NetBackup™ Web UI Cloud Administrator's Guide

Last Published:
Product(s): NetBackup & Alta Data Protection (11.0)
  1. Managing and protecting cloud assets
    1.  
      About protecting cloud assets
    2.  
      Limitations and considerations
    3.  
      AWS and Azure government cloud support
    4. Configure Snapshot Manager in NetBackup
      1.  
        Add a Snapshot Manager
      2. Add a cloud provider for a Snapshot Manager
        1.  
          Adding a new region
        2.  
          IAM Role for AWS Configuration
        3.  
          IAM policy for OCI configuration
      3.  
        Associate media servers with a Snapshot Manager
      4.  
        Discover assets on Snapshot Manager
      5.  
        Enable or disable a Snapshot Manager
      6.  
        (Optional) Add the Snapshot Manager extension
    5. Managing intelligent groups for cloud assets
      1.  
        Considerations for cloud intelligent groups
      2.  
        Create an intelligent group for cloud assets
      3.  
        Delete an intelligent group for cloud assets
    6. Protecting cloud assets or intelligent groups for cloud assets
      1.  
        Customize or edit protection for cloud assets or intelligent groups
      2.  
        Remove protection from cloud assets or intelligent groups
    7. About storage lifecycle policies
      1.  
        Adding an SLP
      2.  
        SLP configurations for PaaS and IaaS policies
    8. Managing policies for cloud assets
      1.  
        Limitations and considerations
      2.  
        Planning for policies
      3.  
        Creating policies for cloud assets
      4.  
        Setting up attributes for PaaS assets
      5.  
        Setting up attributes for IaaS assets
      6.  
        Creating schedules
      7.  
        About backup frequency
      8.  
        About assigning retention periods
      9. Configuring the Start window
        1.  
          Example of schedule duration
      10.  
        Configuring the include dates
      11.  
        Configuring the exclude dates
      12.  
        Configuring the cloud assets for PaaS
      13.  
        Configuring the cloud assets for IaaS
      14.  
        Configuring backup options for IaaS
      15. Managing cloud policies
        1.  
          Copy a policy
        2.  
          Deactivating or deleting a policy
        3.  
          Manually backup assets
    9. Scan for malware
      1.  
        Scanning backup images
      2.  
        Assets by workload type
    10. Protecting Microsoft Azure resources using resource groups
      1.  
        Before you begin
      2.  
        Limitations and considerations
      3. About resource group configurations and outcome
        1.  
          Examples of resource group configurations
      4.  
        Troubleshoot resource group permissions
    11. NetBackup Accelerator for cloud workloads
      1.  
        How the NetBackup Accelerator works with virtual machines
      2.  
        Accelerator forced rescan for virtual machines (schedule attribute)
      3.  
        Accelerator backups and the NetBackup catalog
      4.  
        Accelerator messages in the backup job details log
    12.  
      Configuring backup schedules for cloud workloads using protection plan
    13.  
      Backup options for cloud workloads
    14. AWS Snapshot replication
      1.  
        Configure AWS snapshot replication
      2.  
        Using AWS snapshot replication
      3.  
        Support matrix for account replication
    15.  
      Protect applications in-cloud with application-consistent snapshots
    16.  
      Protecting AWS or Azure VMs for recovering to VMware
    17.  
      Cloud asset cleanup
    18.  
      Cloud asset filtering
  2. Protecting PaaS assets
    1.  
      Protecting PaaS assets
    2.  
      Prerequisites for protecting PaaS assets
    3.  
      Enabling binary logging for MySQL and MariaDB databases
    4.  
      Enabling backup and restore in Kubernetes
    5.  
      Prerequisites for protecting Amazon RDS SQL Server database assets
    6. Protecting RDS Custom instances
      1.  
        Protecting RDS Custom for SQL Server assets
      2.  
        Consideration for protecting RDS Custom for SQL Server assets
      3.  
        Protecting RDS Custom for Oracle assets
      4.  
        Consideration for protecting RDS Custom for Oracle assets
    7. Protecting Azure Managed Instance databases
      1.  
        Prerequisites for protecting Azure Managed Instance databases
      2.  
        Permissions required for protecting Azure Managed Instance databases
    8. Limitation and considerations
      1.  
        For all databases
      2.  
        For PostgreSQL
      3.  
        For incremental backups for Azure PostgreSQL
      4.  
        For AWS RDS PostgreSQL and AWS Aurora PostgreSQL
      5.  
        For AWS DynamoDB
      6.  
        For AWS DocumentDB
      7.  
        For AWS Neptune
      8.  
        For AWS RDS SQL
      9.  
        For Azure, AWS RDS, and Aurora MySQL
      10.  
        For incremental backups using Azure MySQL server
      11.  
        For incremental backups using the GCP SQL Server
      12.  
        For Azure SQL and SQL Managed Instance
      13.  
        For Azure SQL and SQL Managed Instance (without temp. database)
      14.  
        For Azure SQL Server and SQL Managed Instance incremental backup
      15.  
        For Azure Cosmos DB for MongoDB
      16.  
        For Azure Cosmos DB for NoSQL
      17.  
        For Amazon RDS for Oracle
      18.  
        For Amazon Redshift databases
      19.  
        For Amazon Redshift clusters
      20.  
        For GCP SQL Server
      21.  
        For GCP BigQuery
    9. Installing the native client utilities
      1.  
        Installing the MySQL client utility
      2.  
        Installing the sqlpackage client utility
      3.  
        Installing PostgreSQL client utility
      4.  
        Installing MongoDB client utility
    10. Configuring storage for different deployments
      1.  
        For MSDP cloud deployments
      2.  
        For Kubernetes deployments
      3.  
        For VM-based BYO deployments
    11.  
      Configuring the storage server for instant access
    12.  
      About incremental backup for PaaS workloads
    13.  
      Configuring incremental backups for Azure MySQL server
    14.  
      About archive redo log backup for PaaS workloads
    15.  
      About Auto Image Replication for PaaS workloads
    16.  
      Discovering PaaS assets
    17.  
      Viewing PaaS assets
    18. Managing PaaS credentials
      1.  
        View the credential name that is applied to a database
      2.  
        Add credentials to a database
      3.  
        Creating an IAM database username
      4.  
        Creating a system or user-managed identity username
      5.  
        Configuring permissions for the database user
    19. Add protection to PaaS assets
      1.  
        Perform backup now
  3. Recovering cloud assets
    1. Recovering cloud assets
      1.  
        About the pre-recovery check for VMs
      2.  
        Supported parameters for restoring cloud assets
      3.  
        Recovering virtual machines
      4.  
        Recovering applications and volumes to their original location
      5.  
        Recovering applications and volumes to an alternate location
      6.  
        Recovery scenarios for GCP VMs with read-only volumes
      7.  
        (GCP only) Restoring virtual machines and volumes using the autoDelete disk support
    2.  
      Perform rollback recovery of cloud assets
    3. Recovering AWS or Azure VMs to VMware
      1.  
        Post-recovery considerations for cloud VMs recovered to VMware
      2. Steps to recover images from cloud VMs to VMware
        1.  
          Recovering images from AWS to VMware
        2.  
          Recovering images from Azure to VMware
    4. Recovering PaaS assets
      1.  
        Recovering non-RDS PaaS assets
      2.  
        Recovering Redshift clusters
      3.  
        Recovering AWS DocumentDB and Neptune assets
      4.  
        Recovering RDS-based PaaS asset
      5.  
        Recovering Azure-protected assets
      6.  
        Recovering duplicate images from AdvancedDisk
  4. Performing granular restore
    1.  
      About granular restore
    2.  
      Supported environment list
    3.  
      List of supported file systems
    4.  
      Before you begin
    5.  
      Limitations and considerations
    6.  
      Restoring files and folders from cloud virtual machines
    7.  
      Restoring volumes on cloud virtual machines
    8.  
      Performing steps after volume restore containing LVM
    9.  
      Troubleshooting
  5. Troubleshooting protection and recovery of cloud assets
    1.  
      Troubleshoot cloud workload protection issues
    2.  
      Error Code 9855: Error occurred while exporting snapshot for the asset: <asset_name>
    3.  
      VMs and other OCI assets with CMK-encrypted disks are marked as deleted in NetBackup UI.
    4.  
      Backup from snapshot jobs take longer time than expected
    5.  
      Backup from snapshot job fails due to connectivity issues when Snapshot Manager is deployed on an Ubuntu host
    6.  
      Error disambiguation in NetBackup UI
    7.  
      Status Code 150: Termination requested by administrator
    8. Troubleshoot PaaS workload protection and recovery issues
      1.  
        Troubleshooting Amazon Redshift issues
      2.  
        Troubleshooting Azure Postgres issues
      3.  
        Troubleshooting Amazon RDS Custom for SQL issues

Limitations and considerations

The following limitations and considerations exist for granular restore:

  • If adequate space is not available on the target location, the restore operation fails before the copy operation begins.

  • Until the old agent (preinstalled) service is not restarted, alternate host restore (GRT and application) of the LVM asset might fail. To support the recovery of LVM assets, you need to restart the older agents.

  • Granular restore can be performed with the help of VxMS indexing. VxMS indexing is applicable for all Snapshot Manager-supported file systems. VxMS indexing can be performed for Azure, Azure Stack Hub, AWS, OCI, and GCP.

    However, VxMS indexing is not supported for volumes or partitions created on software RAID devices. These volumes, or partitions, are skipped while indexing the file system.

  • Host consistent snapshot is supported for the EXT2 file system only if it is mounted as read only.

  • If any unsupported file systems are present on the host, the host can be added to the protection plan that is created for granular restore. The protection plans for granular restore have the Enable granular recovery for files or folders check box value set to true.

  • During indexing, OS errors can occur while crawling files, directories, or other entries. These errors are ignored and the indexing operation continues. To restore the missing files, you must initiate the granular restore operations on the parent folder.

  • When you create or mount a disk from the Windows VM, add the drive letter. This action ensures that the indexing operation can capture the correct drive letter.

  • In some cases a mount point is not visible when you browse for files or folders from the recovery point. Consider the following reasons:

    • The "/" (root file system) is on an LVM, and:

    • The mount point is not directly related to "/" (root file system).

    In this scenario, search for the mount point from the right panel and then restore the files or folders successfully.

    Consider the following example. A disk is mounted on /mnt1/mnt2 where /mnt1 is any directory on the "/". (The root file system that is on the LVM setup.) mnt2 is a mount point inside mnt1. mnt2 is not visible in the tree on the left panel. However, you can search and restore files or folders inside the mount point.

  • To restore files and folders from VM snapshot recovery points, the /etc/fstab file on the Linux servers must have entries based on the file system UUID, instead of device paths. The device paths can change depending on the order in which Linux discovers the devices during system boot.

  • While restoring application or file systems from one OS version to another OS version, refer to the OS and application vendor's compatibility matrix. The restore of a file system from a higher version to a lower version is not recommended.

  • A user group cannot restore a drive as a source to an alternate folder as the destination. A user group does not have the writer permission to create a new folder.

  • The agentless connection cannot restore the encrypted file by Windows (or EFS) through a granular file-level restore (Restore files and folder option). However, you can restore the file through a volume-level restore and then decrypt the file.

  • Files that are stored on a volume that is mounted on a folder (junction point) can be restored only if the underlying disk has the GPT partition layout. If the volume is mounted using a drive letter, then the files can be restored irrespective of the partition layout of the underlying disk.

  • Consider a scenario where an alternate path that does not exist on the RHEL target host is specified for a single file restore. Then the new directories that are created are under the security context of the user under which the agent runs. The storage administrators must ensure that the final restore location is accessible to the required user.

  • NetBackup does not support indexing of VMs having VHDX disks (Azure Ultra disks, Premium SSD v2 with a 4k sector size) and granular restore.

  • When snapshots are performed or indexed, the following devices are ignored:

    • Ephemeral storage devices: For example, an Amazon AWS instance store volumes and Microsoft Azure temporary disks

      Note:

      These devices are also ignored for indexing also.

    • File systems that are created on the LDM disk.

      Note:

      Though the files/folders from the LDM disks are visible for selecting on Web UI during Single File Restore, the files would not be restored and the restore job would fail.

  • Extended attributes would not be restored for Linux VM files.

  • For FIPS setup, Single file restore for Windows to Windows is not supported.

  • Linux VM single file restore: If a directory contains more than 100K files, restore of the directory and files inside the directory would be skipped due to a limitation in Instant Access mount.

Limitations for single file restore in OCI
  • You must attach the block volumes after creating the VMs, and provide the consistent device path while attaching the volume.

  • Granular restore from a snapshot copy and volume restore, require the block volume management plug-in to be enabled on the target VM. Restart the VM after enabling the plug-in.

  • For Windows instances, granular restore from a snapshot copy is not supported.

  • Granular restore from backup copy to an Windows instance, you need to manually copy the granules from the NFS share.

  • Granular restore from a snapshot copy, from a boot volume to another boot volume is not supported for all operating systems.

  • Granular restore from Linux OS not having consistent device paths are not supported, if the disks are attached as paravirtualized attachments.

  • Granular restore from a source VM that has higher kernel version, to a target VM with lower kernel version is not supported.

Limitations for single file restore from a backup copy
  • When you restore files and folders from a Linux source host and the target host is Windows, the following points apply:

    • File attributes cannot be restored on a Windows host and only the content of the file is restored.

    • If there is any symlink in the files or folders that are selected for restore, the symlink is not restored.

    • For a restore to the original location, the check for available size is skipped before the copy operation.

  • If restoring files or folders when the source host is Linux and the target host is Linux, then the socket and the block files are not restored.

  • A restore of files and folders is not supported when they reside on any LDM disks, dynamic disks, or storage spaces.

  • If the media server or the PureDisk Deduplication Engine and Cohesity Provisioning file system daemon service restarts, the live mount that is retained during a partially successful restore is removed or expires before the retention period expiration date.

  • If any media servers are not upgraded to 10.3 or later, then the primary server on version 10.3 or later is used to connect to NetBackup Snapshot Manager.

  • The junction point on Windows after indexing uses the following format:

    Volume {4e3f8396-490a-400a-8abf-5579cafd4c0f}

    To restore a junction point for single file restore from backup operation, select Restore everything to a different location and in the Advanced options enable Require to restore access control list.

Operational notes for the Activity monitor

The following behaviors exist for the Activity monitor:

  • After a restore job is completed, you cannot expand the directories in the File List section of the restore job.

  • In the Activity monitor summary, when the restore job starts it shows the current file which is the first entry in the restore items. After the job is complete, the summary no longer displays.

  • Bytes transferred and estimated bytes are not updated and are shown as 0.