Datto Endpoint Backup Version 2 User Guide

Welcome to Datto Endpoint Backup Version 2! This guide is designed to help you get started quickly, understand the capabilities of the product, and make the most of its features for data protection. Datto Endpoint Backup Version 2 is a next-generation backup solution offering flexible configurations, seamless integrations, and scalability for businesses of all sizes.

This guide covers essential steps from setting up your organization to deploying agents and managing backups through policy-based configurations.

Overview

Datto Endpoint Backup Version 2 is built to address the needs of modern data protection, offering selective backups, differential restore, policy-driven management, and deeper integrations with popular IT tools. Whether you are managing thousands of endpoints for clients or maintaining your internal IT infrastructure, Datto Endpoint Backup Version 2 provides a flexible and scalable solution.

Key features include:

  • Flexible Backup Configurations: Choose what to back up, set custom schedules, and control costs.
  • Differential Restore: Quickly restore only the changed blocks, reducing recovery times.
  • Scalability: Manage backups for unlimited devices through centralized policy controls.
  • Integrations: Supports integration with PSA systems, IT documentation tools, and RMM platforms.
  • Cross-Platform Support: Available for Windows x64. MacOS, and Linux are coming soon.
  • End-to-End Encryption: Data is always encrypted in transit and at rest, with the option for customer-managed keys.

Step 1: Synchronize Your Organization (Optional but Recommended)

If you are already a UniView user and have synchronized your organizations, skip to "Create a Backup Policy."

New to UniView? Use our integration capabilities to synchronize your organization data from PSA tools or IT Glue, reducing manual setup!

Autotask Instructions

BMS Instructions

Connectwise Instructions

IT Glue Instructions

Organization synchronization (Org synch) speeds up onboarding,

NOTE   Syncing your organization speeds up onboarding, but you can manually create your organization(s) if you prefer.

Step 2: (If you skipped Org Sync) Manual Organization Setup.

  1. Navigate to the Organizations tab.
  2. Click Import.
  3. Select organizations to import.
  4. Click Next Step.
  5. Choose a group for your organization.
  6. Click Save.

 

Navigate to Policy Management

  1. Go to Endpoint Backup > Policy Management.

  2. Select + Policy and use the provided smart defaults or customize the policy according to your requirements.

Policy Configuration Options

Backup Schedule: Choose from business hours (default 8 AM-6 PM), continuous protection, or custom schedules.

Retention Settings: Choose between 90 days, 1 year, 7 years, or Infinite retention periods.

Throttling: Enable throttling to control network usage during business hours or configure custom schedules.

Data Selection: Use inclusion and exclusion settings to control what gets backed up (e.g., user profiles, application data, entire volumes).

Alerting Thresholds (Coming Soon): Override default alerts based on backup status, time since last successful backup, etc.

Option 1: Mass Deployment via RMM, GPO, or Intune

  1. Generate a deployment token in the Deployment Tokens section under Endpoint Backup> Deployment Tokens.

  2. Use the token in an MSI installation script to deploy agents at scale across your endpoints.

MSIExec Command Example

msiexec /i https://cf-dl.datto.com/dba/DattoBackupAgentInstaller-x64.msi REG_TOKEN=yourtoken ENCRYPTION_KEY=youroptionalkey /qn

Parameters Explained:

  • /i <MSI Path>: Installs the MSI package.
  • REG_TOKEN=yourtoken: Replace "yourtoken" with the deployment token provided.
  • ENCRYPTION_KEY=youroptionalkey: Optional parameter for customer managed encryption. If omitted, Datto-managed keys will be used.
  • /qn: Runs the installation silently with no user interface.

Option 2: Manual Pairing Using a Shortcode

1. Download the agent installer from the UniView portal.

2. After installation, pair the agent manually by entering the shortcode displayed in the UniView dashboard.

NOTE  The data center region is fixed once the agent is deployed. If you manage assets across multiple regions, create separate tokens for each region.

Data security is a priority in Datto Endpoint Backup Version 2:

• Default Encryption: All data is encrypted both in-flight and at rest using Datto managed keys.

• Customer-Managed Encryption: Optionally, specify an encryption key at the time of installation for self-managed keys. Remember, support cannot assist with lost keys, and data will be unrecoverable without the correct encryption key. Always store your encryption key securely. It is required for any restore operation.

Monitoring Backups

View the status of all protected assets in the Assets Section, with detailed information on backup schedules, recent activity, and health checks.

Initiating a Restore

  1. Use the Restore button from the asset's detail page.

  2. Choose between File Restore, Virtual Disk Export (coming soon), or Bare Metal Recovery (BMR) options.

  3. Select the desired recovery point and follow the prompts to complete the restore.

Differential Restore

Restore only the changed blocks of a file to dramatically reduce recovery time, especially for large files or data sets.

Datto Endpoint Backup Version 2 offers deep integrations with ITC tools to streamline workflows:

PSA Integration: Automatically create tickets for backup issues, with auto-closing when the problem is resolved.

RMM Automation: Deploy agents

IT Glue : Sync backup status with IT Glue Assets

Rapid Fire Tools: Automated documentation for evidence of compliance.

Backup Scheduling: Set up custom schedules based on asset type—servers may need continuous backups, while desktops can be backed up during off-peak hours.

Retention Management: Regularly review retention settings to ensure compliance with business policies while controlling storage costs.

Regular Testing: Periodically test restore procedures to ensure data can be recovered efficiently

1. How do I change the data center for a deployed agent?

Once deployed, the data center is locked. To change it, uninstall the agent and redeploy it with a new deployment token configured for the desired data center.

2. Can I manage agents across multiple organizations?

Yes, the Asset management dashboard allows cross-org management for MSPs handling multiple clients.

3. How do I recover encrypted backups when I set a custom encryption key?

You must provide the correct encryption key used during the backup process. Without it, data recovery is not possible.

Agent Deployment Issues: Ensure network firewalls allow communication with Datto Cloud and that the deployment token is correct.

Ensure no SSL certificate manipulation or firewall blocks exist.

What network traffic do I need to allow for backup and restore?

See: Endpoint Backup Version 2 Network requirements

Network Throttling Configuration: Check that throttling settings are applied correctly in your backup policies.

UniView User Guide: UniView Documentation

Windows Character Support and Limitations

Technical Support: support@datto.com

For further assistance, contact your account representative or visit the Kaseya support portal.