Built-In Reports
1. Click the Reports panel on the left pane.
Steps 2. There are predefined reports you can use, or even
modify by choosing the Edit option.
3. Select one of the reports to see its details, or click
Preview in the upper right corner.
4. Click Scheduler option, then desired date and
interval.
5. Click Send button to enable e-mail notifications
(SMTP server has to be configured before).

Custom Reports
1. Click the Reports panel on the left pane.
Steps 2. Click +New and enter the name, choose Time
Range, select Type, select Aggregation, and select
Tags. Then select Report Tag Pool, and other
desired option, and click Save.
3. Select one of the reports to see its details, or click
Preview in the upper right corner.
4. Scheduler and Sending via email options are the
same as for Built-In Reports.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 33
Logging
Telemetry
1. To access the telemetry dialog box, click
Steps Administration and select Telemetry.
2. Enable sharing of diagnostic data with HYCU
support by clicking on SHARE TELEMETRY DATA
WITH HYCU INC (it is disabled by default).
3. Click Save.
4. If HYCU appliance does not have internet
connection, HYCU can provide details of what
needs to be open specifically on companies firewall
to provide full functionality.
5. Telemetry is not sending any sensitive data, only
usage statistics
• Usage statistics are collected via telemetry and
Result
Automated support system is enabled.

Adjust the Log File

1. To access the Logging dialog box, click
Steps Administration and select Logging.
2. Set the maximum log file size to 100 MB (default is
10 MB), and leave number of log files on 9 (default
is 9).
3. Select one of the log levels:
• Informational: Informational messages are
recorded.
• Detailed: Offers option to enable Nutanix
Rest calls level or HYCU rest calls levels,
either Informational or Detailed.
5. Click Get logs
6. Click Send logs to upload logs and telemetry
diagnostic data.
7. Enable option Keep settings after upgrade to
preserve the same logging level on the newer
version of HYCU.
• Logging for analyzing and troubleshooting
Result
operations are set properly.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 34
User Management
Authentication Type – AD/Non-AD
1. To configure AD authentication, click
Steps Administration and select Active Directory.
2. Click +New and enter the name, the Domain name
(recommendation is to enter the FQDN), and LDAP
URL, then click Save.
3. Choose the Self-Service menu option from the left
pane, and choose option New Group to create new
user group.
4. Enter user group name, its description (optional),
and click Save.
5. In the Manage Users section click +New.
6. Enter user name and choose authentication type:
• HYCU: enter user name and password
• AD: from the AD drop-down menu select
desired account.
7. In the Self-Service pane you can change user group
status to Deactivate or Activate.
8. To assign ownership over VM click on Virtual
Machines menu from the left pane, select machine
and click Owner.
9. Then select user group and click Assign.
• The authentication via AD accounts is possible and
Result
only authorized users can access backup data.

Roles
1. Choose the Self-Service menu option from the left
Steps pane, and choose the right corner option +Add to
Group.
2. Enter the user name and choose user role:
• Viewer: can only list the VMs, backup
files, etc.
• Backup operator: can only perform
backups
• Restore operator: can only perform
restore operations
• Backup & Restore Operator : combined
role

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 35
 • Administrator: full access
3. Click Add User.
4. In the Self-Service pane you can change user group
status to Deactivate or Activate.
• The authentication should be configured properly,
Result
and you could be certain that only authorized users
can access backup data.

Different Authentication Options and

Multifactor Authentication
Multiple Authentication options can be configured aside local and AD users.

Available options:

▪ Active Directory
▪ Active Directory Federation Services
▪ Google
▪ Microsoft
▪ Okta
▪ OpenID connect ldP

When using Microsoft Authentication SSO can be used in conjuction with MFA.

For further information regarding configuration of Authentication Options and

configuration of Multi Factor Authentication consult following Knowledge Base
articles:

https://support.hycu.com/hc/en-us/articles/4726309083036-How-to-enable-Two-
Factor-Authentication

https://support.hycu.com/hc/en-us/articles/4726023101596-Using-Google-as-an-
Identity-Provider

https://support.hycu.com/hc/en-us/articles/4722336671772-Using-Microsoft-as-an-
Identity-Provider

https://support.hycu.com/hc/en-us/articles/4722276915868-Using-Okta-as-an-
Identity-Provider

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 36
Logging a support ticket
Login to our support page and click Submit a request.

HYCU Customer Support

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 37
HYCU Learning center and
certification
Login to our support page and click following link.

Navigate to HYCU Learning Center and click Welcome.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 38
Enter your email to get access to our learning materials.

If hand on experience is needed, please see section 3 at the lower part of the page.

HYCU also offers free certification, the link is on the same page.

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 39
Provide feedback
For any suggestions and comments regarding this product or its documentation,
send us an e-mail to:

info@hycu.com

We will be glad to hear from you!

HYCU Data Protection for Enterprise Clouds. 2023 HYCU. All rights reserved. 40
 [Type here]

www.hycu.com