Symptoms

Observed Backup Failures. The following error messages may be encountered when attempting Avamar VMware image backups to a Data Domain (DD): Backup fails with an error indicating insufficient access rights. avtar Error <10542>: Data Domain server "DD_Hostname", LSU: avamar-xxxxxxx open failed DDR result code: 5075, desc: the user has insufficient access rights Backup cannot connect to the DDR server; only GSAN communication is enabled. avtar Error <10509>: Problem logging into the DDR server:'', only GSAN communication was enabled Backup reports an invalid backup ID and cannot rename the backup directory. avtar FATAL <10630>: Invalid backup id "0" can't rename backup directory , LSU: avamar-xxxx Backup fails to initiate a connection with the server due to earlier errors; server address and credentials should be verified. avtar FATAL <8941>: Failed to initiate connection with server due to earlier errors. Verify server address and login credentials The summary log shows multiple errors (10542, 8941, 10509, 10630) during the backup attempt. avtar Info <6149>: Error summary: 4 errors: 10542, 8941, 10509, 10630

Cause

The backup operations fail because the Avamar proxy appliances are not authorized to access the Data Domain using DDBoost. The proxies are missing from the DDBoost access list, which blocks DD authentication and results in insufficient‑access errors.

Resolution

Add Proxies to the DD Boost Access List. Data Domain requires each Avamar proxy, vProxy, or application client to be explicitly added to the DD Boost Access List before it can authenticate and write backup data. This configuration is performed only through the Data Domain CLI (DDBoost commands are not available in the user interface). Connect using SSH from a Linux or macOS terminal ssh <username>@<dd‑management‑ip> Enter password when prompted (or token if using OTP/MFA) Add Clients/Proxies to the DD Boost Access List ddboost access add clients <client-list> Where client-list can include: Hostnames Fully Qualified Domain Names (FQDNs) IP addresses Verify the DD Boost Access List ddboost access show Best Practices: Hostnames must match exactly (case-insensitive) with what the proxy uses when connecting.If using short hostnames and FQDNs, add both to avoid lookup mismatches.Avamar vProxies require: Virtual Machine (VM) hostnameOS hostnameReverse Domain Name System (DNS) record Ensure DNS forward, and reverse resolution is correct for all added clients.After modifying the list, proxy reconnection may be required.

Support Cases