About Cloud-Based Ransomware Recovery for VMware Cloud Foundation

The Cloud-Based Ransomware Recovery for VMware Cloud Foundation validated solution provides detailed design, implementation, configuration, and operation guidance on protecting business workloads running on a VMware Cloud Foundation instance against a ransomware attack by connecting the instance to VMware Cloud on AWS through the use of the VMware Cloud Disaster Recovery service.

A VMware validated solution is a well-architected and validated implementation, built and tested by VMware and VMware partners to help customers deliver common business use cases. VMware validated solutions are operational, cost-effective, reliable, and secure. Each solution contains a detailed design, implementation, and operational guidance.

Automation for This Design in VMware Cloud Foundation

VMware Cloud Foundation™ SDDC Manager^® automates the implementation tasks for some design decisions. For the rest of the design decisions, as noted in the design implications, you must perform the implementation steps manually.

To provide a fast and efficient path to automating the Cloud-Based Ransomware Recovery for VMware Cloud Foundation implementation, this document provides Microsoft PowerShell cmdlets as code-based alternatives to completing certain procedures in each SDDC component's user interface. You can directly reuse the PowerShell commands by replacing the provided sample values with values from your VMware Cloud Foundation Planning and Preparation Workbook.

Intended Audience

The Cloud-Based Ransomware Recovery for VMware Cloud Foundation documentation is intended for cloud architects and administrators who are familiar with and want to use VMware software and a cloud-based ransomware recovery solution with VMware Cloud Foundation.

Support Matrix

The Cloud-Based Ransomware Recovery for VMware Cloud Foundation validated solution is compatible with certain versions of the VMware products that are used for implementing the solution.

Table 1. Software Components in Cloud-Based Ransomware Recovery for VMware Cloud Foundation
VMware Cloud Foundation Version	Product Group	Component Versions
5.1.0	Products part of VMware Cloud Foundation	See VMware Cloud Foundation 5.1.0 Release Notes
	Solution-added products	VMware Cloud on AWS
	Solution-added products	VMware Cloud Disaster Recovery
5.0	Products part of VMware Cloud Foundation	See VMware Cloud Foundation 5.0 Release Notes.
	Solution-added products	VMware Cloud on AWS
	Solution-added products	VMware Cloud Disaster Recovery
4.5.2	Products part of VMware Cloud Foundation	See VMware Cloud Foundation 4.5.2 Release Notes.
	Solution-added products	VMware Cloud on AWS
	Solution-added products	VMware Cloud Disaster Recovery
4.5.1	Products part of VMware Cloud Foundation	See VMware Cloud Foundation 4.5.1 Release Notes.
	Solution-added products	VMware Cloud on AWS
	Solution-added products	VMware Cloud Disaster Recovery
4.5.0	Products part of VMware Cloud Foundation	See VMware Cloud Foundation 4.5.0 Release Notes.
	Solution-added products	VMware Cloud on AWS
	Solution-added products	VMware Cloud Disaster Recovery

Before You Apply This Guidance

To design and implement the Cloud-Based Ransomware Recovery for VMware Cloud Foundation validated solution, your environment must have a certain configuration.

Table 2. Supported VMware Cloud Foundation Deployment
Workload Domain	Deployment Details
Management domain	Automated deployment using VMware Cloud Builder™. See the following VMware Cloud Foundation Documentation: For information on designing the management domain, see VMware Cloud Foundation Design Guide. For information on deploying the management domain, see Getting Started with VMware Cloud Foundation and VMware Cloud Foundation Deployment Guide. For information on operating the management domain, see VMware Cloud Foundation Administration Guide and VMware Cloud Foundation Operations Guide.
One or more virtual infrastructure workload domains	Automated deployment by using SDDC Manager See the following VMware Cloud Foundation Documentation: For information on designing a VI workload domain, see VMware Cloud Foundation Design Guide. For information on deploying the VI workload domains, see Getting Started with VMware Cloud Foundation and VMware Cloud Foundation Administration Guide. For information on operating the VI Workload domain, see VMware Cloud Foundation Operations Guide.

Overview of Cloud-Based Ransomware Recovery for VMware Cloud Foundation

By applying the Cloud-Based Ransomware for VMware Cloud Foundation validated solution, you connect a VMware Cloud Foundation instance to the VMware Cloud Disaster Recovery service to protect business workloads against a ransomware attack.

Table 3. Implementation Overview of Cloud-Based Ransomware Recovery for VMware Cloud Foundation
Stage	Steps
1. Plan and prepare the VMware Cloud Foundation environment.	Work with the technology team of your organization on configuring the physical servers, network, and storage in the data center. Collect the environment details and write them down in the VMware Cloud Foundation Planning and Preparation Workbook.
2. Prepare the VMware Cloud Foundation instance.	Create virtual machine and template folder.
3. Configure VMware Cloud on AWS	Deploy the recovery SDDC. Configure vCenter Server access.
4. Configure the VMware Cloud Disaster Recovery service.	Activate a VMware Cloud on AWS region for VMware Cloud Disaster Recovery. Deploy a cloud file system. Create a protected site. Deploy DRaaS Connector appliances. Create and configure a custom role in vCenter Server. Register VI workload domain vCenter Server. Add a recovery SDDC.

Update History

The Cloud-Based Ransomware Recovery for VMware Cloud Foundation validated solution is updated when necessary.


Revision	Description
7 NOV 2023	Initial release.