Ir directamente al contenido
Español
  • No hay sugerencias porque el campo de búsqueda está vacío.

Deshabilitar Compliance Lock - Commvault

Compliance Lock (anteriormente conocido como Worm Storage Lock) es una función de seguridad de Commvault que impide modificar la retención o eliminar los datos asociados a esa copia. Una vez habilitada esta función, no se puede deshabilitar sin un código de autorización.

Información tomada de Kb 82504: https://support.commvault.com/Kb/Details/82504

 Please note that if this is a CommserveDR (disaster recovery) related copy, you can follow these steps to remove Compliance Lock: https://kb.commvault.com/article/81103 

In order to remove Compliance lock from a copy, you will need to obtain an authorization code which will be utilized to run a script against your CommCell.

Please follow these steps to complete this process:

  1. Log in to the Commvault Support Portal, click on resources, and go to the “Request Authorization Code to Disable Compliance Lock” link.
  2. This brings you to the form which has multiple inputs required.
    1. Select the CommCell id from the automatically populated list. Make sure you select the CommCell which has the Storage policy or storage pool that you want to disable compliance lock.
    2. Manually type in the storage policy name, storage policy id, copy name, and copy id. The storage policy id and copy id information is not easily accessible directly from the Command Center or CommCell Console, but you can use the report provided from this link on the page: https://cloud.commvault.com/commandcenter/#/softwareStore/28858
    3. Make up a passphrase. This passphrase can be a text string of your choosing, however make sure you write down this input as you will need it in a later step!
  3. An email will be generated which has the steps required for you to follow. The email will be distributed to members of the 'master' group. Download the XML attached to the email, and copy it to the machine where you can run Commvault command line, such as the Commserve or a MediaAgent.
  4. Log into that machine, launch PowerShell or a command prompt and run the qlogin command to authenticate to the CommCell with the same credentials you would use to log into the command center or CommCell Console. Ensure this user is a member of the master group.
  5. Copy and paste the command noted in the email. Make sure to change the path to the location you copied the XML to on that machine. In addition, the passphrase field must be populated with the passphrase from the original form. You will see a return of 0 if it is successful.
    1. Upon successful execution of the script, a response will be generated stating 'An email will be sent to the administrator to authorize the disable compliance lock request'.
    2. This is a mandatory security control which requires a second admin account to authorize the request.
    3. If you receive an error noting that "Backup Destination of Plan is using storage level compliance lock setting. Please disable compliance lock from storage <NAME>", you will have to follow the steps again for the <NAME> returned in the error message. This is due to compliance lock being enablement for the Plan level. Make sure to evaluate any other copies this could impact before following the steps again for the <NAME> noted in the error message.
  6. A second administrator user must approve the request in either of the two methods available. Note that the user account used in step 4 will not be able to approve this request, a second administrator account must be used.
    1. Click on 'Approve' in the email that is generated.
    2. Log into the Command Center and navigate to Monitoring > Approvals and approve the request.

At this point, you can go back to the copy that originally had compliance lock enabled, and it should now show as disabled. You may need to refresh your view before the change is reflected so keep that in mind. You now will have the ability to change retention or delete the copy as needed.

 There is a video available to walk you through the process which you can access here: https://support.commvault.com/Media/DisableComplianceLockOverview