Problems I ran into during initial Datto deployment.
For systems that aren't quite air-gapped, but close enough to it (allowing only 1 or 2 services network activity) you'll run into Schannel errors when first deploying the Datto agent to a Windows machine -- you'll have to allow more network activity.
Pre-setup:
*.dattobackup.com
- add the wildcard entry in your firewall appliance to open it up for the target host (I didn't do any of this on the client firewall, as the machine is on an isolated VLAN, governed by a firewall appliance that sits between client machines and the internet)Post-setup:
While attempting to pair an agent-based setup, the following error appears in Event Viewer > Custom Views > Administrative Events:
The certificate received from the remote server has not validated correctly. The error code is 0x80092013. The SSL connection request has failed. The attached data contains the server certificate.
*.dattobackup.com
is using the CA cr13.digicert.com
, so allowing this FQDN as an outgoing connection should allow the backup to commence.bash
crl.globalsign.com
crl.globalsign.net
crl3.digicert.com
crl4.digicert.com
ocsp.digicert.com
ocsp.globalsign.com
ocsp2.globalsign.com
Datto's Linux support table doesn't list Debian 9, despite supporting every other version back to Debian 6.
Attempting to use Datto with Debian 9 will find the /tmp
directory become read-only, until a reboot or re-mount. The issue will resurface with each subsequent attempt.
Fix:
Cause: