Article number
000003817

Zerto Cloud Appliance (ZCA) requirements for AWS Environments

Summary

Installing the ZCA on AWS installs the Zerto Virtual Manager, Virtual Replication Appliance, and a Zerto Backup Appliance as Windows services.

There can be multiple ZCAs in a single AWS Availability Zone.

Symptoms

Installing the ZCA on AWS installs the Zerto Virtual Manager, Virtual Replication Appliance, and a Zerto Backup Appliance as Windows services.

There can be multiple ZCAs in a single AWS Availability Zone.

Solution

For each account on AWS, there must be:

• Permissions to perform operations in AWS in the S3 and EC2 services. For the minimum required list of permissions, see Minimum Required AWS Permissions within the AWS Enterprise Guidelines.
• An AWS Direct Connect or VPN connection between the instance on AWS and the protected site. Note: Zerto can set default encryption on the S3 bucket so that all objects are encrypted when they are stored in the bucket. To enable S3 encryption please review the necessary Knowledgebase Article dependent on your current code version.

Zerto Cloud Appliance requirements:

• Zerto recommends that ZCA's VPC is configured with DHCP options set to allow DNS network connectivity to S3, in order to avoid delays in ZCA operations such as Failover/Move. See AWS documentation for more information.
• An instance on AWS EC2 running a Windows operating system with one of the following using a subnet accessible by other Zerto sites:
   -> 64-bit Operating System
   -> The Operating system version number must be 6.1 or higher
   -> The Windows operating system must be Server Edition

• Supported Operating Systems:
   -> Windows Server 2008 R2 SP1 with KB3033929 and KB2864202
   -> Windows Server 2012 base
   -> Windows Server 2012 R2
   -> Windows Server 2016
   -> Windows Server 2019

• Microsoft .NET Framework 4.7.2. or higher
• The 4.7.2 installation executable is included as part of the Zerto installation kit and it needs an additional 4.5GB of free disk space
• If you install .NET Framework 4.7.2 as part of the Zerto installation, you will be prompted to restart.
• Make sure that you have the latest .NET and Windows updates - unless Zerto support warns against a specific update.
• AWS Instance Type for the ZCA: Zerto recommends, as the minimum, using an m5.xlarge type instance,
• The clocks on the machines where Zerto is installed must be synchronized with UTC and with each other (the timezones can be different). Zerto recommends synchronizing the clocks using NTP.
• At least 4GB of free disk space.

• The following folders must be excluded from antivirus scanning:
Zerto Virtual Replication
%ProgramData%ZertoDatazvm_db.mdf
C:Program FilesZertoZerto Virtual ReplicationZerto.Zvm.Service.exe
C:Program FilesZertoZerto Virtual ReplicationZerto.Vba.VbaService.exe C:Program FilesZertoZerto Virtual ReplicationZerto Online Services ConnectorZerto.Online.Services.Connector.exe
C:Program FilesZertoZerto Virtual ReplicationEmbedded DB Manager ServiceZerto.LocalDbInstanceManagerService.exe

Failure to do so may lead to the Zerto Virtual Replication folder being incorrectly identified as a threat and in some circumstances corrupt the Zerto Virtual Replication folder.

Note: For CSPs deploying an AWS account, one ZCA is required per end customer. Multiple end-customer VPGs shared on a single ZCA, is not supported.