Veritas NetBackup™ Flex Scale Administrator's Guide

Last Published:
Product(s): Appliances (3.2)
Platform: NetBackup Flex Scale OS
  1. Product overview
    1.  
      About Veritas NetBackup™ Flex Scale
  2. Viewing information about the NetBackup Flex Scale cluster environment
    1.  
      Accessing NetBackup Flex Scale and NetBackup
    2.  
      Accessing the NetBackup web user interface on the appliance
    3.  
      About the NetBackup Flex Scale web UI
    4.  
      About the NetBackup Flex Scale infrastructure management UI
    5. About the Dashboard view
      1.  
        Viewing all the activities
    6.  
      Working with NetBackup Flex Scale APIs
  3. NetBackup Flex Scale infrastructure management
    1. User management
      1.  
        Considerations for managing NetBackup Flex Scale users
      2.  
        Adding users
      3.  
        Changing user password
      4.  
        Removing users
      5.  
        Modifying user roles
      6.  
        Considerations for configuring AD/LDAP
      7.  
        Configuring AD server for Universal shares and Instant Access
      8.  
        Configuring AD/LDAP servers for NetBackup services
      9.  
        Configuring additional AD/LDAP servers for managing NetBackup services/Universal Shares/Instant Access
      10.  
        Configuring AD/LDAP servers on clusters deployed with only media servers
      11.  
        Directory services and certificate management
    2.  
      Region settings management
    3.  
      About NetBackup Flex Scale storage
    4. About Universal Shares
      1.  
        Creating a Protection Point for a Universal Share
    5.  
      Cloud bucket support for NetBackup Flex Scale
    6.  
      Backing up data to Data Domain storage
    7. Node and disk management
      1.  
        NetBackup Flex Scale network cabling
      2. Adding a node to the cluster using the NetBackup Flex Scale web interface
        1.  
          Considerations for adding a node when disaster recovery is configured
      3.  
        Adding a node using the REST APIs
      4.  
        Replacing a node in a cluster
      5.  
        Starting and stopping nodes
      6.  
        Rebooting a node
      7.  
        Adding an excluded node to the cluster
      8.  
        Replacing a disk
      9.  
        Adding an excluded disk to the cluster
      10.  
        Viewing the disk sync status
      11.  
        Viewing disk details
      12.  
        Viewing node details
      13.  
        Switching management console to another cluster node
    8. License management
      1.  
        Adding and removing storage licenses
    9.  
      Stopping NetBackup service containers
    10.  
      Starting NetBackup service containers
    11. Managing the Fibre Channel ports
      1. Requirements
        1.  
          Connectivity requirements for Fibre Channel
        2.  
          Storage unit (STU) requirements
      2.  
        Enabling BOM (Bill of Materials) configuration for Fibre Channel
      3.  
        Assigning Fibre Channel ports
      4.  
        Discovering attached devices
      5.  
        Rescanning Fibre Channel cards
      6.  
        Cleaning Fibre Channel ports
      7.  
        Unassigning Fibre Channel ports
      8.  
        Viewing details about the Fibre Channel ports
      9.  
        Disabling BOM (Bill of Materials) configuration for Fibre Channel
    12. Managing hardware vendor packages
      1.  
        Upgrading vendor packages
      2.  
        Uninstalling vendor packages
    13.  
      Updating credentials for HPE iLO administrator users
  4. NetBackup Flex Scale network management
    1.  
      About network management
    2.  
      Modifying DNS settings
    3.  
      Configuring MTU on public interfaces
    4.  
      Configuring the console FQDN
    5.  
      About bonding Ethernet interfaces
    6. Bonding operations
      1. Bonding operations on data network
        1.  
          Creating a bond
        2.  
          Modifying a bond
        3.  
          Removing a bond
      2. Bonding operations on management network
        1.  
          Creating a bond
        2.  
          Modifying a bond
        3.  
          Removing a bond
    7.  
      Configuring NetBackup Flex Scale in a non-DNS environment
    8. Data network configurations
      1.  
        Choosing the correct input method for data network configuration
      2. Network configuration on plain device (eth5)
        1.  
          Adding a data network
        2.  
          Modifying a data network
        3.  
          Deleting a data network
      3.  
        Network configuration on VLAN (eth5)
      4. Network configuration on bonded interfaces (bond0 on eth5 and eth7)
        1.  
          Adding a data network
      5.  
        VLAN on bond of eth5 and eth7 (bond0)
      6.  
        Network configuration on management interface (eth1)
      7.  
        Network configurations for adding a partial data network
      8.  
        Support for multiple VLAN when disaster recovery is configured
    9.  
      Configuring static routes on a NetBackup Flex Scale cluster
  5. NetBackup Flex Scale infrastructure monitoring
    1. About alert management
      1.  
        Viewing information about alerts
      2.  
        Managing alerts
    2. About event notification
      1.  
        Purging events
    3. About AutoSupport and Call Home
      1.  
        Setting up email alerts
      2.  
        Setting up SNMP alerts
      3.  
        Configuring Call Home settings
    4. Monitoring hardware components
      1.  
        Monitoring deviations in firmware, driver, and utilities
    5.  
      Performing health check for the cluster
    6.  
      Locating the disks
    7.  
      Monitoring usage and licensed capacity using Veritas NetInsights Console
  6. Resiliency in NetBackup Flex Scale
    1.  
      Erasure coding in NetBackup Flex Scale
    2.  
      Handling split-brain scenario in NetBackup Flex Scale
    3.  
      High availability of the NetBackup primary service
    4.  
      High availability of NetBackup services
    5.  
      NetBackup catalog protection
    6. NetBackup primary service catalog protection using checkpoints
      1.  
        Performing a recovery of the catalog file system using GUI
      2.  
        Performing a recovery of the catalog file system using REST APIs
  7. EMS server configuration
    1.  
      Configuring an external BYOS media server
    2.  
      Configuring an external NBA media server
  8. Site-based disaster recovery in NetBackup Flex Scale
    1.  
      About site-based disaster recovery in NetBackup Flex Scale
    2.  
      Configuring disaster recovery using GUI
    3.  
      Clearing the host cache
    4.  
      Automated NetBackup SLP management
    5.  
      DNS key management
    6.  
      Managing disaster recovery using GUI
    7. Performing disaster recovery using RESTful APIs
      1.  
        Establishing trust and setting up authentication
      2.  
        Configuring disaster recovery
      3.  
        Managing disaster recovery
    8.  
      Active-Active disaster recovery configuration
    9.  
      NetBackup optimized duplication using Storage Lifecycle Policies
  9. NetBackup Flex Scale security
    1.  
      About the security meter
    2. STIG overview for NetBackup Flex Scale
      1.  
        STIG-compliant password policy rules
      2.  
        Enabling STIG for NetBackup Flex Scale
      3.  
        Viewing the NetBackup Flex Scale STIG status
    3. FIPS overview for NetBackup Flex Scale
      1.  
        Viewing the NetBackup Flex Scale FIPS status
    4.  
      Managing the login banner
    5.  
      Changing the password policy
    6. Support for immutability in NetBackup Flex Scale
      1.  
        About lockdown modes
      2.  
        Selecting or changing the lockdown mode
      3.  
        Restricted access to Remote Management Platform (HPe iLO)
      4.  
        Configuring immutability using GUI
    7.  
      Authenticating users using digital certificates or smart cards
    8.  
      About system certificates on NetBackup Flex Scale
    9. Deploying external certificates on NetBackup Flex Scale
      1.  
        Deploying ECA using the GUI
      2.  
        Log locations
      3.  
        Considerations for performing other operations when ECA is deployed
    10.  
      Configuring isolated recovery environment (IRE)
  10. Configuring multifactor authentication
    1.  
      About multifactor authentication
    2.  
      Considerations before configuring multifactor authentication
    3.  
      Configuring multifactor authentication for your user account
    4.  
      Disabling multifactor authentication for your user account
    5.  
      Enforcing multifactor authentication for all users
    6.  
      Configuring multifactor authentication for your user account when it is enforced in the cluster
    7.  
      Resetting multifactor authentication for a user
  11. Single Sign-On (SSO)
    1.  
      About single sign-on (SSO) configuration
    2.  
      Configuring SSO on a NetBackup Flex Scale cluster on which both primary and media servers are deployed
    3.  
      Configuring SSO on a NetBackup Flex Scale cluster on which only media servers are deployed
  12. Appendix A. Maintenance procedures for HPE servers
    1.  
      Replacement procedure for a chassis fan
    2.  
      Replacement procedure for power supply
    3.  
      Replacement procedure for a single OS disk
    4.  
      Replacement procedure for both OS disks on a non- management console node
    5.  
      Replacement procedure for NVMe disks (SSDs)
    6.  
      Replacement procedure for RAID controller
    7.  
      Replacement procedure for an Integrated Lights-Out (iLO) port
    8.  
      Replacement procedure for quad-port NIC
    9.  
      Procedure for memory expansion (DIMMs)
    10.  
      Replacement procedure for memory (DIMMs)
    11.  
      Replacement procedure for Mellanox port
    12.  
      Replacement procedure for SFP port
    13.  
      Replacement procedure for chassis
    14.  
      Replacement procedure for a hard disk drive
    15.  
      Replacement procedure for a Fibre Channel card for a cluster node
    16.  
      Replacement procedure for a Fibre Channel card for a node that is not in a cluster
  13. Appendix B. Configuring NetBackup optimized duplication
    1. Configuring a Storage Lifecycle Policy for optimized duplication
      1.  
        Creating a Storage Lifecycle Policy for optimized duplication
      2.  
        Configuring a policy to use an SLP
      3.  
        Updating the policy to reverse the replication direction
  14. Appendix C. Disaster recovery terminologies
    1.  
      VVR technology in disaster recovery
    2.  
      About response fields in the GET disaster recovery API
  15. Appendix D. Configuring Auto Image Replication
    1.  
      Auto Image Replication configuration

Configuring SSO on a NetBackup Flex Scale cluster on which only media servers are deployed

Configuring SSO on NetBackup Flex Scale cluster on which only media servers are deployed involves the following steps:

Table:

Task

Description

Configuring SSO on an NetBackup Flex Scale cluster

See To configure SSO on cluster on which only media servers are deployed

Adding users/group

See Directory services and certificate management.

See Adding users.

Note:

SSO can be configured only for AD/LDAP users for media server only deployment.

Configuring an identity provider

See To configure an identity provider

Logging into NetBackup Flex Scale with SSO

See Login with SSO

Configuring SSO on an NetBackup Flex Scale cluster

To configure SSO on cluster on which only media servers are deployed

  1. Go to Settings > Security management > Single sign-on (SSO). Click Add.
  2. Give the IDP name and upload the IDP metadata xml and optionally provide the custom user field and group field values. The user field and group field values should be same as configured on the IDP. Click Save.

    The UI displays a message that confirms that the add identity provider task is triggered. You can click View Details to see the progress of the task. Alternatively, you can also click the Recent Activity icon from the top right of the UI to see the status of the most recent operations.

  3. Once the configuration is complete, the SSO identify provider details are displayed on the screen. Click Download service provider xml to download the details and upload it on IDP server, if required.
Configuring an identity provider

To configure an identity provider

Logging into NetBackup Flex Scale with SSO

Login with SSO

  1. Navigate to infrastructure GUI login page. Click Sign-in with single sign-on (SSO).
  2. Enter SSO credentials and click Sign in.
Limitations

There are some limitations when you configure SSO on a NetBackup Flex Scale cluster on which only media servers are deployed.

  • Identity provider cannot be edited. It can be removed and added again.

  • Single logout is not implemented. If SAML users log out of the application, and try to login with SSO again, the user is not asked for their login credentials unless the SSO session has expired. This applies to any other application using the same IDP.

  • If after identity provider configuration, External certificate authority (ECA) is configured, then login with SSO does not work until the identity provider is updated with the latest service provider metadata xml from the NetBackup Flex Scale. This can be done by downloading the service provider metadata xml from Settings > Security > Single-Sign on > Download service provider metadata. This metadata needs to be updated on the IDP side.

  • AD/IDP server date, time, and time zone should be the same as the NetBackup Flex Scale cluster. Else, the SSO login fails.

Log location

The logs can be found by logging into the NetBackup Flex Scale CLISH, elevating to root and accessing the logs at:

  • /log/VRTSnas/ nbu_sso_config.log

  • /log/VRTSnas/isagui_webserver.log

  • /log/VRTSnas/ isagui_sso_config.log

The Table: Common error messages lists the common error messages.

Table: Common error messages

Error message

Description

User is not authorized

User is a valid AD/LDAP and IDP user but does not have the Appliance administrator role in NetBackup Flex Scale user management.

User principal name missing/
Failed to get user details from 
identity provider

SAML response from the IDP does not contain the user field. This can be due to userPrincipalName field attribute mapping not being created on the IDP side or the custom attribute name is different on the IDP side as provided in the NetBackup Flex Scale.

Authentication Failed, Invalid 
document signature

Date and time of Identity provider does not match with NetBackup Flex Scale cluster, Identity provider certificate is not updated with latest NetBackup primary certificate, or the certificate revocation check is not disabled on the identity provider.

Authentication Failed, 
SAML assertion is not yet valid

Date and time of Identity provider do not match with NetBackup Flex Scale cluster. 

Single sign-on failed due to an 
internal error

Processing SAML callback response failed on NetBackup Flex Scale side due to some exception.