Enabling Storage Safe Mode Against Ransomware
Currently, Safe Mode only be activated through NGX CLI over SSH. Using safemode command, you can enable and disable safe mode also list safe mode enabled volumes.
1. Connect NGX CLI
brs@ngx:~$ ssh ngxcli@192.168.1.202 ngxcli@192.168.1.202's password: [NGX Storage CLI] ngx>
2. List Safe Mode Volumes
The ‘list’ command facilitates the identification of volumes for which safe modes have been enabled, along with a display of the remaining duration until automatic unlocking. Should an expedited unlocking be necessary prior to the designated timeframe, the procedure entails acquiring a passkey. This passkey can be obtained by initiating a support ticket with NGX Storage, utilizing your designated secret key (as exemplified by the reference “6a5bb525” in the provided example).
ngx> safemode list
VOLUME TYPE SAFEMODE KEY TO UNLCK(days)
ngxpool:labvm5 volume on 6a5bb525 365
ngx>
3. Activate Safe Mode on a volume
To enable safe mode on a volume, use the “safemode on” command followed by the volume name. Performing a double-tab after executing the command will furnish a list of all accessible volumes suitable for safe mode activation. Once activated, safe mode cannot be deactivated during the lock period without the acquisition of a passkey from NGX Storage Support.
Upon executing the command, proceed by confirming the operation. Then, input a value representing a period of time between 1 and 1095 days (approximately 3 years). This designated duration will serve as the lock period for the respective volume.
ngx> safemode on ngxpool: ngxpool:officelab ngxpool:prox1_backup
For example, to activate it on ngxpool:officelab:
ngx> safemode on ngxpool:officelab After activating safemode, it is not possible to delete volumes, their associated snapshots, and pool. Would you like to proceed? (Yes/Y/No) yes Enter a day between 1 and 1095(~3 years). After that time you will be able to unlock that volume without a passkey. 365 Safemode is activated on volume ngxpool:officelab.
How to disable safe mode on a volume
It is only possible to deactivate safe mode on a volume before the specified lock time using a passkey from NGX Storage Support. Open a ticket with your volume key and request for a passkey. With delivered passkey use safemode off command followed by volume name.
First, let’s list volumes with ‘safemode list’ command.
ngx> safemode list
VOLUME TYPE SAFEMODE KEY TO UNLCK(days)
ngxpool:labvm5 volume on 6a5bb525 365
ngxpool:officelab volume on f4ffe6cc 365
The initial step involves the submission of a support ticket to NGX Storage Support, accompanied by your corresponding key (illustrated as “f4ffe6cc” in our example) as well as your Service Tag. Upon successful retrieval of the passkey from NGX Storage, you may proceed to perform the deactivation.
ngx> safemode off ngxpool:officelab
Type the key to unlock safemode: aarhv7623d
Safemode is deactivated.
ngx> safemode list
VOLUME TYPE SAFEMODE KEY TO UNLCK(days)
ngxpool:labvm5 volume on 6a5bb525 365
ngx>
The presented scenario demonstrates the successful deactivation of safe mode for the ‘ngxpool:officelab’ volume. The corresponding passkey, “aarhv7623d,” was acquired through the NGX Storage Support ticket process.
FAQ Section
Q1: How can Safe Mode be activated on NGX CLI over SSH?
A: To activate Safe Mode, connect to NGX CLI using SSH. Use the `safemode on` command followed by the volume name. For example:
ngx> safemode on ngxpool:officelab
Q2: How do I list volumes with Safe Mode enabled and their unlock status?
A: Utilize the `safemode list` command on NGX CLI. It will display a list of volumes with Safe Mode enabled, along with the corresponding keys and the remaining days until automatic unlocking.
Q3: Is it possible to activate Safe Mode on multiple volumes simultaneously?
A: Yes, after executing the `safemode on` command, double-tap the “Tab” key to view a list of accessible volumes suitable for Safe Mode activation. Choose the desired volume from the list.
Q4: Can I deactivate Safe Mode before the specified lock time?
A: Safe Mode can only be deactivated before the specified lock time by obtaining a passkey from NGX Storage Support. Open a support ticket, providing your volume key, and request a passkey. Once received, use the `safemode off` command followed by the volume name, and enter the passkey when prompted.
Q5: What happens after activating Safe Mode on a volume?
A: After activation, it is not possible to delete volumes, their associated snapshots, or the pool. Ensure you are aware of the implications before proceeding.
Q6: How do I disable Safe Mode on a volume with a passkey?
A: Deactivate Safe Mode using the `safemode off` command followed by the volume name. When prompted, enter the passkey obtained from NGX Storage Support.
Q7: What is the lock period for a volume in Safe Mode?
A: When activating Safe Mode, input a value between 1 and 1095 days (approximately 3 years). This duration serves as the lock period for the respective volume.
Q8: Can I see the list of volumes with Safe Mode enabled after deactivation?
A: Yes, you can use the `safemode list` command to view the updated list of volumes with their Safe Mode status, even after deactivation.
Q9: What happens if I attempt to deactivate Safe Mode without the passkey before the specified lock time?
A: Deactivating Safe Mode without the passkey before the specified lock time is not possible. Ensure you have the correct passkey obtained through the NGX Storage Support ticket process.
COPYRIGHT
© 2023 NGX Teknoloji A.Ş. (NGX Storage). All rights reserved. Printed in the Turkey. Specifications subject to change without notice. No part of this document covered by copyright may be reproduced in any form or by any means-graphic, electronic, or mechanical, including photocopying, recording, taping, or storage in an electronic retrieval system-without prior written permission of NGX Storage. Software derived from copyrighted NGX Storage material is subject to the following license and disclaimer:
THIS SOFTWARE IS PROVIDED BY NGX Storage “AS IS” AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WHICH ARE HEREBY DISCLAIMED. IN NO EVENT SHALL NGX Storage BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
NGX Storage reserves the right to change any products described herein at any time, and without notice. NGX Storage assumes no responsibility or liability arising from the use of products described herein, except as expressly agreed to in writing by NGX Storage. The use or purchase of this product does not convey a license under any patent rights, trademark rights, or any other intellectual property rights of NGX Storage.
TRADEMARK
NGX Storage and the NGX Storage logo are trademarks of NGX TEKNOLOJI A.Ş. Other company and product names may be trademarks of their respective owners.