Getting Started with Datto Endpoint Backup

Topic

This article describes system requirements for Datto Endpoint Backup.

Environment

  • Datto Endpoint Backup

Description

Overview

The Datto Endpoint Backup Agent lets you back up protected Windows desktop and server systems' volumes directly to the Datto Cloud without using a SIRIS, ALTO, or NAS appliance.

If the protected machine loses connectivity to the Internet or shuts down in the middle of a backup, Datto Essential's intelligent agent software will resume the backup where it left off when the system restarts or reconnects.

File restores, and Bare Metal Restore are available with Datto Endpoint Backup and can be created from any snapshot.

Organization access can be setup to allow your organization to perform self service file restores. See Creating an Organization User.

System requirements

OS
  • Windows 11 Desktop (all 64-bit versions)
  • Windows 10 Desktop (all 64-bit versions)
  • Windows Server 2012 R2
  • Windows Server 2016
  • Windows Server 2019
  • Windows Server 2022
  • Latest updates and service packs should be installed

NOTE  Windows 10/11 Enterprise multi-session is not compatible. If this is your Windows version, please consider Windows Backup for Microsoft Azure.
Hardware
  • Multi-volume backup is supported, there is no capacity limit to the volumes.
Memory requirements
  • At least 1 GB of free RAM on the production machine
Disk space requirements
  • Each protected volume must have 10% of the volume's total size available for the DattoCtrl or Datto.ctl file, The minimum size of this file will be 1GB.
    If 10% of the volume is more than 10 GB, the file's size will be 10 GB regardless of the size of the volume.
Network
  • Port 443 on the protected machine must be open outbound.
    • Additionally, port 993, 80, or 587 on the protected machine must be open outbound. Only one of these three ports is necessary; the agent will try all three when attempting to connect to the cloud storage node.
    • The agent will use a TLS-based proprietary protocol for communication over the first port that it can reach.
  • The installer will attempt to create an outbound firewall exception for outbound traffic on ports 443, 993, 80, and 587 for the agent's executable (%SYSTEMDRIVE%\Program Files\Datto\Datto Cloud Continuity\DattoCloudContinuity.exe).
  • Port 3262 must be open outbound for Bare Metal Restore functionality.
  • All protected machines must be able to resolve mothership.dtc.datto.com,agent-update.datto.comand dattolocal.net in the local DNS.
  • See Unified Backup networking and bandwidth requirements for detailed network requirements and WAN uplink considerations.
Anti-virus exceptions

Create exceptions for Datto Cloud Continuity Service and the DattoProvider service:

%SYSTEMDRIVE%\Program Files\Datto\Datto Cloud Continuity\DattoCloudContinuity.exe

%SYSTEMDRIVE%\Program Files\Datto\Datto Cloud Continuity\DattoProvider.exe

Allow the following file:

%SYSTEMROOT%\system32\Drivers\DattoCbt.sys

Other Requirements

  • The System PATH variable must have powershell included to allow pairing. See PowerShell isn't recognized as an internal or external command(external link) for more information
  • Windows PowerShell version 3 or higher must be installed on the protected machine.
  • Visual C++ runtime must be up-to-date and fully-installed. If Visual C++ 2017 runtime is not up to date or not installed properly, this could prevent an install.
  • If you see errors related to the C++ runtime, reinstall the latest Visual C++ update.
  • Before pairing, you should disable and remove all other backup software from the production machine. Depending on the software, you may need to completely uninstall it for backups to run correctly.
  • When uninstalling other backup software, use a high-level program that eliminates all traces of the incompatible software, including registry keys, DLLs, and stray folders. These components can cause conflicts.

Considerations

  • The Datto Endpoint Backup Agent can only back up hard drives that are physically attached to the protected machine. The Datto Endpoint Backup Agent cannot back up mapped drives.
  • Backing up external/removable drives is unsupported. See Volume Level Backup Control for Datto Endpoint Backup for more information.
  • Datto Endpoint Backup is not for installation or use on systems already protected by the Datto Windows Agent, Datto Backup for PCs, or other backup solutions. If your protected endpoint currently uses another backup solutions, do not switch to the Datto Essentials Agent.
  • For optimal performance you must reboot the endpoint following agent installation. If the machine is not rebooted, it will be unable to take incremental backups and will take a maximum of one backup per day.
  • The file restore option is not compatible with Microsoft One Drive.
  • The Datto Endpoint Backup Agent does not support 64-bit ARM-based processors (such as the Surface Pro X).
  • System compression, also known as "Compact OS", is a Windows feature that allows rarely modified files to be compressed using the XPRESS or LZX compression formats and is NOT supported.
  • GDPR Compliance Notice: During the agent registration process, you will have the option to select either the United States, Canada, Australia, Germany, or the United Kingdom to host your offsite data. Additional regional data centers may be available in future releases.
  • Datto Endpoint Backup does not currently support systems using REFS volumes.
  • Backup and virtualization of deduplicated volumes is untested and may produce inconsistent results, particularly with File Restores . Use an alternate restore method where the volume is mounted in Windows to avoid these scenarios.
  • Backup of User Profile Disks used by the Remote Desktop Service is unsupported. Remote Desktop Service (external link). These volumes should be excluded from backups.
  • If you are protecting any volumes on your machine using an anti-virus software that uses VSS to allow for rollback remediation or snapshotting in the event of a security / encryption breach (like SentinelOne, for example), this will need to disabled in order for the Windows agent to properly backup these volumes.
  • Storage Server operating systems are not supported at this time.

Versioning

For the latest version information, see Release Notes. You can check your protected machine's installed version from the agent tray icon. The latest release is always available at download.datto.com.

Installation

Download the Datto Endpoint Backup Agent from the Datto download page. To learn how to deploy, register, or uninstall the Datto Endpoint Backup Agent, see our Installing and Registering the Datto Endpoint Backup Agent article.

  • The agent software will install the Datto Endpoint Backup Service on the protected machine during this process.
  • Datto recommends reviewing the Encryption Compatibility With The Datto Solution Knowledge Base article when deploying the agent to encrypted machines.

NOTE  During the registration of Datto Endpoint Backup Agents, the agent is tied to an Organization account in the Datto Partner Portal. Removing the organization account will result in the deletion of any Datto Endpoint Backup Agent datasets linked to that organization.

Datto recommends running the following checks on the system you are protecting before installing the Datto Endpoint Backup Agent:

chkdsk

  • Run chkdsk to be sure that all RAIDs and individual disks report back as healthy. Perform necessary disk repairs before deploying any backup agent. Failure to do so may result in backing up corrupted systems and restoration failures.

Disk defragmentation

  • While Datto can perform backups that are running disk defragmentation, be aware that this rearranges data at a block level, and may result in larger backups.
  • Run disk defragmentation before you deploy the agent.
  • VSS-aware disk defragmentation programs may allow for smaller backups but are optional.

Windows updates

  • Download Windows updates, service packs, and any other Microsoft-provided updates. After installing these updates, reboot the server. When scheduling your deployment, remember that the 2nd Tuesday of every month is Microsoft's 'Patch Tuesday.'

Virus scan

  • Run a virus scan before you deploy the Datto backup solution to your production machine.

Event Viewer

  • Check the target's system and application logs to see if there are any VSS or hardware errors.
  • Resolve any errors before attempting to install the agent.

Previously installed backup software

  • Before installing the Datto Agent, you should disable and remove all other backup software from the production machine. Depending on the software, you may need to completely uninstall it for backups to run correctly.
  • When uninstalling other backup software, use a high-level program that eliminates all traces of the incompatible software, including registry keys, DLLs, and stray folders. These components can cause conflicts.

Group Policy

  • To avoid issues with installing the necessary certificates, ensure that the Windows Group Policy is not set to "Allow only Enterprise Administrators"

Can I back up my machine with both a SIRIS and the Datto Endpoint Backup Agent at the same time?

No. You can only use one type of backup solution at a time. Attempting to protect your machine with more than one kind of solution simultaneously can cause conflicts and backup failures.

What is the retention policy for my Datto Endpoint Backup offsite backups?

We currently offer 1-year Time-Based Retention (TBR). Under the time-based retention model, your Datto Endpoint Backup Agents will:

  • keep all intra-daily backups for seven days
  • after that, keep daily backups for the next week
  • after that, keep weekly backups for the next month
  • keep the remaining backups for one year

To learn more about retention, see our Understanding the Retention Process article. For further information about Time-Based Retention (TBR), including pricing details, contact your Datto Sales Executive.

Are RoundTrips available for Datto Endpoint Backup?

Unlike Datto on-prem products, RoundTrips and Reverse RoundTrips are not available for Datto Endpoint Backup.

Can I set a custom backup schedule for my Datto Endpoint Backup?

The Datto Endpoint Backup Backup Agent backs up your protected endpoint once every two hours. The schedule is not customizable.

Can I configure the Datto Endpoint Backup Agent to alert me when a backup has failed?

Yes, for a full list of configurable email alerts and information on configuring them, please refer to: Datto Endpoint Backup: Email Alert Settings

What type of network speeds do I need for Datto Endpoint Backup?

At least 1 Mbps (125 KBps) uplink per terabyte of protected data is reccomended. The initial full backup of your protected machine will generally be the largest and take the most time to upload. Differential merges can also take longer than standard incremental backups. Upload times will vary greatly depending on your network speed and the size of the data being transferred. See our Unified Backup networking and bandwidth requirements article for more details.

What retention options are available?

At launch, 1-year retention will be offered.

How are backups pruned?

The same method for pruning is used as other Datto Unified Backup products. Intra-daily -> dailies, dailies -> weeklies, weeklies -> monthlies, etc. See this article for more information on the pruning process.

Additional Resources

To learn more about the Datto Endpoint Backup installation on your protected system and how to interact with your cloud-based backups, see the following articles: