vSAN Data Protection - General - vSAN Snapshots Immutability Check

Products

• VMware vSAN

Issue/Introduction

This article introduces the new vSAN Data Protection Health check 'vSAN Snapshots Immutability Check' and provides details on why this might report error state and how to resolve the error state.

 

Environment

vSAN 9.1 

Resolution

Q: What does the 'vSAN snapshots Immutability Check' check do? 

This health check verifies that immutability mode is enabled for all protection groups in the vSAN cyber recovery cluster - immutability ensures that all snapshots in the group are immutable and can be used for reliable recovery.

• GREEN: All protection group(s) in the target cluster have immutability mode enabled.
• RED: Any protection group(s) in the target cluster have immutability mode disabled.

 

Q: What does it mean when it is in an error state?

An error state indicates that immutability mode is disabled for one or more protection groups.

If the immutability mode of any protection group is disabled:

• Snapshots in those protection groups are not immutable.
• Data integrity cannot be guaranteed, resulting in incomplete or unreliable recovery results.

 

Q: How does one troubleshoot and fix the error state?

1. Review the health table to identify protection groups with immutability mode disabled.
2. Edit each affected protection group to enable immutability mode.