NCM10053

2020

Nexus OTArmor™ – Backup & Recovery Maintenance

Guide

These instructions do not purport to cover all details or variations in equipment nor to provide for every possible contingency
to be met in connection with installation, operation or maintenance. Should further information be desired or should particular
problems arise which are not covered sufficiently for the purchaser's purposes the matter should be referred to Baker Hughes
Company. These instructions contain proprietary information of Baker Hughes Company and are furnished to its customer solely
to assist that customer in the installation, testing, operation, and/or maintenance of the equipment described. This document shall
not be reproduced in whole or in part nor shall its contents be disclosed to any third party without the written approval of Baker
Hughes Company.
Copyright 2020 Baker Hughes Company. This material contains one or more registered trademarks of Baker Hughes Company
and its subsidiaries in one or more countries. All third-party product and company names are trademarks of their respective
holders.
Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in whole or in
part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

THESE INSTRUCTIONS PROVIDE THE CUSTOMER/OPERATOR WITH

IMPORTANT PROJECT-SPECIFIC REFERENCE INFORMATION IN ADDITION
TO THE CUSTOMER/OPERATOR’S NORMAL OPERATION AND
MAINTENANCE PROCEDURES. SINCE OPERATION AND MAINTENANCE
PHILOSOPHIES VARY, NEXUS CONTROLS AND ITS SUBSIDIARIES AND
AFFILIATES DOES NOT ATTEMPT TO DICTATE SPECIFIC PROCEDURES,
BUT TO PROVIDE BASIC LIMITATIONS AND REQUIREMENTS CREATED BY
THE TYPE OF EQUIPMENT PROVIDED.
THESE INSTRUCTIONS ASSUME THAT OPERATORS ALREADY HAVE A
GENERAL UNDERSTANDING OF THE REQUIREMENTS FOR SAFE
OPERATION OF MECHANICAL AND ELECTRICAL EQUIPMENT IN
POTENTIALLY HAZARDOUS ENVIRONMENTS. THEREFORE, THESE
INSTRUCTIONS SHOULD BE INTERPRETED AND APPLIED IN CONJUNCTION
WITH THE SAFETY RULES AND REGULATIONS APPLICABLE AT THE SITE
AND THE PARTICULAR REQUIREMENTS FOR OPERATION OF OTHER
EQUIPMENT AT THE SITE.
THESE INSTRUCTIONS DO NOT PURPORT TO COVER ALL DETAILS OR
VARIATIONS IN EQUIPMENT NOR TO PROVIDE FOR EVERY POSSIBLE
CONTINGENCY TO BE MET IN CONNECTION WITH INSTALLATION,
OPERATION OR MAINTENANCE. SHOULD FURTHER INFORMATION BE
DESIRED OR SHOULD PARTICULAR PROBLEMS ARISE WHICH ARE NOT
COVERED SUFFICIENTLY FOR THE CUSTOMER/OPERATOR'S PURPOSES
THE MATTER SHOULD BE REFERRED TO NEXUS CONTROLS.
THE RIGHTS, OBLIGATIONS AND LIABILITIES OF NEXUS CONTROLS AND
THE CUSTOMER/OPERATOR ARE STRICTLY LIMITED TO THOSE
EXPRESSLY PROVIDED IN THE CONTRACT RELATING TO THE SUPPLY OF
THE EQUIPMENT. NO ADDITIONAL REPRESENTATIONS OR WARRANTIES
BY NEXUS CONTROLS REGARDING THE EQUIPMENT OR ITS USE ARE
GIVEN OR IMPLIED BY THE ISSUE OF THESE INSTRUCTIONS.
THESE INSTRUCTIONS CONTAIN PROPRIETARY INFORMATION OF NEXUS
CONTROLS AND ARE FURNISHED TO THE CUSTOMER/OPERATOR SOLELY
TO ASSIST IN THE INSTALLATION, TESTING, OPERATION, AND/OR
MAINTENANCE OF THE EQUIPMENT DESCRIBED. THIS DOCUMENT SHALL
NOT BE REPRODUCED IN WHOLE OR IN PART NOR SHALL ITS CONTENTS
BE DISCLOSED TO ANY THIRD PARTY WITHOUT THE WRITTEN APPROVAL
OF NEXUS CONTROLS.

2 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

REFERENCE DOCUMENTS

Drawing Number Title

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 3
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

The following notices will be found throughout this publication. It is important that the
significance of each is thoroughly understood by those using this document. The definitions are
as follows:

NOTE

Highlights an essential element of a procedure to ensure correctness

CAUTION

Indicates a potentially hazardous situation, which, if not avoided, could result in

minor or moderate injury or equipment damage

WARNING

INDICATES A POTENTIALLY HAZARDOUS SITUATION, WHICH, IF NOT

AVOIDED, COULD RESULT IN DEATH OR SERIOUS INJURY

***DANGER***

INDICATES AN IMMINENTLY HAZARDOUS SITUATION, WHICH, IF NOT

AVOIDED WILL RESULT IN DEATH OR SERIOUS INJURY

4 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

TABLE OF CONTENTS

1.0 PURPOSE ....................................................................................................................... 9

2.0 OVERVIEW ..................................................................................................................... 9
3.0 INSTALLATION............................................................................................................. 10
4.0 CONFIGURATION......................................................................................................... 10
5.0 SHARES ........................................................................................................................ 11
6.0 ACRONIS® BACKUP PROCEDURES ......................................................................... 12
6.1.1 Login to Acronis Backup Management Server Console: ................................... 12
6.1.2 Verify Acronis Backup Licenses: ....................................................................... 13
6.1.3 Add HMI to Acronis Backup Console: ............................................................... 13
6.1.4 Delete HMI from Acronis Backup Console: ....................................................... 15
6.1.5 Create Backup Plan for HMI: ............................................................................. 16
6.1.6 Review Backup Configuration ........................................................................... 25
6.1.7 Manually Execute Backup Plan ......................................................................... 26
6.1.8 Review Backup Status ...................................................................................... 28
6.1.9 Reset Acronis Agent Backup Password ............................................................ 29
6.1.10 Update the Acronis Managed Machine Service ............................................. 30
6.1.11 Incidental Data Recovery ............................................................................... 31
6.1.12 Create Bootable Recovery Media .................................................................. 34
6.1.13 Create Bootable CD-ROM from the WinPE .ISO file (for RAID1 HMI ONLY) 41
6.1.14 Create Bootable CD-ROM from the Acronis-Boot-Media .ISO file ................. 42
6.1.15 Complete System Recovery ........................................................................... 42
6.1.16 Configure Virtual Systems for Recovery Boot ................................................ 48
6.1.17 Export Backups from Nexus OTArmor ........................................................... 51
6.1.18 Export Complete Backup Directory ................................................................ 52
6.1.19 Export Individual Backups .............................................................................. 52
7.0 VMWARE ESXI CONFIGURATION BACKUP AND RESTORE PROCEDURE ........... 58
7.1.1 Create VMware ESXi Backup Folder on DR1 Virtual Machine .......................... 58
7.1.2 Record the VMware ESXi Version ..................................................................... 58
7.1.3 Creating the VMware ESXi Configuration Backup ............................................. 59
7.1.4 Restoring the VMware ESXi Configuration Backup ........................................... 61
8.0 KIWI CATTOOLS PROCEDURES ................................................................................ 63

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 5
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

8.1.1 Add Device to Kiwi CatTools ............................................................................. 63

8.1.2 Create Network Device Backup Task ................................................................ 64
8.1.3 Perform Network Device Backup with Kiwi CatTools ........................................ 67
8.1.4 Perform Cisco Switch Recovery with Kiwi CatTools .......................................... 68
8.1.5 Update Kiwi CatTools Passwords ..................................................................... 71
8.1.6 Export Configuration Files ................................................................................. 72
9.0 INSTALL MONTHLY PATCH UPDATES ...................................................................... 73
10.0 APPENDIX A – DEFAULT BACKUP CONFIGURATIONS .......................................... 77
11.0 CONTACT INFORMATION ........................................................................................... 79

LIST OF FIGURES

Figure 1: Launch Acronis Backup (Secured connection) ................................................................... 12

Figure 2: Acronis Backup Sign In ...................................................................................................... 12
Figure 3: Acronis Backup Management Console............................................................................... 13
Figure 4: Acronis Backup Licenses ................................................................................................... 13
Figure 5: Acronis Backup All Devices ................................................................................................ 14
Figure 6: Add Device......................................................................................................................... 14
Figure 7: Windows Workstation ......................................................................................................... 14
Figure 8: Add Windows Machine ....................................................................................................... 15
Figure 9: Delete Machine from Acronis Backup Console ................................................................... 15
Figure 10: Delete Machine ................................................................................................................ 16
Figure 11: Acronis Backup Plans ...................................................................................................... 16
Figure 12: Create Plan ...................................................................................................................... 17
Figure 13: Add Device....................................................................................................................... 17
Figure 14: Select Device ................................................................................................................... 18
Figure 15: Add Location .................................................................................................................... 18
Figure 16: Specify Credentials .......................................................................................................... 19
Figure 17: Specify Folder .................................................................................................................. 19
Figure 18: Full Backup Schedule ...................................................................................................... 20
Figure 19: Differential Backup Schedule ........................................................................................... 21
Figure 20: Incremental Backup Schedule .......................................................................................... 21
Figure 21: Cleanup Schedule ............................................................................................................ 22
Figure 22: Rename Backup Plan Icon ............................................................................................... 22
Figure 23: Rename Backup Plan ...................................................................................................... 22
Figure 24: Backup Options Icon ........................................................................................................ 23
Figure 25: Backup File Name Option ................................................................................................ 23

6 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 26: Windows Event Log Option .............................................................................................. 23

Figure 27: Scheduling Option ............................................................................................................ 24
Figure 28: File Filters Option ............................................................................................................. 24
Figure 29: Select A Backup Plan to Review ...................................................................................... 25
Figure 30: Backup Plan Details ......................................................................................................... 25
Figure 31: Verify Applied Backup Plan(s) .......................................................................................... 26
Figure 32: Run Device Backup.......................................................................................................... 27
Figure 33: Run Plan Backup ............................................................................................................. 27
Figure 34: Backup Status .................................................................................................................. 28
Figure 35: Backup Plan Status .......................................................................................................... 28
Figure 36: Backup Plan Activities ...................................................................................................... 28
Figure 37: Device Status ................................................................................................................... 29
Figure 38: Device Activities ............................................................................................................... 29
Figure 40: Acronis Agent Reset Password ........................................................................................ 30
Figure 41: Update GPO .................................................................................................................... 30
Figure 42: services.msc .................................................................................................................... 30
Figure 43: Acronis Managed Machine Service .................................................................................. 31
Figure 44: Update Service Password ................................................................................................ 31
Figure 46: Select Device for Recovery .............................................................................................. 32
Figure 47: Recover Files/folders ....................................................................................................... 32
Figure 48: Select File to Recover ...................................................................................................... 33
Figure 50: Recover File ..................................................................................................................... 34
Figure 51: View Status of File Recovery............................................................................................ 34
Figure 52: Run Bootable Media Builder ............................................................................................. 34
Figure 53: Bootable Media Builder .................................................................................................... 35
Figure 54: Create media without license key ..................................................................................... 35
Figure 55: Create media with license key .......................................................................................... 36
Figure 56: Select Boot Representation .............................................................................................. 37
Figure 57: Add Kernel Parameters .................................................................................................... 37
Figure 58: Select Backup Options ..................................................................................................... 37
Figure 59: Specify Credentials for Login............................................................................................ 38
Figure 60: Clear Network Settings for each NIC ................................................................................ 39
Figure 61: Select Media Output ......................................................................................................... 39
Figure 62: Select Media Location ...................................................................................................... 40
Figure 63: Review Media Settings ..................................................................................................... 40
Figure 64: Completion of Bootable Media ......................................................................................... 41
Figure 65: Create Bootable Media from ISO ..................................................................................... 42
Figure 66: Create Bootable Media from ISO ..................................................................................... 42
Figure 67: Recovery Media ............................................................................................................... 43
Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 7
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

Figure 68: Recovery Configure Network............................................................................................ 43

Figure 69: Configure Network for Recovery ...................................................................................... 44
Figure 70: Launch Recovery Console ............................................................................................... 44
Figure 71: Recovery Startup ............................................................................................................. 45
Figure 72: Data Selection .................................................................................................................. 45
Figure 73: Browse for Data Path for Recovery .................................................................................. 45
Figure 74: Specify Credentials for Recovery ..................................................................................... 46
Figure 75: Select Archive to Restore ................................................................................................. 46
Figure 76: Select Disk Options for Restore ....................................................................................... 47
Figure 77: Restoration Parameters Review ....................................................................................... 47
Figure 78: Restoration Progress ....................................................................................................... 48
Figure 79: Restoration History........................................................................................................... 48
Figure 80: Edit Settings for VM Recovery Boot ................................................................................. 49
Figure 81: Datastore ISO File............................................................................................................ 49
Figure 82: Browse Media .................................................................................................................. 49
Figure 83: Force BIOS Setup ............................................................................................................ 50
Figure 84: VM Boot Order ................................................................................................................. 50
Figure 85: VM BIOS Save Settings ................................................................................................... 51
Figure 86: Backups Directory ............................................................................................................ 52
Figure 87: DR1 Backups Folder ........................................................................................................ 53
Figure 88: Backups ........................................................................................................................... 53
Figure 89: Select Machine Backup .................................................................................................... 54
Figure 90: Select Individual Machine Backups .................................................................................. 55
Figure 91: Export Individual Machine Backups .................................................................................. 55
Figure 92: Backup Export Storage Location ...................................................................................... 56
Figure 94: Backup Export Status ....................................................................................................... 57
Figure 95: Completed Backup Export ................................................................................................ 57
Figure 96: Create ESXi Configuration Folder .................................................................................... 58
Figure 97: ESXi Virtual Host Folder Structure ................................................................................... 58
Figure 98: ESXi Version .................................................................................................................... 59
Figure 99: PuTTY Configuration ........................................................................................................ 60
Figure 101: Device Information ......................................................................................................... 63
Figure 102: Passwords tab................................................................................................................ 64
Figure 103: Activity Wizard ............................................................................................................... 65
Figure 104: Add Activity .................................................................................................................... 65
Figure 105: Drop-down list ................................................................................................................ 66
Figure 106: Activity Options .............................................................................................................. 67
Figure 107: CatTools Activities Window ............................................................................................ 67
Figure 108: CatTools Info Log Window ............................................................................................. 67

8 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 109: Configuration Restore Directory ..................................................................................... 68

Figure 110: CatTools Activities Window ............................................................................................ 68
Figure 111: CatTools Activity Window ............................................................................................... 69
Figure 112: CatTools Scheduled Task Window ................................................................................. 69
Figure 113: CatTools Device Selection Window ................................................................................ 70
Figure 114: CatTools E-Mail Window ................................................................................................ 70
Figure 115: CatTools Options Window .............................................................................................. 70
Figure 116: CatTools Activities Window ............................................................................................ 71
Figure 117: CatTools Devices Window ............................................................................................. 71
Figure 118: CatTools Device Information Window............................................................................. 72
Figure 119: CatTools Backup Archive ............................................................................................... 72
Figure 120: ESXi Management Page ................................................................................................ 73
Figure 121: vSphere® Client ............................................................................................................. 74
Figure 122: Mount DVD on PM1 ....................................................................................................... 74
Figure 123: Copy Updates Batch File ................................................................................................ 75
Figure 124: Copy Updates Batch File ................................................................................................ 75
Figure 125: Running Copy Updates Batch File.................................................................................. 75
Figure 126: vSphere® Client ............................................................................................................. 76
Figure 127: Disconnect DVD ............................................................................................................. 76

LIST OF TABLES

Table 1: DR1 Shares......................................................................................................................... 11

Table 2: Default Backup Configuration .............................................................................................. 77

1.0 PURPOSE

The purpose of this manual is to provide an overview of the disaster recovery capabilities and
usage of the functions during operations within Nexus OTArmor.

2.0 OVERVIEW

The Acronis® Backup & Recovery application provides backup and recovery for servers and
computers on the domain. The system is sized to include Nexus OTArmor and the number of
HMIs in the original site configuration. Additional capacity can be added to include other
computers added to the domain.

The Acronis® Backup & Recovery Management Console is used as a centralized backup
management point. It provides dashboard information on backup status, including errors or
warnings related to backup or recovery tasks. Each HMI under security management has an
Acronis® Backup Agent installed to report status to the console. The Acronis® Backup &
Recovery Management Console provides support for recovery of:

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 9
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

1. Virtual machines

2. Data drives

3. Operating system-only drives

For network devices and firewalls, the Kiwi CatTools® application provides the backup and
recovery architecture. Kiwi CatTools® allows you to schedule backups of configurations on
routers, switches, firewalls, and other network devices on a regular basis.

3.0 INSTALLATION

The Acronis® Backup & Recovery application is pre-installed on Nexus OTArmor. No additional
installation is required.

The Kiwi CatTools® application is also pre-installed on Nexus OTArmor. No additional

installation is required.

4.0 CONFIGURATION

DR1 uses a standard configuration for the backups as a Grandfather - Father - Son structure
where backups are created as follows:
1. Incremental backup once a day for a week
2. Differential backup once a week for a month (4 weeks)
3. Full backup once a month for a year

This method typically provides a good balance of disaster recovery, historical file recovery, and
disk space. While this is the default configuration used, it is not an absolute requirement. Sites
are free to change the backup structures, taking into account the impact that these changes will
have on the fixed resources of disk space, CPU usage, and network bandwidth. When making
changes, the following concepts should be considered:

Backup Staggering: If the backups are scheduled over time (each backup starts at a
different time throughout the day), the network loading and DR1 server loading are important
considerations. By looking at the completion times of each backup in the archive (Vault), it
is possible to see how long it took a backup to complete and use that in scheduling non-
overlapping backups.

Client Loading: It will be obvious on a client computer when a backup is being performed.
The disk and CPU will be more active than in the idle state. If possible, the backups should
be scheduled for periods where the system is expected to be lightly loaded.

Network Loading: The default settings used for the backups limits any one node to use no
more than 20% of the available network loading. Make sure to use this setting for additional
or custom backups as well.

Disk Space: Saving full backups provides for a fast and easy recovery, but in most situations,
the number of files that change each day is a fairly limited subset. Using incremental and
differential backups can conserve archive space by not saving as many copies of the
unchanging files.

10 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Recovery Time & Reliability: Since disaster recovery is a primary concern, be aware of
how the method selected impacts the need to read multiple backups to do the full restore (as
in too many incremental or differential backups in the chain). The more backups that must
be read, the longer it will take, and the greater the chance that a single failure will cause
recovery problems.

The backups are stored on a RAID-5 drive array connected to the DR1 server.

Partial recovery of information from the backups is accomplished by using the Acronis® Backup
Management Console on the DR1 computer. This can view and recover files or directories from
the backups to the client computer. Users on the client computers do not have a mechanism to
access the backups to retrieve their own files.

A full recovery (bare metal) is accomplished by creating a bootable disk or .iso file from the
Acronis® Backup Bootable Media Builder on the DR1 computer and booting the client computer
off that disk. That method provides the network connectivity required to recover a full image of
the client computer. (In this usage, the term client computer includes the Nexus OTArmor servers
and virtual machines as well.)

5.0 SHARES

The following is a list of share names that are present on the DR1 component

Sharename Description
Backups Location where the Acronis® Backup system places the client computer backups.
Domain Admins, Backup Administrators, and the Backup Agent account are
granted access to this share name. Normal users should not be allowed to access
this and read the contents of other computer's backups.
Table 1: DR1 Shares

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 11
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

6.0 ACRONIS® BACKUP PROCEDURES

The Acronis Backup Management Console provides a central point for scheduling, monitoring,
and restoring system backups. To perform Disaster Recovery capabilities the following steps are
used:

6.1.1 Login to Acronis Backup Management Server Console:

1. Login to the DR1 server as a Domain Administrator.

2. Launch the Acronis Backup (Secured connection) application.

Figure 1: Launch Acronis Backup (Secured connection)

3. The Acronis Backup Sign In page will open.

Figure 2: Acronis Backup Sign In

4. Click SIGN IN.

5. The Acronis Backup Management Console will open to the Dashboard.

12 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 3: Acronis Backup Management Console

6.1.2 Verify Acronis Backup Licenses:

The following procedures continue the process of adding an HMI into the system by installing
local agents. These agents allow for central management of key security functions. To
prepare to install agents:

1. Perform a check for installed Acronis Backup licenses available for the HMI being
added to the domain.

2. In the Acronis Backup Management Console, review license information.

3. On the left navigation panel select Settings and Licenses.

4. Verify correct number of licenses per Virtual Hosts, Workstations, and Servers.

Figure 4: Acronis Backup Licenses

6.1.3 Add HMI to Acronis Backup Console:

1. In the Acronis Backup Management Console.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 13
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

2. On the left navigation pane select Devices and All Devices.

Figure 5: Acronis Backup All Devices

a. Click the Add Device button.

Figure 6: Add Device

b. Under Workstations, select Windows.

Figure 7: Windows Workstation

c. Under Specify a machine running Windows:

i. Enter: < Machine Name> or <IP Address> (e.g. EWS.HMI.local).

ii. Username: HMI\Admin

iii. Password: GE.23domain

iv. Verify the management server DR1.HMI.local is selected.

d. Click Add.

14 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 8: Add Windows Machine

3. Wait for the console to Connect and close the Activity window once the status shows
Succeeded.

4. Once the machine is deployed, verify its showing under All Devices in the Acronis
console.

6.1.4 Delete HMI from Acronis Backup Console:

1. In the Acronis Backup Management Console.

2. On the left navigation pane select Devices and All Devices.

3. Check the box on the left of the machine to Delete.

4. In the panel to the right, click Delete.

Figure 9: Delete Machine from Acronis Backup Console

5. Select Delete on the pop-up.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 15
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

Figure 10: Delete Machine

6. Wait for the console to delete the machine.

7. Verify the machine has been removed from the Device list.

6.1.5 Create Backup Plan for HMI:

The Acronis Backup Management Console provides for several different backup scheduling
options, including daily, weekly, and monthly. When an HMI is added to the system, steps are
included to add the HMI to the backup schedule. A Baseline schedule is provided with each
Nexus OTArmor. Scheduling of new backups should take into consideration the existing
backup schedule.

NOTE

To create an Acronis Backup Plan, the correct license(s) will need to be

verified and/or added before proceeding.

1. In the Acronis Backup Management Console.

2. On the left navigation pane select Plans and Backup.

Figure 11: Acronis Backup Plans

a. In the right panel menu, select Create Plan.

16 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 12: Create Plan

b. Enter the following:

i. What to Back Up: Entire Machine

ii. Devices: Click on No Devices

1. Select Add.

Figure 13: Add Device

2. Click on the All devices folder and select an HMI from the list.

3. Click Add at bottom of screen.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 17
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

Figure 14: Select Device

4. In the Device window, click Done.

iii. Where to Back Up: Click on Specify.

1. Select drive: //dr1/Backups/

2. If //dr1/Backups/ has not been added, select Add Location and

perform the following steps:

a. Select Network Folder and type \\DR1\Backups\

b. Click the green arrow and enter the following:

Figure 15: Add Location

c. Username: HMI\AcronisAgent

d. Password: GE.23backup

18 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 16: Specify Credentials

3. When the DR1 folder loads, verify the Backups folder is selected.

4. Click Add.

Figure 17: Specify Folder

iv. Schedule: Click on the Monday to Friday at 11:00 PM

1. Enter the following:

a. Backup Scheme: Monthly full, Weekly differential, Daily

incremental (GFS).

b. Full Back up: Click on 1 of each month at 11:00 PM

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 19
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

c. Change the following:

i. Select Monthly

ii. Months: All months

iii. Days of the month: 1

iv. Start at: 01:15 AM (time may vary per site

configuration)

v. Click Done.

Figure 18: Full Backup Schedule

v. Differential backup: Click on Saturday at 11:00 PM

1. Change the following:

a. Verify Weekly is selected.

b. Deselect Saturday and select Sunday (only).

c. Start at: 01:15 AM (time may vary per site configuration)

d. Select Done.

20 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 19: Differential Backup Schedule

vi. Incremental Backup: Click on Monday to Friday at 11:00 PM

1. Change the following:

a. Verify Daily is selected.

b. Select Run every day.

c. Start at: 01:15 AM (time may vary per site configuration)

d. Select Done.

Figure 20: Incremental Backup Schedule

2. Click Done on the Schedule window.

vii. How long to keep: Click on Full: 6 months, Differential…

1. Edit the following:

a. Full: 12 months

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 21
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

b. Differential: 4 weeks

c. Incremental: 7 days

d. Select Done.

Figure 21: Cleanup Schedule

viii. Change the Plan Name:

1. Select the Pencil symbol next to the default name.

Figure 22: Rename Backup Plan Icon

2. Rename the plan to the < Machine Name> Backup Plan (e.g. EWS
Backup Plan) and click OK.

Figure 23: Rename Backup Plan

ix. Modify Backup Options:

1. Select the Gear icon (next to plan name) for Backup Options.

22 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 24: Backup Options Icon

x. Select Backup file name and Delete the entry in the File name template
field.

1. Select [Machine Name].

2. Type _Backup after [Machine Name] (e.g. [Machine Name]_Backup).

Figure 25: Backup File Name Option

xi. Select Windows Event Log and click Yes to Log event in the Application
Event log of Windows.

1. Select All events.

Figure 26: Windows Event Log Option

xii. Select Scheduling and click Distribute backup start times within a time
window.

1. Set Maximum delay to: 4 Hours.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 23
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

Figure 27: Scheduling Option

xiii. Select Performance and backup window, under customize performance

and backup window settings select Yes.

1. The entire schedule should appear green. Under the first CPU priority
setting (green) select the following:

a. CPU priority: Low

b. Output speed: 20%

c. Leave the (blue) option default.

xiv. Select File filters, under Do not back up files matching the following
criteria.

1. Enter the following:

a. Line 1: *.tibx

b. Line 2: *.tib

Figure 28: File Filters Option

xv. Click Done in the Backup Options window.

xvi. Click Create in the Create Plan window.

xvii. Wait for the Plan to finish.

c. On the left navigation pane select Devices and All devices.

24 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

3. Verify the HMI has a Scheduled backup with a local agent.

NOTE

If the device has a locally installed agent, the Agent name will be the FQDN
of the device (e.g. CA1.HMI.local), otherwise the agent is assigned as
DR1.HMI.local.

6.1.6 Review Backup Configuration

1. In the Acronis Backup Management Console.

2. On the left navigation pane select Plans and Backup.

3. Select a Backup Plan to review, on the right panel menu, click Details.

Figure 29: Select A Backup Plan to Review

4. Verify the settings, (if needed) click Edit to change the Backup Plan settings.

Figure 30: Backup Plan Details

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 25
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

5. Review the documentation included with the Acronis Backup application for details
regarding the options available from the window.

6. The standard Nexus OTArmor Backup Plan configuration is as follows:

a. DR1 Backup Plan – A plan specifically for DR1.HMI.local.

b. Backup Plan for each Virtual Machine – A plan for each Virtual Machine (the
Acronis Agent should be deployed to ALL Virtual Machines).

c. Backup Plan for each Physical Machine – A plan for each physical HMI and/or
Server (e.g. EWS1 Backup Plan or DC2 Backup Plan).

7. On the left navigation pane select Devices and All Devices.

a. Select a device from the list and click Backup on the right panel menu.

i. Verify the device has the correct Applied Backup Plan(s).

Figure 31: Verify Applied Backup Plan(s)

NOTE

Complete the backup settings requested in this section as appropriate to your

site. Refer to the section, “Default Backup Configuration”. The settings
presented are only a guideline. Based on the size of your system, you may
decide to reduce or increase the number of backups that are being retained.
Review the amount of space available on your system for backups and adjust
these values accordingly.

6.1.7 Manually Execute Backup Plan

A manually executed backup can be run through the Acronis Backup Management Console.
To run a Device backup or Backup Plan from the console, perform the following steps:

1. In the Acronis Backup Management Console.

26 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

From Devices:

2. On the left navigation pane select Devices and All Devices.

3. Select a device to Backup.

4. On the right panel menu, select Backup (if more than one Backup Plan is applied to
the device, select one).

a. Click RUN NOW (if needed, click the drop-down arrow to select Full, Incremental,
Differential).

Figure 32: Run Device Backup

5. The Backup will begin with a percentage gauge.

6. Close the window and verify the backup completes, Status should show OK.

From Plans:

7. On the left navigation pane select Plans and Backup.

8. Select a plan to Backup, on the right panel menu, select Run now.

Figure 33: Run Plan Backup

9. The Plan will run immediately, to check the status, navigate back to Devices, All
Devices.

10. Verify the assigned devices are Backing up.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 27
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

Figure 34: Backup Status

6.1.8 Review Backup Status

1. In the Acronis Backup Management Console.

2. To view the status of the Backup Plan, select Plans and Backup.

Figure 35: Backup Plan Status

3. Select a Backup Plan, on the right panel menu, select from the Plan options
(Example: Activities).

Figure 36: Backup Plan Activities

4. To view the status of a Device, select Devices and All Devices.

28 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 37: Device Status

5. Select a Device, on the right panel menu, select from the Plan options (Example:
Activities).

Figure 38: Device Activities

NOTE

Adjust the Any Status and Most Recent drop-down options to filter the
Activity view. Click Collect System Information to export/save device
specific sysinfo.

6.1.9 Reset Acronis Agent Backup Password

The domain user: Acronis Agent is a service account used to perform backups. To reset the
Acronis Agent password, perform the following:

1. Login to the DC1 server as a Domain Administrator.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 29
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

2. Open Active Directory Users and Computers and select the Users folder under
HMI.local.

a. Select the Acronis Agent User, right-click and click Reset password…

Figure 40: Acronis Agent Reset Password

b. Enter a New Password and Confirm, click OK.

6.1.10 Update the Acronis Managed Machine Service

After resetting the Acronis Agent User password, perform the following to update the
Acronis Managed Machine Service password on DR1.

1. Login to the DR1 server as a Domain Administrator.

2. Open Command Prompt (Admin).

a. At the command line, enter: gpupdate /force

Figure 41: Update GPO

3. After the command completes successfully, open Run: services.msc

Figure 42: services.msc

4. Locate the Acronis Managed Machine Service, right-click and select Properties.

30 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 43: Acronis Managed Machine Service

5. Select the Log On tab, update the Password and Confirm password and click Apply,
then OK.

Figure 44: Update Service Password

6. Start the Service and verify Status=Running. Close the Services window.

7. Launch the Acronis Backup (Secured connection) application and SIGN IN.

8. Select Devices and Machines with agents.

9. Verify the machine(s) are Online with Status OK.

10. Run a test Backup for each to verify success.

6.1.11 Incidental Data Recovery

In addition to allowing for a full system recovery, the Acronis Backup software allows for
recovery of individual files on systems which are backed up. This procedure is useful when a
single file is required to be restored from a known good backup.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 31
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

1. In the Acronis Backup Management Console.

2. On the left navigation panel select Devices and All Devices.

3. Select the device, in the right panel click Recovery.

Figure 46: Select Device for Recovery

4. A list of backups, full, differential, and incremental, will be listed for the specific
machine.

NOTE

The standard Nexus OTArmor Backup Schedule is as follows; this schedule may vary
depending on site requirements. A Full Backup is run Monthly, a Differential Backup
is run Weekly, and an Incremental Backup is run Daily. Verify the backup before
recovery.

5. Select a backup to recover from and click Recover…

6. Select Files/folders.

Figure 47: Recover Files/folders

7. From the Files/folders list, navigate to the file.

8. Select the checkbox next to the file.

32 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

9. In the right panel, click Recover and select the recovery location.

Figure 48: Select File to Recover

10. To view/select other options, click the Recovery Options icon.

Figure 49: Recover To

11. When ready, click Start Recovery.

12. In the Recover files window, make an Overwrite selection and click Proceed.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 33
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

Figure 50: Recover File

13. View the status of the File Recovery in the Activity details window.

Figure 51: View Status of File Recovery

14. Close the Activity details window and the machine specific backups list to return to All
devices.

6.1.12 Create Bootable Recovery Media

1. On the DR1 server click Start and type: Run Bootable Media Builder.

Figure 52: Run Bootable Media Builder

2. Click Yes on the User Account Control pop-up.

3. The Acronis Media Builder will open, click Next.

34 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 53: Bootable Media Builder

4. For Recovery ONLY, select: Create the media without specifying a license key and
click Next.

Figure 54: Create media without license key

a. (Optional) Select: I will specify the key(s) manually to determine which functionality
to enable for the created media.

i. Copy and Paste the License Keys OR Import keys from file…

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 35
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

Figure 55: Create media with license key

NOTE

Without the license keys, you can create media only for recovery.
The licenses are not automatically obtained from the management server,
you need to specify them manually. The bootable media does not revoke the
already assigned licenses from the machines.

5. In the bootable media type window, select: Default (Linux-based media).

6. Select Windows-like representation (Examples: C:, D:, \\server\share.) and click

Next.

36 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 56: Select Boot Representation

7. The kernel parameters information displays. Leave the field blank and click Next.

Figure 57: Add Kernel Parameters

8. In the components window, select Acronis Backup (64-bit) option and click Next.

Figure 58: Select Backup Options

9. The Review the options… settings menu will appear.

10. Select Remote logon settings.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 37
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

11. Select the checkbox for Enable remote logon.

12. Enter a Username and Password for remote login to the system using the recovery
media.

NOTE

These credentials are independent of Microsoft® Active Directory® and are

required to connect remotely to the recovery agent when a machine is booted
from the recovery media. These credentials should be documented in a
secure manner.

Figure 59: Specify Credentials for Login

13. Select Network settings.

14. Select each entry under the Network interface card drop-down list (NICx:) and
complete the following:

a. Clear all fields for each Network Interface Card (NIC), including uncheck the
Configure the settings automatically box.

38 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 60: Clear Network Settings for each NIC

15. Click Next.

16. In the media output window: Select ISO image and click Next.

Figure 61: Select Media Output

17. Navigate to the folder path you wish to store the .ISO file.

18. Select the Directory Name the .ISO displays in the File name: field, then enter the
name of the bootable media file name at the end.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 39
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

19. Click Next.

Figure 62: Select Media Location

20. Confirm that the information displayed is accurate in the Review window, and begin
the media create process.

Figure 63: Review Media Settings

21. Click Proceed.

40 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 64: Completion of Bootable Media

6.1.13 Create Bootable CD-ROM from the WinPE .ISO file (for RAID1 HMI ONLY)

NOTE

The WinPE .iso uses Windows-based drivers which are requested from the
respective hardware vendor and embedded into WinPE-based media
manually. Please use the WinPE .iso file when performing a recovery of an
HMI with a RAID configuration. Contact support to get a new Windows Based
Bootable Media (WinPE) .iso if needed.

1. Copy the .ISO file to a system with a CD/DVD drive. If the .ISO has already been
created, the file will be located on \\DR1\D$\Acronis Bootable Media

2. Insert a blank CD in your CD drive.

3. Right-click the WINPE-x64-Recovery-Media.iso file.

4. Select Burn disc image.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 41
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

Figure 65: Create Bootable Media from ISO

6.1.14 Create Bootable CD-ROM from the Acronis-Boot-Media .ISO file

1. Copy the .ISO file to a system with a CD/DVD drive. If the .ISO has already been
created, the file will be located on \\DR1\D$\Acronis Bootable Media

2. Insert a blank CD in your CD drive.

3. Right-click the Acronis-Boot-Media.iso file.

4. Select Burn disc image.

Figure 66: Create Bootable Media from ISO

6.1.15 Complete System Recovery

The Acronis Backup software allows for complete recovery in the event of a system failure.
In instances where full system recovery is required, it may be necessary to use the Acronis
bootable recovery media to recover a system.

NOTE

If you are recovering a virtual machine, first attach the DVD drive to the virtual
machine. If necessary, the instructions are included in the following section
“Configure Virtual Systems for Recovery Boot”.

NOTE

If you are recovering a physical machine it may be necessary to access the

system BIOS and adjust the boot order so the system will boot off the
recovery media.

1. Boot from the Acronis Rescue Media (Acronis-Boot-Media CD/DVD) on the system
you are attempting to recover.

2. Select Acronis Backup.

42 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 67: Recovery Media

3. Select Configure network.

Figure 68: Recovery Configure Network

4. Select eth0.

NOTE

In most cases, the HMI standard connects the eth1 adapter to the PDH, so
use the eth1 adapter to connect over the PDH to the server. Non-standard
configurations may need to try other interfaces (such as eth0 or eth2) to find
an Ethernet adapter connected to the PDH

5. Enter the IP address. Configure the NIC for a known unused IP address
(192.168.201.199 in this example).

6. Enter the Subnet mask (24 bit).

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 43
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

7. Enter the DNS Servers (101, 102).

8. Click OK.

Figure 69: Configure Network for Recovery

Caution

You must use an IP address that is not in use on the network. Once you click OK,
there is a delay of approximately 15 seconds. While waiting, do not click OK again
as that will likely carry over to another screen. In this case, you will have clicked
Turn off, and the computer will shut down.

9. Upon completion, the Acronis Bootable Agent dialog box redisplays. Leave it
displayed, click Manage this machine locally.

Figure 70: Launch Recovery Console

44 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

10. Click Recover.

Figure 71: Recovery Startup

11. Click Select data...

Figure 72: Data Selection

12. Complete the Data to Recover Selection dialog box.

13. Enter the Data path of the backup location (example: \\DR1\Backups\CA1), and press
Enter.

Figure 73: Browse for Data Path for Recovery

14. Enter the User name and Password credentials of a Domain Admin or Acronis Admin
account.

15. Click OK.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 45
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

Figure 74: Specify Credentials for Recovery

16. Select the Archive View tab, then select the backup to be recovered.

NOTE:

If the recovery archive selected is older than 30 days, you may be required
to login using a local account after the restore to rejoin it to the domain due
to Domain Trust relationship issues.

Figure 75: Select Archive to Restore

17. Select the type of recovery: For an operating system (OS) only recovery: select
MBRs, System Reserved and NTFS (C:) for restore.

46 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 76: Select Disk Options for Restore

a. For a full restore including system and data drives: Select MBRs and Basic.
Ensure all volumes are selected.

b. For a data-only restore: Select only the data volume desired for restore, then click
OK.

18. Acronis will attempt to select the disks to recover the system to, it may be necessary
to assign disks. Review the Recover data dialog box and verify the Disks are assigned
to the recovery activity. Click OK.

Figure 77: Restoration Parameters Review

19. The application creates and runs a recovery task.

20. Select the Progress tab to review the recovery progress.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 47
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

Figure 78: Restoration Progress

21. When complete, select the History tab to review details of the recovery.

Figure 79: Restoration History

22. Click Close to return to the Acronis menu.

23. Close the Remote Connection window and close the Acronis Backup & Recovery
Console.

NOTE

When recovering a physical machine, remove the physical recovery media

from the CD/DVD drive. Power off the restored computer and then power on.
The system will now boot to the recovered image.

6.1.16 Configure Virtual Systems for Recovery Boot

The following steps will configure the virtual machine to boot from the Acronis bootable media
ISO file:

1. Navigate to VMware ESXi and select Storage, Datastore Browser.

48 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

a. Verify that the Acronis-Boot-Media.iso file has been uploaded to the ESXi Data
Store. If the .iso is not present on the ESXi data store, upload the file using the data
store browser.

b. Close the Datastore Browser.

2. In the ESXi Virtual Machine list, select the VM for recovery.

a. Right-click the VM and select Edit Settings.

Figure 80: Edit Settings for VM Recovery Boot

b. Expand the CD/DVD drive menu option.

c. From the drop-down select: Datastore ISO File.

Figure 81: Datastore ISO File

d. Click Browse… next to the CD/DVD Media to select the Bootable Image.

e. Select the Acronis-Boot-Media.iso file from the data store.

Figure 82: Browse Media

f. Select the VM Options button in the Edit Settings window.

g. Configure the VM to boot to the System BIOS during the next boot operation.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 49
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

i. Expand Boot Options and select the checkbox for: The next time the virtual
machine boots, force entry into the BIOS setup screen.

Figure 83: Force BIOS Setup

h. Click Save to exit Edit Settings window.

3. Power on the virtual system.

4. Access the Boot menu in the BIOS, it may be necessary to modify the boot order
using the “+/-” keys to set the CD/DVD drive to the top of the boot menu.

Figure 84: VM Boot Order

5. Once the boot order is modified, navigate to the Exit tab and Exit Saving Changes or
(F10).

50 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 85: VM BIOS Save Settings

6. The Virtual Machine will now boot from the attached .iso image.

7. At the completion of the recovery activity, access the VMware virtual machine bios,
and return the system Hard Drive to the top of the boot order.

NOTE

When recovering a virtual machine, detach the DVD drive from the virtual
machine before rebooting the system.

6.1.17 Export Backups from Nexus OTArmor

Backups are stored in a repository on the DR1 server. Baker Hughes commends that
customers periodically create a backup of this directory to store in a separate location for
disaster recovery operations. In the event of a total system loss, the backup media would be
used to restore the Nexus OTArmor to operation. Due to the backup plan utilized by the
Nexus OTArmor, multiple files may be required to restore a system to operation, therefore
copying of individual backup files is not recommended. There are two recommended methods
to obtain a backup of the repository for offsite storage:

a. Export Backup Directory: This option copies the complete “D:\Backups” directory on
DR1. This option is the most complete, however requires the largest amount of space
on the portable media used to store the backup. Dependent on the number of HMIs
on the system this option may not be possible. This option also would obtain a backup
of all network device configurations stored by Kiwi CatTools®.

b. Export Individual Backups: This option copies a single backup, or backup archive,
to the removable media for storage. This option is used to ensure that all files
necessary are included in the repository used by the Acronis software. In addition,
individual network device configuration files must be copied to the backup media. This
option is recommended when a full directory backup is not able to be performed due
to size limitations.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 51
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

6.1.18 Export Complete Backup Directory

1. Log into the DR1 server using and account with administrator privilege.

2. Open a Windows File Explorer window and navigate to the “D:\” directory.

3. Right-click on the “Backups” folder and select Copy.

Figure 86: Backups Directory

4. Open the Directory for the Backup Portable Media and Paste the directory onto the
media.

6.1.19 Export Individual Backups

CAUTION

The instructions in this section are provided to export the backup of a single host.
The instructions must be repeated for each system desired to be exported for long
term retention.

1. To Export Individual Backups from the Data drive on DR1, complete the following:

2. On the DR1 Server, navigate to the File Explorer and open: Data (D:)/Backups.

a. The Backup folder contains Full, Incremental and Differential backups for each
machine running Acronis Backup.

i. Click Name at the top of the directory to organize the folders by Machine
name.

52 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 87: DR1 Backups Folder

3. The Backup folder names are associated with the Agent type and assigned Backup
Plan.

a. Example: CA1.HMI.local_Backup is associated with the CA1 Backup Plan and

uses the CA1.HMI.local agent (meaning the Acronis Agent is installed locally on the
machine).

4. Select a machine folder, right-click and select Copy.

5. Open the Directory for the Backup Portable Media and Paste the directory onto the
media

1. To Export Individual Backups from the Acronis Management Console, complete the
following:

2. Launch the Acronis Backup (Secured connection) application and SIGN IN.

3. From the navigation menu, select Backups and //dr1/Backups/ under Locations.

Figure 88: Backups

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 53
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

4. Sort by Type, Name, Size or Last Change and select a machine.

NOTE

Based on the Acronis Backup configuration, the Disk and Virtual Machine
backup types are defined as the following:
The Disk backup file is specific to machines with a local Acronis Agent. The
naming convention consists of the FQDN including the Backup Plan Name
(e.g. DC1.HMI.local _Backup – created by DC1 Backup Plan)
The Virtual Machine backup file is specific to machines using the
DR1.HMI.local Agent. The naming convention consists of the “Server
Name_Backup” (e.g. vCenter Server_Backup – created by the vCenter
Server Backup Plan).

5. After selecting a machine backup, in the right panel, click Show backups.

Figure 89: Select Machine Backup

6. From the list, click on an Individual Backup to expand the details.

7. Verify the backup details and select the Settings icon (top right) and click Export.

54 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 90: Select Individual Machine Backups

8. In the Export window, specify the Agent (DR1.HMI.local).

Figure 91: Export Individual Machine Backups

9. Select the Destination.

a. //dr1/Backups/, enter the domain username/password.

b. To select a different location, click Add location, enter the domain

username/password.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 55
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

Figure 92: Backup Export Storage Location

Figure 93: Specify Credentials

NOTE

If an Error appears stating “Resource List is Empty”, change the agent to

the machine specific (FQDN).

10. Click START.

11. The Activity details window will appear, verify the Export was successful (“Status:
Succeeded”).

56 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 94: Backup Export Status

12. Once complete, the necessary archive files will be created in the destination directory.

Figure 95: Completed Backup Export

13. Repeat this activity for each Machine backup to be exported.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 57
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

7.0 VMWARE ESXI CONFIGURATION BACKUP AND RESTORE PROCEDURE

1. Backup up of the Nexus OTArmor Servers is accomplished using the ESXi command
line interface. This configuration backup can be used to do a disaster recovery restore
of the ESXi configuration. This is not a Full backup but rather a configuration backup,
a restore using the Hewlett Packard Enterprise ISO is required to be ran first, followed
by restoring the configuration backup created by using the steps in this document.

7.1.1 Create VMware ESXi Backup Folder on DR1 Virtual Machine

NOTE

This folder will be used to store the ESXi Configuration created in the
procedure.

1. Log into the DR1 Server using domain administrator credentials.

2. Open File Explorer and navigate to D:\Backups.

3. Create a new folder called “ESXi Configuration” by selecting the “Home” tab
and “New Folder”.

Figure 96: Create ESXi Configuration Folder

4. Navigate to the new folder called “ESXi Configuration”.

a. In the “ESXi Configuration” folder, create a new folder called “VH1” by

selecting the Home tab and New Folder.

b. If necessary, repeat steps to create a folder for VH2 and VH3.

Figure 97: ESXi Virtual Host Folder Structure

7.1.2 Record the VMware ESXi Version

58 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

1. Log into the VMware ESXi Web Client.

a. On the “Navigator” select “Host”.

b. Record the ESXi version located on the Host screen.

Figure 98: ESXi Version

c. Record the VMware ESXi version.

i. VH1__________________________

d. Repeat for VH2 and VH3 (if necessary).

i. VH2__________________________

ii. VH3__________________________

7.1.3 Creating the VMware ESXi Configuration Backup

1. Log into the DR1 Server using domain administrator credentials.

a. Launch the “PuTTY Configuration” tool using the shortcut on the desktop of DR1.

NOTE

You may need to enable SSH on the host using the VMware Web client by
navigating to Host -> Manage | Services and locate the TSM and TSM-SSH
services. Right-click each service and select Start. Once both services are
started you can connect with PuTTY.

b. Log into the VMware ESXi host:

i. In the “Host Name (or IP address)” field enter the IP address of VH1.

ii. Verify that “SSH” is selected.

iii. Click “Open”.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 59
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

Figure 99: PuTTY Configuration

2. Enter the command below to synchronize the configuration changed with persistent:
storage:

vim-cmd hostsvc/firmware/sycn_config

3. To back up the configuration data for an ESXi host run the following command:

vim-cmd hostsvc/firmware/backup

FIGURE 100: HOST COMMANDS

NOTE

The command above should output a URL in which a web browser may be
used to download the configuration backup file. Below is an example of the
output. Notice that the URL doesn’t contain the IP address to the ESXi host.
This information must be added. The URL is only valid for about 10 minutes
and the backup file is removed after this time.

4. Using the URL generated from the backup command, type the URL into a browser
windows and press enter.

NOTE

60 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

The “*” will need to be replaced with the ESXi server’s IP address.
“http://*/downloads/5248e27f-34f0-ab9f-3bf5-baf79c48abff/configBundle-
vh1.tgz” will be changed to:
“http://xxx.xxx.xxx.xxx/downloads/5248e27f-34f0-ab9f-3bf5-
baf79c48abff/configBundle-vh1.tgz” where “xxx.xxx.xxx.xxx” is the IP
address of VH1.

5. Copy the backup file from the downloaded location to the correct folder at
“\\DR1\backups\ESXi Configuration\VH1”.

6. Repeat for VH2 and VH3 if necessary.

7.1.4 Restoring the VMware ESXi Configuration Backup

NOTE

When restoring configuration data, the build number of the host must match
the build number of the host on backup. Before performing the steps below,
you will need to obtain the correct ESXi ISO file, and any additional offline
bundle updates to return the base host to the same build as the backup.
Contact Baker Hughes Technical Support with the build number to obtain the
correct files. When performing a full restore you will need to override the UUID
checking built in to the restore command by adding the number 1 to the
command (see below example in step number 5 .3).

1. Using PuTTY, put the ESXi Host into “Maintenance Mode” by running the following
command:

vim-cmd hostsvc/maintenance_mode_enter

2. Copy the backup configuration file to a datastore location using the “Data Store
browser”.

a. In the VMware ESXi Web UI navigate to “Storage -> System Drives” and click the
“Datastore Browser” link at the top of the page.

i. Select the “ISO” folder and click the “Upload” button at the top of the
Datastore Browser Window.

ii. Locate the backup file you wish to restore and upload it to the datastore.

iii. Allow this upload to finish before proceeding to the next step.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 61
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

3. Using PuTTY, restore the backup log into the ESXi Host using the root account and
password.

a. Issue the command below to begin the restore:

vim-cmd hostsvc/firmware/restore_config 1 “/vmfs/volumes/System

Drives/ISO/configBundle.tgz”

4. In this case, the configuration backup file was copied to the /vmfs/volumes/System
Drives/ISO directory.

NOTE

Executing this command will initiate an automatic reboot of the host after
command completion.

5. After the reboot you may need to exit “Maintenance Mode”.

6. Log into the VMware ESXi Web Client.

a. On the “Navigator” select “Host”.

i. Right-click the host and select “Exit Maintenance Mode” option.

b. Power On the virtual machines and verify functionality.

62 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

8.0 KIWI CATTOOLS PROCEDURES

8.1.1 Add Device to Kiwi CatTools

1. Login to DR1 using an account with Administrator privileges.

2. Launch the CatTools application from the computer desktop.

3. From the CatTools console, click Add in the Devices window.

4. Complete the information for the UTM device.

5. From the Device info tab, complete the information for the device.

a. For Baker Hughes Cisco Devices, use the Cisco.Switch.IOS.

b. For Baker Hughes Fortinet Devices, use the Fortinet.FortiOS (General).

Figure 101: Device Information

6. For Connect via* select : Direct Connect.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 63
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

7. Complete the remaining fields with information relevant to the device and connection
method.

8. From the Passwords tab, enter the Login Name/Password and SSH
Username/Password.

9. Click OK.

Figure 102: Passwords tab

8.1.2 Create Network Device Backup Task

1. Use the Activity Wizard to configure the backup of the network switch running the
configuration.

2. From the Options Menu, select Activity Wizard.

64 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 103: Activity Wizard

3. From the Activity Wizard, enter a Name for the Task, enter a description and click
Next.

Figure 104: Add Activity

4. From the drop-down list select when to run the backup (for example, At Midnight),
select all days, and click Next.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 65
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

Figure 105: Drop-down list

5. Select the Select All Devices check box and click Next.

6. Clear the check boxes for the following:

a. Text Summary diff report

b. Only notify by e -mail if configs have changed

c. Attach reports to e-mail

66 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 106: Activity Options

7. Click Next.

8. When the confirmation message displays, click Finish.

NOTE

Refer to CatTools online help for assistance with additional configuration and
other key features such as comparison reports, command line activities, and
status monitoring.

8.1.3 Perform Network Device Backup with Kiwi CatTools

1. Login to DR1 using an account with Administrator privileges.

2. Launch the CatTools application from the computer desktop.

3. Locate the Activities window and select Backup Switches.

Figure 107: CatTools Activities Window

4. Click Run Now.

5. The Info Log at the bottom of the screen will display the results of the backups.

a. If any failures occur, they will be noted in this window.

Figure 108: CatTools Info Log Window

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 67
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

8.1.4 Perform Cisco Switch Recovery with Kiwi CatTools

CAUTION

Performing recovery activities on a switch may interrupt all communication

traveling through the switch. Interruption of communication of network equipment
may inhibit the ability to monitor or control equipment on the network. Restore
activities should be carefully planned and fully understood prior to executing this
activity.

1. Login to DR1 using an account with administrator privileges.

2. Locate the appropriate backup for the switch to be recovered and place it in the
D:\Backups\Switches\Restore directory.

Figure 109: Configuration Restore Directory

3. Launch the CatTools application from the computer desktop.

4. In the Activities window, click the Add task button.

Figure 110: CatTools Activities Window

5. Type: Device.TFTP.Upload Config, enter the name of the switch to be restored.

68 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 111: CatTools Activity Window

6. Select the Time tab, click radio button: Reoccurring and select Never.

Figure 112: CatTools Scheduled Task Window

7. On the Devices Tab, select the Device to be recovered.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 69
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

Figure 113: CatTools Device Selection Window

8. On the E-Mail tab, uncheck all options.

Figure 114: CatTools E-Mail Window

9. Select the Options tab, enter the IP Address of DR1.

a. Update the TFTP Filename with the name of the file to be used to recover the
system.

b. Click OK when complete.

Figure 115: CatTools Options Window

10. The new task will appear in the activities panel.

70 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

Figure 116: CatTools Activities Window

11. Select the new task and click Run Now to execute.

NOTE

It may be necessary to update or temporarily disable the system firewall to

allow the Cisco switch device TFTP access to the DR1 server.

8.1.5 Update Kiwi CatTools Passwords

This procedure is used when the NetworkAgent password is updated on the domain.

1. Login to DR1 using an account with administrator privileges.

2. Launch the CatTools application from the computer desktop.

3. Select the first device in the list, right-click on the device and select Edit.

Figure 117: CatTools Devices Window

4. In the Device Information window, select the Passwords tab.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 71
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

Figure 118: CatTools Device Information Window

5. As necessary update the Enable Password and SSH Password with the new
password.

6. Select OK to save the changes.

8.1.6 Export Configuration Files

1. To export configuration files for network devices backed up by the Kiwi CatTools
application, browse to the D:\Backups\Switches\Configs.

Figure 119: CatTools Backup Archive

72 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

2. Copy the backup files desired from this directory to the removable media for long term
retention.

9.0 INSTALL MONTHLY PATCH UPDATES

These procedures describe how to install Nexus OTArmor monthly patch updates from the DVD:
Monthly patch DVDs are provided by your GE service representative. Executing the update disk
on DR1 copies the latest updates for the NIDS and PuTTY.

1. Log onto a system with web access to the ESXi console using administrator
credentials.

2. Place the DVD in the Virtual Host Server (VH1) DVD reader.

NOTE

For HA systems, it may be necessary to insert the CD into a different virtual

host server based on the hosted location of the PM1 server.

3. Log on to the ESXi web client using administrator credentials. Enter the Username
and Password and click Login (User names and passwords are provided by the site
domain administrator).

Figure 120: ESXi Management Page

4. If a Security Warning dialog box displays, click Ignore.

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 73
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

5. Select the DR1 Server. Right-click on the server and select Edit Settings.

Figure 121: vSphere® Client

6. Attach the DVD to the DR1 server, scroll down to the CD/DVD Drive section.

7. Select CD/DVD drive 1, Connect to Host Device. Check the Connect at Power on
checkbox.

Figure 122: Mount DVD on PM1

NOTE

If the physical CD drive is not able to be connected to DR1 server, verify that
the CD drive is not connected to any other hosts on the system. VMware only
permits a CD drive to be connected to a single virtual machine at a time.

74 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

8. Open a remote desktop to the DR1 server and log on with an HMI domain user account
that has Administrator rights.

9. Open Microsoft Windows® Explorer for DR1 server.

10. Select the DVD RW Drive.

Figure 123: Copy Updates Batch File

11. Right-click the Copy Updates Windows® batch file and select Run as
Administrator. The batch file opens a Command Window and starts copying files.

Figure 124: Copy Updates Batch File

Figure 125: Running Copy Updates Batch File

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 75
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

12. Once the batch file is complete, disconnect the DVD drive from DR1.

13. Return to the ESXi management page, select DR1 Server. Right-click on the server
and select Edit Settings.

Figure 126: vSphere® Client

14. Scroll down to the CD/DVD Drive section. Uncheck the Connect checkbox.

Figure 127: Disconnect DVD

NOTE

Failure to disconnect the CD/DVD drive from the PM1 server will cause the
CD/DVD drive to be unable to connect to other systems.

15. Remove the DVD from the drive after it has been disconnected.

16. To view NIDS updates, browse to D:\NIDS01.

76 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

10.0 APPENDIX A – DEFAULT BACKUP CONFIGURATIONS

The following table defines the default backup strategy for all computers in Nexus OTArmor.
It provides a reference for system administrators to manage the timing of backups.

NOTE

The default backup configuration is defined in the Acronis Backup Plans. A

standard site configuration will include a Backup Plan for each Virtual
Machine, a DR1 Backup Plan, and a backup plan for any additional
Workstation.
The Backup Plans are configured to distribute the backup start time within a
4-hour window. Staggering the backup start times will ensure each backup
completes successfully without overutilizing the machine resources.

Computer What to back Start Time Weekly/Monthly Keep Exclusions

up
Daily=7,
Weekly=4, D:\Backups
DR1 Disk1, Disk2 01:00 AM Sunday Monthly=1 year *.tib, *.tibx
Daily=7,
Weekly=4,
DC1 Disk1 01:15 AM Sunday Monthly=1 year *.tib, *.tibx
Daily=7,
Weekly=4, D:\Backups
DC2 Disk1 01:30 AM Sunday Monthly=1 year *.tib, *.tibx
Daily=7,
Weekly=4,
CA1 Disk1 01:45 AM Sunday Monthly=1 year *.tib, *.tibx
Daily=7,
Weekly=4,
PM1 Disk1 02:00 AM Sunday Monthly=1 year *.tib, *.tibx
Daily=7,
Weekly=4,
LM1 Disk1, Disk2 02:15 AM Sunday Monthly=1 year *.tib, *.tibx
Daily=7,
Weekly=4,
SP1 Disk1 02:30 AM Sunday Monthly=1 year *.tib, *.tibx
Table 2: Default Backup Configuration

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 77
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

Default Address Information

In some cases, this information is available through the network topology drawing provided
as part of site setup. Otherwise, contact your Baker Hughes representative for assistance
with default IP address information for each device. The binder shipped with the system also
includes additional address information.

Default Credentials

At the time of system handover, the site must review the list of local accounts that are
configured in the system and compare with the expected local accounts. For user accounts
that are not on the expected list, the site must verify whether the account is valid.

NOTE

It is the responsibility of the site to change these default account credentials

upon system handover. It is also the responsibility of the site to maintain and
hold confidential new and existing account credentials and make them
available to authorized personnel only. Contact your Baker Hughes
representative for assistance with default account and password information.

NOTE

Software installed on the computer may create a local/domain account for its
use. The site must determine whether a local account not on this list is
legitimate.

78 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
 Nexus OTArmor™ – Backup & Recovery Maintenance NCM10053
Guide

11.0 CONTACT INFORMATION

For more information or questions concerning this manual please contact:

Nexus Controls, a Baker Hughes business

Digital Solutions

1800 Nelson Road

Longmont, CO, USA 80501

http://www.bakerhughesds.com

For technical support please contact:

Nexus Controls Global Technical Support:

North America: 1-888-943-2272; 1-540-387-8726

Latin America (Brazil): +55-11-3958-0098

Europe (France): +33-2-72-249901

Asia (Singapore): +65-6622-1623

China: +86 400-818-1099

Africa/India/Middle East (U.A.E.): +971-2-699-7119

Email: controlsconnect@bakerhughes.com

For spare/replacement parts please contact:

Nexus Controls Aftermarket Parts Sales Support

Email: controlparts@bakerhughes.com

Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed in 79
whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00
NCM10053 Nexus OTArmor™ – Backup & Recovery Maintenance Guide

80 Copyright 2020 Baker Hughes Company. All Rights Reserved. This material may not be copied or distributed
in whole or in part, without prior permission of the copyright owner.

PRO/NCM10053/000/00