How do I use Dell PowerProtect DD Cloud Tier with Wasabi?

Dell Technologies PowerProtect DD Cloud Tier backup and de-duplication storage software is validated for use with Wasabi.  Wasabi is now on the Dell validated list of cloud providers as noted here.  Data Domain's (also referred to as 'DD') Cloud Tier allows object storage from Wasabi to be added for long term retention of your data in the Wasabi cloud. 


Table of Contents

  1. Prerequisites
  2. Architecture Diagram
  3. Enable Cloud Tier
  4. Import CA certificate
  5. Add Cloud Unit
  6. Add Data Movement
  7. Wasabi Storage


1. Prerequisites:

  • Active Wasabi cloud storage account
  • Data Domain Virtual Edition (DDVE) product suite with Cloud Tier feature 
  • Cloud Tier license on Data Domain Virtual Edition

Note: The data restoration process is handled by your specific backup software application. As there are many potential variables that will affect your unique environment, it is strongly recommended that you seek the guidance of your backup software's technical support team in the event that you encounter difficulty, or have application-specific inquiries.


2. Architecture Diagram

Wasabi fits into the Data Domain reference architecture as shown in the diagram below.



3. Enable Cloud Tier

Cloud Tier storage is required for the DD system to support cloud-units. The Cloud Tier holds the metadata for the migrated files, while the actual data resides in the cloud.

3.1 Disable file system. Before we enable Cloud Tier, we must disable the File System. Login to the DD System Manager. Select “Data Management”-> “File System”and click on the “Summary” tab. Click “Disable”, as shown below.


3.2 Now, select Hardware -> Storage


3.3 Expand “Cloud Tier” and click on “Configure”.


3.4 Select the checkbox for the shelf to be added from the “Addable Storage” selection. Click on “Add to Tier”, and then click “Next” to add the storage.


3.5 Now, select “Data Management” -> “File System” and click “Enable Cloud Tier”. To enable the cloud tier, you must meet the storage requirement for the licensed capacity. Configure the cloud tier of the file system.



3.6 Click on “Enable File System” from Bottom. When enabling the file system is complete you should see the below. Click on “Close”.



4. Import CA certificate

4.1 Download the certificate by following the instructions on our KB Article about obtaining the Root Certificate Authority(RootCA)

Note: Download the "DigiCert Global Root G2" root certificate which was used to sign the Wasabi vaults.

4.2 Import the certificate by following the instructions below-

4.2 a. Select “Data Management” > “File System” > “Cloud Units”.  Then click on “Manage Certificates. The Manage Certificates for Cloud dialog is displayed. 


4.2 b. Click “Add” to add the certificate.


4.2 c. Select one of these options:

  • I want to upload the certificate as a .pem file.

Click on “Choose File”


Browse to the Root CA file and select it.


  • I want to copy and paste the certificate text.

Copy the contents of the .pem file to your copy buffer. Paste the buffer into the dialog. 


4.2 d. Click “Add” to add the certificate.


4.2 e. You will see the certificate listed in the certificate table.



5. AddCloud Unit

Follow the below steps to add the Wasabi Bucket

Note:  Port 443 (HTTPS) and/or Port 80 (HTTP) must be open for bi-directional traffic towards the configured Wasabi endpoint URLs.

5.1 From “Data Management” > “File System” > “Cloud Units”, click“Add”.


5.2 Enter your Wasabi account credentials as shown below in the example.

Screenshot 2023-11-30 at 9.35.52 AM.png

  • Provide a name to the cloud unit
  • Select 'Flexible Cloud Tier Provider Framework for S3' as the Cloud Provider.
  • Click on Manage certificates and make sure the imported cert is checked.
  • Enter the name of the Wasabi bucket that you want to use.
    Note: DDOS version prior to 7.9 did not have the option to add a bucket name.  
  • Enter "Wasabi" as the S3 Provider name.
    Note: If you are running DDOS version 7.9 on the PowerProtect DD, use the fqdn of the endpoint as the S3 Provider name. For example, if using Wasabi's us-west-1 region the S3 Provider Name will be 
  • Enter your access key and secret key for your Wasabi account. Refer to creating a sub-user and access and secret keys.
  • Enter the appropriate Storage region and Endpoint URL. Refer to Wasabi service URLs article for more information on the correct URL.
  • Select “standard” for storage class.

Click “Verify” to run the cloud provider verify tool before adding the cloud unit. This tool performs pre-check tests to ensure that all requirements are met before to adding the actual cloud unit.

5.3 Click “Add” to add the cloud unit and will show the completed status as below.


5.4 Click on Close to close the status window.


5.5 The file system main window now displays summary information for the new cloud unit as well a control for enabling and disabling the cloud unit.



6. Add Data Movement

Data is moved from the active tier to the cloud tier as specified by the data movement policy. The policy is set on a per-MTree basis. Data movement can be initiated manually or automatically using a schedule.

6.1 Select “Data Management“ > “MTree”. In the top panel, select the MTree to which you want to add a data movement policy.


6.2 Click the “Summary” tab. Under Data Movement Policy click “Add”.


6.3 Select the “Cloud Unit” added above as the “Destination”.


If you select “Age Range” you can select a range of ages. For “File Age in Days”, set the file age threshold (Older than) and optionally, the age range (Younger than). 

Note: The minimum number of days for Older than is 14.

6.4 Data movement can be triggered automatically to move data from Active Tier to Cloud Tier based on a schedule. To set a schedule, navigate to “Data Management” > “File System” > “Settings”. Click on the “Data Movement” tab and set the “Throttle” and “Schedule”. Click “Save”.


6.5 Data movement can be started and stopped manually for any MTree that has a data movement policy. Select “Data Management” > “File System” > “Summary”. Click on the “Start” button under Active Tier to start data movement to the Cloud Tier.


To stop data movement click “Stop” on the Stop button when Data movement is running.

6.6 Stats for Cloud Tier can be viewed at “Data Management” > “File System” > “Summary”.


6.7 To view the stats for data stored in each of the Cloud Units, navigate to “Data Management” > “File System” > “Cloud Unit”.



7. Cloud Tier file structure in Wasabi Storage

The Data Domain Cloud Tier feature creates 3 directories in your Wasabi bucket when the Cloud Unit is added successfully. The directories are named 'dx', 'cx' and 'mx'. The dx directory is used for data segments. The directory named 'cx' is used for configuration data and the directory named 'mx' is used for storing metadata.     

Prior to DDVE version 7.9, Cloud Tiering creates three buckets c0, d0 and m0 on the Wasabi account to store configuration, data segments and metadata respectively. 

Note: Currently there is an issue due to which the data stored in the Wasabi bucket is not visible on Wasabi Console. You will need to use S3 Browser to view data in the Wasabi bucket.

Have more questions? Submit a request



Have more questions? Submit a request