Info icon
End of Life Notice: For Trend Cloud One™ - Conformity Customers, Conformity will reach its End of Sale on “July 31st, 2025” and End of Life “July 31st, 2026”. The same capabilities and much more is available in TrendAI Vision One™ Cloud Risk Management. For details, please refer to Upgrade to TrendAI Vision One™
Use the Knowledge Base AI to help improve your Cloud Posture

Enable File System Active Replication

TrendAI Vision One™ provides continuous assurance that gives peace of mind for your cloud infrastructure, delivering over 1400 automated best practice checks.

Risk Level: Medium (should be achieved)
Rule ID: OCI-FileStorage-008

Ensure that active replication is enabled for your production Oracle Cloud Infrastructure (OCI) File Storage systems in order to facilitate ongoing automatic asynchronous replication across regions. This process, which creates a Replication resource associated with the source and a corresponding Replication Target on the destination, is critical for establishing a robust Disaster Recovery (DR) solution that minimizes data loss and supports business continuity.

Reliability

Enable active replication for Oracle Cloud Infrastructure (OCI) File Storage systems to provide protection from regional outages by establishing cross-region data redundancy. This feature is critical for successful Disaster Recovery (DR) efforts and for meeting data redundancy compliance requirements.


Audit

To determine if active replication is enabled for your production OCI File Storage systems, perform the following operations:

Using OCI Console

  1. Sign in to your Oracle Cloud Infrastructure (OCI) account.

  2. Navigate to File Storage console available at https://cloud.oracle.com/fss/.

  3. In the left navigation panel, choose File Systems, and select an OCI compartment from the Compartment dropdown menu, to list the file systems provisioned in that compartment.

  4. Click on the name (link) of the file system that you want to examine, listed in the Name column.

  5. Select the File System information tab, and check the Replication status attribute value, listed in the Replication section, to determine if data replication is active for the selected resource. If Replication status is set to Disabled, active replication is not enabled for the selected Oracle Cloud Infrastructure (OCI) File Storage system.

Using OCI CLI

  1. Run iam compartment list command (Windows/macOS/Linux) with output query filters to list the ID of each compartment available in your Oracle Cloud Infrastructure (OCI) account:

    oci iam compartment list
    	--all
    	--include-root
    	--query 'data[]."id"'
    
  2. The command output should return the requested OCI compartment identifiers (OCIDs):

    [
    	"ocid1.tenancy.oc1..aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd",
    	"ocid1.compartment.oc1..abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd1234abcd"
    ]
    
  3. Run fs file-system list command (Windows/macOS/Linux) with the ID of the OCI compartment that you want to examine as the identifier parameter, the list the ID of each File Storage system provisioned in the selected OCI compartment:

    oci fs file-system list
    	--compartment-id 'ocid1.tenancy.oc1..aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd'
    	--availability-domain 'ABC1:AB-ABC123-1-BC-1'
    	--all
    	--query 'data[]."id"'
    
  4. The command output should return the requested file system IDs:

    [
    	"ocid1.filesystem.oc1.ap_sydney_1.aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd",
    	"ocid1.filesystem.oc1.ap_sydney_1.aaaabbbbccccddddabcdabcd1234abcd1234abcd1234abcd1234abcd1234"
    ]
    
  5. Run fs file-system get command (Windows/macOS/Linux) with the name of the OCI File Storage system that you want to examine as the identifier parameter and custom output filters to determine if data replication is enabled for the selected file system:

    oci fs file-system get
    	--file-system-id 'ocid1.filesystem.oc1.ap_sydney_1.aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd'
    	--query 'data."replication-source-count"'
    
  6. The command output should return the replication source for the selected file system. A value of 0 (zero) indicates that no active replication source is available:

    0
    

    If the fs file-system get command output returns 0 (zero), as shown in the example above, active replication is not enabled for the selected Oracle Cloud Infrastructure (OCI) File Storage system.

Remediation / Resolution

To enable and configure active replication for your production Oracle Cloud Infrastructure (OCI) File Storage systems, perform the following operations:

Using OCI Console

  1. Sign in to your Oracle Cloud Infrastructure (OCI) account.

  2. Navigate to File Storage console available at https://cloud.oracle.com/fss/.

  3. In the left navigation panel, choose File Systems, and select an OCI compartment from the Compartment dropdown menu, to list the file systems provisioned in that compartment.

  4. Click on the name (link) of the file system that you want to configure, listed in the Name column.

  5. In the left navigation panel, under Resources, choose Replications, select Create Replication, and perform the following actions to enable replication for the selected OCI File Storage system:

    1. For Name, provide a unique name for the replication instance.
    2. Select Create new target File System and perform the following actions to create an unexported file system in the specified region and availability domain to serve as the target for replicated data:
      1. For Name, provide a name for the target file system.
      2. For Target region, select the appropriate region for the target.
      3. For Availability Domain, select the file system availability domain.
      4. For Create in Compartment, select the appropriate OCI compartment.
      5. For Encryption, choose whether to use an Oracle-managed key or a Customer-Managed Key (CMK) for data encryption. For CMK-based encryption, see File Storage Systems Encrypted with Customer-Managed Keys.
      6. For Replication interval, select the interval (in minutes) that determines the frequency of data replication.
      7. Choose Create to create the replication instance.

Using OCI CLI

  1. Run fs replication create command (Windows/macOS/Linux) to create a replication instance for the specified File Storage system (identified by the --source-id parameter), in the specified OCI compartment. The replication instance defines the policy for cross-region replication between a source and target file system (identified by the --target-id parameter). The replication automatically manages a secondary "ReplicationTarget" resource in another availability domain, sending data deltas between source snapshots for application to the target file system:

    oci fs replication create
    	--display-name 'cc-project5-fs-replication'
    	--compartment-id 'ocid1.tenancy.oc1..aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd'
    	--source-id 'ocid1.filesystem.oc1.ap_sydney_1.aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd'
    	--target-id 'ocid1.filesystem.oc1.ap_sydney_1.aaaabbbbccccddddabcdabcd1234abcd1234abcd1234abcd1234abcd1234'
    
  2. The command output should return the information available for the new replication instance:

    {
    	"data": {
    		"availability-domain": "ABCD:AP-SYDNEY-1-AD-1",
    		"compartment-id": "ocid1.tenancy.oc1..aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd",
    		"defined-tags": {},
    		"delta-progress": 0,
    		"delta-status": "IDLE",
    		"display-name": "cc-project5-fs-replication",
    		"freeform-tags": {},
    		"id": "ocid1.fssreplication.oc1.ap_sydney_1.aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd",
    		"last-snapshot-id": "ocid1.snapshot.oc1.ap_sydney_1.aaaabbbbccccddddabcdabcd1234abcd1234abcd1234abcd1234abcd1234",
    		"lifecycle-details": "",
    		"lifecycle-state": "ACTIVE",
    		"locks": [],
    		"recovery-point-time": "2025-10-16T07:13:05.924000+00:00",
    		"replication-interval": 60,
    		"replication-target-id": "ocid1.fssreplicationtarget.oc1.ap_sydney_1.aaaabbbbccccddddabcdabcd1234abcd1234abcd1234abcd1234abcd1234",
    		"source-id": "ocid1.filesystem.oc1.ap_sydney_1.aaaabbbbccccddddabcd1234abcd1234abcd1234abcd1234abcd1234abcd",
    		"system-tags": {},
    		"target-id": "ocid1.filesystem.oc1.ap_sydney_1.aaaabbbbccccddddabcdabcd1234abcd1234abcd1234abcd1234abcd1234",
    		"time-created": "2025-10-16T07:15:42.898000+00:00"
    	}
    }
    

References

Publication date Nov 11, 2025