Veritas NetBackup™ 53xx Appliance Initial Configuration Guide
- Preparing for initial configuration
- Guidelines for NetBackup 53xx initial configuration
- About the NetBackup appliance initial configuration checklist
- Initial configuration procedures
- Post configuration procedures
Guidelines for NetBackup 53xx initial configuration
Review the following guidelines before you perform the initial configuration on a new 53xx appliance:
Table: NetBackup 53xx appliance configuration guidelines
When you perform the appliance initial configuration, you must take precautions to avoid loss of connectivity. Any loss of connectivity during initial configuration results in failure.
The computer that you use to configure the appliance should be set up to avoid the following events:
Before the configuration, gather the following information:
New NetBackup appliances are shipped with the following default log-in credentials:
The appliance comes configured with a known default password for the Maintenance user account. You should change this password either before or immediately after the initial configuration to prevent unauthorized access to the appliance maintenance mode. Note that you must provide the Maintenance user password to Veritas Technical Support in the event that the appliance requires troubleshooting services.
Each initial configuration procedure includes a step that describes how to change the default maintenance user password.
Make sure that the following ports are open on any firewall that exists between a master server and a media server:
For more information about firewall ports for NetBackup and the NetBackup appliance, see the following tech note on the Veritas Support website:
The NetBackup 53xx series appliances can only be configured as a media server.
Before you configure this appliance as a media server, the master server that you plan to use with it must be updated with the new appliance media server name. Whether the master server is a NetBackup appliance or a traditional NetBackup master server, the name of the new appliance media server must be added to thelist on the master server.
Adding the new appliance media server name to the master server before the new appliance is configured provides the following benefits when performing the initial configuration on the new appliance:
Security certificate requirements
NetBackup Appliance release 3.2 introduces support for external certificate authority certificates. This feature provides an alternative to using the NetBackup Certificate Authority for host verification and security. To configure this appliance as a media server, you have to deploy security certificates on the appliance to trust the master server.
If the master server is operating with an external CA issued certificate only, this appliance media server requires configuration with an issued certificate from the same external CA. For CA certificate provisioning, the Host certificate, Trusted certificate, Private Key certificate file, and the use of a Certificate Revocation List (CRL) are all required to proceed with the media server role configuration.
If the master server uses both an external CA issued certificate and a NetBackup CA-signed certificate, you can choose to configure this media server appliance with a certificate issued by the same external CA or with a NetBackup CA-signed certificate. If the master server is using a NetBackup CA-signed certificate only, a CA certificate and a host ID-based certificate must be deployed from the master server that you plan to use with this appliance. The CA certificate is automatically downloaded and deployed if you select to trust the master server.
To deploy the host ID-based certificate:
Regardless of the master security level, if the appliance is ever factory reset or re-imaged, a reissue token is required when the appliance is reconfigured.
If the security certificates have been deployed on the appliance media server, you are not requested to deploy them again during the role configuration.
For more information about security certificates, refer to the chapter Security certificates in NetBackup in the NetBackup Security and Encryption Guide.
Starting with appliance release version 3.1, you can deploy 53xx series appliances for a high availability (HA) solution. An HA configuration uses two NetBackup 53xx appliances that are designated as a compute node and a partner node. These nodes are connected to each other and also to specific channels on the same Primary Storage Shelf.
A NetBackup appliance HA configuration must use two identical appliances with regard to the model number, the hardware configuration, and the appliance software version as follows:
You can set up an HA configuration as follows:
When you set up the HA configuration, the host name and the IP address of the first configured or existing media server are automatically elevated as the virtual host name and IP address for the HA configuration. You must provide a new host name and IP address for this media server at that time.
If you plan to use Active Directory (AD) authentication, do not set up the HA configuration until after you update the AD server with the host names and IP addresses of the HA configuration. The virtual host name and virtual IP address, along with the host name and IP address for each node are required on the AD server before setting up the HA configuration. Otherwise, AD users may experience problems when they access the system.
If you plan to use a NetBackup client to manage the NetBackup jobs, add the three host names to the
The appliance comes with a not for resale (NFR) license key that expires after a specific period of time. The appliance does not provide a warning message that this license key is about to expire. Therefore, Veritas recommends that you change this key to a permanent key after you install and configure the appliance. See the NetBackup Appliance Administrator's Guide for information and instructions on how to view and change a license key.
Replace the NFR keys with permanent keys before they expire.
Optimized Share Reserve storage
If you plan to use the Copilot feature, it is recommended that you create any Optimized Share Reserve during the initial configuration. An Optimized Share Reserve can also be created after the initial configuration is completed. For example, when you add an Expansion Storage Shelf to an existing or operational 53xx appliance.
An Optimized Share Reserve can be created only as follows: