This guide covers the management of users for Swiss Backup for Acronis backups.

Swiss Backup Administrator

Your account SBA-XXXX-ADMIN obtained after the configuration of Swiss Backup on the Infomaniak Manager has by default access to all licenses, devices, locations, and all the quota at its disposal:

1. Click here to access the Acronis Console with the credentials obtained after adding the device (need help?).
2. On the homepage, an administrator account will always see the management button, which will not be the case with a limited account:
   
3. This gives access to the section reserved for admin accounts (or "company executive" according to the terms visible on the platform acronis.infomaniak.com):
   

If you have acquired 2 licenses/devices and your total storage quota is 1 TB for Acronis (e.g.):

• 1 Mobile
• 1 Server

your account SBA-XXXX-ADMIN will be able to back up 1 mobile device and 1 server; the storage quota for the 2 devices will be shared, but limited to 1 TB.

In the Acronis interface, you will see an "unlimited" quota, but it remains limited to the options you have chosen in the Swiss Backup Manager.

To better manage storage quotas and service quotas (licenses), create users on Acronis, this allows you to:

• manage quotas
• manage notifications
• modify the backup frequency
  etc.

Add a user

There are two types of user accounts: administrator accounts and user accounts (read the Acronis help on this subject). Only an administrator account can add/remove users:

1. Click here to access the Acronis Console with the credentials obtained after adding the device (need help?).
2. Click on Manage account in the left sidebar.
3. Click on Company Executives.
4. Click on the Users button.
5. Click on the +New button at the top of the page.
6. Fill in the information (read Acronis help on this subject).

Delete a user

Warning:

• Deleting the device is irreversible and all saved data will be deleted from Infomaniak servers.
• Machines associated with this user will be unregistered.
• All protection plans will be revoked from all machines associated with this user.

To delete the account:

1. Click here to access the Acronis Console with an Admin account.
2. Click on Manage account in the left sidebar.
3. Click on Company Directors (as in this example).
4. Click on the action menu ⋮ to the right of the user concerned in the table that appears.
5. Deactivate the account.
6. Once the account is deactivated, delete the account (from point 5 above).

Link device and user

Example

Storage 1 To
Licenses 2 Mobiles, 1 Server, 1 VM

• SBA-XXXX-ADMIN (limited to the default Infomaniak Manager quotas)
• User1 (storage quota: 800 GB, service quota: 1 Mobile, 1 Server)
• User2 (storage quota: 200 GB, service quota: 1 Mobile, 1 VM)

To link a device to a user, download and install the Acronis agent on the device in question then confirm the registration with the correct account (SBA-XXXX-ADMIN, user1 or user2):

To resolve registration issues, refer to this other guide.

This guide explains how to install the Acronis Backup Agent for Swiss Backup on Apple Macs equipped with M1, M2... processors using an ARM architecture instead of the usual x86 architecture.

Refer to this other guide if you are looking for information about uninstalling.

Install the ARM-specific Acronis Agent

To access the Acronis management interface:

1. Click here to access the Acronis Console with the credentials obtained after adding the device (need help?).
2. Click on the user icon at the top right.
3. Click on Downloads:
   
4. Choose the client suitable for your machine:
   

Warning

If you take the version available from the left sidebar, it will not be compatible:

• Do not follow this method below as the version obtained will not be the correct one (Intel version):
  
  

This guide explains the procedure to modify a Swiss Backup offer, the secure backup solution in an independent Swiss cloud.

Modify your Swiss Backup offer

To access the modification of your Swiss Backup offer, follow these steps:

1. Click here to open the management of your product in the Infomaniak Manager (need help?).
2. In the list of your products, click on the action menu ⋮ located to the right of the name of your Swiss Backup space.
3. Select Modify the offer:
   
4. Adjust the parameters of your offer according to your needs by modifying:
   • the storage space
   • the number of devices
   • the number of virtual machines via Acronis
   • the number of Linux/Windows servers via Acronis
   • etc.
5. Click on Next and proceed to payment to validate the modification.

You can also manage your offer directly from the product dashboard:

Examples of offer modification

Initially, the user wanted to:

• back up an iOS/Android mobile device with Acronis
• and have a free backup of the Cloud type accessible by SFTP or similar method.

They now want to:

• back up two devices via Acronis (still the mobile device and a Windows computer), without keeping the free backup.

It modifies the quotas:

All that is left is to validate the payment to apply the modification.

Warning:

For example, if you want to remove a website backup, you must first delete it from your Acronis dashboard.

Indeed, to completely modify the offer (for example, to keep only a single backup of a Windows computer), the command cannot be finalized as long as the following message appears:
"The number of selected licenses is less than the current usage of your product"
This message occurs when you try to reduce to zero the quantity of an active backup type.

In this case, proceed as follows:

1. Click here to access the Acronis console with the credentials obtained when adding the device (need help?).
2. Delete the device in question from the "Devices" menu.
3. Wait about ten minutes for the quotas to update.

The quota of your devices displayed in the Infomaniak Manager should then go to zero. You will then be able to modify the offer without encountering a blocking error.

This guide explains how to delete a device (such as a Cloud Backup) on Swiss Backup, the solution for backup in an independent Swiss cloud. 

Delete a device (Swift, S3, etc.)

To access Swiss Backup and remove one of the free backup locations:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the product concerned:
   
3. Click on the blue button Manage my devices (in the Cloud Backup Space section):
   
4. Click on the action menu ⋮ to the right of the object concerned in the displayed table.
5. Click on Delete the device:
   
6. Confirm the deletion by entering the login password for the Manager and by activating the confirmation box.

To choose a new device on Swiss Backup, refer to this other guide.

This guide covers immutable storage, an essential security feature that helps protect your backups against accidental or malicious deletion, including ransomware attacks.

Preamble

• The Immutable Storage (Immutability) is a setting that makes your Acronis backup data non-modifiable and non-deletable for a period of time that you define.
• Once the retention period is active, no action (deletion or modification) can be performed on this data until it expires.

Configuration and Usage

This feature is managed directly via the Backup Plans in the Acronis Cyber Protect management console.

Refer to the Acronis documentation for detailed steps on enabling the immutability option in your backup plan.

Limitation on other protocols (Swift and S3)

Immutability is not available on other Swiss Backup storage protocols, such as Swift and S3. This limitation is due to technical constraints inherent in the OpenStack Swift protocol used by these storages.

To restore a Swiss Backup backup on a virtual machine, refer to the Acronis documentation on the subject:

• https://www.acronis.com/en-us/support/documentation/CyberProtectionService/#recovery-virtual-machines.html
• https://www.acronis.com/en-us/support/documentation/CyberProtectionService/#recovery.html

This guide details how to obtain the connection and configuration information for Swiss Backup (open-source backup type Openstack Swift, S3, SFTP...), the backup solution in an independent Swiss cloud.

It also explains the differences between the passwords available to you.

Connection information (Cloud backup)

Access information

To access information related to your open-source backup type Openstack Swift, S3, SFTP...:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the product concerned:
   
3. Click on the blue button Manage my devices (in the Cloud backup space section):
   
4. Click on the name of the object concerned in the table that appears:
   
5. The various information related to your device appears at the bottom of the page...

The various connection information (Swift, S3, etc.)

This information varies depending on the type of device chosen (Swift, SFTP, etc.) but notably includes:

Different passwords

Infomaniak account

To access the management of the Swiss Backup product (Acronis or Cloud storage), you need to log in to the Infomaniak Manager: refer to this other guide on this subject.

Cloud Backup - regeneration of the login password

To establish a connection of the Swift / S3 / FTP/SFTP / etc. type, a password must be generated for the first time when creating a device on the Swiss Backup interface and activating the identifier.

It is not possible to display an already generated password. If you forget it, you need to generate a new one:

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the product concerned.
3. Click on the blue button Manage my devices (in the Cloud backup space section):
   
4. Click on the name of the object concerned in the table that appears:
   
5. Click on Generate a new password or access keys and follow the wizard:
   

Acronis Backup

To establish a connection with Acronis, a password for this type of backup is generated when creating a device on the Swiss Backup interface and activating the identifier. There is also an encryption password.

As an Infomaniak Partner, it is recommended to manage your Swiss Backup clients within a single Acronis account/access, and to define groups/units on the Acronis console.

It is not possible to migrate end customers or end customer backups between 2 Swiss Backup accounts.

This guide details how to manually save data using the Cyberduck application (macOS / Windows) via the S3 Compatible protocol on Swiss Backup, the independent Swiss cloud backup solution.

Preamble

• It is also possible to use Cyberduck via Swift or FileZilla (SFTP).
• The various services offered by Infomaniak are all compatible with the corresponding standard protocols (S3/Swift for storage, for example). Therefore, if you encounter a problem with third-party software, contact the publisher directly or a Partner and consult the support policy as well as section 11.9 of the Infomaniak Terms of Service.

Configure Cyberduck

Prerequisites

• Have a Swiss Backup Infomaniak space with available device quota (minimum 1) for a Cloud Backup.
• Add 1 device of type Cloud to obtain the S3 Compatible parameters.
• Download and install Cyberduck (macOS / Windows).
• Review the official documentation https://docs.cyberduck.io/protocols/openstack/infomaniak/.

To configure a new backup:

1. Open the Cyberduck application.
2. Click on Open Connection:
   
3. Click on the drop-down menu and choose More options:
   
   
    
4. Wait for the additional profiles to load.
5. Search for and select the profiles corresponding to Infomaniak S3:
   
   • If necessary, check your cluster number indicated in the Manager under Cloud Storage Information in "Location".
6. Close the window and restart Cyberduck if the profiles do not appear in the drop-down menu in step 3 above.
7. Choose the corresponding profile.
8. Fill in the fields according to the information specific to your device:
   
9. Click the Connect button to establish the S3 connection.

This guide details how to back up a Google Workspace space (Gmail, Google Drive, Google Calendar, …) using Acronis on Swiss Backup, the backup solution in an independent Swiss cloud.

It is also possible to back up other types of data.

Prerequisites

• Have a Swiss Backup Infomaniak space with available device quota (minimum 1) for a Google Workspace backup (1 license per Workspace user to back up):
  
• If necessary, increase the device quota according to your needs.
• Add the device to the Infomaniak Manager to receive the login credentials.
• Create a new project on Google Cloud Platform (console.cloud.google.com) as a super administrator:
  
• Review the Acronis documentation on this topic:
  1. What does Google Workspace protection mean?
  2. Creating a personal Google Cloud project
  3. Adding a Google Workspace organization
  4. Discovering Google Workspace resources
  5. Configuring the frequency of backups
• Allow 20 to 30 minutes to set everything up.

Authorize Acronis to access Google Cloud Platform

In the Google Cloud Platform console:

1. Select your new project.
2. In the navigation menu, select APIs and services > Enabled APIs and services:
   
3. Disable one by one all the APIs enabled by default in this project:
   1. Scroll down the Enabled APIs and services page
   2. Click on the name of an enabled API.
   3. On the API/Service details page that opens, click on Disable and confirm:
      
   4. Go back to the previous page and do the same with the next API.
4. From the navigation menu, select APIs and services > Library.
5. In the API library, activate the following APIs, one by one, using the search bar to find the required APIs:
   
   1. Gmail API
   2. Google Drive API
   3. Admin SDK
   4. Google Calendar API
   5. Google People API
6. Click on its name, then on Activate.
7. To search for the next API, go back to step 5.
8. From the Google Cloud Platform navigation menu, select APIs and services > OAuth consent screen.
9. In the window that opens, select Internal for the user type, then click on Create:
   
10. In the App name field, specify a name for your application.
11. In the User support email field, enter the super administrator's address.
12. In the Developer contact information field, enter the super administrator's address.
13. Leave all other fields blank, then click on Save and continue.
14. On the Scopes page, click on Save and continue without making any changes.
15. On the Summary page, check your settings, then click on Back to dashboard.
16. In the Google Cloud Platform navigation menu, select Credentials > Service account.
17. Click on Create a service account:
    
18. Specify a name, a description, and click on Create and continue:
    
19. Do not change anything in the Grant this service account access to the project and Grant users access to this service account steps.
20. Click on Done; the Service accounts page opens.
21. Select the new service account, then under Actions, click on Manage keys.
22. Under Keys, click on Add key > Create new key, then select the JSON key type:
    
23. Click on Create; a JSON file containing the service account's private key is automatically downloaded to your machine: keep this file in a safe place as you will need it to add your Google Workspace organization to the Cyber Protection service as described later in this guide.
24. In the Google Cloud Platform navigation menu, select Credentials > Service account.
25. In the list, search for the service account you created, then copy its client ID which is displayed in the OAuth 2.0 Client ID column (OAuth 2.0 Client ID):
    
26. Click here to access the Google administration interface as a super administrator.
27. In the navigation menu, select Security > Access and data control > API controls:
    
28. Scroll down the API controls page, then under Domain-wide delegation, click on Manage domain-wide delegation; the Domain-wide delegation page opens.
29. On this page, click on Add:
    
30. The Add a new client ID window opens.
31. In the Client ID field, enter the client ID of your service account.
32. In the OAuth scopes field, add the following "scopes":
    1. https://mail.google.com
    2. https://www.googleapis.com/auth/contacts
    3. https://www.googleapis.com/auth/calendar
    4. https://www.googleapis.com/auth/admin.directory.user.readonly
    5. https://www.googleapis.com/auth/admin.directory.domain.readonly
    6. https://www.googleapis.com/auth/drive
    7. https://www.googleapis.com/auth/gmail.modify
33. Click on Authorize.

Your new Google Cloud project can therefore access the data of your Google Workspace account.

Creation of the backup space

To configure the backup of the Google Workspace with Acronis:

1. Click here to access the Acronis Console with the credentials obtained after adding the device (need help?).
2. Click on the device addition button to add a Google Workspace type device:
     
   
    
3. Enter the address of a super administrator of your Google Workspace account (it doesn't matter if two-step verification is activated for the super administrator's email account).
4. Search for the JSON file that contains the private key of the service account you created in your Google Cloud project (or paste the content of the file as text).
5. Click on Confirm:
   

Your Google Workspace organization then appears under the Devices tab of the service console:

This guide details how to back up a Microsoft 365 space using Acronis on Swiss Backup, the backup solution in an independent Swiss cloud.

Preamble

• What you can back up:
  • Office
  • OneDrive
  • Exchange
  • Teams
  • SharePoint
  • Emails
  • By default, OneNote notebooks are included in OneDrive file backups, Microsoft Teams, and SharePoint sites.
• It is also possible to back up other types of data.

Adding a Microsoft 365 organization

Prerequisites

• Have a Swiss Backup Infomaniak space with an available device quota (minimum 1) for an Acronis Microsoft 365 backup (1 license per Office 365 user (seat) to back up):
  
• If necessary, increase the device quota according to your needs.
• Add the device to the Infomaniak Manager to receive the login credentials.
• Your account must have the global administrator role in Microsoft 365
• Read the Acronis documentation on this subject.

An administrator can add one or more Microsoft 365 organizations to a Swiss Backup account.

To add a Microsoft 365 organization:

1. Click here to access the Acronis Console with the credentials obtained after adding the device (need help?).
2. Click the add device button to add a Microsoft 365 Business type device:
   
3. The software redirects you to the Microsoft 365 login page:
   
4. Log in using the Microsoft 365 global administrator credentials.
5. Microsoft 365 displays a list of the permissions required to back up and restore your organization's data:
   
6. Confirm that you are granting these permissions to the Cyber Protection service.
    

The Cloud Agent does not connect to Microsoft 365. The agent obtains the necessary permissions directly from Microsoft 365. You only need to confirm the granting of these permissions once while logged in as a global administrator. The agent does not store your account credentials and does not use them to perform backups and restores. Changing the password of this account or deactivating or deleting this account in Microsoft 365 does not affect the operation of the agent.

Your Microsoft 365 organization then appears under the Devices tab in the Cyber Protect console:

Backup / Synchronization Frequency

The Cloud Agent synchronizes with Microsoft 365 every 24 hours, starting from the moment the organization is added to the Cyber Protection service. If you add or delete a user, group, or site, this change will not be immediately visible in the Cyber Protect console.

Immediate Synchronization

To synchronize the change immediately, select the organization on the Microsoft 365 page and then click Refresh.

If you have applied a protection plan to the All Users, All Groups, or All Sites group, recently added items will only be included in the backup once synchronization has been performed.

In case of slowdowns

If the Microsoft 365 Cloud-to-Cloud (C2C) backup or restore tasks are running slower than expected and taking a long time to complete, refer to this other guide to temporarily disable the Exchange Web Services API throttling to improve performance when restoring Microsoft 365 items.

Deleted Items

In accordance with Microsoft's policy, when a user, group, or site is deleted from the Microsoft 365 graphical interface, it remains available for a few days via the API. During this period, the deleted item is inactive (grayed out) in the Cyber Protect console and is not backed up.

When the deleted item is no longer available via the API, it will disappear from the Cyber Protect console. Its backups (if any) are located under Backup Storage > Cloud Application Backups.

Learn More

1. Microsoft 365 Resource Discovery
2. Backup frequency configuration
3. Exchange Online data protection
4. OneDrive file protection
5. SharePoint Online site protection
6. Microsoft 365 Teams data protection
7. OneNote notebook protection

This guide explains how to delete a Swiss Backup backup with Acronis, and the different scenarios that may occur during deletion. Also refer to this other Acronis guide on the subject.

Prerequisites

• At least one device must be registered (and online) with the same credentials used to perform the backup:
  • For example, if the goal is to delete a backup made by SBA-XXXX-ADMIN but no device is online, simply download Acronis on another device and register it with the same user:
    
• Deletion requires free space:
  • Please consider increasing your user quota (help), once the deletion is complete, you can return the quota to the agreed level:
    
• Refresh storage:
  • If a deletion has been made recently, be patient, the deletion may take some time depending on the size of the archive to be deleted; if the used storage space has not changed, refresh the backup location:
    

Delete an Acronis backup

To do this:

1. Access Backup Storage son the Cyber Protect console.
2. Select the location from which you want to delete the backups.
3. Select the backup archive from which you want to delete the backups.

Delete the entire backup archive

1. Click on Delete.
2. Deleting a backup archive deletes all backups in that archive.

Delete a specific backup in the backup archive

1. Click on View Backups.
2. Select the backup (restore point) you want to delete.
3. Click on Actions > Delete:
   1. When deleting a backup archive, check the box and then click Delete to confirm your decision.
   2. When deleting a specific backup, click Delete to confirm your decision.

Delete all backups associated with a user

• Even if no device is online, you can Disable > Delete (refer to this Acronis guide on the subject).

Delete incomplete backups (if any)

• Refer to this other guide for detailed instructions.

Certificate

If the storage quota/deletion issue persists even after increasing the storage quota of the affected user, it is recommended to reinstall Acronis.

When Acronis is completely uninstalled, this deletes the certificate that may be causing this bug.

To manually delete the certificate, without uninstalling Acronis:

1. Check its location and delete/move the certificate - refer to this other guide.
2. Restart the Acronis Managed Machine Service - refer to this other guide.
3. Run a backup or update the storage.
4. This will generate a new certificate and resolve the storage quota issue.

This guide helps you if your SFTP software/client suddenly displays a request to accept a new fingerprint (digital fingerprint) when using the Swiss Backup Infomaniak service.

SFTP software/client alert

If your SFTP software suddenly displays a message asking you to accept a new fingerprint (digital fingerprint), this does not necessarily indicate a security issue. This request may occur following planned technical changes to Infomaniak's infrastructure (if you have received an email about this).

Indeed, as part of the evolution of its services, Infomaniak has recently changed the SFTP gateway used to access hosted files. These changes involve the deployment of new SSH keys on the server side. However, for security reasons, SFTP software/clients systematically compare the server key with the one they have in memory.

If a difference is detected, even if legitimate, they alert you to request confirmation. Therefore, it is normal for an alert to appear and for you to be asked to approve a new fingerprint.

Check if necessary

You can check the official new fingerprints of Infomaniak's SSH keys below. If they match what is displayed in your software, you can accept them with confidence:

4096 SHA256:p4QkBc70lkIpDZpjJAZ4VbPEIaOv54lWxd/DRCMfwgg sftp.swiss-backup.infomaniak.com (RSA)
4096 MD5:a3:6b:fa:7c:0e:22:da:42:ca:82:c7:cc:7e:1f:0a:4a sftp.swiss-backup.infomaniak.com (RSA)

4096 SHA256:gMiEH8oVwWhq8ByQWQP8xMEVy3URi2omZNSMCc0n8z0 sftp.swiss-backup02.infomaniak.com (RSA)
4096 MD5:d2:1a:11:9a:06:4c:55:98:df:38:cd:70:be:08:dd:ca sftp.swiss-backup02.infomaniak.com (RSA)

4096 SHA256:EcQDR+VNUCbK1Zz/eDoa295c0+7JGQD7EP6n+ro5G0U sftp.swiss-backup03.infomaniak.com (RSA)
4096 MD5:bf:5e:92:f7:ed:81:de:84:9e:43:48:f3:1a:9c:3e:8d sftp.swiss-backup03.infomaniak.com (RSA)

4096 SHA256:xRU5RakUZ/yJYg3CDi9JiSRymodbPgM4S3FXvVHqK2s sftp.swiss-backup04.infomaniak.com (RSA)
4096 MD5:16:ce:56:02:c3:ab:80:7b:31:99:a6:cd:a8:00:0e:79 sftp.swiss-backup04.infomaniak.com (RSA)

This change has no impact on the security of your data. If you use scripts or automated software for your transfers or backups, make sure they take this new fingerprint into account.