Dell PowerProtect DD Initial Configuration

In this post, I will show you how to properly configure and prepare Dell PowerProtect for the first time use.

Configuring your Dell PowerProtect Data Domain (DD) system for the first time involves several crucial steps. This guide will walk you through the process of configuring iDRAC, enabling Serial Over LAN (SOL), logging into the Data Domain system CLI, upgrading the Data Domain OS, starting the initial configuration wizard, and finally accessing the DD System Manager web interface.

Step 1: Configure iDRAC

1. Access iDRAC:
   
   • Connect to the system serial console or connect KVM to the system.
   • Reboot the system.
   • During the boot process, press "F2" to access the BIOS menu.
2. Configure Network Settings:
   
   • Select "iDRAC Settings".
   • Select "Network".
   • Under "IPv4 Settings", select "Static IP Address" and press "Enter" to specify a new static IP address.
   • Press "Esc" to return to the previous menu.
3. Enable Root User:
   
• Select "User Configuration".
• Enable the root user.
• Change the root user password. (The default password is the system's 14 alphanumeric characters serial number on the service tag at the front of the system).

Step 2: Configure Serial Over LAN (SOL)

1. Access iDRAC Web Interface:
   
   • In a web browser, enter the URL: "https://[iDRAC_IP_address]".
   • Login with the "root" account.
2. BIOS Settings Configuration:
   
   • Navigate to "Configuration > BIOS Settings > Serial Communications".
   • Verify and configure the following:
     

     Serial Communication: Auto

     Serial Port Address: Serial Device1=COM2, Serial Device2=COM1

     External Serial Connector: Serial Device 2

     Failsafe Baud Rate: 115200

     Remote Terminal Type: VT100/VT220

     Redirection After Boot: Enabled{codeBox}

   • Click "Apply" to save changes.
3. SOL Configuration:
   
   • Navigate to "iDRAC Settings > Connectivity > Serial Over LAN".
   • Verify and configure the following:
     

     Enable Serial Over LAN: Enable

     Baud Rate: 115.2 kbps

     Channel Privilege Level Limit: Administrator

     Redirect Enable: Enable

     Escape Key: ^\ (Ctrl + ){codeBox}

   • Click "Apply" to save changes.
4. Enable SSH:
   
• Navigate to "iDRAC Settings > Services".
• Set "Enabled" for SSH.
• Verify the "Port Number" is set to 22.
• Click Apply to save changes.
• Navigate to "Configuration > BIOS Settings > Serial Communications" then click Apply and Reboot.

Step 3: Login to Data Domain System CLI

1. Through Serial Port:
   
   • Connect using a serial communication tool like PuTTY with the speed set to 115200.
   • Username is "sysadmin".
   • Password is the system's 14 alphanumeric characters serial number on the service tag.
2. Through SSH by Serial Over LAN (SOL):
   
• Run the following command to establish an SSH connection to iDRAC or use tool like PuTTY.
  

  ssh <iDRAC-IP-address> -l <iDRAC-username>{codeBox}

• Log in with the credentials for the iDRAC root account.
• Run the following command to initiate the SOL session.
  

  console com2{codeBox}

• Press "Enter" until the console loads.
• Log in using the "sysadmin" account.

Step 4: Upgrade Data Domain OS (Required Step)

1. Download and Prepare Upgrade Package:
   
   • Download the DD OS ".rpm" package from Dell Support.
   • Create the directory "/upgrade" on a USB key and copy the ".rpm" package inside it.
2. Upgrade Process:
   
• Plug in the USB key to one of the USB ports on the back of the system.
• Run the following command to install the package:
  

  system upgrade <filename.rpm>{codeBox}

• To check the upgrade status, run the following command:
  

  system upgrade status{codeBox}

During the upgrade process, the system will reboot. It can take up to 20 minutes to reboot and around 30 minutes for the file system to come back online. Errors like "The filesystem has encountered a problem" may occur if you tired to check the status status earlier. Please be patient as this error only means the file system is not up yet.{alertInfo}

Step 5: Start the Initial Configuration Wizard

1. Login back with "sysadmin" account, then follow the prompt:
   
   • The first time you log in, accept the End User License Agreement (EULA).
   • If the CLI configuration wizard does not start automatically, run the following command.
     

     config setup{codeBox}

   • Enter "Yes" to configure the system for network connectivity.
   • Choose whether to configure DHCP or manual parameters.
   • Enter the Fully Qualified Domain Name (FQDN) for the host (e.g., str01.yourcompany.com).
   • Enter the DNS (e.g., yourcompany.com).
   • Enable Ethernet port "ethMa" and configure its IP address and netmask.
   • Disable Ethernet port "ethMb".
   • Enter the default gateway IP address.
   • If not using IPv6, leave the field empty and press "Enter".
   • Enter the DNS Server list (e.g., 10.10.10.1, 10.10.10.2).
   • Review and save the network settings.

Step 6: Access DD System Manager Web Interface

• Use the URL: "https://[FQDN_of_Host_Name]" or "https://[ethMA_IP_Address]".

Be cautious with the "sysadmin" password. Entering an invalid password three times will lock the account for 10 minutes. Each subsequent failed attempt increases the lock period. Rebooting the machine resets the time counter to zero.{alertWarning}

The default password expiration period is set to 90 days after the initial setup. It is crucial to extend this period to the maximum of 999 days and advise the customer to change the password before it expires. If the password does expire, it can only be reset by entering Single User Mode, a process protected and can be handled only by Dell support.{alertWarning}

Step 7: Change Default Password and Extend Expiration Period

Method 1: Using CLI

1. Login to the System CLI:
   
   • Access the system CLI using either the serial port or SSH as described in Step 3.
   • Log in with the "sysadmin" account.
2. Change Default Password:
   
   • Run the following command to change the password:
     

     user change password sysadmin{codeBox}

   • Follow the prompt to enter and confirm the new password.
3. Extend Password Expiration Period:
   
   • Run the following command to set the password expiration period to 999 days:
     

     user password aging set sysadmin max-days-between-change 999{codeBox}

4. Create a New Admin User:
   
   • Run the following command to create a new admin user:
     

     user add admin1 role admin{codeBox}

   • Follow the prompt to enter the desired password for the new admin user.
   • Extend the password expiration period for the new admin user:
     

     user password aging set admin1 max-days-between-change 999{codeBox}

5. Verify User List and Password Expiration Dates:
   
   • Run the following command to check the users list:
     

     user show list{codeBox}

   • Run the following command to check the users' password expiration dates:
     

     user password aging show{codeBox}

Method 2: Using WebUI

1. Change Password:
   
   • Navigate to "Administration > Access > Local Users".
   • Choose the user you want to change the password for.
   • Click the "Change Password" button and follow the prompt to enter the new password.
2. Extend Password Expiration Period:
   
   • Navigate to "Administration > Access > Local Users".
   • Choose the user you want to modify.
   • Click the "Modify" button.
   • Click on the "Advanced" tab.
   • Change the value for "Maximum Days Between Change" to "999".
   • Press "OK" to save the changes.

It's important to create another user with an admin role as an alternative to the sysadmin user in case it gets locked for any reason.{alertInfo}

By following these steps, you will successfully configure your Dell PowerProtect DD system for the first time, ensuring it is ready for use in your environment.