NetBackup™ for Nutanix AHV Administrator's Guide

Last Published:
Product(s): NetBackup & Alta Data Protection (11.0)
  1. Overview
    1.  
      Overview of configuring and protecting AHV assets in the NetBackup web UI
  2. RBAC roles for the Nutanix AHV administrator
    1.  
      RBAC roles for the Nutanix AHV administrator
    2.  
      Assign both the Default VMware Administrator and Default AHV Administrator roles to a user
    3.  
      Create a custom role for all Nutanix AHV permissions and additional VMware asset permissions
    4.  
      Create a custom role for all VMware permissions and additional Nutanix AHV asset permissions
  3. Managing AHV clusters
    1.  
      Quick configuration checklist to protect AHV virtual machines
    2.  
      Configure secure communication between the AHV cluster and NetBackup host and Nutanix Prism Central and NetBackup host
    3.  
      Enable the iSCSI initiator service on windows backup host
    4.  
      Install the iSCSI initiator package on Linux backup host
    5.  
      Migrate Java GUI/CLI added clusters into the web UI
    6.  
      Prerequisites to configure Nutanix AHV cluster
    7.  
      About support for Nutanix segmented iSCSI network
    8.  
      Configure CHAP settings for iSCSI secure communication with AHV clusters
    9.  
      About the ports that NetBackup uses to communicate with AHV
    10.  
      Add or browse an AHV cluster
    11.  
      Remove AHV Clusters
    12.  
      Add a new Nutanix Prism Central
    13.  
      Add new Prism Central server credentials
    14.  
      Remove Nutanix Prism Central
    15.  
      Create an intelligent VM group
    16.  
      Assign permissions to the intelligent VM group
    17.  
      Update the intelligent VM group
    18.  
      Remove the intelligent VM group
    19.  
      Set CHAP for iSCSI
    20.  
      Add an AHV access host
    21.  
      Remove an AHV access host
    22.  
      Change resource limits for AHV resource types
    23.  
      Change the autodiscovery frequency of AHV assets
    24. Scan for malware
      1.  
        Scanning backup images
      2.  
        Assets by workload type
  4. Managing credentials
    1. Managing AHV cluster credentials
      1.  
        Add new cluster credentials
      2.  
        Update and validate AHV cluster credentials
    2. Managing Nutanix Prism Central credentials
      1.  
        Add new Nutanix Prism Central credentials
      2.  
        Update and validate Nutanix Prism Central credentials
    3.  
      View the credential name that is applied to an asset
    4.  
      Edit or delete a named credential
  5. Instant access
    1.  
      Things to consider and limitations before you use the instant access feature
    2.  
      Download files and folders from a VM backup image
    3. Instant access Build Your Own (BYO)
      1.  
        Prerequisites of Instant Access Build Your Own (BYO)
      2.  
        Hardware configuration requirement of Instant Access Build Your Own (BYO)
      3.  
        Frequently asked questions
  6. Protecting AHV virtual machines
    1.  
      Things to know before you protect AHV virtual machines
    2.  
      Protect AHV VMs or intelligent VM groups using Protection plan
    3.  
      Backup AHV VMs or intelligent groups using Policy
    4.  
      Protect AHV VMs within VPC
    5.  
      Customize protection settings for an AHV asset
    6.  
      Modify policy for an AHV asset
    7.  
      Schedules and retention
    8.  
      Backup options
    9.  
      Prerequisite to Enable virtual machine quiescing
    10.  
      Remove protection from VMs or intelligent VM groups
    11.  
      View the protection status of VMs or intelligent VM groups
  7. Recovering AHV virtual machines
    1.  
      Things to consider before you recover the AHV virtual machines
    2.  
      About the pre-recovery check
    3.  
      Recover an AHV virtual machine
    4.  
      Recover an AHV VM within VPC
    5.  
      About Nutanix AHV agentless files and folders restore
    6.  
      Prerequisites for agentless files and folder recovery
    7.  
      SSH key fingerprint
    8.  
      Recover files and folders with Nutanix AHV agentless restore
    9.  
      Recovery target options
    10.  
      Pre-recovery checks for Nutanix AHV
    11.  
      About Nutanix-AHV agent-based files and folders restore
    12.  
      Prerequisites for agent-based files and folder recovery
    13.  
      Recover files and folders with Nutanix AHV agent based restore
    14.  
      Limitations
  8. Protecting Nutanix Cloud Clusters (NC2)
    1.  
      Protecting Nutanix Cloud Clusters (NC2) on AWS
    2.  
      Protecting Nutanix Cloud Clusters (NC2) on Azure
  9. Troubleshooting AHV operations
    1.  
      Troubleshooting tips for NetBackup for AHV
    2.  
      Error during AHV credential addition
    3.  
      Error during the AHV virtual machines discovery phase
    4.  
      Errors for the Status for a newly discovered VM
    5.  
      Error run into while backing up AHV virtual machines
    6.  
      Error while restoring AHV virtual machines
  10. API and command line options for AHV
    1.  
      Using APIs and command line options to manage, protect, or recover AHV virtual machines
    2.  
      Additional NetBackup options for AHV configuration
    3.  
      Additional information about the rename file

Frequently asked questions

Here are some frequently asked questions for instant access Build Your Own (BYO).

Table: Frequently asked questions

Frequently asked question

Answer

How can I enable instant access file browsing (for file download and restore) on BYO after the storage is configured or upgraded without the docker/podman installed?

Perform the steps in the following order:

  1. Install the required docker/podman version.

  2. Start using the Instant Access feature.

    For example, you can download files, restore files, and so on.

How can I enable the Nutanix AHV instant access feature on BYO after storage is configured or upgraded without the nginx service installed?

Perform the steps in the following order:

  1. Install the required nginx service version.

  2. Ensure that the new BYO nginx configuration entry: /etc/nginx/conf.d/byo.conf is part of the HTTP section of the original: /etc/nginx/nginx.conf file.

  3. Run the command: /usr/openv/pdde/vpfs/bin/vpfs_config.sh --configure_byo

How can I resolve the following issue in the vpfs-config.log file that is raised from: Verifying that the MSDP REST API is available via https on port 10087

Perform the steps in the following order:

  1. Install the policycoreutils and policycoreutils-python packages through yum tool.

  2. Add the following rules that SELinux requires for Nginx to bind on the 10087 port.

    • semanage port -a -t http_port_t -p tcp 10087

    • setsebool -P httpd_can_network_connect 1

  3. Run the following command: /usr/openv/pdde/vpfs/bin/vpfs_config.sh --configure_byo

Instant Access for BYO uses a self-signed certificate by default and only supports *.pem external certificate.

How do I replace it with a certificate signed by external CA (*.pem certificate), if required?

To configure the external certificate, perform the following steps. If the new certificate is already generated (the certificate must contain long and short host names for the media server), go to step 4.

  1. Create the RSA public or private key pair.

  2. Create a certificate signing request (CSR).

    The certificate must contain long and short host names for the media server.

  3. The External Certificate Authority creates the certificate.

  4. Replace <PDDE Storage Path>/spws/var/keys/spws.cert with the certificate and replace <PDDE Storage Path>/spws/var/keys/spws.key with the private key.

  5. Run the following command to reload the certificate:

    /usr/openv/pdde/vpfs/bin/vpfs_config.sh --configure_byo

How can I disable media automount for the instant access livemount share in gnome?

If the automount is enabled, the source folder is mounted from the livemount share in gnome and smaller disks appear. In this scenario, the instant access feature does not work properly.

The mounted disk content source is from the .../meta_bdev_dir/... folder under livemount share, while the mount target is in the /run/media/... folder.

Follow the guideline to disable the gnome automount:

https://access.redhat.com/solutions/20107

How can I resolve the following issue in the /var/log/vpfs/vpfs-config.log file?

**** Asking the 
NetBackup Webservice 
to trust the MSDP 
webserver (spws) 
**** /usr/openv/netbackup/
bin/nblibcurlcmd 
failed (1):

Perform the steps in the following order:

  1. Ensure that your NetBackup primary server is up and there is no firewall blocking the connection between the NetBackup primary server and storage server.

  2. Run the following command on storage server to verify the connection status:

    /usr/openv/netbackup/bin/bpclntcmd -pn

  3. After the NetBackup primary server is up and connection between the NetBackup primary server and storage server is allowed, run the following command:

    /usr/openv/pdde/vpfs/bin/vpfs_config.sh --configure_byo