Credentials are used to establish a trust relationship between the backup system and its clients. Once you apply a credential to a client, the backup system can only access the client using the associated administrative username and password. If the username and password are not valid, access is denied.
Credentials can be set at either the client or instance level. Client-level credentials are used for agent push and backup operations. Instance-level credentials are used to perform a backup of a particular application instance, such as a virtual machine or an Oracle database. Credentials are required for VMware, Cisco UCS, NDMP, and Oracle protection; credentials are recommended for Windows clients, and optional for other client types.
• | For details on creating client-level credentials, see Client trust credentials. |
• | For VMware, client-level credentials are required for the vCenter or ESX server, but instance-level credentials are optional for individual VMs. See Setting VM credentials for application-aware protection for details on when to use instance-level credentials. |
• | For Cisco UCS, the Cisco UCS manager client must be registered to the backup system with administrative trust credentials. See Adding Cisco UCS Manager clients to the Unitrends appliance for details. |
• | For Oracle databases, instance-level credentials are required to perform backup operations. See Oracle client and instance requirements for details. |
• | For Windows clients, client-level credentials are required to push install agents and agent updates. For more on push installation, see Push installing the Windows agents. |
Use the procedures in this section to manage both client-level and instance-level credentials from a centralized location. The Credential Management page displays each credential along with its associated clients, VMware instances, and/or Oracle instances. To collapse the view, click the arrow to the left of a credential. Perform the following tasks using the Credential Management page:
1 | Select Settings > Clients, Networking, and Notifications > Credential Management. |
2 | Click New Credential and enter the following fields: |
Field |
Action |
---|---|
Credential Name |
Name associated with the credential. This is optional. |
Administrative Username |
User must have local system administrator privileges or domain administrator privileges. |
Password |
Password associated with the username you supplied. |
Confirm Password |
Enter the password again to confirm. |
Domain |
Name of the Windows domain associated with this credential. This is optional. |
3 | Click Save New Credential. |
4 | The credential is created and automatically displays in the Credential Management screen. |
1 | Select Settings > Clients, Networking, and Notifications > Credential Management. |
2 | Select the desired credential in the grid. |
3 | Click Edit Selected Credential and modify settings as desired. For a description of each field, see To create a new credential. |
4 | Click Save Credential. |
Once a default credential is created, you can assign it to clients by checking the Use default credentials box on the Client page. Once you have set the default credential, you cannot change your selection. Instead, you must edit the default credential, or delete it to choose another as the default.
1 | Select Settings > Clients, Networking, and Notifications > Credential Management. |
2 | Select the desired credential in the grid and click Edit Selected Credential, or create a new credential as described in To create a new credential. |
3 | Check the Set as Default box and click Save Credential. |
1 | Select Settings > Clients, Networking, and Notifications > Credential Management. |
2 | Verify that there are no clients associated with the credential. A credential that is associated with a client cannot be deleted. |
If there is a client associated, remove the association on the Clients page by either unchecking the Establish Trust box or by associating a different credential. For details, see Client trust credentials.
3 | Select the desired credential in the grid and click Delete Credential. |