[VMware Live Cyber Recovery] - Ransomware Recovery - Manual CBC CWP Appliance Upgrade to Version 1.3.1 for expected Ransomware Recovery Plan Use Cases

Products

• VMware Live Recovery

Issue/Introduction

In earlier versions of VMware Live Cyber Recovery (VLCR, 9.0.0.11 build version), an existing Ransomware Recovery Plan may appear deactivated. When a VLCR administrator navigates to the "Hosts and Clusters" view, select the CyberRecovery-CWP-Appliance summary, and review the advanced parameters for the "cb" value, it displays version 1.2.1 instead of the expected 1.3.1 build version required for successful Ransomware Tests/Failovers.

Environment

VMware Live Cyber Recovery (VLCR) Build Version - 9.0.0.11

Cause

When running VMware Live Cyber Recovery 9.0.0.11, the Ransomware Carbon Black Cloud CWP appliance does not upgrade automatically and the previous version 1.2.1 is running instead -- the "Resolution" section includes environment steps for end-to-end remediation,

Resolution

 

1. Upgrade the VLCR Instance to version 9.0.1.0.

2. Delete the existing Carbon Black appliance from the recovery SDDC by querying the Recovery vCenter for the VM named CyberRecovery-CWP-Appliance.

3. Right-click the VM, navigate to Power, and select Power Off.

4. Right-click the VM again and select Delete from Disk.

5. Wait 5 to 10 minutes for the VLCR Orchestrator to automatically deploy a new version 1.3.1 Carbon Black appliance.

6. Once the new CyberRecovery-CWP-Appliance is deployed, retry the ransomware recovery workflows.