1.

Veritas™ Desktop and Laptop Option 9.5

Quick Reference Guide for DLO Installation and

Configuration

10-Dec-20
Veritas Desktop and Laptop Option: Quick Reference Guide for DLO Installation and Configuration.

The software described in this document is furnished under a license agreement and may be used only in accordance with
the terms of the agreement.

Legal Notice
Copyright (c) 2020 Veritas Technologies LLC. All rights reserved. Veritas and the Veritas Logo are trademarks or registered
trademarks of Veritas Technologies LLC or its affiliates in the U.S. and other countries. Other names may be trademarks of
their respective owners.

This Veritas product may contain third party software for which Veritas is required to provide attribution to the third party
(“Third Party Programs”). Some of the Third Party Programs are available under open source or free software licenses. The
License Agreement accompanying the Software does not alter any rights or obligations you may have under those open
source or free software licenses. Please see the Third Party Legal Notice Appendix to this Documentation or TPIP ReadMe
File accompanying this Veritas product for more information on the Third Party Programs.

This Veritas product may contain open source and other third party materials that are subject to a separate license. Please
see the applicable Third Party Notice at
https://www.veritas.com/about/legal/license-agreements/.

The product described in this document is distributed under licenses restricting its use, copying, distribution, and
decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior
written authorization of Veritas Technologies LLC and its licensors, if any.

THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND
WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR
NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY
INVALID. VERITAS TECHNOLOGIES LLC SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN
CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION
CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE.

The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR 12.212
and subject to restricted rights as defined in FAR Section 52.227-19 "Commercial Computer Software - Restricted Rights"
and DFARS 227.7202, "Rights in Commercial Computer Software or Commercial Computer Software Documentation", as
applicable, and any successor regulations. Any use, modification, reproduction release, performance, display or disclosure
of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this
Agreement.

Veritas Technologies LLC

2625 Augustine Drive
Santa Clara, California 95054, U.S.A
http://www.Veritas.com/
 Contents

Introduction ........................................................................................................................................... 4
What’s New in DLO 9.5 ..................................................................................................................................... 4
Backup Over Internet (BOI) for Mac endpoints ................................................................................. 4
Edge Server in Workgroup ............................................................................................................... 4
DLO Components System Requirements............................................................................................. 4
Downloading Veritas DLO ..................................................................................................................... 6
Prerequisites for Installing Veritas DLO ............................................................................................... 7
Installing Veritas DLO ......................................................................................................................... 14
Configuring Veritas DLO ..................................................................................................................... 19
Steps to Configure DLO Server Setup ........................................................................................................... 19
Step 1 - Add the Dedupe Server to the DLO Administration Server................................................. 19
Step 2 - Add DLO Storage Locations.............................................................................................. 20
Step 3 - Create and configure a Profile........................................................................................... 22
Step 4 - Configure Users to the created profile ............................................................................... 22
Steps to Configure Backup Over Internet (BOI) ............................................................................................. 24
Step 1 - Register a Public IP for the DLO Edge Server ................................................................... 24
Step 2 - Map the SSL certificate to the Registered Public IP ........................................................... 24
Step 3 - Map the DLO Edge Server and IO Server to the DLO Storage Location ............................ 25
Step 4 - Test Connectivity to the DLO Edge Server ........................................................................ 25
Step 5 - Enable the BOI option in a Profile ..................................................................................... 26
Deploying the Desktop Agent......................................................................................................................... 27
Pull Install the Desktop Agent from the Client machines ................................................................. 27
Pull Install the Desktop Agent from Web Restore page ................................................................... 27
Push Deployment of the Desktop Agent ......................................................................................... 27
Backup and Restore Verification ........................................................................................................ 29
Configuring a Backup Job ................................................................................................................................. 29
Backup Verification ........................................................................................................................................... 29
Interpretation of the Backup Status Report ..................................................................................... 31
Restore Verification .......................................................................................................................................... 32
DLO Documents Reference Links....................................................................................................... 33

3
Introduction
Veritas™ Desktop and Laptop Option is a user centric backup solution that provides flexible
implementation and centralized administration for backup and recovery of Windows and Mac desktops
and laptops in the organization. This highly scalable solution with distributable components is suitable for
environments of any scale, be it single-site, multi-site, or having remote offices, allowing you to protect
even the most recent files with your users.

Built-in features include source side deduplication with content aware deduplication of Outlook PST and
NSF files, automatic network selection for non-intrusive backup experience which enables switching
between the offline, online and backup over internet modes, self-restore capabilities offered through
agent, web browser and a mobile application, rollback capabilities for ransomware protection and
detailed auto reporting.

This Quick Reference document intends to provide the basic steps in setting up a DLO environment so as
to facilitate a smooth product evaluation process. If an administrator is implementing the product for a
Production environment, please refer to the latest version of the DLO Administrator’s Guide and Best
Practices document available here, to understand the various implementation possibilities through DLO.

What’s New in DLO 9.5

This section provides a brief introduction about the new features included in this release.

Backup Over Internet (BOI) for Mac endpoints

DLO’s BOI capability that protects the endpoints connected even outside the corporate network, is now
extended for Mac endpoints.

Edge Server in Workgroup

Veritas DLO Edge Server component can be installed and configured in a non-domain machine
(workgroup environment).

DLO Components System Requirements

Veritas DLO is designed with the flexibility of a various possible implementations. However, some factors
that affect DLO efficiency and performance should be considered in the planning process for DLO.

Veritas DLO Server has the following components:

1. DLO Administration Server: The service responsible for the Administrative activities.
2. DLO Administration Console: A graphical user interface for the Administrator to configure,
manage and monitor the endpoint backup environment.
 Contents
3. DLO Maintenance Server: Component responsible for revision maintenance and file grooming
operations in the storage locations.
4. Dedupe Server: Application server that facilitates deduplication by maintaining the Global Hash
Table, which helps in identifying unique and duplicate data on the desktop agents.
5. DLO Storage: Backup destination where the endpoint data will be stored. Comprises of the DLO
Storage Location and Dedupe Storage Location.
6. DLO Database: Component that maintains the application information. Comprises of the DLO DB
and Dedupe DB.
7. DLO IO Server: Application server residing within the corporate network, making the DLO
resources accessible over internet.
8. DLO Edge Server: Component exposed to internet for front-ending the Application Servers.
Please note that the IO Server and Edge Server components are optional components that need to be
configured only when opting for the Backup over Internet (BOI) capability that allows VPN-less backups.

DLO Server components can be installed as a Standalone setup in the same machine or can be installed
as a Distributed setup, across different server machines as well. Within the scope of this document, the
Standalone setup configuration will be discussed, where all these components reside on the same
hardware.

Installation of DLO and its components on a VMware ESXi and Hyper-V servers is supported. The
administrator can install all DLO Server components on Microsoft Azure and Amazon Web Services (AWS)
cloud.

5
DLO Server Setup System Requirements:

The hardware configuration for a Standalone setup for both non-BOI and BOI modes are as follows.
Administration Server, Maintenance Administration Server, Maintenance Server,
Server, Database, Dedupe Server Database, Dedupe Server, Edge Server, IO
Users (Excludes Edge Server and IO Server) Server
CPU RAM CPU RAM
64 Bit Quad Core Xeon, or 64 Bit Quad Core Xeon, or
<=1000 8 GB 12 GB
compatible compatible

The latest software configuration is preferred for the DLO Server setup as follows.

OS Version Platform
Windows 2019 Server (Standard, Data Center) x64
Windows 2016 Server (Standard, Data Center) x64
Windows 2012 R2 Server – with Update 2919355 (Standard, Data Center) x64

Desktop Agent System Requirements:

CPU RAM OS Version
32/64-bit Pentium, Xeon, AMD, or Windows 10, 8.1, 8
2 GB
compatible Mac 10.15, 10.14, 10.13, 10.12, 10.11, 10.10, 10.9.

For more information on the supported Operating Systems, refer the Veritas DLO 9.5 Software
Compatibility List document available here.

Downloading Veritas DLO

The administrator can download the latest available version from the Trialware Download link:
https://www.veritas.com/content/trial/en/us/desktop-and-laptop-option.html. If already a customer of
Veritas DLO, the administrator can find it from the MyVeritas webpage as well.
Note: From the DLO 9.3.1 version onwards, an inbuilt 60-day trialware license is available for the product
evaluation.
1. Download the appropriate files into a temporary directory:

Veritas_Desktop_and_Laptop_Option_Y.Y_xxxxxx_64-bit.zip,

Where, Y.Y is the product version number and xxxxxx is the build number

2. To extract the files, double-click the .zip file.

 Contents

Prerequisites for Installing Veritas DLO

The prerequisites for installing and managing a DLO setup are detailed here. Please ensure these
prerequisites are taken care before the actual installation begins, to ensure that there are no problems
during the installation process.
Item Description
Domains and The DLO Administration Server, DLO Database Server, DLO Dedupe Server, DLO
Active Directory Edge Server, DLO IO Server and DLO Storage Locations must be in a Windows
Domain or Active Directory. Computers running the Desktop Agent can be outside
a Windows Domain or Active Directory, but they must authenticate with the
domain or directory to access the DLO Administration Server or Storage Locations.

User privileges Following are the accounts required for installing and managing DLO Components:
for installing and Domain User or Domain Administrator account for:
managing DLO  Veritas DLO Administration Server: This user should have local
administrator privilege on DLO Administration Server machine, Storage
Server and SQL Server. This user should have read and write access to the
registry on the DLO Administration Server machine.
 Mindtree Storesmart Dedupe Server service: This user should have local
administrator privilege on the DLO Administration Server machine. This
account should be the same as DLO Administration Server service
account.
 SQL Server (instance): This user should have local administrator privilege
on DLO Administration Server, SQL Server machine and Storage Server.
 SQL Server Browser: This user should have local administrator privilege on
the SQL Server machine.
 Veritas DLO Web Server Service: This user should have local administrator
privilege on DLO Administration Server machine. This account should be
the same as DLO Administration Server service account.
Local System Account for:
 Veritas DLO Edge Server Service
 Veritas DLO Maintenance Server

Domain User account for:

 Accessing Dedupe Storage Location. This low privilege domain user
account is also known as “Dedupe Storage Location Access Credential”
and will be used by the Desktop Agent to access the Dedupe Storage
Location. A user account with administrator rights is not permitted to be
configured as Dedupe Storage Location Access Credential account. The
administrator needs to ensure that the password for this user account
does not expire frequently. If the password expires, then reset the
password for the domain user. This user should have the ‘Allow log on
locally’ policy set in the domain controller group policy object.
User privileges  Impersonation privilege is required for the logged on user on the
for DLO Agents desktop agent machine for impersonating as the Dedupe Storage
users

7
 Location user in order to write the deduped data to the Dedupe Storage
Location.
 A local system account for the Volume Shadow copy service is required.
This service should be up and running in order to provide backup
statistics for generation of the Backup Status Report.
Database By default, DLO installs its own instance of SQL Server 2014 Express SP3. DLO can
Selection be manually configured to use an existing local SQL Server instance.
The DLO Database Service requires minimum 6 GB hard disk space.
Note: Ensure to manually install the Microsoft® SQL Server® 2014 SP3 Latest
Cumulative Update available here.

For more information on the supported versions, refer the Veritas DLO 9.5
Software Compatibility List document available here.

DLO Database can be installed as one of the following options:

Option 1 : Local SQL Express 2014 SP3 Instance
Prerequisites:
 DLO Database Service requires minimum 6 GB hard disk space.
Details:
 By default DLO installs its own instance of SQL Server Express edition.
 On a 64-bit machine, the DLO and Dedupe databases will be stored on a
new local SQL Express 2014 SP3 instance located on C:\Program Files
(x86)\Microsoft SQL Server\MSSQL10_50.DLO.

Option 2: Existing SQL Local Server Instance

Prerequisites:
 For existing local SQL server instance, the named pipes and TCP/IP must
be enabled on the computer where the SQL server is installed. Once the
named pipes and TCP/IP are enabled, restart the SQL server and SQL
server browser services. Ensure that the computer browser services are
running.
 Ensure that the SQL service is running under domain administrator
credentials and provide the same user account credential that was used
to install the SQL server, else there can be database connectivity issues.
Details:
 The DLO and Dedupe databases will be stored on a local existing SQL
Server instance on this computer. Select an instance from the list
provided. C:\Program Files (x86)\Microsoft SQL
Server\MSSQL10_50.DLO.

Option 3: Existing Remote SQL Local Server Instance

Prerequisites:
 For existing remote SQL server instance, the named pipes and TCP/IP
must be enabled on the computer where the SQL server is installed. Once
the named pipes and TCP/IP are enabled, restart the SQL server and SQL
server browser services. Ensure that the computer browser services are
running.
 Contents
 Ensure that the SQL service is running under domain administrator
credentials and provide the same user account credential that was used
to install the SQL server, else there can be database connectivity issues.
Details:
 The DLO and Dedupe databases will be stored on a remote SQL server
instance. Provide the IP address or host name of the computer where
SQL is installed.
Firewalls DLO is designed to work in firewall environments. The DLO Desktop Agents can be
installed on endpoints that are connected either over the corporate network or in
the Backup Over Internet (BOI) mode using the private internet connection. The
details of the port configuration for the DLO Server components and DLO Clients
in a firewall environment are defined for the following three deployment
scenarios:
 Non BOI Deployment: For organizations having endpoints that are always
within the organization premises and are connected over the corporate
network.
 Exclusive BOI Deployment: For organizations having endpoints that are
always outside the corporate network and connect only using internet
connection.
 Occasional BOI Deployment: For organizations having endpoints that are
occasionally outside the organization premises, during which they connect
using internet connection, but are otherwise within the organization
premises connecting over the corporate network. For more information,
refer to the section Port Configuration for DLO Components.
Certificates This is required for the Backup Over Internet (BOI) capability. In order to configure
the BOI capability, an SSL certificate procured from a Trusted CA is a pre-requisite.
This certificate is required for the Desktop Agents to communicate with the DLO
Edge Server over a public URL. However, for product evaluation scenarios, an inbuilt
self-signed certificate is provided in the DLO Installer package for validating the BOI
capability.
Note 1: It is recommended to use an SSL certificate procured from a Trusted CA when
deploying in production.
Note 2: With the Veritas DLO 9.3 release, the administrator can configure multiple
Edge Servers ensuring an optimized backup flow for the geographically distributed
remote office users connected over the internet. For a multiple Edge Server DLO
setup, ensure to procure unique certificates from a Trusted CA and the same
should be provided while configuring the new Edge Server in the DLO
Administration Console.
Remote Install For remote installation of the DLO Maintenance Server and DLO Desktop Agents:
Considerations
 To push-install to a computer, you must enable certain items on the
destination computer’s Windows Firewall Exceptions list. You must enable
the following items:
o File and Printer Sharing
o Windows Management Instrumentation (WMI)
o Remote Service Management
o Remote Registry Service

9
 For more information, refer to the Microsoft Windows documentation
https://docs.microsoft.com/en-us/windows/
 To push-install to a computer that runs Symantec Endpoint Protection
(SEP) version 11.0 or later, you must configure SEP to share files and
printers. The file and printer-sharing feature is turned off by default.

Other  The latest service pack should be installed to be able to install the DLO
Considerations components.

Note: The DLO 9.3.2 version onwards provides support for Transport
Layer Security (TLS) 1.2. OS KB articles and SQL related prerequisites
required to support TLS 1.2, should be updated manually. TechNote
created for this, is also available from the First screen of installer.
 WMI service should be running on all machines where the DLO Server
components are installed.
 .NET 4.0 or above versions should be installed.
http://www.microsoft.com/en-in/download/details.aspx?id=17718
Note 1: On Windows 2012/ 2012 R2 /2016 Server, it is not mandatory to
install .NET 4.0 since .NET 4.5 is installed by default in Windows
2012/2012 R2 Server and .NET 4.6 is installed by default in Windows
2016 Server.

Special  If remote SQL 2019 instance is used either in case of new installation or
consideration upgrade, please follow the additional steps provided in the link:
when using
https://www.veritas.com/content/support/en_US/article.100049109.html
remote SQL
2019 instance
 Contents
Port Configuration for DLO Server Components
Port Non BOI Exclusive BOI Occasional BOI
Process Port
Type Deployment Deployment Deployment
Source (Outbound): Source (Outbound): Source (Outbound):
DLO DLO Administration Console DLO Administration Console DLO Administration Console
Administration 3999 TCP/UDP
Service Destination (Inbound): Destination (Inbound): Destination (Inbound):
DLO Administration Server DLO Administration Server DLO Administration Server

Source (Outbound): Source (Outbound): Source (Outbound):

DLO Administration Server DLO Administration Server DLO Administration Server
DLO Administration Console DLO Administration Console DLO Administration Console
DLO Dedupe Server DLO Dedupe Server DLO Dedupe Server
SQL Server
1434 UDP DLO IO Server DLO IO Server
Browser
Destination (Inbound): DLO Edge Server DLO Edge Server
SQL Server
Destination (Inbound): Destination (Inbound):
SQL Server SQL Server
Source (Outbound): Source (Outbound): Source (Outbound):
DLO Administration Server DLO Administration Server DLO Administration Server
DLO Administration Console DLO Administration Console DLO Administration Console
DLO Dedupe Server DLO Dedupe Server DLO Dedupe Server
1433
DLO IO Server DLO IO Server
SQL Server or dynamic TCP
Destination (Inbound): DLO Edge Server DLO Edge Server
port
SQL Server
Destination (Inbound): Destination (Inbound):
SQL Server SQL Server

Source (Outbound): Source (Outbound): Source (Outbound):

DLO Administration Server DLO Administration Server DLO Administration Server
DLO Administration Console DLO Administration Console DLO Administration Console
DLO Dedupe Server DLO Dedupe Server DLO Dedupe Server
DLO Maintenance Server DLO Maintenance Server DLO Maintenance Server
DLO IO Server DLO IO Server
Destination (Inbound): DLO Edge Server DLO Edge Server
Storage Location
Dedupe Storage Location Destination (Inbound): Destination (Inbound):
SQL Server Storage Location Storage Location
Dedupe Storage Location Dedupe Storage Location
SQL Server SQL Server
File Sharing/ 135-139,
TCP/UDP DLO Administration Server DLO Administration Server
Browsing 445

11
 Port Non BOI Exclusive BOI Occasional BOI
Process Port
Type Deployment Deployment Deployment

Source (Outbound): Source (Outbound):

Source (Outbound):
DLO Administration Console DLO Administration Console
DLO Administration Console
Dedupe Port 8443 HTTPS
Destination (Inbound):
Destination (Inbound): Destination (Inbound):
DLO Dedupe Server
DLO Dedupe Server DLO Dedupe Server

Source (Outbound): Source (Outbound): Source (Outbound):

DLO Administration Console DLO Administration Console DLO Administration Console
Dedupe Port 8080 HTTP
Destination (Inbound): Destination (Inbound): Destination (Inbound):
DLO Dedupe Server DLO Dedupe Server DLO Dedupe Server

Source (Outbound): Source (Outbound):

DLO Edge Server DLO Edge Server
Dedupe Port 8009 AJP NA
Destination (Inbound): Destination (Inbound):
DLO Dedupe Server DLO Dedupe Server

Source (Outbound): Source (Outbound):

DLO Administration Console DLO Administration Console
Edge Server
443 HTTPS NA
Port
Destination (Inbound): Destination (Inbound):
DLO Edge Server DLO Edge Server

Source (Outbound): Source (Outbound):

DLO Administration Console DLO Administration Console
Edge Server
90 HTTP NA
Port
Destination (Inbound): Destination (Inbound):
DLO Edge Server DLO Edge Server

Source (Outbound):
Source (Outbound):
DLO Administration Console
DLO Administration Console
IO Server Port 7080 HTTP NA
Destination (Inbound):
Destination (Inbound):
DLO IO Server
DLO IO Server
Source (Outbound): Source (Outbound):
DLO Edge Server DLO Edge Server
IO Server Port 7009 AJP NA
Destination (Inbound): Destination (Inbound):
DLO IO Server DLO IO Server
135, 1037, Source (Outbound): Source (Outbound):
Additional 441,1125 DLO Administration Server DLO Administration Server
Ports Dynamic DLO Administration Console DLO Administration Console
TCP NA
for Push Ports
Installation (49152 – Destination (Inbound): Destination (Inbound):
65535) DLO Clients DLO Clients
 Contents

Port Configuration for DLO Clients

Port Non BOI Exclusive BOI Occasional BOI
Process Port
Type Deployment Deployment Deployment
Source (Outbound): Source (Outbound):
DLO Clients DLO Clients
Edge Server Web Restore Machine Web Restore Machine
443 HTTPS NA
Port
Destination (Inbound): Destination (Inbound):
DLO Edge Server DLO Edge Server
Source (Outbound): Source (Outbound):
DLO Clients DLO Clients
File Sharing/ 135-139,
TCP/UDP NA
Browsing 445 Destination (Inbound): Destination (Inbound):
Storage Location Storage Location
Dedupe Storage Location Dedupe Storage Location
Source (Outbound): Source (Outbound):
DLO Clients DLO Clients
Dedupe Port 8443 HTTPS
Destination (Inbound): NA Destination (Inbound):
DLO Dedupe Server DLO Dedupe Server
Source (Outbound): Source (Outbound):
DLO Clients DLO Clients
Dedupe Port 8080 HTTP
Destination (Inbound): NA Destination (Inbound):
DLO Dedupe Server DLO Dedupe Server
Source (Outbound): Source (Outbound):
DLO Clients DLO Clients
SQL Server
1434 UDP NA
Browser
Destination (Inbound): Destination (Inbound):
SQL Server SQL Server
Source (Outbound): Source (Outbound):
1433
DLO Clients DLO Clients
or
SQL Server TCP NA
dynamic
Destination (Inbound): Destination (Inbound):
port
SQL Server SQL Server

13
Installing Veritas DLO
The steps to install the DLO setup are as follows:

1. Run setup.exe to start the installation wizard.

2. View DLO Pre-Requisites and click Yes on the DLO prerequisite dialog.
3. Read the license agreement, and if the administrator accept the terms, select I accept the terms
in the license agreement.
 Contents

4. Click Next.
5. Select the components that the administrator wants to install on the computer.
 DLO Administration Console: Installs the DLO Administration Console.
 DLO Administration Server: Installs the DLO Administration Server.
 DLO Maintenance Server: Installs the DLO Maintenance Server.
 DLO Database Service: Installs the DLO database and Dedupe database.
 Dedupe Server: Installs the Dedupe Server.
 Edge Server: Installs the Edge Server.
 IO Server: Installs the IO Server.

Note: The administrator can select and install each component on a separate computer, except
the DLO Database Service. The DLO Database Service alone cannot be selected for installation; it
can be installed along with the DLO Administration Server service.

15
6. To install DLO in a different directory, click Change.

7. Select the new directory and click OK.

8. Click Next.
9. Click Browse and select the DLO License file.
Note: DLO provides an inbuilt 60-day trialware license for product evaluation.

10. Click Next.

11. Select one of the following options for the DLO database.
Note: When you use an existing local or remote database instance, TCP/IP and named pipes
must be enabled. Refer the link https://msdn.microsoft.com/en-us/library/ms191294.aspx.
 Contents

12. Click Next.

13. Enter the account credentials, which will be used to create DLO Storage.

17
 14. Click Next.
15. Click Install to begin the installation.

16. Click Finish once installation is completed.

Once the DLO Server components are installed and on the first launch of the DLO Administration Console,
the Recovery Password wizard appears. The administrator needs to set the recovery password.

The recovery password enables the administrator to retrieve the backed up data, in case of emergency
scenarios where the data can be restored using a point in time database and the storage location,
without the need for the DLO Administration Service to be up and running. For detailed information on
setting Recovery Password, refer to the section Setting Recovery Password in the Veritas Desktop and
Laptop Option Administrator’s Guide available here.
 Contents

Configuring Veritas DLO

This section provides the administrator with the details to configure Veritas DLO.

On the first launch of the DLO Administrations Console, the ‘Desktop and Laptop Option Configuration
Wizard’ flow automatically pops up. Close the pop up window and proceed with the below steps. Within
the scope of this document, the manual configuration of DLO will be discussed.

The steps to configure DLO is elaborated across the below sections:

 Steps to Configure the DLO Server Setup

 Steps to Configure the BOI capability
 Deploying the Desktop Agents

Steps to Configure DLO Server Setup

For DLO to start functioning, follow the below steps in the same order:

1. Add the Dedupe Server to the DLO Administration Server.

2. Add DLO Storage Locations.
3. Create and configure a Profile.
4. Configure Users to the created Profile.

The details for each of the configuration steps are covered below:

Step 1 - Add the Dedupe Server to the DLO Administration Server

Dedupe server manages the deduplication of backup files
To add a Dedupe Server
1. Launch the Veritas DLO Administration Console.
2. On the DLO navigation bar, click Setup.
3. Select one of the following options to Add a Dedupe Server:
 In the Settings pane, right-click Dedupe Server, and select New Dedupe Server.
 In the Task pane, under Setting Tasks, click New Dedupe Server.

19
Step 2 - Add DLO Storage Locations
Storage location determines where the user data will be stored on the network. Storage Locations
should be in the same domain as the DLO Administration Server or in a domain that trusts the
administration server’s domain.

To create DLO Storage Locations

1. On the DLO navigation bar, click Setup.
2. Select one of the following options to create a new DLO Storage Location.
 In the Settings pane, right-click Storage Locations and select New Storage Location.
 In the Task pane, under Settings Tasks, click New Storage Location.

3. Select the appropriate options as described in the following table:

Item Description
Computer name Type a computer name or browse to a computer where the administrator
wants to create the Storage Location.
Path Type or browse to a location on the computer where the Storage Location
will be created.
Note: Storage Locations should be in the same domain as the DLO
Administration Server or in a domain that trusts the administration
server’s domain.
Storage Location Type a name for the new DLO Storage Location. The name cannot contain
name any of the following characters:
\”@#$%^&*()=+|/{}[]’
Assign Dedupe Assign the Dedupe Storage Location by selecting the Automatic mode.
Properties
Automatic In the Automatic mode, both the DLO Storage Location and Dedupe
Storage Location will be created in the same storage location path that
 Contents
was specified earlier, and the Dedupe Storage Location will be assigned to
the default Dedupe Storage Pool. As the administrator is selecting the
Automatic mode for the first time provide the user credentials for the
Dedupe Storage Location.
Note: For security reasons, read/write access to the Dedupe Storage
Locations is not granted to all the users even though they need to read
and write data from the Dedupe Storage Locations. Instead, while
creating the Dedupe Storage Location, the administrator configures a new
user account called “Dedupe Storage Location Access Credential”, which is
a low privilege domain user account and will be used by the Desktop
Agent to access the Dedupe Storage Location. The credentials to be
provided as follows DomainName\UserName. A user account with
administrator rights is not permitted as a Dedupe Storage Location Access
Credential.

4. Click OK.

21
Step 3 - Create and configure a Profile
Profiles are used to customize settings for specific groups of similar users. For example, a group of highly
technical users may require the option to modify the backup selections and schedules while less
experienced users may require a fully automated backup service.

Create a profile, which determines what files are backed up (Backup Selection), when files are backed up
(Schedule), and the level of interaction the desktop user has with the Desktop Agent (User Settings).

In a profile, the administrator can set the following options:

 Backup file and folder selections

 Desktop and network user data folder storage limits
 Backup schedules
 The desktop user’s level of interaction with the Desktop Agent
 Logging options
 Network bandwidth usage options for backup and restore operations
 Dedupe backup
Step 4 - Configure Users to the created profile
The users can either be manually added to the profile or the administrator can choose to create an
automated user assignment to do this.
 Contents
Step 4a -Create Automated User Assignment
Create an Automated User Assignment (AUA) to automatically assign a Storage Location and Profile to
new users. Once the administrator selects the Domain and a Group in the domain, selected Storage
locations and Profile get assigned to all the users in that Group.

Step 4b Adding user to the profile manually

Instead of using AUA, the administrator can manually add users to DLO and assign a profile and storage
location to them. This is particularly useful when network shares already exist for storing user data.
Users can be added individually or multiple users can be added at the same time by importing the user
names from a list.

23
Steps to Configure Backup Over Internet (BOI)

This section provides the administrator with the details to configure the BOI capability.

As mentioned in the prerequisites section, an SSL certificate procured from a Trusted CA is required for
configuring the BOI setup. However, for product evaluation scenarios, an inbuilt self-signed certificate is
provided in the DLO Installer package for validating the BOI capability. Within the scope of this document,
the BOI configuration using the inbuilt self-signed certificate will be discussed.

Note: This section does not include the details for configuring BOI for a DLO setup where multiple Edge
Servers are configured. For more details on configuring BOI in a multiple Edge Server setup, refer the BOI
Setup and Configuration Guide available here.

For configuring BOI, the below steps need to performed in addition to the Steps to Configure DLO Server
Setup.

1. Register a Public IP for the DLO Edge Server.

2. Map the SSL certificate to the Registered Public IP.
3. Map the DLO Edge Server and IO Server to the DLO Storage Location.
4. Test Connectivity to the DLO Edge Server.
5. Enable the BOI option in a Profile.

Step 1 - Register a Public IP for the DLO Edge Server

Register a public IP for the DLO Edge Server, so that Desktop Agents will be able to access the DLO Edge
Server over internet.

Note: Once the administrator registers the public IP for the DLO Edge Server, the DLO Edge Server needs
to be deployed. Below are listed few options on how the DLO Edge Server can be deployed:

 Through NAT (Dynamic or static) configured on the firewall.

 The DLO Edge Server can reside in Demilitarized zone (DMZ).
 Through a Reverse Proxy Server in Demilitarized zone (DMZ) which would redirect all the
DLO Agent requests to the DLO Edge Server (residing in the corporate network).

Step 2 - Map the SSL certificate to the Registered Public IP

Map the SSL certificate (Issued to: dlo.veritas.com) to a registered public IP (of DLO Edge Server) either:
a. In the Domain Name Server (DNS)
Or
b. As a Host entry update in the DLO Edge Server machine.
Note: If this is a host entry update on the DLO Edge Server, additionally on the Desktop Agents
machine, update the host file as below:
 Map the Public IP to the Certificate Name
o where the Public IP is as present in the SERVERNAME entry of the EdgeServer.ini
file present in the paths
 <Install Path>\Veritas DLO\DLO\
 Contents
o where the Certificate Name is for the DLO Edge Server. (Issued to:
dlo.veritas.com)

E.g. : <Registered Public IP> dlo.veritas.com

Step 3 - Map the DLO Edge Server and IO Server to the DLO Storage Location
The DLO Edge Server and IO Server can be mapped to the DLO Storage location either while creating a
new storage location or by updating properties of an existing Storage location as below

 Storage Locations Properties > Edge Server: IO Server

Step 4 - Test Connectivity to the DLO Edge Server

Test the connectivity to the DLO Edge Server by accessing the below URL from any machine with
internet connection.

 https://<Public_Edge_Server_IP>

25
Step 5 - Enable the BOI option in a Profile
The BOI option can be enabled either in an existing profile or while creating a new profile as follows

 Profile > General > Enable BOI

 Contents

Deploying the Desktop Agent

Once the DLO Server is configured, proceed to deploy the DLO Agents on to the endpoints that need to
be protected. The Desktop Agent can be deployed through a Pull or Push installation, the details of which
are as follows.

Pull Install the Desktop Agent from the Client machines

For client machines that are connected to the corporate network, as part of Non BOI or Occasional BOI
deployments, the Desktop Agent package can be obtained from the Server installation directory and
installed on the client machines individually as detailed below:

1. Access this path \\<DLO ServerName\IP>\DLOAgent from the client machine where the Desktop
Agent needs to be installed.
2. Copy the DLO Agent folder to the client machine.
3. Initiate the Desktop Agent installation.

Pull Install the Desktop Agent from Web Restore page

For client machines that are outside the corporate network and connected using internet connection, as
part of Exclusive BOI or Occasional BOI deployments, the Desktop Agent package can be obtained from
the Web Restore page and installed on the client machines individually as detailed below:

1. Login to Web Restore using the DLO Edge Server URL https://<Public_Edge_Server_IP> from the
client machine where the Desktop Agent needs to be installed.
2. The DLO Agent option in the left pane provides the option to download the DLO Desktop Agent
package.
3. Download these files and initiate the Desktop Agent installation.

Push Deployment of the Desktop Agent

For client machines that are connected to the corporate network, as part of Non BOI or Occasional BOI
deployments, the Desktop Agent can be installed directly for individual or multiple client machines
through the push installation as detailed below:

Proceed with the following steps for the Push Deployment:

1. Launch the DLO Administration Console.

2. On Tools, select Install Agents and maintenance services on remote computers and click Next.
3. On Install Agent | Maintenance Server to Remote Computers, select DLO Agent.
4. Click Add.
5. In Manual Entry of Remote Computer Name, enter the following details:
a. Name/IP Address: Enter the computer name manually or click the Browse button to
choose the computer name.

27
 b. Domain Name: Enter the domain name of the remote computer.
c. Click OK
6. Enter the domain user credential through which installation should be proceeded. Make sure
this credential has local administrator privileges on the client machines.
7. Click OK.
8. In Remote Computer Selection Window, click on Install to proceed with the installation.

9. To exit, click Finish.

Note: For push installation of the Desktop Agent on a client machine, ensure that the relevant ports are
configured as detailed in the Additional Ports for Push Installation. For client machines with Windows 8
or later version, ensure that the remote registry services are enabled and running.

For deploying the Desktop Agents onto the Mac endpoints, refer to the DLO Mac Getting Started Guide
available here.
 Contents

Backup and Restore Verification

Once the DLO Agents are deployed on the client machines, the administrator can configure the backup
jobs to ensure the endpoints are protected.

Configuring a Backup Job

To configure a backup job, select the appropriate options available for profile creation. For the scope of
this document, Enable Dedupe option is selected for the backup profile. In case the Edge Server and the
IO server have been configured, Enable BOI option can be selected.

To add a backup selection

1. On the DLO navigation bar, click Setup.

2. In the Settings pane, click Profiles.
3. In the Results pane, select the profile for which the administrator wants to add a backup
selection.
4. In the Task pane, under General Tasks, click Properties.
5. Click the Backup Selections tab in the Profile Properties dialog box.
6. Choose the backup selection from the available list and click Add.
7. Click OK.

Backup Verification
Once the backup job is run, the administrator can verify the endpoint backup status from the Backup
Status Report.

For running the Backup Status Report:

1. Launch DLO Server Console.
2. Go to Reports tab.
3. Run Backup Status Report.

4. Backup Status report appears.

29
Some of the key fields from this report are also displayed in the History and Restore tabs of the DLO
Administration Console.
 Contents
Interpretation of the Backup Status Report

 Time when Agent was Last Active – This column displays DLO Agent’s last active time when the
Desktop Agent was able to communicate to the server. The DLO agent in a computer interacts
with the DLO server every 15 minutes to update the status of that computer and that’s when the
report gets updated as well. As long as there is network connectivity between the agent and the
server, this communication continues and this latest time of interaction is what is displayed here.

 Time of Last Successful Backup – This column displays the last time when the Desktop Agent
backed up user’s data completely. In simpler terms, this is the time stamp when the machine had
achieved a 100% Backed up status (all files in the Backup selection backed up). In case of this
column being blank for a computer, it could be interpreted as the first backup, as the computer
has not been backed up completely even once.

 Files in Backup Selections– This column displays the Total number of files that are available in the
Backup Selections. In case some file extensions were excluded from the backup selection using
the filters, these files are not included in the count.

 Size of Backup Selections (GB) - This column displays the Total Size of files that are available in the
Backup Selections. . In case some file extensions were excluded from the backup selection using
the filters, these files are not included for this size calculation.

 Backup Completion (% Based on Source Size) – This column displays the Percentage of Backups
completed. This completion percentage is in terms of the Size of the files in the Backup Selection.
For example, 4 Files, namely – A, B, C and D are in backup selection with sizes 1, 1, 2 and 6 GBs
respectively. When A, B and C files have been backed up, the Backup completion shows 40%.

 Files pending for backup – This column displays the total count of files in the Backup Selection
that are still not backed up. In the above example, file D is still not backed up and hence the count
1 is displayed.

 Estimated time for backup completion - This column displays the amount of time required for the
remaining backups to complete. These estimates are calculated based on the time taken for
backups taken in that machine in the past 7 days. It is displayed in Hours: Minutes format. This
column was added with the DLO 8.0 SP4 version and will not feature for the DLO 8.0 SP3 version.

 Average time available for backup – This column displays the average time that the Desktop Agent
is available for a backup in a day. It is calculated based on the average availability of the agent in
the past 7 days. It is displayed in Hours: Minutes per Day. Based on this information and the
estimated time for backup completion, in the previous column, the Administrator can calculate
the Time for Backup completion in Days.

Note: Backup Summary fields like Backup Completion may reflect value ‘0' for some computers in
the Backup Status report, History tab and Restore tab. Fields like Backup Completion are not
supported for computers with Windows desktop agent versions prior to DLO 8.0 SP3 and Mac
agent versions prior to DLO 9.1. To resolve this issue, the agents need to be upgraded to the
latest supported version.

31
Restore Verification

Restoring files to an Alternate Path on the Same Machine

 Launch the DLO Server Console.
 Go to Restore tab.
 Select a User-Machine that needs to be restored.

 Traverse to the required folder, select the files right click and select Restore to Original
Computer, below dialog appears.
Note: When trying to evaluate restore of an entire machine, ensure that you are selecting a
machine that has achieved 100% Backup Completion.
 Contents
 Select Redirect the restore to an alternate folder and specify an alternate folder path.

Note: With this option, it is easier to validate the Restore size and Count of files restored.

 Click on OK to initiate and track the restore progress on the Client machine.
 To validate the integrity of the Restore data, compare the File count and File size of the
Restored folder with the ‘Backup Status’ report columns like - Files in Backup Selections and Size
of Backup Selections (GB).

In case of any discrepancies, it may be because of:

 All folders are not selected for Restores
 New files would have been backed up after the Backup Status report was generated.

DLO Documents Reference Links

All DLO documents for this release are available here.

33