NetBackup™ Web UI Administrator's Guide
- Section I. About NetBackup
- Introducing NetBackup
- About NetBackup
- NetBackup documentation
- NetBackup web UI features
- NetBackup administration interfaces
- Terminology
- First-time sign in to the NetBackup web UI
- Sign in to the NetBackup web UI
- Sign out of the NetBackup web UI
- Documentation for catalog recovery, disk pools, disk array hosts, and host properties in the NetBackup web UI
- Administering NetBackup licenses
- Introducing NetBackup
- Registering the data collector
- Section II. Monitoring and notifications
- Monitoring NetBackup activity
- The NetBackup dashboard
- Activity monitor
- Job monitoring
- Workloads that require a custom RBAC role for specific job permissions
- View a job
- View the jobs in the List view
- View the jobs in the Hierarchy view
- Jobs: cancel, suspend, restart, resume, delete
- Search for or filter jobs in the jobs list
- Create a jobs filter
- Edit, copy, or delete a jobs filter
- Import or export job filters
- View the status of a redirected restore
- Troubleshooting the viewing and managing of jobs
- Device monitor
- Notifications
- Monitoring NetBackup activity
- Section III. Configuring hosts
- Managing host properties
- Managing credentials for workloads and systems that NetBackup accesses
- Overview of credential management in NetBackup
- Add a credential in NetBackup
- Add a credential for an external KMS
- Add a credential for NetBackup Callhome Proxy
- Edit or delete a named credential
- Add a credential for CyberArk
- Configure external credentials
- Add a configuration for an external CMS server
- Edit or delete the configuration for an external CMS server
- Add a credential for Network Data Management Protocol (NDMP)
- Edit or delete Network Data Management Protocol (NDMP) credentials in NetBackup
- Troubleshooting the external CMS server issue
- Managing deployment
- Section IV. Configuring storage
- Overview of storage options
- Configuring storage units
- Configuring disk storage
- About configuring BasicDisk storage
- About configuring disk pool storage
- Create a disk pool
- Editing a disk pool
- Create a Media Server Deduplication Pool (MSDP, MSDP Cloud) storage server
- Editing a storage server
- Integrating MSDP Cloud and CMS
- Create a Media Server Deduplication Pool (MSDP) storage server for image sharing
- Create an AdvancedDisk, OpenStorage (OST), or Cloud Connector storage server
- Using image sharing from the NetBackup web UI
- Managing media servers
- Managing tape drives
- Change a drive comment
- About downed drives
- Change a drive operating mode
- Change a tape drive path
- Change the operating mode for a drive path
- Change tape drive properties
- Change a tape drive to a shared drive
- Clean a tape drive
- Delete a drive
- Reset a drive
- Reset the mount time of a drive
- Set the drive cleaning frequency
- View drive details
- Staging backups
- Troubleshooting storage configuration
- Section V. Configuring backups
- Overview of backups in the NetBackup web UI
- Managing protection plans
- Managing classic policies
- Protecting the NetBackup catalog
- About the NetBackup catalog
- Catalog backups
- The catalog backup process
- Prerequisites for backing up the NetBackup catalog
- Configuring catalog backups
- Backing up NetBackup catalogs manually
- Concurrently running catalog backups with other backups
- Catalog policy schedule considerations
- How catalog incrementals and standard backups interact on UNIX
- Determining whether or not a catalog backup succeeded
- Strategies that ensure successful NetBackup catalog backups
- Disaster recovery emails and the disaster recovery files
- Disaster recovery packages
- About disaster recovery settings
- Setting the passphrase to encrypt disaster recovery packages
- Recovering the catalog
- Managing backup images
- Pausing data protection activity
- Section VI. Managing security
- Security events and audit logs
- Managing security certificates
- Managing host mappings
- Configuring multi-person authorization
- About multi-person authorization
- Workflow to configure multi-person authorization for NetBackup operations
- RBAC roles and permissions for multi-person authorization
- Multi-person authorization process with respect to roles
- NetBackup operations that need multi-person authorization
- Configure multi-person authorization
- View multi-person authorization tickets
- Manage multi-person authorization tickets
- Add exempted users
- Schedule expiration and purging of multi-person authorization tickets
- Disable multi-person authorization
- Managing user sessions
- Configuring multi-factor authentication
- About multi-factor authentication
- Configure multi-factor authentication for your user account
- Disable multi-factor authentication for your user account
- Enforce multi-factor authentication for all users
- Configure multi-factor authentication for your user account when it is enforced in the domain
- Reset multi-factor authentication for a user
- Managing the global security settings for the primary server
- Certificate authority for secure communication
- Disable communication with NetBackup 8.0 and earlier hosts
- Disable automatic mapping of NetBackup host names
- Configure the global data-in-transit encryption setting
- About NetBackup certificate deployment security levels
- Select a security level for NetBackup certificate deployment
- About TLS session resumption
- Set a passphrase for disaster recovery
- About trusted primary servers
- Using access keys, API keys, and access codes
- Configuring authentication options
- Managing role-based access control
- Disabling access to NetBackup interfaces for OS Administrators
- Section VII. Detection and reporting
- Section VIII. NetBackup workloads and NetBackup Flex Scale
- Section IX. Disaster recovery and troubleshooting
- Section X. Other topics
- Additional NetBackup catalog information
- About the NetBackup database
Managing credentials for malware scanning
To add new credentials
- On the Manage credentials page, select Add new credentials and click Next.
- On the Manage credentials page, add the details such as Credential name, tag, description.
- On the Host credentials tab, add Host username, Host password, SSH port, RSA key, and Share type.
Run the following command to ensure that the SSH connection between MDSP media server and host is working:
ssh username@remote_host_name
Run the following command to verify that it is listing the RSA key for remote scan host:
ssh-keyscan scan_host_name 2>/dev/null | grep ssh-rsa
To obtain the RSA key for the scan host, use the following command from any Linux host with SSH connectivity to scan host (this could be the scan host itself):
ssh-keyscan scan_host_name 2>/dev/null | grep ssh-rsa | awk '{print $3}' | base64 -d | sha256sum
Note:
Following host key algorithms are used to connect to scan host in the given order:
rsa-sha2-512, rsa-sha2-256, ssh-rsa
For example, the output is 33f697637ab3f0911c1d462d4bde8be3eec61a33403e8f6a88daecb415a31eef - where the RSA key is 33f697637ab3f0911c1d462d4bde8be3eec61a33403e8f6a88daecb415a31eef
Note:
Ensure that you remove the
-character from RSA key when you copy.
- For SMB share type, enter the following additional details:
Active directory domain: A domain to which storage server is connected (used to authenticate mounts on scan host).
Active directory group: A group name in active directory domain.
Active directory user: A user added in selected active directory group.
Password
- Click Save.
To add existing credentials
- On the Manage credentials page, select Select existing credentials and click Next.
- On the Select credentials tab, select the desired credential and click Save.
To validate the scan host credentials
- Once the credentials are provided for scan host on the Add malware scanner host page, search and select the Media server to enable the Validate credential button.
Note:
Only SSH credentials are validated by connecting to scan host from the selected media server. Media server must be Linux media server with NetBackup version 10.3 or above.
- On successful validation of credentials, click Save.