All Products
Search
Document Center

Security Center:Precheck a database

Last Updated:Mar 12, 2024

After you create an anti-ransomware policy for a database, you must precheck the connectivity between not only the database and Object Storage Service (OSS) but also the database and the control network. If the precheck succeeds, you can back up the data in the database. Anti-ransomware for databases is available only for MySQL databases, Oracle databases, and SQL Server databases that are deployed on Elastic Compute Service (ECS) instances. This topic describes how to precheck database instances.

Background information

If you want to back up data in MySQL databases, Oracle databases, or SQL Server databases that are deployed on ECS instances, you need to pay attention to the database versions and backup features that are supported by each version. For more information, see Overview (ECS-hosted databases).

Procedure

  1. Log on to the Security Center console. In the top navigation bar, select the region of the asset that you want to manage. You can select China or Outside China.In the left-side navigation pane, choose Protection Configuration > Host Protection > Anti-ransomware.
  2. In the anti-ransomware policy list of the Database extortion virus protection tab, find the anti-ransomware policy that you create and click Pre-check in the Actions column.
  3. In the Pre-check dialog box, click Starting.
    • Check items for a MySQL database
      Check itemDescription
      OSS connectivityChecks whether the MySQL database is connected to the VPC Access from ECS (Internal Network) endpoint of an OSS bucket. The instance and the bucket must reside in the same region. If the connectivity check fails, you cannot back up or restore data in the database.
      Control network connectivityChecks whether the MySQL database is connected to the control network. If the connectivity check fails, you cannot back up or restore data in the database.
      Versions of databases that support full backupChecks whether the version of the MySQL database supports full backup.
      Note MySQL 8.0 does not support incremental backup.
      Binary log checkChecks whether the binary log configuration of the MySQL database is valid. If the check fails, you cannot back up or restore data in the database.
    • Check items for an Oracle database
      Check itemDescription
      OSS connectivityChecks whether the Oracle database instance is connected to the VPC Access from ECS (Internal Network) endpoint of an OSS bucket. The instance and the bucket must reside in the same region. If the connectivity check fails, you cannot back up or restore data in the database.
      Control network connectivityChecks whether the Oracle database instance is connected to the control network. If the connectivity check fails, you cannot back up or restore data in the database.
      Status of the Oracle database instanceChecks whether the Oracle database instance runs as expected. If the instance does not run as expected, you cannot back up or restore data in the database.
      Oracle database statusChecks whether all Oracle databases in the Oracle database instance run as expected. If a database in the instance does not run as expected, you cannot back up or restore data in the database.
      Archive modeChecks whether the archive mode can be enabled for the Oracle database instance. If the check fails, you cannot back up or restore data in the database. For more information about how to enable the archive mode, see Enable archive mode for an Oracle database.
    • Check items for a SQL Server database
      Check itemDescription
      OSS connectivityChecks whether the SQL Server database is connected to the VPC Access from ECS (Internal Network) endpoint of an OSS bucket. The database and the bucket must reside in the same region. If the connectivity check fails, you cannot back up or restore data in the database.
      Control network connectivityChecks whether the SQL Server database is connected to the control network. If the connectivity check fails, you cannot back up or restore data in the database.
      Recovery modelChecks the recovery model of the SQL database. If the check fails, you cannot perform incremental backups or log backups in the database.
      Important
      • Due to the limits of SQL Server, databases that fail the check support only the SIMPLE recovery model. You cannot perform log backups on these databases.
      • You can perform only full backups on master databases. If you perform an incremental backup or log backup for a master database, the system automatically implements full backup instead.
      • For more information about how to change the recovery model, see SQL Server documentation.
      SQL Server database statusChecks whether the SQL Server database runs as expected. If the database does not run as expected, you cannot back up or restore data in the database.

    The pre-check takes about 1 minute.

    If an item fails the precheck, follow the on-screen instructions to check whether the failure affects the backup and restoration operations in the database. If the failure affects the backup and restoration operations, we recommend that you handle the issue at the earliest opportunity based on this topic.