Tips
How to restore/recreate the default server certificate
Important: This procedure should be performed when there are no Backups/DR/Cleanup/S3 Copy running. Only perform this steps if you know how to use SSH and Linux commands If you need to restore/recreate the default server certificate , here are the ...
RestAPI example files
Background: CPM contain rich RESTful API interface that enable you to do everything you do manually in the UI in an automated way, but it can be difficult to start using the RESTful API. We created this examples to assist customers in understanding ...
How to setup CPM on AWS to backup Azure virtual machines and disks.
This article will show the configuration steps required to have CPM running on AWS backup and restore Azure virtual machines and disks. Part I Add an App registration in Azure. 1. Open the Azure portal and go to Azure Active Directory, then click on ...
How to create and configure an EBS Endpoint for CPM Workers
This article will provide step-by-step instructions on how to create and configure an EBS Endpoint for CPM workers (v3.1 and up) Step 1: Let's say that you have created this VPC for your workers: In this example, we allocated IPv4 addresses ...
How to connect to an instance in AWS using SSH
This article will walk you though how to connect to your CPM instance using SSH, these steps can also be used to connect to any Linux instance in AWS including a CPM worker instance. The same process and key is used for an SSH connection to CPM or a ...
Restful API examples
The purpose of this article is to help you get started with N2WS Restful API and provide you some examples on how to use it. However, it is not meant to replace the official documentation - for full and accurate information on all the APIs and ...
How to Check for AWS Permissions
Each account in N2WS is mapped to a specific Roles or IAM user in AWS, You can see the list of account and authentication types in the Account Tab: For each account, you can select it and then click on 'Check AWS Permissions' This will test the ...
How To Integrate Okta SSO IdP with CPM 3.0 and above
Background: This document details the steps needed to configure Okta Single Sign On IdP and N2WS Cloud Protection Manager 3.0+. This KB will walk through configuring a new application in Okta to use with CPM as well as configuring CPM with Okta's ...
How to Integrate CPM with ADFS to allow Idp logins from windows AD users
Background: This How-To guide will outline how to configure CPM and a windows ADFS server to allow IdP logins. Before you get started you will need to check the prerequisites. This is very important. If they are not met or the Domain and any of the ...
How to check CPM Usage in version 2.7
Background: This How-To guide provide details about checking the usage of the CPM Server, It shows examples of how to get usage from the CPM UI and rest API For additional information about the CPM UI, please check our User Guide Link: Backup & ...
How to configure tag scan module by regions and by Scan Resource Types in CPM 3.0 and above
Background: This document describes how to filter Resource scanning by regions or by Resource Types which is new to new to CPM 3.0, This allows you to limit not only the regions that a tag scanning will scan but adds the ability to scan by specific ...
How to backup EC2 instance located in another account
Background: You can backup ec2 instances that are located in a different account then the N2WS server, This Guide shows the needed configuration for this AWS Configuration You need to create a role in the target account IAM that has the following: 1. ...
How-To Integrate N2WS Backup & Recovery 3.x/4.x with Azure Active Directory
Background: This How-To guide provide details about the configuration required in order to integrate N2WS Backup & Recovery with Azure Active Directory SSO, It shows an example on how to create and configure Enterprise application in Azure and what ...
How-To integrate N2WS Backup & Recovery 2.7.0a with Azure Active Directory
Background: This How-To guide provide details about the configuration required in order to integrate N2WS Backup & Recovery 2.7.0a with Azure Active Directory SSO, It shows an example on how to create and configure Enterprise application in Azure and ...
How to add an additional AWS account to CPM for Backup or DR
When adding an additional AWS account to CPM for Backup or DR, there are two ways to grant CPM access to the account: Authentication: Assume Role or IAM User "CPM Instance IAM role" can only access the account the CPM server is running in and cannot ...
Best Practices for S3 Backup
We strongly recommend to configure S3 backup according to https://docs.n2ws.com/user-guide/appendix-a-recommended-configuration-for-copy-to-s3 Failure to do so may result in excessive AWS charges, slow backup/restore, or failure to perform one.
How to fully encrypt CPM server root and data volumes in EBS
The steps below will help you properly encrypt the CPM server root and data EBS volumes for an existing CPM server instance. If encrypting only the data volume, it is still necessary to launch a new CPM server instance. Then during initial CPM ...
How to Integrate Okta Single Sign on with Cloud Protection Manager with N2WS 2.x
Background: This document details the required configuration steps to take in Okta Single Sign On and Cloud Protection Manager(CPM). It walks you through creating a new Application to use with Okta. Please note that integration with CPM and Okta is ...
How to setup cross account/cross region recovery in CPM 2.x
Background This document assumes that the main server running Cloud Protection Manager (CPM) is setup according to the minimum-Security requirements document at this link. ...
How to change the SSL certificate and key used by CPM
Important: This procedure should be performed when there are no Backups/DR/Cleanup/S3 Copy running. In addition, Linux knowledge is Required. If you need to install a CA SSL certificate, here are the instructions: Connect to the N2WS instance over ...
Recovery of a cross-account DR copy of encrypted RDS snapshots
There is a limitation for restoring encrypted RDS snapshots from a DR AWS account. This is an AWS limitation, as described in this link . "Sharing an unencrypted manual DB snapshot enables authorized AWS accounts to directly restore a DB instance ...
How to migrate a CPM Server to a different region
Here are the steps for migrating a CPM Server to a different region: 1) Stop your existing instance (when no backups/DR are running). 2) Take a snapshot of the data volume 3) Copy that snapshot to the target region 4) Create an EBS volume from the ...
How to migrate a CPM Server to a different account
Attention: this procedure only applies to non-BYOL editions. BYOL customers should contact sales@n2ws.com and ask to add the new account to their license prior to attempting a migration using the process described below. Important: Before performing ...
Recommended instance sizes and volume types for CPM Server instances
EC2 Instance sizing Here are the recommended instance sizes for CPM Server instances: Up to 200 instances - t3.medium Up to 500 instances - m5.large, c5.large, R5.large, C6i.large, R6i.large, M6i.large, C7i.large, M7i.large Up to 1000 instances - ...
How to backup instances in the GovCloud region
There are 2 ways to use CPM to protect GovCloud resources. Option1: Launch a CPM instance using AWS GovCloud Marketplace: https://aws.amazon.com/mp/govcloud/ Option2: Use a CPM launched in another region. The GovCloud region is disabled in CPM by ...
How to reset the password for the root/admin CPM user
If you know the username of the root/admin user: Follow the upgrade procedure in our User Guide at: https://docs.n2ws.com/user-guide/#1-4-upgrading-n-2-ws Please make sure you do this when there are no backups/DR in progress. When configuring the new ...
Internet access required for CPM operations
CPM Server: All outbound CPM communication is to the 443 port (https) For ongoing operations for a production CPM server it needs to access AWS endpoints to use AWS APIs. You can decide to expose only relevant regions. AWS endpoint information can be ...
How to - Remote installation of the CPM Agent
In order to remotely install the CPM Agent on a remote server, you can use its silent install feature. Here is a sample Powershell script to be executed on the remote server: <powershell> $download_dir = "c:\cpm_agent" $cpm_server_address = ...
CPM instance hardening for vulnerability scans
In order to perform the below operations, you need to connect to the instance with SSH (your assigned private key and username: "cpmuser"). 1) (Only in v2.3 and up) To enforce usage of TLS 1.2, please edit the file /etc/apache2/mods-enabled/ssl.conf. ...