Veritas NetBackup™ 52xx Appliance Initial Configuration Guide

Last Published:
Product(s): Appliances (3.1)

Deploying certificates for a credentials broker when the master server is an appliance

To use a credentials broker to authenticate with your cloud provider, you need to deploy certificate files on the NetBackup master server before you can configure the NetBackup CloudCatalyst Appliance. If the master server is an appliance, you need to deploy these certificates using a NetBackupCLI user account.

To deploy certificates on an appliance master server

  1. Gather the client certificate, CA certificate, and client key into the same directory. In this example, the file names are as follows:
    client.pem
    cacert.pem
    client-key.pem
  2. Use the following scp command to copy the PEM files to the appliance master server:

    scp *.pem <NetBackupCLI_user>@master123.example.com:/home/nbusers

    Where <NetBackupCLI_user> is the user name of the NetBackupCLI user.

  3. Use SSH to log onto the appliance as the NetBackupCLI user.
  4. Type the following command to append the CA certificate to the NetBackup cloud store CA certificate bundle:

    nbcldutil appendcert -sourceCert cacert.pem

  5. Type the following commands to copy the client certificate and the client key to the default NetBackup cloud directory (/usr/openv/netbackup/db/cloud):

    nbcldutil copycert -sourcecert client.pem

    nbcldutil copycert -sourcecert client-key.pem