Accounts and Roles

• What is a CrashPlan account?
• A CrashPlan account is any account that can login to the CrashPlan endpoint application or Administrative Web Console.

• What are the different CrashPlan account types?
• There are 2 (two) different types of CrashPlan accounts:
  
  Active Directory (AD) CrashPlan Account:
      • These accounts exist with the uConnect Active Directory system
      • These accounts are able to login to the CrashPlan Administrative Web Console using ADFS
      • These accounts are able to login to the CrashPlan endpoint application
      • These accounts have the following requirements:
          • They must have a mailbox associated with them.
          • They must have an email address that starts with "admin-"
      • These accounts can be assigned the following CrashPlan Roles:
          • CAES: Org Admin
          • CAES: Lab Managers (View Only)
          • CAES: Backup-Only User
  
  Local CrashPlan Account:
      • These accounts exist only within the CrashPlan system
      • These accounts are able to login to the CrashPlan endpoint application
      • These accounts are NOT allowed to be used for logging into the CrashPlan Administrative Web Console
      • These accounts have the following requirements:
          • They must follow the "CAES-[dept]-[something unique]" naming convention.
          • They must at least have a First Name, Username, and Password.
      • These accounts can be assigned the following CrashPlan Roles:
          • CAES: Backup-Only User

• What permissions does each CrashPlan Role have?
• Below are the permissions that each CrashPlan Role has within the CAES CrashPlan service:
  
  CAES: Backup-Only User
      • Log in to the Endpoint Application.
      • Create backups within a user's organization hierarchy.
  
  CAES: Lab Manager (View Only)
      • Log in to the Administration Web Console.
      • View org information within user's organization.
      • View computer information.
      • Read information about backups within a user's organization hierarchy.
      • Read individual backups information.
  
  CAES: Org Admin
      • Log in to the Administration Web Console.
      • Log in to the Endpoint Application.
      • View the CLI and run any command for which the user has permission.
      • View information within user's organization.
      • Delete information within user's organization.
      • Update information within a user's organization and deactivate organizations.
      • Create child organizations within user's organization.
      • Create, read, update and delete backups within user's organization.
      • View and edit file forensics related settings.
      • Configure search related settings.
      • Edit settings for Code42 Security Tools.
      • Access, alter or remove any user information.
      • Access, alter, or remove any computer information.
      • Remotely browse file and directory names for all devices user has authority to manage
      • Perform a full web restore for all devices user has authority to manage.
      • Push restore from and to any device the user has authority to manage.
      • Restore from the Endpoint Application.

 

Licensing

• Which users can have their computers backed up via the CAES CrashPlan service?
• The CAES CrashPlan service can be used to backup University owned computers for both Faculty and Staff.

• How is licensing paid for with the CAES CrashPlan Service?
• The CAES Dean’s Office covers the cost for backing up Faculty computers and local departments are responsible for providing funding for backing up Staff computers.
  
  The annual cost per license, which can back up 4 (four) devices, is currently: $86.01
  
  To track a license for a Faculty device, populate the following fields in the Reference tab for the device in the Administrative Web Console:
      • External Reference: (Leave Blank)
      • Notes: Faculty
  
  To track a license for a Staff device, populate the following fields in the Reference tab for the device in the Administrative Web Console:
      • External Reference: <Fund Account Code to be charged>
      • Notes: Staff

• How should licensing be used in the CAES CrashPlan Service?
• Because each license can be used to backup 4 (four) devices and is billed regardless of the number of devices it is backing up, all 4 (four) device "seats" should be used to maximize cost efficiency. Any unused device "seats" for a license is subject to recharge by the CAES Dean's Office.

• Can the CAES CrashPlan service be used to backup personal computers?
• No. The CAES CrashPlan service can only be used for backing up University owned computers.

• If a Faculty or Staff has more than one computer, can all of the computers be backed up via the CAES CrashPlan service?
• Yes. All University owned Faculty and Staff computers should be backed up using the CAES CrashPlan service to adhere to IS-3 compliance requirements.

• How many computers can be backed up under a single CrashPlan account?
• A maximum of 4 (four) computers can be backed up under a single CrashPlan account. If more than 4 (four) computers need to be backed up, additional CrashPlan accounts will need to be setup. Backing up more than 4 (four) computers per CrashPlan account is a violation of the Code42 CrashPlan End User License Agreement.

 

Support

• How is the Endpoint Application updated when new versions are released?
• CAES CrashPlan Administrators will update the CrashPlan client on all subscribers' computers centrally and no intervention on the part of the user or departmental administrator will be required.

• How is technical support provided for the CAES CrashPlan service?
• End users should reach out directly to their local departmental IT team for tier 1 support. If the local departmental IT team is unable to resolve the issue, the ticket can be escalated via ServiceNow to “CAES Inbox” or forwarded to support@caes.ucdavis.edufor tier 2 support. If necessary, the CAES CrashPlan Service Providers will engage with Code42 CrashPlan Enterprise Support for additional assistance.

 

Getting Started

• How do I enroll my unit into the CAES CrashPlan service?
• To enroll your unit in the CAES CrashPlan service, submit a request to support@caes.ucdavis.edu.

• How do I access the Administrative Web Console?
• 1) While connected to any campus IP space, browse to https://crashplan.caes.ucdavis.edu:4285
  2) Enter the full email address for the account that has access to the Administrative Web Console
      • The email address must match the username and email address used on the CrashPlan account.
  3) Authenticate with ADFS and Duo

• How do I add IT Staff to the Administrative Web Console?
• 1) In uConnect Active Directory, add the ad3\admin-<LoginID> Active Directory account of the IT staff you are granting access for to the uConnect Active Directory group that your unit setup for delegated access.
  2) In the CAES CrashPlan Administrative Web Console, add the IT staff to your unit’s CrashPlan structure using their admin-<LoginID>@ad3.ucdavis.edu email address.

• What should I know about how the default organizations for my unit are configured?
• Each unit will have two default organizations configured for them:
      1) The top level organization will be named after your unit
          • Example name: Dean's Office
          • This top level organization will be configured for ADFS Authentication, which means that only Active Directory (AD) CrashPlan Accounts can be added to this top level organization and must follow the requirements for that account type.
  
      2) A second level organization will be created for your unit that includes the top level organization name followed by " - Endpoints (Local Authentication)"
          • Example name: Dean's Office - Endpoints (Local Authentication)
          • This second level organization will be configured for Local Authentication, which means that only Local CrashPlan Accounts can be added to this top level organization and must follow the requirements for that account type.
  
      3) When you create a new organization, the new organization will inherit the authentication settings used by the one you place it under.

• What is an example of a recommended CrashPlan Structure, including Account Types and Roles?
• CAES Dean’s Office (ADFS Auth enabled)
      • ad3\shuka ("CAES: Org Admin" role)
      • ad3\steven ("CAES: Org Admin" role)
      CAES Dean’s Office – Endpoints (Local Authentication)
          • crashplanbackup1 ("CAES: Backup-Only User" role)
              1) Unique Device 1
              2) Unique Device 2
              3) Unique Device 3
              4) Unique Device 4
          • crashplanbackup2 ("CAES: Backup-Only User" role)
              1) Unique Device 5
              2) Unique Device 6
              3) Unique Device 7
              4) Unique Device 8
          • crashplanbackup3 ("CAES: Backup-Only User" role)
              1) Unique Device 9
              2) Unique Device 10
      CAES Dean’s Office – Some Lab (ADFS Auth enabled)
          • ad3\labmanager ("CAES: Lab Manager (View Only)" role)
          CAES Dean’s Office –Some Lab (Local Authentication)
              • crashplanbackup4 ("CAES: Backup-Only User" role)
                  1) Unique Device 11
                  2) Unique Device 12
                  3) Unique Device 13
                  4) Unique Device 14
  
  In the above example:
      • ad3\shuka and ad3\steven (which are both AD CrashPlan Accounts) can see all accounts (crashplanbackup[1-4]) and the devices they backup
      • ad3\labmanager (which is an AD CrashPlan Account) can see only the crashplanbackup4 account (which is a Local CrashPlan Account) and the devices backed up by that individual account.

 

General Use

• How do I uninstall IET CrashPlan?
• Additional instructions for uninstalling CrashPlan can be found at https://support.code42.com/CrashPlan/6/Get_started/Uninstall_the_Code42_app
  
  1) Uninstall the IET CrashPlan Endpoint Application:
      • Windows: Use the Uninstall a Program from Control Panel
      • Mac: Run Uninstall.app from /Library/Application Support/CrashPlan
  2) Remove the following directories from the machine:
      • Windows:
          • C:\ProgramData\CrashPlan
          • C:\Users\<username>\AppData\<Local or Roaming>\CrashPlan
      • Mac:
          • /Library/Application Support/CrashPlan
          • ~/Library/Application Support/CrashPlan

• How do I backup computers to the CAES CrashPlan service?
• 1) If the machine had IET CrashPlan installed previously, you must complete the steps outlined in "How do I uninstall IET CrashClan" above.
  2) Download the installer from https://crashplan.caes.ucdavis.edu:4285 under the “App Downloads” page.
  3) Install the downloaded app using administrative permissions.
  4) Login to the endpoint application.
      • Username: Username/Email Address for the CrashPlan account that will be used to backup the device
      • Server Address: crashplan.caes.ucdavis.edu:4287
  5) Confirm the device is appearing in the Administrative Web Console.
  6) If necessary, move the device to the appropriate structure within the Administrative Web console.

• How do I confirm via the Administrative Web Console that CAES CrashPlan has backed up all of the selected files from my computer?
• Due to deduplication, compression, and the a difference in the base calculation used, the sizes listed under Storage Used and Selected sometimes report differently than the way your computer reports them. As such, this can cause confusion when trying to confirm that all of your files have been backed up.
  
  To confirm that all of the files have been backed up for your computer
      1) Pretend that you are restoring files for the computer by clicking the button.
      2) Check the box of the top-most folder to select all files included in the backup.
      3) The total number of files that have been backed up, as well as the total size of those files will be calculated and displayed below the file selection tree. This number should match the number and size for files listed on your computer directly.
  
  If you want to know more about why these numbers are sometimes different, please visit https://support.code42.com/CrashPlan/6/Troubleshooting/Why_does_the_Code42_app_show_a_different_number_of_files_than_my_computer