Stay organized with collectionsSave and categorize content based on your preferences.
LiveClone Backup and DR Workflows are used when the production data contains
sensitive information. It lets you define a LiveClone from production data
and then scrub the LiveClone's data before mounting it.
A LiveClone Backup and DR Workflow can do the following:
Generate a new, or updates an existing, LiveClone from a selected
production image that is marked as sensitive.
Define a schedule for updating the LiveClone with the latest
production data. Scheduled Backup and DR Workflows can also be run on demand.
Employ scripts to scrub the LiveClone of sensitive data.
Mark the scrubbed virtual application as non-sensitive.
Either mount the scrubbed data—standard mount—to a specific
host, or mount the scrubbed image as a virtual application—application
aware mount—to a specific host.
Use these instructions to create a LiveClone Backup and DR Workflow:
From the Backup and DR Service management console, clickApp Manager, then select a managed application or consistency group.
Right-click and selectManage Workflowsto open the Backup and DR WorkflowsApplication Dashboard. ClickAdd Workflowand add basic configuration
details likeNameandApplianceof where you want the Backup and DR Workflow to
run.
SelectLiveClonefor theWorkflow Type.
SelectScheduledorOn Demandfor theSchedule Type. For
scheduled Backup and DR Workflows, define a schedule to run the Backup and DR Workflow. The time
selector uses a 24-hour clock. Scheduled Backup and DR Workflows can also be run on
demand.
Complete theLiveClone Settingssection.
Select the latest snapshot image from the policy that produces the image to
scrub for theSource Image. If you selectedOn Demand,
the user running the Backup and DR Workflow selects the source snapshot image
at run time.
Enter an identifiable name in theLiveClone Labelfield.
Select the diskpool to hold the LiveClone—as well as the differences
from subsequent mounts of the LiveClone—forDiskpool.
Be sure enough storage space is allocated to accommodate the LiveClone.
Optionally, enable theMount for Pre-Processingoption. This makes sure
that the LiveClone is mounted to a host and one or more scripts
run on the mounted image to scrub or mask sensitive data.
Enable theMark data as non-sensitiveoption if your selected
application contains sensitive data and you want it be scrubbed and
made non-sensitive. This allows non-sensitive data users to access
the Backup and DR Workflow and provision their work environments.
Select the host on which to mount the LiveClone from theHostdrop-down.
Optionally, enable theMap to All Cluster Nodesoption.
You can see this option when one or more target hosts are a
cluster node or a cluster host.
You can see the following options only when one or more target hosts are
VMware VMs:
ForMount Mode, select one of the following:
NFS: By default NFS mode is selected. Backup and DR presents
the data as a VMDK in an NFS datastore mounted from the
backup/recovery appliance.
vRDM (virtual raw device mapping): VMware snapshots treat
mounted vRDMs as independent and are not included in snapshots.
Because of this, by default, Backup and DR does not include vRDMs
when protecting a mounted VM. Backup and DR does provide an option
where you can mark vRDMs as dependent. Although rarely used, when
this option is enabled, vRDMs are included in VMware snapshots.
Backup templates capture vRDMs marked as dependent. Note that
this mount mode needs the ESXi host to have an iSCSI initiator,
which by default is not enabled in Google Cloud VMware Engine.
pRDM (physical raw device mapping): For file-level restore
operations, select this mode. Note that this mount mode needs the
ESXi host to have an iSCSI initiator, which by default is not
enabled in Google Cloud VMware Engine.
FromMap to ESX Hosts, select one of the following options. You can
see theMap to ESX Hostsoption only when you have selected vRDM or
pRDM in theMount Modefield.
One: SelectOneif you want to map only to the ESX host
running the target VM.
Two: SelectTwoif you want to map to two ESX hosts, but not
all ESX hosts in the cluster. When selectingTwo, you can
choose the second host or chooseAuto-select.
Auto-select chooses the second host based on logical pairs of ESX
hosts and always selects the partner ESX host for the one
running the target VM.
All: SelectAllif you want to map to all the ESX hosts
present in the cluster. Note that selectingAllmay increase
the duration for the job.
Enter the location for the mounted drives in theMount Locationfield.
For example,M:, D:\testdb1.
Select an option to mask sensitive data in theScripts Optionssection.
Select theOptim Privacy Data Maskingoption if you are using
Optim Data Privacy software for data masking. TheMasking Setdrop-down is populated automatically, so you can specify the
corresponding timeout in minutes inMasking Set.
Select theCustom Scriptsoption if you are using Backup and DR
custom scripts. Specify at least one pre- or post-processing script
and the corresponding timeout in seconds. For more information,
seeCustom scripts.
Click theCreate New Virtual Applicationoption to perform an
application aware mount. This option is available only for IBM Db2,
MySQL, Oracle PostgreSQL, SAP ASE, and SQL Server applications.
ClickNext.
Specify the mount details for the LiveClone image.
ForMount Label, provide a name to make it identifiable.
In the Hosts section, select one host on which you will perform the
AppAware mount. You cannot perform an AppAware mount on multiple hosts.
In Mapping Options section, forMount Location, enter the location
for the mounted drives—for example,M:,D:\testdb1, or/oracledata/db1data.
In theScripts Optionssection, add any pre- and post-scripts
that are needed to use.
(Databases only) EnableCreate New Virtual Applicationif you want to
perform an application aware mount (a virtual database).
This option is available only for IBM Db2, MySQL, Oracle PostgreSQL,
SAP ASE, and SQL server applications. The displayed settings vary according
to database type. If you don't select theCreate New Virtual Applicationoption, you can instead get a
file system mount to your target hosts.
Optionally, enableRemove Mounted Image After Doneif you employ one
or more scripts to process the mounted data as a one-time task after
which the mounted data is no longer needed, such as extraction of data
into a data warehouse. Once the script finishes its task this option
unmounts and deletes the virtual application.
ClickAddto create the Backup and DR Workflow.
The VMware administrator's guide
This page is one in a series of pages specific to protecting and recovering
VMware VMs with Backup and DR.
You can find additional information at:
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[[["\u003cp\u003eLiveClone Backup and DR Workflows create and update LiveClones from sensitive production data, allowing for data scrubbing before mounting.\u003c/p\u003e\n"],["\u003cp\u003eThese workflows can be scheduled or run on demand to update LiveClones with the latest production data, using scripts to remove sensitive information.\u003c/p\u003e\n"],["\u003cp\u003eScrubbed data can be marked as non-sensitive, enabling wider access, and can be mounted either as standard data or as a virtual application to a specified host.\u003c/p\u003e\n"],["\u003cp\u003eLiveClones can be mounted to a host for pre-processing, allowing for data scrubbing or masking through scripts, and offer various mount modes like NFS, vRDM, and pRDM for VMware environments.\u003c/p\u003e\n"],["\u003cp\u003eManagement console users with Workflow Refresh rights, without run or manage rights, can only refresh existing virtual applications, not modify the Backup and DR workflow.\u003c/p\u003e\n"]]],[],null,["# Create LiveClone Backup and DR Workflows\n\nLiveClone Backup and DR Workflows are used when the production data contains\nsensitive information. It lets you define a LiveClone from production data\nand then scrub the LiveClone's data before mounting it.\n\nA LiveClone Backup and DR Workflow can do the following:\n\n- Generate a new, or updates an existing, LiveClone from a selected production image that is marked as sensitive.\n- Define a schedule for updating the LiveClone with the latest production data. Scheduled Backup and DR Workflows can also be run on demand.\n- Employ scripts to scrub the LiveClone of sensitive data.\n- Mark the scrubbed virtual application as non-sensitive.\n- Either mount the scrubbed data---standard mount---to a specific\n host, or mount the scrubbed image as a virtual application---application\n aware mount---to a specific host.\n\n | **Note:** Management console users, when assigned with **Workflow Refresh** rights but not with Backup and DR Workflow run or Backup and DR Workflow manage rights, can only refresh the existing virtual application and cannot run, edit, delete, or disable the Backup and DR Workflow.\n\nUse these instructions to create a LiveClone Backup and DR Workflow:\n\n1. From the Backup and DR Service management console, click **App Manager**, then select a managed application or consistency group.\n2. Right-click and select **Manage Workflows** to open the Backup and DR Workflows **Application Dashboard** . Click **Add Workflow** and add basic configuration details like **Name** and **Appliance** of where you want the Backup and DR Workflow to run.\n3. Select **LiveClone** for the **Workflow Type**.\n4. Select **Scheduled** or **On Demand** for the **Schedule Type**. For scheduled Backup and DR Workflows, define a schedule to run the Backup and DR Workflow. The time selector uses a 24-hour clock. Scheduled Backup and DR Workflows can also be run on demand.\n5. Complete the **LiveClone Settings** section.\n\n - Select the latest snapshot image from the policy that produces the image to scrub for the **Source Image** . If you selected **On Demand**, the user running the Backup and DR Workflow selects the source snapshot image at run time.\n\n | **Note:** You can also select the latest StreamSnap image from a specific snapshot policy.\n - Enter an identifiable name in the **LiveClone Label** field.\n - Select the diskpool to hold the LiveClone---as well as the differences from subsequent mounts of the LiveClone---for **Diskpool**. Be sure enough storage space is allocated to accommodate the LiveClone.\n6. Optionally, enable the **Mount for Pre-Processing** option. This makes sure\n that the LiveClone is mounted to a host and one or more scripts\n run on the mounted image to scrub or mask sensitive data.\n\n 1. Enable the **Mark data as non-sensitive** option if your selected application contains sensitive data and you want it be scrubbed and made non-sensitive. This allows non-sensitive data users to access the Backup and DR Workflow and provision their work environments.\n 2. Select the host on which to mount the LiveClone from the **Host** drop-down.\n 3. Optionally, enable the **Map to All Cluster Nodes** option.\n You can see this option when one or more target hosts are a\n cluster node or a cluster host.\n\n 4. You can see the following options only when one or more target hosts are\n VMware VMs:\n\n 1. For **Mount Mode**, select one of the following:\n\n - **NFS**: By default NFS mode is selected. Backup and DR presents the data as a VMDK in an NFS datastore mounted from the backup/recovery appliance.\n - **vRDM (virtual raw device mapping)**: VMware snapshots treat mounted vRDMs as independent and are not included in snapshots. Because of this, by default, Backup and DR does not include vRDMs when protecting a mounted VM. Backup and DR does provide an option where you can mark vRDMs as dependent. Although rarely used, when this option is enabled, vRDMs are included in VMware snapshots. Backup templates capture vRDMs marked as dependent. Note that this mount mode needs the ESXi host to have an iSCSI initiator, which by default is not enabled in Google Cloud VMware Engine.\n - **pRDM (physical raw device mapping)**: For file-level restore operations, select this mode. Note that this mount mode needs the ESXi host to have an iSCSI initiator, which by default is not enabled in Google Cloud VMware Engine.\n 2. From **Map to ESX Hosts** , select one of the following options. You can\n see the **Map to ESX Hosts** option only when you have selected vRDM or\n pRDM in the **Mount Mode** field.\n\n - **One** : Select **One** if you want to map only to the ESX host running the target VM.\n - **Two** : Select **Two** if you want to map to two ESX hosts, but not all ESX hosts in the cluster. When selecting **Two** , you can choose the second host or choose **Auto-select**. Auto-select chooses the second host based on logical pairs of ESX hosts and always selects the partner ESX host for the one running the target VM.\n - **All** : Select **All** if you want to map to all the ESX hosts present in the cluster. Note that selecting **All** may increase the duration for the job.\n 5. Enter the location for the mounted drives in the **Mount Location** field.\n For example, `M:, D:\\testdb1`.\n\n 6. Select an option to mask sensitive data in the **Scripts Options** section.\n\n - Select the **Optim Privacy Data Masking** option if you are using Optim Data Privacy software for data masking. The **Masking Set** drop-down is populated automatically, so you can specify the corresponding timeout in minutes in **Masking Set**.\n - Select the **Custom Scripts** option if you are using Backup and DR custom scripts. Specify at least one pre- or post-processing script and the corresponding timeout in seconds. For more information, see [Custom scripts](/backup-disaster-recovery/docs/access-data/custom-scripts).\n 7. Click the **Create New Virtual Application** option to perform an\n application aware mount. This option is available only for IBM Db2,\n MySQL, Oracle PostgreSQL, SAP ASE, and SQL Server applications.\n\n | **Note:** You may need to create a new database (perform an AppAware mount) if the scripts to scrub sensitive data can only be run when the database is powered up and running.\n7. Click **Next**.\n\n8. Specify the mount details for the LiveClone image.\n\n - For **Mount Label**, provide a name to make it identifiable.\n - In the Hosts section, select one host on which you will perform the AppAware mount. You cannot perform an AppAware mount on multiple hosts.\n - In Mapping Options section, for **Mount Location** , enter the location for the mounted drives---for example, `M:`, `D:\\testdb1`, or `/oracledata/db1data`.\n - In the **Scripts Options** section, add any pre- and post-scripts\n that are needed to use.\n\n - (Databases only) Enable **Create New Virtual Application** if you want to\n perform an application aware mount (a virtual database).\n This option is available only for IBM Db2, MySQL, Oracle PostgreSQL,\n SAP ASE, and SQL server applications. The displayed settings vary according\n to database type. If you don't select the\n **Create New Virtual Application** option, you can instead get a\n file system mount to your target hosts.\n\n - Optionally, enable **Remove Mounted Image After Done** if you employ one\n or more scripts to process the mounted data as a one-time task after\n which the mounted data is no longer needed, such as extraction of data\n into a data warehouse. Once the script finishes its task this option\n unmounts and deletes the virtual application.\n\n9. Click **Add** to create the Backup and DR Workflow.\n\nThe VMware administrator's guide\n--------------------------------\n\nThis page is one in a series of pages specific to protecting and recovering\nVMware VMs with Backup and DR.\nYou can find additional information at:\n\n- [Backup and DR for VMware VMs](/backup-disaster-recovery/docs/concepts/vmware-intro)\n- [Configure VMware Engine for Backup and DR protection](/backup-disaster-recovery/docs/configuration/prepare-vmware)\n- [Add vCenter and ESX server hosts to the management console](/backup-disaster-recovery/docs/configuration/add-vcenter-host)\n- [Discover and protect VMware VMs](/backup-disaster-recovery/docs/configuration/discover-and-protect-vms)\n- [Apply a backup template to protect a VM](/backup-disaster-recovery/docs/create-plan/apply-backup-template-to-manage-a-VM)\n- [Configure Application settings for VMware VMs](/backup-disaster-recovery/docs/backup/configure-application-settings-for-vmware-vm)\n- [Restore a VMware VM](/backup-disaster-recovery/docs/restore-data/restore-vm)\n- [Mount a VMware image](/backup-disaster-recovery/docs/access-data/mount-vmware-image)\n- [Clone an image of a VMware VM](/backup-disaster-recovery/docs/access-data/clone-image-of-a-vm)\n- [Create LiveClone workflows](/backup-disaster-recovery/docs/access-data/create-liveclone-workflows)\n- [Move VM management between two backup/recovery appliances](/backup-disaster-recovery/docs/configuration/supported-vmware)"]]