Data protection backup agent management

Patent metadata

Field	Value
Publication number	US-9800569-B2
Application number	US-201414296760-A
Country	US
Kind code	B2
Filing date	Jun 5, 2014
Priority date	Jun 5, 2014
Publication date	Oct 24, 2017
Grant date	Oct 24, 2017

Abstract

During a data protection operation, a system exploits a virtual hierarchy to centralize the configuration and management of operating system credentials of numerous virtual guests. For each virtual guest, the system uses the credential to collect a single Globally Unique Identifier (GUID) previously generated and stored in-guest by any data protection agent. The system stores the collected GUID as a custom property in the context of the virtual hierarchy. The system also exploits the virtual hierarchy custom properties to determine if GUIDs are copies due to virtual guest replication. The system ensures GUID uniqueness by requesting regeneration of the GUID by in-guest data protection agents. Using GUIDs that are unique across the virtual hierarchy, the system can correlate application data of multiple in-guest data protection agents.

First claim

What is claimed is:

1. A method for managing in-guest data backup agents, in-host data backup agents, and off-host data backup agents within a virtualized computing environment comprising a plurality of computing resources, the method comprising:
receiving, at a client of a management server (management server client), a first Correlation Globally Unique Identifier (GUID) Attribute associated with a GUID of a first guest machine, wherein the first Correlation GUID Attribute is one or more bits that when active indicates the GUID of the first guest machine is the same as a GUID associated with a second guest machine;
determining, by the management server client, that the first Correlation GUID Attribute of the first guest machine is active and subsequently assigning a new GUID and associated new Correlation GUID Attribute to the first guest machine;
receiving, at the management server client, a request for data backup operations associated with the first guest machine;
receiving, at the management server client, Password Management Attributes and hierarchy location information associated with the first guest machine;
subsequent to receiving the request for data backup operations associated with the first guest machine, querying, by the management server client, a credential repository to determine the new GUID, the new Correlation GUID Attribute, and a password associated with the first guest machine;
creating, by the management server client, a Credential Object comprising the new GUID, the new Correlation GUID Attribute of the first guest machine, and the password associated with the first guest machine;
determining, by the management server client, whether the first guest machine is backed up by at least one member of the group consisting of an in-guest data backup agent that backs up data of the first guest machine and is located within the first guest machine, an in-host data backup agent that backs up data of the first guest machine and is located within a first physical server that hosts the first guest machine, and an off-host data backup agent that backs up data of the first guest machine and is located within a second physical server that does not host the first guest machine;
sending, by the management server client, the Credential Object to the determined at least one member of the group consisting of the in-guest data backup agent, the in-host data backup agent, and the off-host data backup agent, if the new Correlation GUID Attribute is inactive; and
upon receipt of the Credential Object, backing up data of the first guest machine at the determined at least one member of the group consisting of the in-guest data backup agent, the in-host data backup agent, and the off-host data backup agent.

2. The method of claim 1 , further comprising:
synchronizing, by the management server client, the credential repository with a computing resources hierarchy stored within the management server.

3. A computer program product for managing in-guest data backup agents, in-host data backup agents, and off-host data backup agents within a virtualized computing environment comprising one or more host machines and one or more guest machines, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions readable by one or more processors of the virtualized computing environment, to cause the virtualized computing environment to:
receive, at a client of a management server (management server client), a first Correlation Globally Unique Identifier (GUID) Attribute associated with a GUID of a first guest machine, wherein the first Correlation GUID Attribute is one or more bits that when active indicates the GUID of the first guest machine is the same as a GUID associated with a second guest machine;
determine, by the management server client, that the first Correlation GUID Attribute of the first guest machine is active and subsequently assign a new GUID and associated new Correlation GUID Attribute to the first guest machine;
receive, at the management server client, a request for data backup operations associated with the first guest machine;
receive, at the management server client, Password Management Attributes and computing resources hierarchy location information associated with the first guest machine;
subsequent to the receipt of the request for data backup operations associated with the first guest machine, query, by the management server client, a credential repository to determine the new GUID, the new Correlation GUID Attribute, and a password associated with the first guest machine;
create, by the management server client, a Credential Object comprising the new GUID, the new Correlation GUID Attribute, and the password associated with the first guest machine;
determine, by the management server client, whether the first guest machine is backed up by at least one member of the group consisting of an in-guest data backup agent that backs up data of the first guest machine and is located within the first guest machine, an in-host data backup agent that backs up data of the first guest machine and is located within a first physical server that hosts the first guest machine, and an off-host data backup agent that backs up data of the first guest machine and is located within a second physical server that does not host the first guest machine;
send, by the management server client, the Credential Object to the determined at least one member of the group consisting of the in-guest data backup agent, the in-host data backup agent, and the off-host data backup agent if the new Correlation GUID Attribute is inactive; and
upon receipt of the Credential Object, back up data of the first guest machine at the determined at least one member of the group consisting of the in-guest data backup agent, the in-host data backup agent, and the off-host data backup agent.

4. The computer program product of claim 3 , wherein the program instructions are readable by the processor to further cause the virtualized computing system to:
synchronize, by the management server client, the credential repository with a computing resources hierarchy stored within the management server.

5. A system for managing in-guest data backup agents, in-host data backup agents, and off-host data backup agents within a virtualized computing environment comprising one or more host machines and one or more guest machines, the system comprising:
a computer processor of a client of a management server (management server client) that:
receives a first Correlation Globally Unique Identifier (GUID) Attribute associated with a GUID of a first guest machine, wherein the first Correlation GUID Attribute is one or more bits that when active indicates the GUID of the first guest machine is the same as a GUID associated with a second guest machine;
determines that the first Correlation GUID Attribute of the first guest machine is active and subsequently assigns a new GUID and an associated new Correlation GUID Attribute to the first guest machine;
receives a request for data backup operations associated with the first guest machine;
receives Password Management Attributes and hierarchy location information associated with the first guest machine;
subsequent to receiving the request for data backup operations associated with the first guest machine, queries a credential repository to determine the new GUID, the new Correlation GUID Attribute, and a password associated with the first guest machine;
creates a Credential Object comprising the new GUID, the new Correlation GUID Attribute, and the password associated with the first guest machine;
determines whether the first guest machine is backed up by at least one member of the group consisting of an in-guest data backup

Assignees

• IBM

Inventors

• Edwards Jr Robert C
• Hochberg Avishai H
• Iqbal Jawed
• Nam Tai W
• Nguyen Joanne T
• Rasmussen Neil G
• Smith James P
• Symonds Peter B
• Yu Jean X

Classifications

• H04L63/083 Primary

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G06F2009/45587

  Isolation or security of virtual machine instances · CPC title

• G06F17/30292

  Physics · mapped topic

• H04L63/104

  Grouping of entities · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title