Veritas NetBackup™ for Nutanix Acropolis Hypervisor (AHV) Administrator's Guide
- Introduction to NetBackup for Acropolis Hypervisor (AHV)
- Prerequisites and things to consider before using Nutanix for AHV
- Configuring NetBackup communication with AHV
- Configuring secure communication between the Nutanix Acropolis Hypervisor server and NetBackup host
- Managing SSL certificates through ECA framework
- Adding a backup host to the NetBackup master server
- Configuring NetBackup policies for AHV
- Backup and recovery
- Back up the Nutanix AHV virtual machines
- Overview of the Nutanix AHV virtual machines recovery process
- Recovering a Nutanix AHV VM using the command line for Hypervisor policy
- Troubleshooting issues
- Appendix A. NetBackup commands to backup and restore Nutanix AHV virtual machines
- Appendix B. Protect Nutanix AHV virtual machines with BigData policy
Configuring secure communication between the Nutanix Acropolis Hypervisor server and NetBackup host
Till NetBackup release 8.2, NetBackup provided configuration settings through a Nutanix specific configuration file
nb_nutanix-ahv.conf to validate the AHV cluster based on the cluster's public x509 certificate that the AHV server returns during the communication.
NetBackup now supports peer certificate validation for all virtualization servers like VMware, RHV Manager, and Nutanix Acropolis Cluster through a common External Certificate Authority (ECA) framework. This common framework can work with a single set of configuration parameters for all virtualization workloads and provides additional validations like certificate revocation lists.
If you are upgrading from NetBackup 8.2, and you had previously set enable_ssl_validations to false in the nb_nutanix-ahv.conf file, and want to continue skipping certificate validation, no further action is required.
You can then skip rest of this section, and See Adding the Nutanix Acropolis Hypervisor Cluster credentials for NetBackup.
This framework requires a certificate bundle on each backup host that can contain certificates from one or more Certificate Authorities (CAs). In absence of centralized CAs, even self-signed certificates from different servers can be added to this bundle.
To set the common external CA parameters in NetBackup, See Managing SSL certificates through ECA framework.
Note that when you configure the SSL parameters in NetBackup, you must ensure that the values that you provide for the following options matches with the Acropolis cluster name that is present in the Nutanix SSL certificate:
name while adding the Acropolis Cluster credentials in NetBackup
Application_Server parameter while configuring the backup policy
If you use the default certificates from Nutanix that contain the Common Name field as CN=*.nutanix.local, NetBackup might fail the SSL validations and not let you backup the AHV VMs. In this scenario, skip the SSL validations. If you want to skip certificate validation, set enable_ssl_validations to false in nb_nutanix-ahv.conf. You can then skip rest of this section, and See Adding the Nutanix Acropolis Hypervisor Cluster credentials for NetBackup.