NetBackup and NetBackup Appliances Hardening Guide

To add a credential for an external CMS server

1. On the left, click Credential management.
2. On the Named credentials tab, click Add.
3. Select NetBackup and click Start.

   On Add a credential page, provide the following properties:

   • Credential name

   • Tag

   • Description (for example: This credential is used to access the external CMS.)

4. Click Next.
5. Select CyberArk as the category.
6. Provide the credential details for CyberArk server:

   These details are used to authenticate the communication between the NetBackup primary server and the external CMS server:

   • Certificate - Specify the certificate file contents.

   • Private key - Specify the private key file contents.

   • CA Certificate - Specify the CA certificate file contents.

   • Passphrase - Enter the passphrase of the private key file.

   • CRL check level - Select the revocation check level for the external CMS server certificate.

     CHAIN - The revocation status of all the certificates from the certificate chain are validated against the CRL.

     DISABLE - Revocation check is disabled. The revocation status of the certificate is not validated against the CRL during host communication.

     LEAF - The revocation status of the leaf certificate is validated against the CRL.

7. Click Next.
8. Add a role that you want to have access to the credential.

   • Click Add.

   • Select the role.

   • Select the credential permissions that you want the role to have.

9. Click Next and follow the prompts to complete the wizard.