Arcserve |
5.0 Considerations/Limitations
6.0 Installation
6.1 Prerequisite Tasks
6.2 Installation Instructions
Welcome to the Arcserve UDP Version 5.0 Update 4 Release Notes. This Release Notes contains important information about this update. Updates are cumulative and can be installed on any previous version of Arcserve UDP.
The following enhancements or features have been added to Arcserve UDP for this update:
This update fixes the following issues, which could have occurred:
For more information, see the KB Article https://arcserve.zendesk.com/hc/en-us/articles/204542275
The Changed Block Tracking (CBT) driver (ARCFlashVolDrv.sys) is sitting below the Bitlocker full volume encryption driver (fvevol.sys). When saving CBT data to disk when the machine is shutting down, the data is saved as not encrypted because the Bitlocker driver is not loaded. While the system starts up, the driver tries to read data from the CBT data file, and it is not able to get the correct data.
The resolution is to move the CBT driver to above the Bitlocker driver in the driver stack, so when the CBT driver saves data to disk it will be encrypted by the Bitlocker driver properly. After you apply the fix, restart your computer and run a full backup.
To Hot Apply the fix:
1. Open a command line window, and switch to folder “C:\Program Files\CA\arcserve Unified Data Protection\Engine\BIN\DRIVER”.
2. Run command “ARCFlashVolDrvINSTALL.exe –p –output=.\fix_fve.log”
To avoid this vulnerability, Arcserve UDP has disabled the use of vulnerable ciphers and switched to using the following safe ciphers:
[HKEY_LOCAL_MACHINE\SOFTWARE\CA\ARCserve Unified Data Protection\Engine\AFRestoreDll] "RestoreCtrl"=dword:00000001
"The drive cannot find the sector requested."
For all issues fixed in this release, see the Arcserve UDP Version 5.0 Release Notes.
The following issues could exist in this update:
Symptom
When you quiesce a VMware VM using VMware Tools, the snapshot contains corrupted data. The backup reads data from the snapshot and the data that is backed up also becomes corrupted. For more information about this issue, see the VMware KB article.
Note: This problem occurs with all VMware ESXi versions and on a VM with guest OS Windows 2008 R2 SP1 and Windows 2012. Arcserve UDP cannot detect the data corruption problem because VMware does not return an error in this case. You may not be aware of the problem until you try to restore data.
Solution
Perform the following tasks to detect and resolve the problem:
Symptom
When using the Microsoft VSS inside VM snapshot quiescing method to back up a VMware VM, the backup may not be consistent. Especially when backing up VM with applications (such as Exchange) installed.
Solution
The workaround is to use VMware Tools snapshot quiescing method, along with disabling the VSS writers MSSearch Service Writer and Shadow Copy Optimization Writer in guest OS of VM before this problem gets fixed.
Symptom
When the source machine is a Windows 8.1 or Windows 2012 R2 system and you perform a BMR on a machine with a 4 KB disk, it may fail to boot the machine after BMR with error message: system_thread_excption_not_handled (WppRecorder.sys).
Solution
Boot to the recovery console (you should automatically get there after a few Blue Screen crashes).
c:\windows\system32\compact.exe /U c:\windows\system32\drivers\*.sys
fsutil behavior set DisableCompression 1
Symptom
A migration job does not show in the Nodes list view on the resources tab.
Solution
Access the RPS view or jobs tab to check the job monitor.
Symptom
Cannot browse volumes in the Arcserve UDP Recovery Point View.
Solution
Use a UNC path directly instead of mapping to a network drive.
The Windows version of proxy [<Proxy Name>] is an earlier version than virtual machine [<Virtual Machine Name>]. As a result, the subsequent Exchange catalog job may fail, and you will need to install the related Windows update package to resolve the problem."
Symptom
The Exchange catalog job will use the Exchange binaries from the virtual machine. If the Windows version of the proxy machine is an earlier version than the virtual machine, the Exchange binaries do not work well, and as a result, the catalog job will fail.
Solution
Install the following Windows update package to resolve the problem:
Symptom
Failover happens for the clustered VM before taking a snapshot when backing up a VM. This causes the Hyper-V host recorded in the backup session to be inconsistent with the VM configuration.
Solution
You can manually connect the network adapter to a virtual switch on its Hyper-V host or use the Restore to an alternative location option to recover the VM with which you can set the restore configuration for the VM.
Symptom
Suppose you migrate a Linux Backup Server to the Arcserve UDP Console. If you release the Linux Backup Server and then migrate it again, you will see a new plan is automatically created on the Console.
Example:
You have a Linux Backup Server1 that manages Linux_Node1. You have created a backup job named New Plan. You also have a Arcserve UDP Console that manages Linux_Node2 and Linux Backup Server2 and the plan is also named New Plan.
You migrate Linux Backup Server1 to Console using the d2dreg command. After the migration, the backup job name changes to New Plan_<Linux Backup Server1>. Deploy New Plan_<Linux Backup Server1>.
Now you add Linux_Node1 to New Plan and add Linux Backup Server1 as the server and deploy the plan. New Plan now protects Linux_Node1 and Linux_Node2 and the server is Linux Backup Server1.
Now you release Linux Backup Server1 from Console. Delete New Plan and New Plan_< Linux Backup Server1> from Console. When you migrate Linux Backup Server1 again to Console, two plans get migrated: New Plan and New Plan_<Linux Backup Server1>.
Solution
Delete the new plan. The new plan does not have any nodes, therefore, it does not affect any backup schedule.
Symptom
Although the backup job of one virtual machine has already finished, the virtual machine's status is still “Backup up” in the Hyper-V Manager. Therefore, if another backup job for this VM starts at this time, it will fail with error “The Hyper-V VSS writer has encountered an error when processing this virtual machine”. In addition, you cannot perform some operations, such as power on/off for the VM at that time in Hyper-V manager. And if the VM is Hyper-V cluster, you cannot perform live migration for it.
This problem happens during the following situations:
• There are several backup jobs starting at the same time or at times close to each other (within 1 minute).
• One or more backup jobs finished, but there is still at least one backup job which is still in progress.
Root of the problem:
To avoid bringing unnecessary workload to the Hyper-V host, instead of taking one VSS snapshot for each VM, Arcserve UDP tries to take one VSS snapshot for all VMs if their backup jobs start at the same time or at times close to each other. After the VSS snapshot is taken, all the VMs inside this VSS snapshot instance will be “locked” (in Backing up status). Because Arcserve UDP cannot release the snapshot until all backup jobs are finished, even if the backup job of a VM already completed, that VM is still “locked”. Due to the limitation of VSS snapshot that only one snapshot can be taken for one VM at one time, if another backup job of the same VM starts at this time, it will fail with the error “The Hyper-V VSS writer has encountered an error when processing this virtual machine”. In addition, some operations (such as power on/off) are disabled in Hyper-V Manager and, if the VM is in a Hyper-V cluster, live migration is also not allowed. This does not happen in Hyper-V 2008R2 because Hyper-V 2008R2 has different behavior on the VSS snapshot mechanism.
Solution
While the VM is “locked”, you can still use the guest OS as normal. Therefore, this has no impact on the usage/availability of the guest OS. However, if you have concerns and want to avoid this situation, you can do either of the following:
Symptom
The UI may respond slowly when accessing Arcserve UDP Agent (Windows) from Internet Explorer 10 or 11, if you are using any of the specific versions of Internet Explorer 10.0.9200.17XXX and Internet Explorer 11.0.9600.17XXX.
If this issue occurs, all other subsequent requests will wait for response for 5 minutes.
This issue only happens when using any of the versions of Internet Explorer 10 and 11 mentioned. All other browsers do not have this issue.
Solution
Perform one of the following temporary solutions:
Perform the following permanent solution:
Solution
Contact your domain administrator for help to authorize the DHCP server before using the Arcserve UDP Linux Backup server.
Symptom
There is a dead lock in the file system while taking a snapshot when the granular restore catalog job is running.
The following conditions may trigger the problem:
Solution
Configure the following registry key to move the cache file to another location which is not protected by the Arcserve UDP Engine:
HKEY_LOCAL_MACHINE\SOFTWARE\CA\ARCserve Unified Data Protection\Engine\AFStorHBAMgmt\CacheFilePath
If the "AFStorHBAMgmt" key does not exists, you have to create a new one.
Example: If your backup destination is local drive E:, the backup snapshot will be created on Drive E: into the backup destination path.
Example: E:\temp then E:\temp is used as cache store path.
Note: This issue happens when the I/O load is high, and the following conditions exist:
Taking a snapshot will notify the file system driver to flush incomplete data to the volume, and will hold off all new write operations to all volumes for a short time. This will create a dead lock where the mounted volume is flushing data to the file, and at the same time the writer operation is holding off on the volume where Arcserve UDP is installed.
Solution
Reopen the Restore wizard and try selecting the database again.
Symptom
The behavior of the operating system creates the offline state by default.
The SAN policy was introduced in Windows Server 2008 to protect shared disks that are accessed by multiple servers. The default SAN policy from the source VM is “Offline Shared” for all SAN disks except the boot disk. Setting the policy to Offline enables the SAN disks to be offline during startup. After recovery, a new disk for the VM is created. The disk file from the VM appears to be a SAN disk where the operating system identifies it as being offline. When the offline disk is set to be back online, the disk remains online even after rebooting the system.
Solution
As a workaround, specify the DISKPART.exe command: SAN POLICY=OnlineAll setting for the source VM before backup. Because the disks can be shared among other servers, data corruption can occur. You must use the correct SAN policy to protect the data.
DISKPART.EXE command line
Query SAN policy:
DISKPART > san
SAN Policy: Offline Shared
Change SAN policy:
DISKPART > san policy=OnlineAll
DISKPART successfully changes the SAN policy for the current operating system.
For all known issues in this release, see the Arcserve UDP Version 5.0 Release Notes.
The following considerations could exist in this update:
The following limitations could exist in this update:
Note: This limitation exists only for VMware VMs, which has the option to set the OS type. For Hyper-V, this problem does not exist.
Symptom
When you log in to the Arcserve UDP appliance with a domain account, the appliance wizard is not immediately launched. A User Account Control dialog displays asking you to confirm allowing the program to make changes to the computer.
Solution
From the User Account Control dialog, click Yes and the wizard will be launched.
"The Change Block Tracking(CBT) feature has been upgraded. As a result, redundant data may be backed up."
From Windows 2012, there is a new “shared VHD” feature of Hyper-V, which allows you to share the VHD(X) file among multiple VMs. (For more information about this feature, refer to the following blog: Shared VHDX Files - My Favorite New Feature in Windows Server 2012 R2). However, Hyper-V VSS Writer does not support this new feature. As a result, a Hyper-V agentless backup to a VM containing this “shared VHD” feature will fail. In order to back up this type of VM, you will need to run an agent backup by installing Arcserve UDP Agent for Windows on the VM.
For all considerations or limitations in this release, see the Arcserve UDP Version 5.0 Release Notes.
The following sections provide information about installation prerequisites and installation instructions.
Consider the following prerequisite tasks before installing this update:
When installing the Arcserve UDP update or the Arcserve UDP Agent (Windows) update, it is important to maintain optimal performance between the Console, the Recovery Point Server (RPS), and the Agents. As a result, when the update is installed in an environment that contains both a Console and an Agent, you must always install the update on the Console first, and then on the RPS, and finally on the Agent. (For the Agent that is installed on the Console or the RPS, the update will be automatically installed on that Agent at the same time).
Before you upgrade to Arcserve UDP Version 5.0 Update 4, review the following backward compatibility considerations in your environment:
Note: If you have an environment with both Arcserve UDP and Arcserve Backup installed, and you want to install Arcserve UDP Version 5.0 Update 4, you need to also install the corresponding Arcserve Backup patch RO75131 at the same time.
Note: For appliance users who upgrade to Arcserve UDP Version 5.0 Update 4, the IE browser will show a warning when you launch the Arcserve UDP Console, which is caused by the certification upgrade in Update 4. You can choose Continue to this website (not recommended) to launch the Arcserve UDP Console. You can also resolve this permanently by installing the certificate: View certificates -> Install Certificates -> select “Local Machine” -> select “Place all certificates in the following store” -> select “Trusted Root Certification Authorities”.
From the Arcserve Support site, under the Product Support Information heading, click Patches to access Arcserve UDP 5.0 Solutions and Patches for the latest Arcserve UDP Version 5.0 Update 4 download information.
Installing the Update Manually
For an upgrade installation package for Windows servers and workstations that have a previous version of Arcserve UDP already installed, download and install the update manually using the following links to the installation files:
For a fresh installation package for Windows servers and workstations that do not have Arcserve UDP installed yet, perform the following tasks:
Download and install Arcserve UDP Version 5.0 Update 4:
For a Linux installation, download and install the update manually using the following links to the installation files:
The Arcserve Support team offers a rich set of resources for resolving your technical issues and provides easy access to important product information.
With Arcserve Support:
Copyright © 2015 Arcserve. All rights reserved. All trademarks, trade names, service marks, and logos referenced herein belong to their respective companies.