Veritas NetBackup™ 8.0 Plug-in for VMware vCenter Guide

Last Published:
Product(s): NetBackup (8.0)
  1. Introduction and notes
    1.  
      About the NetBackup plug-in for VMware vCenter
    2.  
      Updates to this guide for NetBackup 8.0
    3.  
      Notes and recommendations on the NetBackup plug-in
    4.  
      How to access the features of the NetBackup plug-in
  2. Installing the NetBackup Plug-in for vCenter
    1.  
      Requirements for the NetBackup plug-in for vCenter
    2.  
      Configuration overview for the NetBackup plug-in for vCenter
    3.  
      Consistent naming for the vCenter server
    4.  
      Upgrading the NetBackup plug-in for vCenter
    5.  
      Installing the NetBackup plug-in for vCenter
    6.  
      Disabling or uninstalling the NetBackup plug-in for vCenter
    7.  
      Manually unregistering the NetBackup plug-in for vCenter
  3. Monitoring backup status
    1. Configure the NetBackup plug-in for vCenter for backup monitoring
      1.  
        Installing an SSL certificate from a Certificate Authority
      2.  
        Installing the trusted SSL certificate
      3.  
        Setting vCenter privileges for backup monitoring
    2.  
      Veritas NetBackup tab in vSphere Client
    3.  
      Summary display
    4.  
      Virtual Machines display
    5.  
      Events display
    6.  
      Using the Veritas NetBackup tab for backup reporting
    7.  
      How to respond to backup status
  4. Recovering virtual machines
    1. Configure the NetBackup Recovery Wizard
      1. Creating an authentication token
        1.  
          Revoking an authorization token
        2.  
          Listing all current authorization tokens
      2.  
        Authorizing the plug-in to restore virtual machines
      3.  
        Setting vCenter privileges for recovering virtual machines
    2.  
      Notes on restoring virtual machines with the NetBackup Recovery Wizard
    3.  
      How to access the NetBackup Recovery Wizard
    4. NetBackup Recovery Wizard screens
      1.  
        Select source virtual machine
      2.  
        Select Backup
      3.  
        Destination Options
      4.  
        Transport Modes
      5.  
        Disk Options
      6.  
        Virtual Machine Options
      7.  
        Network Connectivity Options
      8.  
        Recovery Summary
  5. Troubleshooting
    1.  
      The NetBackup vCenter plug-in does not appear in vSphere Client
    2.  
      Reducing the load time for the NetBackup vCenter plug-in
    3.  
      The Network Properties screen in the Deploy OVF Template wizard does not display properly
    4.  
      The Veritas NetBackup tab is blank
    5.  
      The Recovery Wizard does not find any backup images
    6.  
      The Recovery Wizard does not find a particular backup image

Installing an SSL certificate from a Certificate Authority

Optionally for the NetBackup plug-in for vCenter, you can install an SSL certificate from a Certificate Authority that you trust. To do so, you must have both an SSL certificate and an accompanying chain certificate. This procedure renames the alias of the existing certificate for the Apache Tomcat® server that is packaged with the NetBackup plug-in for vCenter. Only one alias can exist for the certificate for Tomcat.

If you do not install an SSL certificate from a CA, you may be prompted to install a certificate.

See Installing the trusted SSL certificate.

To install an SSL certificate from a Certificate Authority

  1. Enable SSH on the NetBackup plug-in for vCenter virtual appliance, as follows:

    a.

    Log on to the plug-in virtual appliance by using a vSphere console.

    b.

    Edit the /etc/ssh/sshd_config file and set PermitRootLogin to yes.

    c.

    Start the sshd service by entering the following command:

    /etc/init.d/sshd start

  2. Ensure that the JRE_HOME environment variable on the virtual appliance is set to /opt/SYMCnbvcPlugin/jre.
  3. Copy the SSL certificate and chain certificate to the virtual appliance. Use secure file transfer to copy the files.
  4. Stop the Apache Tomcat server by entering the following command on the virtual appliance:

    /opt/SYMCnbvcPlugin/tomcat/bin/shutdown.sh

  5. Change the alias of the existing certificate in the keystore by entering the following command on the virtual appliance:

    /opt/SYMCnbvcPlugin/jre/bin/keytool - changealias - alias "tomcat" - destalias new_alias_name - keystore /root/.keystore

    The value of the new_alias_name is not significant for this operation.

    Note:

    The keystore password is located in the Tomcat configuration file (/opt/SYMCnbvcPlugin/tomcat/conf/server.xml)

  6. Import the chain certificate into the keystore by entering the following command on the virtual appliance:

    /opt/SYMCnbvcPlugin/jre/bin/keytool - import - alias "root" - keystore /root/.keystore - trustcacerts - file chain_certficiate_file

  7. Import the SSL certificate into the keystore by entering the following command on the virtual appliance:

    /opt/SYMCnbvcPlugin/jre/bin/keytool - import - alias "tomcat" - keystore /root/.keystore - file ssl_certificate_file

  8. Start the Tomcat server by entering the following command on the virtual appliance:

    /opt/SYMCnbvcPlugin/tomcat/bin/startup.sh

  9. Disable SSH on the virtual appliance, as follows:

    a.

    Edit the /etc/ssh/sshd_config file and set PermitRootLogin to no.

    b.

    Stop the sshd service by entering the following command:

    /etc/init.d/sshd stop