KB ID : 115129
Published : June 7, 2021
Created : June 7, 2021
Last Modified : June 8, 2021

Backup proxy for VMware is not a mandatory component. It is optional and if used, it will help in reducing the load on the backup server while backing up VMware. To add a Windows machine as a backup proxy for VMware, Vembu BDR will automatically install the necessary Vembu Backup Proxy (VBP) components on the target Windows machines. Make sure the following prerequisites are met for Vembu BDR to successfully install the VBP on the target Windows machines.

1. Access privilege for Microsoft Windows

Make sure the credential you use to add the Windows machines (Target Host) for backup has any one of the following privileges:

  • Administrator
  • User with administrator privilege

Note: In Windows Workstations the built-in Administrator account is disabled by default. It is recommended to create a user account with administrator privileges on the Windows Workstations. This user account credential has to be used while adding the Windows workstation as a backup proxy for VMware.

2. Access privilege in the BDR Backup Server host

In the BDR Backup Server host, make sure the Windows service ‘Vembu BDR Backup Server for Virtual Physical Workloads’ runs in an administrator user account.

  • Press the ‘Win + R’ keys on your keyboard to open the Run window. Then, type ‘services.msc’ and click OK.
  • Right-click on the service ‘Vembu BDR Backup Server for Virtual Physical Workloads’ and then click ‘Properties’.
  • Navigate to the ‘Logon’ tab. Click on the ‘This account’ radio button. Provide the administrator user privilege: username (Format: .\username) and password. Then click OK.
  • Then stop and restart the service for updating the new logon.

3. Access to the folder - “Admin$” in the target Windows host

Make sure the BDR Backup Server host has access to the “Admin$” folder of the target host: Type \\IP Address of target host\admin$ in ‘Run’ and click OK.

    a. If the UNC path is accessible, move to Prerequisite 4.
    b. If the UNC path is not accessible, perform the steps below:

Step 1: Add the below-mentioned Inbound rule in the target host, to make sure your firewall doesn’t block the Windows Management Instrumentation function.

  • Open Control Panel and navigate to System and Security -> Windows Firewall -> Advanced Settings.
  • On the Windows Firewall with Advanced Security dialog box, click the ‘Inbound Rules’ option on the left.
  • Under the Actions pane on the right, click ‘New Rule’.
  • On the New Inbound Rule Wizard, choose the option ‘Predefined’ as Rule Type.
  • Then, select the ‘Remote Service Management’ rule from the dropdown, and click ‘Next’.
  • Rules under the selected type will be listed, proceed with the option ‘Enabled by Default’ and click Next.
  • On the Action page, choose the option ‘Allow the Connection’ and then click ‘Finish’.

Step 2: Make sure the following services are running in the target host:

  • Press the ‘Win + R’ keys on your keyboard to open the 'Run' window. Then, type ‘services.msc’ and click OK.
  • Check the services ‘Server Service’ and ‘Windows Remote Management (WS-management)’ and confirm if their status is running.

Once the above two steps are performed, in the BDR Backup Server host type ‘\\IP Address of target host\admin$’ in 'Run' and click OK. If you are able to access the Admin$ share, proceed with the next step.

4. Access to Windows Management Instrumentation

Add the below-mentioned Inbound rule in the target Windows host, to make sure your firewall doesn’t block the remote connection.

  • Open Control Panel and navigate to System and Security -> Windows Firewall -> Advanced Settings.
  • On the Windows Firewall with Advanced Security dialog box, click the ‘Inbound Rules’ option on the left.
  • Under the Actions pane on the right, click ‘New Rule’.
  • On the New Inbound Rule Wizard, choose the option ‘Predefined’ as Rule Type.
  • Then, select the ‘Windows Management Instrumentation’ Rule from the dropdown, and click ‘Next’.
  • Rules under the selected type will be listed, proceed with the option 'Enabled by Default' and click Next.
  • On the Action page, choose the option ‘Allow the Connection’ and then click Finish.
  • Make sure the following service is running in the target host:

    -> Press the ‘Win + R’ keys on your keyboard to open the 'Run' window. Then, type ‘services.msc’ and click OK.

    -> Check the service ‘Windows Management Instrumentation’ and confirm if its status is running.

5. Access to Remote Registry

  • In the target Windows host, press the ‘Win + R’ keys on your keyboard to open the 'Run' window. Then, type ‘services.msc’ and click OK

  • Check the service ‘Remote Registry’ and make sure its status is running.

6. WBEMTest Verification

Once the above-mentioned prerequisites are done, perform the WBEMTest to test remote connectivity to the target host from the BDR Backup Server host.

  • On the BDR Backup Server host, Press the ‘Win + R’ keys on your keyboard to open the 'Run' window. Then, type ‘wbemtest’ and click OK
  • In the namespace field: Enter the following: \IP Address of target host\root\cimv2
  • Under the credential section: Enter the Username and Password of the target host and click ‘Connect’.
  • If any error occurs on the WBEMTest, recheck the prerequisites.

Once the WBEMTest is successful, you can add the target Windows machine as a backup proxy in the BDR Backup Server.

edit retag flag offensive close merge delete