Veritas NetBackup™ Virtual Appliance Documentation

Creating a deployment policy

1. In the NetBackup Administration Console, in the left pane, select Deployment Management > Deployment Policies.
2. From the Actions menu, select New Deployment Policy.
3. Enter a unique name for the new policy in the Add a New Deployment Policy dialog box.
4. Click OK.
5. Specify the information that is shown on the Attributes tab in the Change Deployment Policy window:

   • Package: Select the package that you want deployed from the drop-down menu.

     Note:

     Specifying a package that supports external certificate authority certificates presents you with an additional tab titled Security. That tab is covered later in this procedure.

   • Media server: Specify the media server from drop-down. The media server that is specified is used to connect and transfer files to the NetBackup hosts that are included in the policy. The media server also caches the files from the NetBackup repository. The media server must be version NetBackup 8.1.2 or later. Since the repository resides on the primary server, the primary server is the default value for the media server field.

   • Java GUI and JRE: Specify if you want the Java GUI and the JRE upgraded on the target systems. The three options include:

     • INCLUDE: Install or upgrade the Java GUI and JRE components on the specified computers.

     • EXCLUDE: Exclude the Java GUI and JRE components from the specified computer. Any preexisting NetBackup Java GUI and JRE packages are removed.

     • MATCH: Preserve the current state of the Java GUI and JRE components. The components are upgraded if they are present on the pre-upgraded system. The components are not installed if they are not present on the pre-upgraded system.

   • (Conditional): Select the Limit simultaneous jobs option and specify a value for jobs to limit the total number of concurrent jobs that can run at a time. The minimum value is 1 and the maximum value is 999.

     If the check box is selected, the default value is 3. If you do not select the check box, no limit is enforced for the simultaneous upgrade jobs.

     You can set unlimited simultaneous upgrade jobs through command line interface by setting the value as 0.

   • Select hosts: Select hosts from the Available hosts list and select Add to add hosts to the deployment policy. The list is generated from hosts in the host database and backup policies. Once you select Add, the hosts are shown under Selected hosts.

6. Select the Schedules tab in the Change Deployment Policy window.

   You can see a summary of all schedules within that policy.

7. Select New.
8. Specify the information that is shown in the Add Deployment Schedule window.

   • Name: Enter a name for the new schedule.

   • Type: Specify the type of schedule you want created.

     Schedule types:

     • Precheck

       Performs the various precheck operations, including confirming there is sufficient space on the client for the update. The precheck schedule type does not exist for EEB packages.

     • Stage

       Moves the update package to the client, but does not install it. Also performs the precheck operation.

     • Install

       Installs the specified package. Also performs the precheck and the stage package operations. If you already performed the stage package operation, the install schedule does not move the package again.

     Note:

     Please be aware that adding multiple different schedule types to the same deployment schedule window has unpredictable results. VxUpdate has no defined behavior to determine which schedule type runs first. If a single deployment schedule window has precheck, stage, and install jobs, there is no way to specify the order in which they run. The precheck or the stage schedules can fail, but the install completes successfully. If you plan to use precheck, stage, and install schedules, it is recommended that you create separate schedules and separate windows for each.

   • Starts: Specify the date and time you want the policy to start in the text field or with the date and the time spinner. You can also click the calendar icon and specify a date and time in the resulting window. You can select a schedule by clicking and dragging over the three-month calendar that is provided at the bottom of the window.

   • Ends: Specify the date and time you want the policy to end as you specified the start time.

   • Duration: Optionally, you can specify a duration in days, hours, minutes, and seconds instead of an end time for the policy. The minimum value is 5 minutes and the maximum is 99 days.

   • Select Add/OK and the schedule is created. Select OK to save and create your policy.

9. A Security tab appears when you select a deployment package that contains support for external certificate authorities.

   By default, the Use existing certificates when possible option is selected. This option instructs NetBackup to use the existing NetBackup CA or external CA certificates, if available.

   Note:

   If you specify this option and certificates are not available, your upgrade fails.

   Deselecting the Use existing certificates when possible option lets you specify the location for external certificate authority information for both UNIX and Linux computers and Windows computers.

   Deselecting this option does not allow the user to change the security configuration settings during the upgrade.

10. Windows clients have Use Windows certificate store selected by default.

    You must enter the certificate location as Certificate Store Name\Issuer Distinguished Name\Subject Distinguished Name.

    Note:

    You can use the $hostname variable for any of the names in the certificate store specification. The $hostname variable evaluates at run time to the name of the local host. This option provides flexibility when you push NetBackup software to a large number of clients.

    Alternatively, you can specify a comma-separated list of Windows certificate locations. For example, you can specify: MyCertStore\IssuerName1\SubjectName, MyCertStore\IssuerName2\SubjectName2, MyCertStore4\IssuerName1\SubjectName5

    Then select the Certificate Revocation List (CRL) option from the radio buttons shown:

    • Do not use a CRL. No additional information is required.

    • Use the CRL defined in the certificate. No additional information is required.

    • Use the CRL at the following path: You are prompted to provide a path to the CRL.

11. For both UNIX and Linux clients and Windows clients that select the From certificate file path (for file-based certificates) option, specify the information as shown:

    • Certificate file: This field requires you to provide the path to the certificate file and the certificate file name.

    • Trust store location: This field requires you to provide the path to the trust store and the trust store file name.

    • Private key path: This field requires you to provide the path to the private key file and the private key file name.

    • Passphrase file: This field requires you to provide the path of the passphrase file and the passphrase file name. This field is optional.

    • Then specify the correct CRL option for your environment:

      • Do not use a CRL. No additional information is required.

      • Use the CRL defined in the certificate. No additional information is required.

      • Use the CRL at the following path: You are prompted to provide a path to the CRL.

To change a deployment policy

1. Right click on the deployment policy and select Change.
2. Navigate through the deployment policy tabs and make any necessary changes to the policy.
3. Select OK and the policy is updated.

Deleting a deployment policy

1. Right click on the deployment policy and select Delete.
2. Select OK.
3. Confirm the deletion of the policy.