1. IBM Backup as a Service (BaaS) - EVault with Self Service
December 2016

2. PRESENTER GUIDANCE: 1) These slides provide data points on how IBM BaaS – with EVault benefits mid-market clients. 2) BaaS w/ EVault Self Service Client deck must be kept intact and shared in its entirety with the customer. This deck includes speaker notes as reflected in the file name. Speaker notes can be removed at the presenter’s discretion. 3) Add these slides to other BaaS Client Presentation assets in Sales Essentials or other specific customer engagement slides you may want to include to produce a comprehensive client presentation.

3. Customer Primary Datacenter Customer 2nd Datacenter
Standard IBM BaaS w/EVault Self Service Solution
Self Service Management Center - DIY
Manage backups and recoveries centrally from anywhere
IBM Datacenter
EVault Data Transfer
Client Systems
On Customer Primary Datacenter
Customer Primary Datacenter
Customer 2nd Datacenter
This slide is an overview of the implementation and the backup functionality….
Starting on the far left these are the servers, be it a single server or many servers targeted for back up.
The EVault software agents are installed on each server that will be backed up and the backup policy created for each. The backups occur automatically as per set schedule, the data is encrypted before it leaves the server, deduplicated and compressed and then stored on a dedicated on-premise vault at the customer primary data center.
The data is subsequently sent to a 2nd dedicated vault at a customer designated offsite location - either to a second customer site or an IBM data center. The data is encrypted in flight and at rest with sole ownership of the encryption key resting with the customer.
The customer can use the intuitive, centralized web-based portal to manage and monitor all the backup and recovery operations from anywhere.
Agents
Backup data from virtually any computer system
Execute backup and recovery processes
Data Transfer
Efficient and secure data transfers
Short backup windows, reduced storage footprint, and ensured privacy
Vault
Securely store and
optimize backup data
Replication
Replicate backup data to a separate site or to the cloud. 2
IBM Backup as a Service - with EVault Self Service

4. DeltaPro® Data Transfer
IBM BaaS w/ EVault Self Service Components
Agent
Vault
DeltaPro® Data Transfer
Provides automated method for protecting your valuable data
Broad operating system and platform support
Reliable, safe and efficient data delivery
WAN optimized and designed for the Cloud
Data protection system for storing backup data
Director application manages backup, retention, and replication
The next couple of slides are intended to give you a better understanding of what happens as part of the backup.
Backup and Recovery Software components seamlessly work together, providing a trusted solution to protect mission critical data and keep businesses running.
The Software Agents are supported on a broad range of operating systems and platforms and are installed on the production servers to execute and automate the backup and recovery process.
Using DeltaPro Data Transfer and optimized backup technology, data is reliably and securely sent to be stored to “The Vault.”
The Vault provides the storage and data recovery services and can be run in a virtual or physical environment.
The Director application is installed on the vault to accept the data transfers and manage backup data sets.
Vaults can be at any customer designated site (on-prem) with replication at a 2nd customer location or our IBM RS data center.
Using the intuitive, centralized web-based Management Center you can manage and monitor all your backup and recovery operations from anywhere.
Management Center 3
IBM Backup as a Service - with EVault Self Service

5. IBM BaaS w/ EVault Self Service Data Transfer – DeltaPro® Technology
Adaptive Compression
Bandwidth Throttling
At-Rest Encryption and De-duplication
DeltaPro®
De-duplication
AES 256-bit
In-Flight SSL
Front-end deduplication reduces storage footprint by up to 99%
Compression and Encryption
Front-end encryption using NIST 256-bit Advanced Encryption Standard
Over-the-wire encryption using SSL authentication
At-rest encryption
Back-end deduplication further reduces storage footprint
Bandwidth throttling
No “backdoor” access to customer data.
The first initial backup captures everything the customer selects.
Then after that, the agent looks for added or changed files and then within those files to identify blocks of data that have changed or new blocks. It then compresses and deduplicates the data before being sent. This process of front-end deduplication is called Delta Pro, which is lightweight and is more efficient for the network. Once on the vault, we also deduplicate data further.
This is important because the data sent is minimized, and by extension the backup process takes less time and saves storage space.
Key point because data within organizations is growing so fast.
The vault holds the data in a storage pool and indexes the data. When you restore data, you simply go to the data you want to restore from and the product recreates a full backup automatically. You do not need to restore multiple incremental backups to restore.
The data is encrypted in flight and at rest, with the customer being the sole owner of the encryption key. There’s no backdoor access to the customer data.
To ensure that data is ok when it reaches the vault we have the Backup and Restore protocol, or BRTP for this. This is a technology that provides automatic error checking to ensure data can be recovered. If there is a network interruption, it will periodically check for network connectivity (60 times, 180 seconds between each) and will automatically resume backup jobs at the point they were interrupted, ensuring data protection continues.
Bandwidth throttling allows the customer to effectively manage network usage… for example amount of bandwidth used by the backup application to minimize disruption during business hours, or assigning more bandwidth during off hours to the backup application to ensure completion prior to start of prime business hours. “ ”
The process is bulletproof.
– Devine, Millimet & Branch 4
IBM Backup as a Service - with EVault Self Service 5

6. IBM BaaS w/ EVault Self Service – Lowers TCO
smaller footprint for data
Front-end deduplication
Back-end deduplication
DeltaPro
Bandwidth throttling
Businesses today need solutions for managing ever-growing data pools. Having more data to protect requires a highly efficient backup process that doesn’t interfere with critical workflow.
EVault uses advanced technology to reduce the size of backups, shorten backup windows, minimize bandwidth interference and reduce the storage footprint and ultimately, reduced total cost of ownership.
Front-end deduplication reduces storage 2:1
DeltaPro change identification enables “incremental forever” backups
Bandwidth throttling eliminates network interruptions
Back-end deduplication further reduces storage footprint
Reduces storage 2:1
Change identification enables “incremental forever backups”
Eliminates network interruptions
Further reduces storage footprint 5
IBM Backup as a Service - with EVault Self Service 6

7. IBM BaaS w/ EVault Self Service - OS & Application support
Protect multiple platforms with a single solution
When businesses modernize systems but still have ties to legacy platforms, EVault helps them protect all their data regardless of the system or application. As you can see from the exhaustive list, EVault boasts some of the widest platform support in the industry, with almost 200 applications, platforms and operating systems supported. One can say, other than MF, a customer can address all of their backup needs with one solution, IBM BaaS – with EVault Self Service 6
IBM Backup as a Service - with EVault Self Service 7

8. IBM BaaS with EVault Self Service – Key Benefits
Fast
Flexible
Efficient
Back up large volumes with faster deltas
Protect millions of files with a shorter backup window
Reduce overhead on production servers
Rapid recovery with mount option
Search files from multiple backups
Restore single files or an entire volume
Dissimilar hardware & virtual restore options
One backup job with multiple recovery options
Shrink storage requirements
Optimize bandwidth usage
Key benefits to customers using our solution are many…
The customer can process nightly backups using a shorter window because of delta pro technology and front-end deduplication, minimize backend disk capacity requirements through adaptive compression and backend deduplication leading to more efficient backup and lower total cost of ownership. The customer can access data from anywhere and restore a single file or entire volume and can recover on dissimilar hardware. The customer has multiple recovery options available and can manage bandwidth usage, to the policy level if needed. 7
IBM Backup as a Service - with EVault Self Service 8

9. IBM BaaS w/ EVault Self Service Roles & Responsibilities
 IBM BaaS – with EVault Self Service
Mid Market Offering
IBM
Client
Procure & ship Vaults (Hardware & Software bundle) X
Rack & Stack Vaults (site dependent)
Provide project management - implementation
X (single point of contact)
Provisioning of Network, including network devices ie FW/Switch (site dependent)  X
Hardware(Vault) configuration
Agent install
Initial backup policy configuration(what files to backup, how long to keep)
Monitoring of Backup Service HW/SW ie Devices, Agents
Monitoring and Management of Network, network devices (site dependent)
Management of Backup Service HW/SW ie Devices, SW/Agents (site dependent) X 
Backup job failure, error and alert notification
Initial problem resolution eg. Fix a Backup job failure
BaaS – with EVault Services Helpdesk 7x24x365 (L1+)
Provide Customer web portal for Backup policy management, reporting, restore
Backup policy management & restores
Governance, Project Management – Steady State
Hands & Eyes ie Vault break / fix at designated locations (site dependent)
Contracted Service SLA
None
This Backup offering includes Self Service in it’s title and that is for good reason…
As you can see from the Client column, the customer has a key role to play in the successful implementation and ongoing operation of the service. For example the customer is responsible for the initial creation and ongoing management of the backup policy. The customer is also responsible for initial problem determination and break / fix activity. 8
IBM Backup as a Service - with EVault Self Service 9

10. IBM BaaS w/ EVault Self Service - Implementation / Phase 1
An easy-to-use, web-based console enabling central administration, role-based security assignments, job scheduling, retention policy creation, management of multiple EVault Agents and backup jobs, and fast point-and-click restores.
EVault Central Control
IBM Resiliency Services
Data Center
Customer Primary Location
Implement & Configure
replication network
activity initiated
(2nd Vault)
(Recovery Server
Environment)
BaaS with EVault Primary Vault - Director Software and Capacity
Replication
Replicate backup data to second ‘onsite replication appliance’
Software installed on each protected system communicates with the target server (vault) and initiates ongoing, delta (blocklevel change) processing of backup data
Production Server with EVault Agent
The next 2 slides are meant to give you a view into the implementation and deployment phase of this solution.
Both primary and replica vaults are shipped to the customer main location.
The software agents are loaded on the target servers, policies are set, and backups automatically started. Initial seeding of the Primary and Replica vaults takes place at the customer location using the customer’s LAN for faster and cost effective seeding results. Phase 1 also provides an opportunity to subscribe and establish internet service between primary and offsite customer designated locations if not already in place.
Secondary
Location
Primary Location 9
IBM Backup as a Service - with EVault Self Service 10

11. IBM BaaS w/ EVault Self Service - Implementation / Phase 2
Customer Data Center
IBM Resiliency Services Data Center
Offsite Replication
Replicate backup data to second appliance offsite
Replication network
activities complete
Replication Vault
moved to customer designated location, including IBM RS DC
(Production Servers)
(Recovery Server
Environment, if applicable)
(Primary Vault)
BaaS with EVault
Primary Vault (Director Software & Capacity)
(2nd Vault)
Once the primary vault and replica vault seeding has been completed, and both are in sync, the replica vault is sent to the customer designated 2nd location. As stated previously, that can include an IBM datacenter.
For illustration purposes, this is the scenario we are depicting on this slide.
Assuming there is an existing internet service subscription in place from the customer site to send the data and at the IBM Resiliency data center to receive the data, nightly backups occur automatically. Since the initial seeding of the replica vault was previously completed, only changed data blocks would be sent offsite minimizing internet bandwidth requirement.
Also if the customer has a hotsite subscription and using data from the vault for system, application and end user data recovery, local Resiliency Services resources set up connectivity between the vault and our Shared Infrastructure environment to be enabled during time of test or declaration.
The implementation phase is typically 4 – 8 weeks long, assuming there are customer resources readily available to help once the vaults arrives at the customer location. In most cases the customer has nightly backup execution configured and running onsite within 2 – 3 weeks. Please note, shipping offsite vault to 2nd location is a customer responsibility.
Primary Location
Secondary Location 10
IBM Backup as a Service - with EVault Self Service 11

12. Our BaaS with self service addresses three important customer challenges with respect to backing up data to the cloud:
ensuring efficient bandwidth usage through the use of deduplication and compression Deduplication captures the entire dataset on the first backup (a full seed) Only changed blocks of data for each subsequent backup, significantly reducing the size of each backup – by as much as 90% (data type dependent). Adaptive compression - adjusts compression rates dynamically to help maintain the smallest possible backup window Customer can also throttle bandwidth usage
guaranteeing end to end security There are four layers of security around your data to ensure that it is protected: Data encrypted before leaving the machine – using military grade encryption. You are the sole owner of the encryption key. The data is transmitted using SSL (Secure Socket Layer) protocol. All data is stored in its encrypted state in the Vault.
flexible, fully automated and affordable utility model Broad platform support eliminating need to introduce multiple back up software Includes hardware, software, monitoring of backup infrastructure
Unlimited licensing/Agents and restores Automated backup failure notification 7x24x365 support Customer Web interface for effective back up management Competitive pricing based on your native data footprint, flexible retention periods Bare metal restore option Integrated disaster recovery service option
IBM Backup as a Service - with EVault Self Service

13. IBM Backup as a Service – with EVault Self Service solution
IBM BaaS – with EVault Self Service
State-of-the-art, disk-to-disk backup, incorporates “delta” block-level change processing and intelligent, on-the-fly compression. Eliminates need for ongoing incrementals and full backups.
Fast, efficient backups: only new or changed data blocks are sent; compression and bandwidth throttling further speed transfers, lighten network loads, and shrink storage.
Block-level backup changes and deduplication/ optimization create smaller storage footprints, enabling cost effective, longer term storage on disk, versus required offloads to tape.
An easy-to-use, web-based console enabling central administration, role-based security assignments, job scheduling, retention policy creation, management of Agents and backup jobs, and fast point-and-click restores.
End-to-end encryption, encrypts backup data inside the firewall (AES, 3DES, Blowfish), over the wire (AES, SSL), and when at rest in the IBM cloud; only you hold the decryption keys.
Supports all major operating systems, including Microsoft Windows, VMware, Novell NetWare, Linux, Sun Solaris, HP-UX, IBM AIX, and IBM System i. Supports most core processors and are certified with FiServ CUSA, XP, ITI and Harland.
Performs a number of data integrity checks throughout to ensure backup data sets are always sound and readily available to be restored, when needed. Although only changed backup data is sent to the vault, our solution operates quite differently from a typical incremental, tape-based backup. Building virtual “full” backups dynamically when the jobs arrive at the vault, solution makes data immediately available for recovery with a simple point-and-click, one-step, “single pass” restore process.
IBM Backup as a Service - with EVault Self Service 13

14. BUP03275USEN-00