What’s new in Cloud Manager 3.8

Contributors netapp-bcammett Download PDF of this topic

RSS Subscribe

Cloud Manager typically introduces a new release every month to bring you new features, enhancements, and bug fixes.

Cloud Manager 3.8.6 (6 July 2020)

Support for iSCSI volumes

Cloud Manager now enables you to create iSCSI volumes for Cloud Volumes ONTAP and on-prem ONTAP clusters directly from the user interface.

When you create an iSCSI volume, Cloud Manager automatically creates a LUN for you. We’ve made it simple by creating just one LUN per volume, so there’s no management involved. After you create the volume, use the IQN to connect to the LUN from your hosts.

You can create additional LUNs from System Manager or the CLI.

Support for the All tiering policy

You can now choose the All tiering policy when you create or modify a volume for Cloud Volumes ONTAP. The All tiering policy immediately tiers all data (not including metadata) to object storage. Learn more about data tiering.

Cloud Manager transition to SaaS (22 June 2020)

We’re introducing a software-as-a-service experience for Cloud Manager. This new experience makes it easier for you to use Cloud Manager and enables us to provide additional features to manage your hybrid cloud infrastructure. Learn more.

Cloud Manager 3.8.5 (31 May 2020)

New subscription required in the Azure Marketplace

A new subscription is available in the Azure Marketplace. This one-time subscription is required to deploy Cloud Volumes ONTAP 9.7 PAYGO (except for your 30-day free trial system). The subscription also enables us to offer add-on features for Cloud Volumes ONTAP PAYGO and BYOL. You’ll be charged from this subscription for every Cloud Volumes ONTAP PAYGO system that you create and each add-on feature that you enable.

Cloud Manager will prompt you to subscribe to this offering when you deploy a new Cloud Volumes ONTAP system (9.7 P1 or later).

screenshot azure marketplace subscription

Backup to Cloud enhancements

The following enhancements are now available for Backup to Cloud.

  • In Azure, you can now create a new resource group or select an existing resource group instead of having Cloud Manager create one for you. The resource group can’t be changed after you enable Backup to Cloud.

  • In AWS, you can now back up Cloud Volumes ONTAP instances that reside on a different AWS account than your Cloud Manager AWS account.

  • Additional options are now available when selecting the backup schedule for volumes. In addition to daily, weekly, and monthly backup options, you can now select one of the system-defined policies that provide combination policies such as 30 daily, 13 weekly, and 12 monthly backups.

  • After deleting all backups for a volume, you can now start creating backups again for that volume. This was a known limitation in the previous release.

Cloud Compliance enhancements

The following enhancements are available for Cloud Compliance.

  • You can now scan S3 buckets that are in different AWS accounts than the Cloud Compliance instance. You just need to create a role on that new account so that the existing Cloud Compliance instance can connect to those buckets. Learn more.

    If you configured Cloud Compliance before release 3.8.5, you will need to modify the existing IAM role for the Cloud Compliance instance to use this functionality.

  • You can now filter the contents of the investigation page to display only the results you want to see. Filters include working environment, category, private data, file type, last modified date, and whether the S3 object’s permissions are open to public access.

    screenshot compliance investigation filtered

  • You can now activate and deactivate Cloud Compliance on a working environment directly from the Cloud Compliance tab.

Cloud Manager 3.8.4 update (10 May 2020)

We released an enhancement to Cloud Manager 3.8.4.

Cloud Insights integration

By leveraging NetApp’s Cloud Insights service, Cloud Manager gives you insights into the health and performance of your Cloud Volumes ONTAP instances and helps you troubleshoot and optimize the performance of your cloud storage environment. Learn more.

Cloud Manager 3.8.4 (3 May 2020)

Cloud Manager 3.8.4 includes the following improvement.

Backup to Cloud enhancements

The following enhancements are now available for Backup to Cloud (previously called Backup to S3 for AWS):

  • Backing up to Azure Blob storage

    Backup to Cloud is now available for Cloud Volumes ONTAP in Azure. Backup to Cloud provides backup and restore capabilities for protection, and long-term archive of your cloud data. Learn more.

  • Deleting backups

    You can now delete all backups for a specific volume directly from the Cloud Manager interface. Learn more.

Cloud Manager 3.8.3 (5 Apr 2020)

Cloud Tiering integration

NetApp’s Cloud Tiering service is now available from within Cloud Manager. Cloud Tiering enables you to tier data from an on-premises ONTAP cluster to lower-cost object storage in the cloud. This frees up high-performance storage space on the cluster for more workloads.

Data migration to Azure NetApp Files

You can now migrate NFS or SMB data to Azure NetApp Files directly from Cloud Manager. Data syncs are powered by NetApp’s Cloud Sync service.

Cloud Compliance enhancements

The following enhancements are now available for Cloud Compliance.

  • 30-day free trial for Amazon S3

    A 30-day free trial is now available to scan Amazon S3 data with Cloud Compliance. If you previously enabled Cloud Compliance on Amazon S3, your 30-day free trial is active starting today (5 Apr 2020).

    A subscription to the AWS Marketplace is required to continue scanning Amazon S3 after the free trial ends. Learn how to subscribe.

  • New personal data type

    Cloud Compliance can now find a new national identifier in files: Brazilian ID (CPF).

  • Support for additional metadata categories

    Cloud Compliance can now categorize your data into nine additional metadata categories. See the full list of supported metadata categories.

Backup to S3 enhancements

The following enhancements are now available for the Backup to S3 service.

  • S3 lifecycle policy for backups

    Backups start in the Standard storage class and transition to the Standard-Infrequent Access storage class after 30 days.

  • Deleting backups

    You can now delete backups using a Cloud Manager API. Learn more.

  • Block public access

    Cloud Manager now enables the Amazon S3 Block Public Access feature on the S3 bucket where backups are stored.

iSCSI volumes using APIs

The Cloud Manager APIs now enable you to create iSCSI volumes. View an example here.

Cloud Manager 3.8.2 (1 Mar 2020)

Amazon S3 working environments

Cloud Manager now automatically discovers information about the Amazon S3 buckets that reside in the AWS account where it’s installed. This enables you to easily see details about your S3 buckets, including the region, access level, storage class, and whether the bucket is used with Cloud Volumes ONTAP for backups or data tiering. And you can scan the S3 buckets with Cloud Compliance, as described below.

A screenshot that shows the details of an Amazon S3 working environment: the total number of buckets and total number of regions, the number of buckets with active services, and then a table that shows details about each S3 bucket.

Cloud Compliance enhancements

The following enhancements are now available for Cloud Compliance.

  • Support for Amazon S3

    Cloud Compliance can now scan your Amazon S3 buckets to identify the personal and sensitive data that resides in S3 object storage. Cloud Compliance can scan any bucket in the account, regardless if it was created for a NetApp solution.

  • Investigation page

    A new Investigation page is now available for each type of personal file, sensitive personal file, category, and file type. The page shows details about the affected files and enables you to sort by the files that include the most personal data, sensitive personal data, and names of data subjects. This page replaces the CSV report that was previously available.

    Here’s a sample:

    A screenshot of the investigation page.

  • PCI DSS Report

    A new Payment Card Industry Data Security Standard (PCI DSS) Report is now available. This report can help you identify the distribution of credit card information across your files. You can view how many files contain credit card information, whether the working environments are protected by encryption or ransomware protection, retention details, and more.

  • New sensitive personal data type

    Cloud Compliance can now find ICD-10-CM Medical Codes, which are used in the medical and health industry.

NFS version for volumes

You can now select the NFS version to enable on a volume when you create or edit a volume for Cloud Volumes ONTAP.

A screenshot that shows the volume details screen where you can enable NFSv3, NFSv4, or both.

Support for Azure US Gov regions

Cloud Volumes ONTAP HA pairs are now supported in Azure US Gov regions.

Cloud Manager 3.8.1 update (16 Feb 2020)

We released a few enhancements to Cloud Manager 3.8.1.

Backup to S3 enhancements

  • Backup copies are now stored in an S3 bucket that Cloud Manager creates in your AWS account, with one bucket per Cloud Volumes ONTAP working environment.

  • Backup to S3 is now supported in all AWS regions where Cloud Volumes ONTAP is supported.

  • You can set the backup schedule to daily, weekly, or monthly.

  • Cloud Manager no longer needs to set up private links to the Backup to S3 service.

Additional S3 permissions are required for these enhancements. The IAM role that provides Cloud Manager with permissions must include permissions from the latest Cloud Manager policy.

AWS updates

We’ve introduced support for new EC2 instances and a change in the number of supported data disks for Cloud Volumes ONTAP 9.6 and 9.7. Check out the changes in the Cloud Volumes ONTAP Release Notes.

Cloud Manager 3.8.1 (2 Feb 2020)

Cloud Compliance enhancements

The following enhancements are now available for Cloud Compliance.

  • Support for Azure NetApp Files

    We’re pleased to announce that Cloud Compliance can now scan Azure NetApp Files to identify personal and sensitive data that resides on volumes.

  • Scan status

    Cloud Compliance now shows you a scan status for each CIFS and NFS volume, including error messages that you can use to correct any issues.

    screenshot cloud compliance status

  • Filter dashboard by working environment

    You can now filter the contents of the Cloud Compliance dashboard to see compliance data for specific working environments.

    screenshot cloud compliance filter

  • New personal data type

    Cloud Compliance can now identify a California Driver’s License when scanning data.

  • Support for additional categories

    Three additional categories are supported: Application data, logs, and database and index files.

Enhancements to accounts and subscriptions

We’ve made it easier to select an AWS account or GCP project and an associated marketplace subscription for a pay-as-you-go Cloud Volumes ONTAP system. These enhancements help to ensure that you’re paying from the right account or project.

For example, when you create a system in AWS, click Edit Credentials if you don’t want to use the default account and subscription:

A screenshot of the Details & Credentials page in the working environment wizard that shows the Edit Credentials button.

From there, you can choose the account credentials that you want to use and the associated AWS marketplace subscription. You can even add a marketplace subscription, if you need to.

A screenshot of the Edit Account and Add Subscription dialog box. This dialog box enables you to choose a subscription and associate the credentials with a subscription.

And if you manage multiple AWS subscriptions, you can assign each one of them to different AWS credentials from the Credentials page in the settings:

A screenshot of the Credentials page where you can add a subscription to AWS credentials from the menu.

Timeline enhancements

The Timeline was enhanced to provide you with more information about the NetApp cloud services that you use.

  • The Timeline now shows actions for all Cloud Manager systems within the same Cloud Central account

  • You can now find information more easily by filtering, searching, and adding and removing columns

  • You can now download the timeline data in CSV format

  • In the future, the Timeline will show actions for each NetApp cloud service that you use (but you can filter the information down to a single service)

A screenshot of the Timeline that appears in Cloud Manager. The Timeline shows details about the actions that have taken place in Cloud Manager.

Cloud Manager 3.8 (8 Jan 2020)

HA enhancements in Azure

The following enhancements are now available for Cloud Volumes ONTAP HA pairs in Azure.

  • Override CIFS locks for Cloud Volumes ONTAP HA in Azure

    You can now enable a setting in Cloud Manager that prevents issues with Cloud Volumes ONTAP storage failover during Azure maintenance events. When you enable this setting, Cloud Volumes ONTAP vetoes CIFS locks and resets active CIFS sessions. Learn more.

  • HTTPS connection from Cloud Volumes ONTAP to storage accounts

    You can now enable an HTTPS connection from a Cloud Volumes ONTAP 9.7 HA pair to Azure storage accounts when creating a working environment. Note that enabling this option can impact write performance. You can’t change the setting after you create the working environment.

  • Support for Azure general-purpose v2 storage accounts

    The storage accounts that Cloud Manager creates for Cloud Volumes ONTAP 9.7 HA pairs are now general-purpose v2 storage accounts.

Data tiering enhancements in GCP

The following enhancements are available for Cloud Volumes ONTAP data tiering in GCP.

  • Google Cloud storage classes for data tiering

    You can now choose a storage class for data that Cloud Volumes ONTAP tiers to Google Cloud Storage:

  • Data tiering using a service account

    Starting with the 9.7 release, Cloud Manager now sets a service account on the Cloud Volumes ONTAP instance. This service account provides permissions for data tiering to a Google Cloud Storage bucket. This change provides more security and requires less setup. For step-by-step instructions when deploying a new system, see step 3 on this page.

    The following image shows the Working Environment wizard where you can select a storage class and service account:

    screenshot data tiering gcp

Cloud Manager requires the following GCP permissions for these enhancements, as shown in the latest Cloud Manager policy for GCP.

- storage.buckets.update
- compute.instances.setServiceAccount
- iam.serviceAccounts.getIamPolicy
- iam.serviceAccounts.list