Enabling Backup

Scenarios

So far, no tools can defend against all ransomware. You can enable backup for servers, so that their data can be restored in a timely manner in the case of a ransomware attack.

Ransomware backup can be performed in two modes: scheduled backup and immediate backup upon ransomware detection. You can create a custom scheduled backup policy to periodically back up servers. If HSS detects a suspected ransomware attack, it will immediately trigger a backup to ensure service data is stored as much as possible.

This section describes how to enable ransomware backup.

Constraints

Only servers support backup to defend against ransomware.

(Optional) Step 1: Purchasing a Backup Vault

You can purchase a backup vault on the HSS console by referring to this section, or on the CBR console by referring to Creating a Cloud Server Backup.

1. Log in to the management console.
2. In the upper left corner of the page, select a region, click , and choose Security & Compliance > Host Security Service.
3. Choose Server Protection > Ransomware Prevention.
4. Click the Protected Servers tab.
5. Toggle on ransomware backup. In the dialog box that is displayed, click Next.
6. In the displayed dialog box, set the vault parameters.

   Table 1 Parameters for purchasing backup capacity

   Parameter	Description
   Billing Mode	Select Yearly/Monthly or On-demand as required. Yearly/Monthly: You are billed based on the purchase period specified in the order. On-demand: You pay for the duration you use the resources. Prices are calculated by hour, and no minimum fee is required.
   Region	Region of the backup vault you want to purchase
   Capacity	Select the size of the backup vault as required.
   Required Duration	Select the required duration if you selected Yearly/Monthly for Billing Mode.
   Price	Yearly/Monthly: You are billed based on the storage capacity and available duration you purchased. On-demand: You are billed based on the storage capacity you used.

7. Click OK.
   • If Yearly/Monthly is selected:
     1. The order confirmation page is displayed.
     2. Confirm the order and click Pay.
   • If On-demand is selected:
     The capacity is successfully purchased.

     

     The backup vault will be charged after the ransomware protection is enabled. Ensure that your account balance is sufficient.

Step 2: Enabling Ransomware Backup

1. Log in to the management console.
2. In the upper left corner of the page, select a region, click , and choose Security & Compliance > Host Security Service.
3. Choose Server Protection > Ransomware Prevention.
4. Click the Protected Servers tab.
5. Select a server and click Enable Backup.
6. In the Enable Backup dialog box, select a vault.

   A vault that meets the following conditions can be bound:

   • The vault is in Available or Locked state.
   • The backup policy is in Enabled state.
   • The vault has backup capacity available.
   • The vault is bound to fewer than 256 servers.

7. Click OK.

   If the binding status of the repository on the target server is Bound, the ransomware backup is enabled.