Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Deduplication Guide
  3. MSDP cloud support
  4. About MSDP cloud immutable (WORM) storage support
  5. About immutable object support for AWS S3 compatible platforms
  6. Creating a cloud immutable storage unit for the S3 compatible platforms
NetBackup™ Deduplication Guide

Creating a cloud immutable storage unit for the S3 compatible platforms

Use the NetBackup Web UI to create a cloud immutable storage unit.

To create a cloud immutable storage unit:

  1. Use msdpcldutil command to create the cloud immutable volume. Note down the volume name, it will be used in step 4.
  2. On the NetBackup Web UI, navigate to Storage > Disk pools, and click Add.
  3. In Disk pool options, click Change to select a storage server.

    Enter the Disk pool name.

    If Limit I/O streams is left cleared, the default value is Unlimited and may cause performance issues.

    After all required information is added, click Next.

  4. From the Volume drop-down list select a volume or add a new volume. Provide the name that is created in step 1 by msdpcldutil.

    On the Cloud storage provider window, select the cloud immutable storage from the list.

    Under Region, select the appropriate region.

    Enter the credentials to complete the setup. You can configure additional options here such as adding a proxy server.

    Under WORM, check Use object lock.

    Under Cloud bucket, select Select or create cloud bucket and click Retrieve list. Select a bucket from the list. You can also provide the bucket name. If you provide the bucket name, ensure this bucket is created by msdpcldutil so that it is Object Lock enabled.

    If encryption is needed, select the data encryption option for data compression and encryption. MSDP can use KMS encryption which encrypts the data using a managed key. Using KMS requires that a KMS server has previously been configured.

    Enter all required information based on the selection and click Next.

  5. In Replication, click Next.
  6. On the Review page, verify that all settings and information are correct. Click Finish.

    The disk pool creation and replication configuration continue in the background if you close the window. If there is an issue with validating the credentials and configuration of the replication, you can use the Change option to adjust any settings.

  7. In the Storage unit tab, click Add.
  8. Select Media Server Deduplication Pool (MSDP) and click Start.
  9. In Basic properties, enter the Name of the MSDP storage unit and click Next.
  10. Select the disk pool that was created and select the Enable WORM/Lock until expiration box, and click Next.
  11. In Media server, use the default selection of Allow NetBackup to automatically select, and click Next.
  12. Review the setup of the storage unit and then click Save.

Feedback

Was this page helpful?
Previous

About immutable object support for AWS S3 compatible platforms

Next

Managing HCP for Cloud Scale using msdpcldutil tool

Feedback

Was this page helpful?