Microsoft SQL Database Backup and Recovery

Technical White Paper Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery

Abstract This white paper focuses on protecting Microsoft SQL Server using Dell EMC PowerProtect Data Manager, the next generation data protection platform.

May 2021

H18091.3 Revisions

Revisions

Date Description July 2019 Initial release

September 2019 Document revised for PowerProtect Data Manager version 19.2 release

February 2021 Document revised for PowerProtect Data Manager version 19.7 release

May 2021 Document revised for PowerProtect Data Manager version 19.8 release

Acknowledgments

Author: Vinod Kumar Kumaresan

The information in this publication is provided “as is.” Dell Inc. makes no representations or warranties of any kind with respect to the information in this publication, and specifically disclaims implied warranties of merchantability or fitness for a particular purpose.

Use, copying, and distribution of any software described in this publication requires an applicable software license.

This document may contain certain words that are not consistent with Dell's current language guidelines. Dell plans to update the document over subsequent future releases to revise these words accordingly.

This document may contain language from third party content that is not under Dell's control and is not consistent with Dell's current guidelines for Dell's own content. When such third-party content is updated by the relevant third parties, this document will be revised accordingly.

Copyright © 2021 Dell Inc. or its subsidiaries. All Rights Reserved. Dell Technologies, Dell, EMC, Dell EMC and other trademarks are trademarks of Dell Inc. or its subsidiaries. Other trademarks may be trademarks of their respective owners. [5/6/2021] [Technical White Paper] [H18091.3]

2 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 Table of contents

Table of contents

Revisions...... 2 Acknowledgments ...... 2 Table of contents ...... 3 Executive summary ...... 4 Audience ...... 4 1 Introduction ...... 5 1.1 PowerProtect Data Manager key features for SQL backup and recovery: ...... 5 1.2 Architecture ...... 6 2 Deployment Requirements ...... 8 2.1 Network ...... 8 2.2 Microsoft Application Agent ...... 8 2.3 SQL Host ...... 8 2.3.1 PowerProtect Data Manager support for SQL AAG and SQL Cluster-less AAG Environment...... 9 3 Security ...... 11 3.1 SQL Authentication ...... 11 4 SQL Database Backup ...... 12 4.1 Centralized Application Direct Backup Workflow ...... 14 4.1.1 Centralized application direct backup workflow (FULL) ...... 14 4.1.2 Centralized application direct backup workflow (LOG)...... 15 4.2 Self-service Application Direct Backup Workflow ...... 16 4.2.1 Self-service application direct backup workflow (FULL) ...... 16 4.2.2 Self-service application direct backup workflow (LOG) ...... 17 4.3 Application-aware Backup Workflow ...... 18 4.3.1 Application-aware SQL Database Backup Workflow (FULL) ...... 18 4.3.2 Application-aware backup workflow (LOG) ...... 19 5 SQL Database recovery ...... 20 5.1 SQL Instant Access ...... 21 5.2 Centralized restore of SQL Application Direct backups ...... 22 5.3 Centralized restore of SQL Virtual Machine backups...... 27 5.4 Self-service restore of SQL Virtual Machine backups ...... 32 6 Support for existing SQL Agent Backups with PowerProtect Data Manager ...... 33 7 Disaster Recovery ...... 34 A Technical support and resources ...... 35 A.1 Related resources...... 35

3 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 Executive summary

Executive summary

Business Case: Challenges

Data owners and IT administrators in midsized or enterprise organizations are seeking a scale-out data management software platform to simplify management, capacity growth, deployment, and upgrades. As businesses continue to consume IT resources differently, there is a need for powerful, efficient, and trusted data protection to enable organizations to transform to meet future demands when modernizing their IT environment.

Solution Overview:

Dell EMC PowerProtect Data Manager is defined with built-in deduplication for data protection, replication, and reuse. PowerProtect Data Manager delivers load balancing, enabled with machine learning, to provide optimal deduplication and performance. PowerProtect Data Manager offers efficient data management capabilities across ever-changing IT environment, leveraging the latest evolution of Dell EMC trusted protection storage architecture.

PowerProtect Data Manager enables Microsoft SQL DBAs to be in control of their backup and recovery practices using their native tools by providing a choice of centralized management to the backup team, while at the same time providing IT with oversight and governance to ensure compliance. PowerProtect Data Manager keeps the data owners nearest to their data, enabling them to protect and manage and restore data as needed from native applications.

This white paper describes the configuration of Microsoft SQL database backup with PowerProtect Data Manager and highlights the steps to backup and restore Microsoft SQL database using the PowerProtect Data Manager and the Microsoft application agent for SQL Server Management Studio (SSMS) Plug-in.

Audience This white paper is intended for customer, partners and prospects who wants to better understand how PowerProtect Data Manager helps in protecting Microsoft SQL server.

Note - This white paper is based on PowerProtect Data Manager version 19.8 release. Contents on this white paper would be updated for each version release.

4 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 Introduction

1 Introduction PowerProtect Data Manager manage and monitor data protection and replication for Microsoft SQL Server assets through integration with the Microsoft application agent.

1.1 PowerProtect Data Manager key features for SQL backup and recovery: - Protection for stand-alone SQL Server and SQL Server clustered environments, including Always On availability groups and failover cluster instances. - Ability to restore a single SQL database or multiple databases to the original or an alternate location as well as restore Always On availability Groups. - Option to set the parallelism for each backup type as a value between 1 and 32 in the full, differential, and log fields. - Option to modify the stripe level of a backup at the individual database level. - Support for existing Microsoft application agent backups with PowerProtect Data Manager. - Improved performance and scaling for virtual machine SQL protection policies - Centralized restore support for SQL application-aware SQL backups - Install MSAPPAGENT agent manually for Windows VM from PowerProtect Data Manager UI. - Centralized restore support for SQL Application Direct backups - DD compressed restore option for SQL Application Direct backups - SQL Application Direct and VM Direct (application-aware) support adds the ability to perform table-level restores of encrypted databases. ItemPoint 8.6.1 as integrated with the Microsoft application agent now supports the Microsoft SQL Server Transparent Data Encryption (TDE). However, only the AES_128, AES_192, and AES_256 encryption algorithms are supported.

5 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 Introduction

1.2 Architecture Before we dive into PowerProtect Data Manager for Microsoft SQL Database backup and recovery, lets understand the key architectural components involved in SQL data protection.

SQL Server Management Studio (SSMS) Plug-in:

The Microsoft application agent for Application Direct with SQL Server has an SQL Server Management Studio (SSMS) Plug-in. The Plug-in is similar to the SQL native backup and restore GUI.

Virtual Device Interface (VDI):

The Microsoft Application Agent for Application Direct with SQL Server uses a VDI, which is an API provided by SQL Server, to integrate with the SQL Server and enables the Application Direct with Microsoft application agent to backup and restore SQL Server data.

DD Boost library:

Performs source-based deduplication and sends the backup data to DD series.

Microsoft Application Agent:

Receives requests from the vProxy engine (using vProxy agent) to perform certain set of operations during a backup to achieve

- Application consistency when taking snapshots (full image) - Perform transaction log backup

Enables database administrators to backup and restore SQL databases using SSMS.

SQL-CLR Assembly:

CLR and T-SQL scripts must be integrated to create functions or procedures to perform backups and restores in a SQL environment. The Microsoft application agent installation deploys the CLR assembly. The CLR assembly contains one exportable SQL function type routine to run any Microsoft application agent command at the command prompt.

6 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 Introduction

Lockbox:

The lockbox is an encrypted file that the Microsoft application agent uses to store confidential data, such as login credentials, and protect that data from unauthorized access.

Registering a DD series to a new lockbox creates lockbox folder. Registering a server to or removing a server from the lockbox updates the PersistedSettings.xml file. The PersistedSettings.xml file contains the DD series device information, such as the server name, communication protocol, FC service name, username of the DD Boost user, and storage unit.

Recommendations for lockbox configuration

• For a DD series, one of the following lockbox types can be configured according to the environmental requirements

Single Lockbox Shared Lockbox Multiple lockboxes In a stand-alone environment, In an environment with multiple instances, In an environment with create a single lockbox on the single lockbox can be configured in a shared multiple instances, a lockbox host. location and grant each remote host individual can be configured on each access to the lockbox. instance in the environment.

Note: Do not use a single shared lockbox to perform remote backup operations in a cluster environment. The backup will fail. Use multiple lockboxes in a cluster environment.

vProxy engine

Data mover that takes a snapshot of VM and copies the data from VMware datastores to DD series using vSphere APIs for Data Protection (VADP).vProxy protection engine utilizes VMware's own snapshot technology. Uses vSphere Web Service APIs to take the VM snapshot and leverage off Changed Block Tracking (CBT) during the backup.

vProxy agent

vProxy engine deploys its own vProxy agent on guest VM. Uses this agent through VMware infrastructure communication protocol to install and talk to the Microsoft application agent in the guest VM to perform app- aware backups. Does not require any IP network connectivity as it goes through VMware infrastructure using VMware tools.

7 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 Deployment Requirements

2 Deployment Requirements

2.1 Network

To protect Microsoft SQL Server using PowerProtect Data Manager following are the key requirements from network perspective

- Ensure that all clocks on both the SQL Server host, domain controller, and PowerProtect Data Manager server are time-synced to the local NTP server to ensure discovery of the backups - Ensure that the SQL Server and PowerProtect Data Manager network can see and resolve each other - Ensure that port 7000 is open on the SQL Server host and is bi-directional - Ensure that port 8443 is open on the SQL Server host. This requirement applies only to VM Direct. - Ensure that DNS is configured correctly on the application agent host for SQL Server. - Ensure that DNS is configured correctly on the PowerProtect Data Manager host and the name resolution matches.

2.2 Microsoft Application Agent

The Microsoft application agent is a backup and recovery agent that is built specifically for Microsoft applications.

The Microsoft application agent integrates with the Microsoft SQL Virtual Device Interface (VDI) to enable application owners to protect the Microsoft SQL database. The Microsoft application agent provides a user interface (Microsoft application agent for Application Direct) that enables Microsoft SQL database administrator to perform backup and restore operation of SQL database through the SSMS Plug-in. The Plug-in is like the SQL native backup and restore user interface, and Microsoft SQL database administrator can use the Microsoft application agent for Application Direct to back up and restore the Microsoft SQL database.

With PowerProtect Data Manager, the Microsoft application agent supports multiple tools to perform manual backups. Microsoft SQL database administrator can configure and perform SQL databases backup using the following tools.

• Microsoft application Agent for SSMS Plug-in (Microsoft application agent for Application Direct) • Microsoft application Agent for Application Direct commands • T-SQL scripts

2.3 SQL Host

On the Microsoft SQL Server host, Install Microsoft application agent and configure the installation options. Download the Microsoft application agent .zip file, from Dell EMC support site – https://support.emc.com to the Microsoft SQL Server host. Extract the .zip file and run the .exe file to start the installation wizard. Prerequisites for Always on Availability Group (AAG) protection

Agent installation: For Microsoft SQL Always on Availability environment, the Microsoft application agent needs to be installed on each node in the cluster. If a database is protected in an Always on Availability Group (AAG), standalone backups cannot be configured of that database in a protection policy group. SQL AAG requires a Microsoft Cluster Service (MSCS) starting from SQL Server 2017.

8 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 Deployment Requirements

Lockbox configuration: Either a single shared lockbox or a separate lockbox must be configured on each node that is in the Always on Availability Group.

Set Readable Secondary settings: Set the Always on Availability Group readable secondary configuration option to either yes or read intent only:

1. On SSMS, in the Object Explorer, right-click the Always on Availability Group and select Properties. The Availability Group Properties dialog box appears.

2. In the availability replicas table, readable secondary column, select either yes or read intent only for each of the primary and secondary replicas of the SQL Server instances. This setting allows the Microsoft application agent to gather information about the secondary replica (for example, database file location, which can be different from the other replicas).

Refer - PowerProtect Data Manager Compatibility Guide for supported Microsoft application agent versions and Microsoft SQL Server versions with the PowerProtect Data Manager.

2.3.1 PowerProtect Data Manager support for SQL AAG and SQL Cluster-less AAG Environment

PowerProtect Data Manager supports both SQL AAG and SQL cluster-less AAG environment for database protection and recovery.

Database Discovery on PowerProtect Data Manager

Database Discovery Database backup Value Standalone database backups Local hostname Clustered Availability group database backup Cluster name Cluster less Availability group database backup AGName_AGGUID' SQL virtual server database backup Network name

9 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 Deployment Requirements

Clustered SQL AAG database discovery on PowerProtect Data Manager

Below screenshot represents the SQL AAG database which are shown as assets for data protection.

Cluster-less SQL AAG database discovery on PowerProtect Data Manager

Below screenshot represents that cluster-less SQL AAG database are shown as assets for data protection.

Supported features with application direct and VM application consistent backups

• Centralized backups from PowerProtect Data Manager • Self-service backups (only application direct) • Self-service database restore options ✓ Point In Time (PIT) restore ✓ Restore to latest point ✓ Table level restore ✓ Instance access of the database (Only VM Direct) ✓ Alternate restore ✓ Flat file restore

10 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 Security

3 Security

3.1 SQL Authentication

The Microsoft application agent requires that the user starting backup and recovery operations is assigned certain privileges from the SQL Server and the Windows application host. Following table explains the required permission for both stand- alone SQL & AAG SQL Servers.

SQL Server Required SQL Required Windows user permissions Server Roles Create a local or domain windows user account and assign the following roles:

For table-level backup and recovery, assign administrative privileges.

For database-level backup and recovery, assign administrative Stand-alone sysadmin & permissions: SQL Server public Add the user to the “create global objects” windows policy Assign the following permissions to the data and log folder of the database: - Read - Write - List folder contents Create a Windows user account with one of the following configurations Always-on sysadmin & availability public • Domain user added to the administrator’s user group Group • The built-in windows administrator • The local user account added to the administrator’s user group of each node in the cluster. The username and password must be the same on each node

The Microsoft application agent supports SQL data encryption at the cell level, at the full database level by using TDE, or at the file-level with encryption options provided by Microsoft. (For readers understanding, Microsoft SQL transparent data encryption (TDE) is a feature that performs real-time I/O encryption and decryption of the data and log files.)

Note: The Microsoft application agent does not support third party transparent data encryption for SQL VDI, please refer Microsoft SQL Server product documentation for more information about TDE, enabling data encryption and protecting the encryption keys.

11 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database Backup

4 SQL Database Backup

Dell EMC PowerProtect Data Manager provides flexibility to protect Microsoft SQL database using the below methods, following are the data paths supported by PowerProtect Data Manager for Microsoft SQL database protection.

• Centralized protection using application direct data path • Self-service protection using application direct data path • Centralized virtual machine application-aware using VM proxy data path

Dell EMC PowerProtect Data Manager centralized protection policy: When admin creates a protection policy for Microsoft SQL database, the centralized protection option enables PowerProtect Data Manager to centrally manage the entire life cycle of data protection operations for Microsoft SQL database.

Dell EMC PowerProtect Data Manager self-service protection policy: When admin creates a protection policy for Microsoft SQL database, the self-service protection option enables the data owner to perform the manual backup operation from the command line interface.

PowerProtect Data Manager prepares the environment to accommodate the manual backup operation, such as:

• Creating a user with password for data protection storage • Creating a storage unit • Enforcing the backup data retention

- The following data protection attributes are specified when the self-service protection policy is created: Application Type, Purpose, Assets, Schedule, and SLA

Note: It is important to note that only the retention period can be specified in the schedule attribute in the self- service protection policy.

Centralized virtual machine application-aware using VM proxy data path: If the Microsoft SQL Server is running in a ESXi virtual machine, the application-aware option enables PowerProtect Data Manager to interact with the Microsoft SQL Server virtual machine and install the Microsoft application agent for an application- consistent backup of Microsoft SQL database.

The Microsoft application agent is a component of the vProxy data protection solution that is bundled with the vProxy appliance. The agent is automatically deployed by the vProxy during a virtual machine application-aware backup and, if required, when restoring Microsoft SQL databases and SQL instance backups to running virtual machines.

After installation, the Microsoft application agent package appears in the Windows installer Add-Remove programs list.

The Microsoft application agent allows for advanced application data protection of workloads residing on a VMware ESXi server. This includes adding SQL virtual machines to an advanced application-consistent protection policy to perform the following operations:

12 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database Backup

• SQL Server FULL backup: Configure protection policy with the application-aware option to perform SQL Server backup to DD series as part of a VMware image-level backup. The SQL Server FULL backup is performed during the in-guest quiesce by VMware Tools. After running the policy, the catalog and index information for the SQL server backup is stored on the DD series. When the backup is performed as part of the VMware image-level backup, the SQL data files are backed up as part of the VMDKs during the vProxy image backup.

• Transaction log backup: When configuring protection policy with the application-aware option, set an interval for transaction log backup to enable transaction log backups for SQL instances running in the virtual machine and specify the frequency of backups. Backups are written directly to DD series. Transaction log backup is only performed for databases in the proper state, otherwise databases are skipped.

Note: The application-aware backup option requires vSphere version 6.5 or 6.7 and VMware tools version 10.1 or later. Select the application-aware type of backup Microsoft SQL virtual machine also enables the recovery of Microsoft SQL databases by using the SSMS.

To add an application-aware protection policy, select the Virtual Machine type, and then select Application Aware and provide the Microsoft SQL Server login credentials as shown above. At this point OS authentication is the only supported method. DB authentication is not supported yet.

13 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database Backup

4.1 Centralized Application Direct Backup Workflow

Configuration stage - Following are the steps involved in configuration stage of central application direct backup

1. User creates protection policy from PowerProtect Data Manager UI 2. PowerProtect Data Manager creates BOOST user and storage-unit on DD series 3. PowerProtect Data Manager adds protection schedule to its own scheduler 4. Application agent configures lockbox with credentials on SQL host (using ADM)

4.1.1 Centralized application direct backup workflow (FULL) Protect stage - Below illustration explains the centralized application direct backup flow in detail

14 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database Backup

1. Request to App agent to execute backup 2. App agent uses SQL VDI (stripe 4) to backup SQL 3. App agent moves data to DD series using DD Boost 4. Microsoft app agent catalog the backup Repeat steps 2-4 for each database 5. Return backup results to PowerProtect (using ADM) 6. Return backup discovery details to PowerProtect (using ADM) 7. PowerProtect creates SQL PCS (Protection Copy Set) based on the backup results

4.1.2 Centralized application direct backup workflow (LOG)

Protect stage - Below illustration explains the centralized application direct log backup flow in detail

1. Request to App agent to execute backup 2. App agent uses SQL VDI (stripe 1) to backup SQL 3. App agent moves data to DD series using DD Boost 4. Microsoft app agent catalog the backup 5. SQL Server truncates log Repeat steps 2-5 for each database 6. Return backup results to PowerProtect (using ADM) 7. Return backup discovery details to PowerProtect (ADM) 8. PowerProtect creates SQL PCS (Protection Copy Set) based on the backup results

15 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database Backup

4.2 Self-service Application Direct Backup Workflow

Configuration stage - Following are the steps involved in configuration stage of self-service application direct backup

1. User creates protection policy from PowerProtect Data Manager 2. PowerProtect Data Manager creates Boost user and storage-unit on the storage 3. Application agent configures lockbox with credentials on SQL

4.2.1 Self-service application direct backup workflow (FULL)

Protect stage - Below steps explains the self-service application direct SQL database backup flow

16 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database Backup

1. Protection triggered by DBA on SQL host 2. App agent uses SQL VDI to backup SQL 3. App agent moves data to DD series using DD Boost 4. Microsoft app agent catalog the backup 5. Return backup results through ADM 6. Return backup discovery details (ADM) 7. PowerProtect creates SQL PCS (Protection Copy Set) based on the backup results

4.2.2 Self-service application direct backup workflow (LOG)

Protect stage - Below steps explains the self-service application direct SQL log backup flow

1. Protection triggered by DBA on SQL host 2. App agent uses SQL VDI to backup SQL 3. App agent moves data to DD series using DD Boost 4. Microsoft app agent catalog the backup 5. SQL Server truncates log Repeat steps 2-5 for each database. 6. Return backup results through ADM 7. Return backup discovery details (ADM) 8. PowerProtect creates SQL PCS (Protection Copy Set) based on the backup results

17 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database Backup

4.3 Application-aware Backup Workflow Configuration stage - Following are the steps involved in configuration stage of application-aware backup

1. User creates protection policy using PowerProtect UI 2. PowerProtect creates BOOST user and storage-unit on DD series 3. PowerProtect adds protection schedule to its own scheduler 4. vProxy engine pushes agent using guest OS credentials Microsoft application agent Dell EMC vProxy agent Dell EMC ItemPoint 5. Application agent configures lockbox with credentials on SQL host (using ADM)

4.3.1 Application-aware SQL Database Backup Workflow (FULL) Protect stage - Below illustration explains the steps involved in the application-aware backup for database

18 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database Backup

1. Request to vProxy agent to execute backup 2. Application-aware compatibility check (SQL permission, SQL status, VSS status, etc.) 3. vProxy takes VADP snapshot with quiesce option which will internally trigger VMware's own VSS workflow 4. vProxy gets changed blocks from VADP 5. vProxy starts data transfer to DD series 6. vProxy retrieves VSS manifest (metadata) from vSphere using VADP API and uploads it to the guest VM 7. vProxy tells Microsoft app agent to catalog the backup 8. App agent parses VSS manifest and catalogs databases quiesced during step 3 under its own directory structure 9. App agent provides database backup details, including discovered SQL assets, to vProxy 10. PowerProtect creates VM PCS (Protection Copy Set) and corresponding SQL PCS based on the backup results

4.3.2 Application-aware backup workflow (LOG)

Protect stage - Below illustration explains the steps involved in the application-aware backup of SQL log protection

1. Request to vProxy to execute backup 2. Application-aware compatibility check (SQL permission, SQL status, VSS status, etc.) 3. vProxy asks Microsoft App agent to execute transaction log backup 4. Microsoft App agent will serially back up each database transaction log (using VDI) on DD series 5. SQL Server truncates logs 6. App agent provides database backup details, including discovered SQL assets, to vProxy 7. vProxy parses VSS manifest and catalogs files and transaction logs 8. PowerProtect creates VM PCS and its corresponding SQL PCS based on the backup results

19 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database recovery

5 SQL Database recovery The Microsoft application agent provides a user interface (Microsoft application agent for Application Direct) that enables Microsoft SQL database administrator to perform backup and restore operation of SQL database through the SSMS Plug-in.

Perform database or table-level restores directly from a SQL host using the SSMS Plug-in with PowerProtect Data Manager, the Microsoft application agent supports multiple tools to recover Microsoft SQL databases.

Microsoft SQL database administrator can configure and perform SQL databases recovery using the following tools:

• Microsoft application agent SSMS Plug-in (Microsoft application agent for Application Direct) • Microsoft application agent for Application Direct commands • T-SQL scripts

For table level restore (through ItemPoint)

• Application agent will mount the image backup • Restore the required transaction logs • Replay logs to the selected point-in-time

Restore workflow

1. Restore databases using SSMS Plug-in 2. Browse SQL backups using application agent catalog stored on PowerProtect Data Manager. 3. DBA selects what to restore and recover Application agent creates and executes recovery plan Application agent also restores the transaction logs using DD Boost and apply the transaction logs on the restored database files accordingly 4. Application agent recovers and opens the database unless a different option was selected by the administrator

20 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database recovery

Database or transaction logs restore as a flat file

1. Does not restore data to the active SQL instance 2. Files are restored as a flat file without impacting any active SQL server 3. DBA will restore and recover data in his own way using these flat files and SQL Server commands

5.1 SQL Instant Access The Microsoft application agent 19.1 introduced support for instant access of SQL Server backups that are created with a PowerProtect virtual machine a live-mounted SQL database from the protection environment without restoring the virtual machine or SQL database.

Instant access to a SQL Server database is useful in several cases, including Adhoc queries, health checks, disaster recovery, and development tests. This feature also supports storage vMotion of the virtual disk drives of the database from DD series to production VMware datastore.

Note: Instant access is ONLY supported for APPLICATION-AWARE COPY, not supported for Application Direct backups.

When instant access recovery is initiated, the operation locates the corresponding backup virtual disks and mounts them from the DD series. The operation locates the SQL Server database that the database administrator selects from the mounted disks and connects the database to the SQL Server instance.

Procedure involved in SQL Instant access using vProxy engine SSMS Plug-in

• SQL Instance access can be initiated from Microsoft application agent for vProxy engine • From the Instant access page, provide the DD series, lockbox settings and SQL Instance server • Browse for the available SQL backups in the catalog and select backup date • When a single database is selected, a new name for the database can be specified. For instant access, a default name is generated, by appending the text "Livemount" and a date/time stamp to the original database name

21 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database recovery

5.2 Centralized restore of SQL Application Direct backups When the SQL Server data is backed up as part of a SQL Application Direct protection policy, the SQL Server Application Direct backups can be recovered using the centralized restore functionality in the PowerProtect Data Manager UI starting from PowerProtect Data Manager v19.8.

Types of centralized restores of SQL Application Direct backups, depending on the type of database assets:

− Centralized restore of a system database − Centralized restore of a stand-alone database − Centralized restore of an Always On availability group (AAG) database − Centralized restore of a Failover Cluster Instance (FCI) database − Centralized restore of an Always On Failover Cluster Instance (AAG over FCI) database

Note: The centralized restore of a SQL Application Direct backup and the centralized restore of a SQL virtual machine backup cannot be performed at the same time. For Centralized restore of an Always On availability group (AAG) database and Failover Cluster Instance (FCI) database, the database needs to be taken out of the cluster.

Single or multiple databases can be restored from the same SQL host and instance. The databases can be restored either to the original SQL host or to an alternate SQL host with the following requirements:

• The alternate host must be a SQL Application Direct machine. • The Microsoft application agent software must be installed and configured on the alternate host. • A system database cannot be restored to an alternate host or SQL instance.

A centralized restore of a full, differential, or transaction log backup can be performed to a specified SQL host and instance. Centralized restore of SQL Application Direct backups can be performed from Recovery > Assets > SQL window in the PowerProtect Data Manager UI.

Restore to original database:

Databases can be restored to the original database on the original SQL Server when the SQL host is protected by SQL Application Direct policy and SQL host is running and operational. Backup copies are used for operational restore and for Disaster Recovery purpose.

22 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database recovery

For single database restore, restore can be done from a most recent copy, a specific copy, or from a point-in- time (PIT) copy.

Copy and point-in-time selection:

A single database restore supports copy and point-in-time (PIT) selection. With copy selection, FULL, DIFF or TLOG can be selected and with PIT selection, roll-forward time can be selected and available only when TLOG backup is selected.

Note- Roll-forward time should be selected in between the timelines of full backup copy and log copy.

23 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database recovery

Restore to alternate database:

Databases can be restored to an alternate SQL server where the SQL host may (or may not) be protected by PowerProtect Data Manager and the Application agent must be installed manually and registered for “unprotected” host.

PowerProtect Data Manager provides rich set of options for restoring SQL databases to alternate locations. For alternate restore,

− Can select target host − Can select target SQL Instance − Can select target database

Target host must have application agent installed and registered by host administrator. PowerProtect Data Manager will automatically discover the target hosts, SQL instances, and SQL databases.

Database file location:

24 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database recovery

Restore options to specify the file system location where the databases are restored:

• Restore database files to the original file location (location at backup time) - Restores the backup data to the file directory that was used during the backup and overwrites the existing contents. Note - When restoring to original path the File system paths must exist and filenames must not be in use. • Restore database files to the default file location as set by Microsoft SQL Server - Restores the backup data to the default file directory as used by the SQL Server. • Restore database files to a user-specified file location - Restores the backup data to a user- specified file directory for the database files and log files.

Note - When restoring to custom location user can specify one path for data files, one path for log files and the file system paths must exist.

Tail log backup:

Tail log is supported only for single database, for backing up the active portion of the database log present on the disk prior to starting the database recovery.

Option to enable DD compressed restore, overwrite existing databases, TLOG backup and to disconnect database users prior to restore.

Compressed restore option - Users can utilize the compressed restore option for saving the network bandwidth. However, the compute resource utilization would be more for compressing/decompressing the data.

25 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database recovery

For multiple databases restore, restore can be performed only from the most recent backup copy.

Database restore location for multiple databases restore.

Option to enable DD compressed restore and to overwrite existing databases.

26 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database recovery

Recovery state selection:

One of the following options can be selected:

RESTORE WITH RECOVERY: Leaves the database ready to use by rolling back the uncommitted transactions. Additional transaction logs cannot be restored. RESTORE WITH NORECOVERY: Leaves the database non-operational and does not roll back the uncommitted transactions. Additional transaction logs can be restored.

Please see - PowerProtect Data Manager Microsoft Application Agent SQL Server User Guide for more details.

5.3 Centralized restore of SQL Virtual Machine backups When the SQL Server data is backed up as part of a SQL virtual machine application-aware protection policy in PowerProtect Data Manager, the SQL server virtual machine backups can be restored using the centralized restore functionality in the PowerProtect Data Manager UI.

Types of centralized restores of SQL virtual machine backups, - Centralized restore of a system database - Centralized restore of a stand-alone database - Centralized restore of an Always On availability group (AAG) database

• The alternate host must be a SQL virtual machine. • The Microsoft application agent software must be installed and configured on the alternate host. Note: When the Microsoft application agent is installed to perform a restore of a SQL virtual machine backup to an alternate SQL Server host, ensure that the SQL host was not previously registered to PowerProtect Data Manager as an Application Direct host. • A system database cannot be restored to an alternate host or SQL instance.

The centralized restore of multiple SQL databases supports the following use cases:

• Performing disaster recovery of the original SQL instance. • Performing a restore rehearsal by restoring a SQL instance database to an alternate host to validate the backups.

Centralized restore of SQL Virtual Machine backups can be performed from Recovery > Assets > SQL window in the PowerProtect Data Manager UI.

27 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database recovery

Restore to original database - Restore databases to the original database on the original SQL Server where the SQL VM is protected by PowerProtect Data Manager VM application-aware policy and the SQL VM is running and SQL Server is operational. Backup copies are used for operational restore and for Disaster Recovery purpose.

For single database restore, restore can be done from a most recent copy, a specific copy, or from a point-in- time (PIT) copy. For single database, tail log backup can be performed for the active portion of the disk.

For multiple databases restore, restore can be performed only from the most recent backup copy.

Copy and Point-In-Time selection - Single database restore supports copy and Point-in-Time (PIT). With copy selection, FULL, or TLOG can be selected and with PIT selection, roll-forward time can be selected and available only when TLOG backup is selected.

28 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database recovery

Note- Roll-forward time should be selected in between the timelines of full backup copy and log copy.

Restore to alternate database - Restore database to an alternate SQL Server where the SQL VM may (or may not) be protected by PowerProtect Data Manager. PowerProtect Data Manager user can install agents for “unprotected” VM.

PowerProtect Data Manager provides rich set of options for restoring SQL databases to alternate locations. For alternate restore,

− Can select target host − Can select target SQL Instance − Can select target database

29 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database recovery

The target host must have application agent installed:

• Pushed when VM added to application-aware protection policy. • Manually installed by PowerProtect Data Manager administrator.

Install Agent option available from More Actions menu in Infrastructure->Assets->Virtual Machines. Currently available only for Windows VM.

Note – Operating system credentials are required to install the PowerProtect Data Manager SQL Server Agent for Windows. Set the credential from More Actions > Set Credential.

Select Install to install the agent on the Windows VM and status of the install can be monitored from the Jobs window.

PowerProtect Data Manager will automatically discover the target hosts, SQL instances, and SQL databases.

30 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database recovery

Database File Location: One of the following restore options can be selected to specify the file system location where the databases are restored:

• Restore database files to the original file location (location at backup time) - Restores the backup data to the file directory that was used during the backup and overwrites the existing contents. Note: If the directory path cannot be created during the centralized restore, the restore fails. • Restore database files to the default file location as set by SQL - Restores the backup data to the default file directory as used by the SQL Server. • Restore database files to a user-specified file location - Restores the backup data to file directories that you specify for the database files and log files.

31 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 SQL Database recovery

Recovery state selection: One of the following options can be selected:

Please see - PowerProtect Data Manager Microsoft Application Agent SQL Server User Guide for more details.

5.4 Self-service restore of SQL Virtual Machine backups SQL databases that are backed up with an application aware VM protection policy can be restored using the Microsoft application agent.

Full and transaction log backups created by a PowerProtect virtual machine application-aware protection policy can be restored using Microsoft application agent tools. The backups are restored to a SQL Server hosted on a VMware virtual machine.

When a SQL Server virtual machine asset is added to a PowerProtect Data Manager virtual machine application aware protection policy, the Microsoft application agent and ItemPoint are silently installed on the protected SQL Server.

The Microsoft application agent automatically stores the DD series host and login information from the protection settings that are configured in the PowerProtect Data Manager protection policy. This automatic configuration occurs when the SQL Server virtual machine asset is added to the PowerProtect Data Manager protection policy.

Restore operations can be performed using Microsoft app agent for VM Direct SQL Server Management Studio (SSMS) plug-in or the command prompt. T-SQL scripts are not supported with VM Direct.

The Microsoft application agent can perform a database restore, table-level restore, or database instant access restore to the source virtual machine or an alternate virtual machine. To perform restores to an alternate virtual machine, the destination virtual machine must be an asset of PowerProtect Data Manager.

However, instance-level restores can only be performed to the original source instance.

The Microsoft application agent supports both full backups and transaction log backups for a Microsoft Always On availability group (AAG). The AAG databases are indexed against the AAG cluster name. Full backups index the AAG database for all the AAG cluster nodes for one cycle of backup. Transaction log backups occur only on the preferred node.

32 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 Support for existing SQL Agent Backups with PowerProtect Data Manager

6 Support for existing SQL Agent Backups with PowerProtect Data Manager The Microsoft application agent provides the capability to onboard existing stand-alone deployments, including their existing backups, to PowerProtect Data Manager. Existing backups are Microsoft application agent backups that is performed before integrating the Microsoft application agent with the PowerProtect Data Manager software and added an asset to a PowerProtect Data Manager protection policy.

With the onboarding capability, PowerProtect Data Manager provides the following centralized features:

• Visibility of both existing backups and any new self-service or PowerProtect Data Manager policy-driven backups.

• Automatic configuration of target protection storage based on the PowerProtect Data Manager protection policies that are used for database.

• All the other functionality that is provided for PowerProtect Data Manager protection policies.

Note: 1. After discovery is executed, it takes about 30 minutes for the copies to appear in the PowerProtect Data Manager under assets. 2. Onboarding of SQL backup copies to PowerProtect Data Manager is supported only from backups that are performed with Microsoft application agent 4.7 and later. 3. Up to three previous months of existing backups can be onboarded. 4. Retention lock is not supported for discovered existing backups in PowerProtect Data Manager. 5. Onboarding is not supported for DD Boost-over-FC backups and 32-bit FCI instance backups.

33 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 Disaster Recovery

7 Disaster Recovery

When a disaster scenario occurs, the Microsoft application agent supports disaster recovery of data located on DD series. The Microsoft application agent for Application Direct supports disaster recovery.

Procedure

1. Create a target Windows host with the same name as the source hostname

2. Install a SQL Server instance with the same name as the source instance name

3. Install the Microsoft application agent on the target Windows host

4. Browse the backups of the source instance by selecting the appropriate storage unit

5. Restore the system databases to the target instance

6. Restore all the user databases to the target instance

34 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3 Technical support and resources

A Technical support and resources

Dell.com/support is focused on meeting customer needs with proven services and support.

A.1 Related resources

Product documentation:

- PowerProtect Data Manager Microsoft Application Agent SQL Server User Guide - PowerProtect Data Manager Administration and User Guide - PowerProtect Data Manager Security Configuration Guide - PowerProtect Data Manager Deployment Guide - PowerProtect Data Manager Release Notes

PowerProtect Data Manager E-LAB Navigator

- Provides compatibility information, including specific software and hardware configurations that PowerProtect Data Manager supports. To access E-LAB Navigator, go to PowerProtect Data Manager Compatibility Matrix

35 Dell EMC PowerProtect Data Manager: Microsoft SQL Database Backup and Recovery | H18091.3