Stay organized with collections
Save and categorize content based on your preferences.
LiveClone Backup and DR Workflows are used when the production data contains
sensitive information. It lets you define a LiveClone from production data
and then scrub the LiveClone's data before mounting it.
A LiveClone Backup and DR Workflow can do the following:
Generate a new, or updates an existing, LiveClone from a selected
production image that is marked as sensitive.
Define a schedule for updating the LiveClone with the latest
production data. Scheduled Backup and DR Workflows can also be run on demand.
Employ scripts to scrub the LiveClone of sensitive data.
Mark the scrubbed virtual application as non-sensitive.
Either mount the scrubbed data—standard mount—to a specific
host, or mount the scrubbed image as a virtual application—application
aware mount—to a specific host.
Use these instructions to create a LiveClone Backup and DR Workflow:
From the Backup and DR Service management console, click
App Manager, then select a managed application or consistency group.
Right-click and select Manage Workflows to open the Backup and DR Workflows
Application Dashboard. Click Add Workflow and add basic configuration
details like Name and Appliance of where you want the Backup and DR Workflow to
run.
Select LiveClone for the Workflow Type.
Select Scheduled or On Demand for the Schedule Type. For
scheduled Backup and DR Workflows, define a schedule to run the Backup and DR Workflow. The time
selector uses a 24-hour clock. Scheduled Backup and DR Workflows can also be run on
demand.
Complete the LiveClone Settings section.
Select the latest snapshot image from the policy that produces the image to
scrub for the Source Image. If you selected On Demand,
the user running the Backup and DR Workflow selects the source snapshot image
at run time.
Enter an identifiable name in the LiveClone Label field.
Select the diskpool to hold the LiveClone—as well as the differences
from subsequent mounts of the LiveClone—for Diskpool.
Be sure enough storage space is allocated to accommodate the LiveClone.
Optionally, enable the Mount for Pre-Processing option. This makes sure
that the LiveClone is mounted to a host and one or more scripts
run on the mounted image to scrub or mask sensitive data.
Enable the Mark data as non-sensitive option if your selected
application contains sensitive data and you want it be scrubbed and
made non-sensitive. This allows non-sensitive data users to access
the Backup and DR Workflow and provision their work environments.
Select the host on which to mount the LiveClone from the Host
drop-down.
Optionally, enable the Map to All Cluster Nodes option.
You can see this option when one or more target hosts are a
cluster node or a cluster host.
You can see the following options only when one or more target hosts are
VMware VMs:
For Mount Mode, select one of the following:
NFS: By default NFS mode is selected. Backup and DR presents
the data as a VMDK in an NFS datastore mounted from the
backup/recovery appliance.
vRDM (virtual raw device mapping): VMware snapshots treat
mounted vRDMs as independent and are not included in snapshots.
Because of this, by default, Backup and DR does not include vRDMs
when protecting a mounted VM. Backup and DR does provide an option
where you can mark vRDMs as dependent. Although rarely used, when
this option is enabled, vRDMs are included in VMware snapshots.
Backup templates capture vRDMs marked as dependent. Note that
this mount mode needs the ESXi host to have an iSCSI initiator,
which by default is not enabled in Google Cloud VMware Engine.
pRDM (physical raw device mapping): For file-level restore
operations, select this mode. Note that this mount mode needs the
ESXi host to have an iSCSI initiator, which by default is not
enabled in Google Cloud VMware Engine.
From Map to ESX Hosts, select one of the following options. You can
see the Map to ESX Hosts option only when you have selected vRDM or
pRDM in the Mount Mode field.
One: Select One if you want to map only to the ESX host
running the target VM.
Two: Select Two if you want to map to two ESX hosts, but not
all ESX hosts in the cluster. When selecting Two, you can
choose the second host or choose Auto-select.
Auto-select chooses the second host based on logical pairs of ESX
hosts and always selects the partner ESX host for the one
running the target VM.
All: Select All if you want to map to all the ESX hosts
present in the cluster. Note that selecting All may increase
the duration for the job.
Enter the location for the mounted drives in the Mount Location field.
For example, M:, D:\testdb1.
Select an option to mask sensitive data in the Scripts Options section.
Select the Optim Privacy Data Masking option if you are using
Optim Data Privacy software for data masking. The Masking Set
drop-down is populated automatically, so you can specify the
corresponding timeout in minutes in Masking Set.
Select the Custom Scripts option if you are using Backup and DR
custom scripts. Specify at least one pre- or post-processing script
and the corresponding timeout in seconds. For more information,
see Custom scripts.
Click the Create New Virtual Application option to perform an
application aware mount. This option is available only for IBM Db2,
MySQL, Oracle PostgreSQL, SAP ASE, and SQL Server applications.
Click Next.
Specify the mount details for the LiveClone image.
For Mount Label, provide a name to make it identifiable.
In the Hosts section, select one host on which you will perform the
AppAware mount. You cannot perform an AppAware mount on multiple hosts.
In Mapping Options section, for Mount Location, enter the location
for the mounted drives—for example, M:, D:\testdb1, or
/oracledata/db1data.
In the Scripts Options section, add any pre- and post-scripts
that are needed to use.
(Databases only) Enable Create New Virtual Application if you want to
perform an application aware mount (a virtual database).
This option is available only for IBM Db2, MySQL, Oracle PostgreSQL,
SAP ASE, and SQL server applications. The displayed settings vary according
to database type. If you don't select the
Create New Virtual Application option, you can instead get a
file system mount to your target hosts.
Optionally, enable Remove Mounted Image After Done if you employ one
or more scripts to process the mounted data as a one-time task after
which the mounted data is no longer needed, such as extraction of data
into a data warehouse. Once the script finishes its task this option
unmounts and deletes the virtual application.
Click Add to create the Backup and DR Workflow.
The VMware administrator's guide
This page is one in a series of pages specific to protecting and recovering
VMware VMs with Backup and DR.
You can find additional information at:
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eLiveClone Backup and DR Workflows create and update LiveClones from sensitive production data, allowing for data scrubbing before mounting.\u003c/p\u003e\n"],["\u003cp\u003eThese workflows can be scheduled or run on demand to update LiveClones with the latest production data, using scripts to remove sensitive information.\u003c/p\u003e\n"],["\u003cp\u003eScrubbed data can be marked as non-sensitive, enabling wider access, and can be mounted either as standard data or as a virtual application to a specified host.\u003c/p\u003e\n"],["\u003cp\u003eLiveClones can be mounted to a host for pre-processing, allowing for data scrubbing or masking through scripts, and offer various mount modes like NFS, vRDM, and pRDM for VMware environments.\u003c/p\u003e\n"],["\u003cp\u003eManagement console users with Workflow Refresh rights, without run or manage rights, can only refresh existing virtual applications, not modify the Backup and DR workflow.\u003c/p\u003e\n"]]],[],null,["# Create LiveClone Backup and DR Workflows\n\nLiveClone Backup and DR Workflows are used when the production data contains\nsensitive information. It lets you define a LiveClone from production data\nand then scrub the LiveClone's data before mounting it.\n\nA LiveClone Backup and DR Workflow can do the following:\n\n- Generate a new, or updates an existing, LiveClone from a selected production image that is marked as sensitive.\n- Define a schedule for updating the LiveClone with the latest production data. Scheduled Backup and DR Workflows can also be run on demand.\n- Employ scripts to scrub the LiveClone of sensitive data.\n- Mark the scrubbed virtual application as non-sensitive.\n- Either mount the scrubbed data---standard mount---to a specific\n host, or mount the scrubbed image as a virtual application---application\n aware mount---to a specific host.\n\n | **Note:** Management console users, when assigned with **Workflow Refresh** rights but not with Backup and DR Workflow run or Backup and DR Workflow manage rights, can only refresh the existing virtual application and cannot run, edit, delete, or disable the Backup and DR Workflow.\n\nUse these instructions to create a LiveClone Backup and DR Workflow:\n\n1. From the Backup and DR Service management console, click **App Manager**, then select a managed application or consistency group.\n2. Right-click and select **Manage Workflows** to open the Backup and DR Workflows **Application Dashboard** . Click **Add Workflow** and add basic configuration details like **Name** and **Appliance** of where you want the Backup and DR Workflow to run.\n3. Select **LiveClone** for the **Workflow Type**.\n4. Select **Scheduled** or **On Demand** for the **Schedule Type**. For scheduled Backup and DR Workflows, define a schedule to run the Backup and DR Workflow. The time selector uses a 24-hour clock. Scheduled Backup and DR Workflows can also be run on demand.\n5. Complete the **LiveClone Settings** section.\n\n - Select the latest snapshot image from the policy that produces the image to scrub for the **Source Image** . If you selected **On Demand**, the user running the Backup and DR Workflow selects the source snapshot image at run time.\n\n | **Note:** You can also select the latest StreamSnap image from a specific snapshot policy.\n - Enter an identifiable name in the **LiveClone Label** field.\n - Select the diskpool to hold the LiveClone---as well as the differences from subsequent mounts of the LiveClone---for **Diskpool**. Be sure enough storage space is allocated to accommodate the LiveClone.\n6. Optionally, enable the **Mount for Pre-Processing** option. This makes sure\n that the LiveClone is mounted to a host and one or more scripts\n run on the mounted image to scrub or mask sensitive data.\n\n 1. Enable the **Mark data as non-sensitive** option if your selected application contains sensitive data and you want it be scrubbed and made non-sensitive. This allows non-sensitive data users to access the Backup and DR Workflow and provision their work environments.\n 2. Select the host on which to mount the LiveClone from the **Host** drop-down.\n 3. Optionally, enable the **Map to All Cluster Nodes** option.\n You can see this option when one or more target hosts are a\n cluster node or a cluster host.\n\n 4. You can see the following options only when one or more target hosts are\n VMware VMs:\n\n 1. For **Mount Mode**, select one of the following:\n\n - **NFS**: By default NFS mode is selected. Backup and DR presents the data as a VMDK in an NFS datastore mounted from the backup/recovery appliance.\n - **vRDM (virtual raw device mapping)**: VMware snapshots treat mounted vRDMs as independent and are not included in snapshots. Because of this, by default, Backup and DR does not include vRDMs when protecting a mounted VM. Backup and DR does provide an option where you can mark vRDMs as dependent. Although rarely used, when this option is enabled, vRDMs are included in VMware snapshots. Backup templates capture vRDMs marked as dependent. Note that this mount mode needs the ESXi host to have an iSCSI initiator, which by default is not enabled in Google Cloud VMware Engine.\n - **pRDM (physical raw device mapping)**: For file-level restore operations, select this mode. Note that this mount mode needs the ESXi host to have an iSCSI initiator, which by default is not enabled in Google Cloud VMware Engine.\n 2. From **Map to ESX Hosts** , select one of the following options. You can\n see the **Map to ESX Hosts** option only when you have selected vRDM or\n pRDM in the **Mount Mode** field.\n\n - **One** : Select **One** if you want to map only to the ESX host running the target VM.\n - **Two** : Select **Two** if you want to map to two ESX hosts, but not all ESX hosts in the cluster. When selecting **Two** , you can choose the second host or choose **Auto-select**. Auto-select chooses the second host based on logical pairs of ESX hosts and always selects the partner ESX host for the one running the target VM.\n - **All** : Select **All** if you want to map to all the ESX hosts present in the cluster. Note that selecting **All** may increase the duration for the job.\n 5. Enter the location for the mounted drives in the **Mount Location** field.\n For example, `M:, D:\\testdb1`.\n\n 6. Select an option to mask sensitive data in the **Scripts Options** section.\n\n - Select the **Optim Privacy Data Masking** option if you are using Optim Data Privacy software for data masking. The **Masking Set** drop-down is populated automatically, so you can specify the corresponding timeout in minutes in **Masking Set**.\n - Select the **Custom Scripts** option if you are using Backup and DR custom scripts. Specify at least one pre- or post-processing script and the corresponding timeout in seconds. For more information, see [Custom scripts](/backup-disaster-recovery/docs/access-data/custom-scripts).\n 7. Click the **Create New Virtual Application** option to perform an\n application aware mount. This option is available only for IBM Db2,\n MySQL, Oracle PostgreSQL, SAP ASE, and SQL Server applications.\n\n | **Note:** You may need to create a new database (perform an AppAware mount) if the scripts to scrub sensitive data can only be run when the database is powered up and running.\n7. Click **Next**.\n\n8. Specify the mount details for the LiveClone image.\n\n - For **Mount Label**, provide a name to make it identifiable.\n - In the Hosts section, select one host on which you will perform the AppAware mount. You cannot perform an AppAware mount on multiple hosts.\n - In Mapping Options section, for **Mount Location** , enter the location for the mounted drives---for example, `M:`, `D:\\testdb1`, or `/oracledata/db1data`.\n - In the **Scripts Options** section, add any pre- and post-scripts\n that are needed to use.\n\n - (Databases only) Enable **Create New Virtual Application** if you want to\n perform an application aware mount (a virtual database).\n This option is available only for IBM Db2, MySQL, Oracle PostgreSQL,\n SAP ASE, and SQL server applications. The displayed settings vary according\n to database type. If you don't select the\n **Create New Virtual Application** option, you can instead get a\n file system mount to your target hosts.\n\n - Optionally, enable **Remove Mounted Image After Done** if you employ one\n or more scripts to process the mounted data as a one-time task after\n which the mounted data is no longer needed, such as extraction of data\n into a data warehouse. Once the script finishes its task this option\n unmounts and deletes the virtual application.\n\n9. Click **Add** to create the Backup and DR Workflow.\n\nThe VMware administrator's guide\n--------------------------------\n\nThis page is one in a series of pages specific to protecting and recovering\nVMware VMs with Backup and DR.\nYou can find additional information at:\n\n- [Backup and DR for VMware VMs](/backup-disaster-recovery/docs/concepts/vmware-intro)\n- [Configure VMware Engine for Backup and DR protection](/backup-disaster-recovery/docs/configuration/prepare-vmware)\n- [Add vCenter and ESX server hosts to the management console](/backup-disaster-recovery/docs/configuration/add-vcenter-host)\n- [Discover and protect VMware VMs](/backup-disaster-recovery/docs/configuration/discover-and-protect-vms)\n- [Apply a backup template to protect a VM](/backup-disaster-recovery/docs/create-plan/apply-backup-template-to-manage-a-VM)\n- [Configure Application settings for VMware VMs](/backup-disaster-recovery/docs/backup/configure-application-settings-for-vmware-vm)\n- [Restore a VMware VM](/backup-disaster-recovery/docs/restore-data/restore-vm)\n- [Mount a VMware image](/backup-disaster-recovery/docs/access-data/mount-vmware-image)\n- [Clone an image of a VMware VM](/backup-disaster-recovery/docs/access-data/clone-image-of-a-vm)\n- [Create LiveClone workflows](/backup-disaster-recovery/docs/access-data/create-liveclone-workflows)\n- [Move VM management between two backup/recovery appliances](/backup-disaster-recovery/docs/configuration/supported-vmware)"]]