Veritas NetBackup™ Installation Guide

Last Published:
Product(s): NetBackup (9.0)
  1. Preparing for installation
    1. General installation information
      1.  
        Available NetBackup installation methods
      2.  
        About compatibility between NetBackup versions
      3.  
        About NetBackup software availability
      4. How to install NetBackup
        1.  
          About the NetBackup preinstall checker
        2.  
          About the NetBackup Product Improvement Program
      5.  
        Creating the user account to support the NetBackup web server
      6. About storage device configuration
        1.  
          Locating supported robot types
      7.  
        About security certificates for NetBackup hosts
      8.  
        Environment variable for certificate key size
      9.  
        Restrictions on the NetBackup installation directory
      10.  
        NetBackup database is not supported on the btrfs file system
    2. Installation operational notes and limitations
      1.  
        Java GUI and JRE installation optional for some computers
      2.  
        Enable 8dot3 name file setting for NetBackup master servers that support NAT
      3.  
        NetBackup servers must use a host name that is compliant with RFC 1123 and RFC 952
      4.  
        Host ID-based certificate is not deployed during installation on 8.1 media server or client host with dual stack configuration
      5.  
        NetBackup 8.2 and later RHEL 8 installation issue
      6.  
        NetBackup 8.2 and later SUSE 15 installation issue
      7.  
        External certificate authority certificates supported in NetBackup 8.2 and later
      8.  
        SCCM and Chef deployment tools and documentation now available
    3. SORT information
      1.  
        About Veritas Services and Operations Readiness Tools
      2.  
        Recommended SORT procedures for new installations
      3.  
        Recommended SORT procedures for upgrades
    4. Veritas NetInsights Console information
      1.  
        About Veritas Usage Insights
      2.  
        Best practices for Veritas Usage Insights
  2. NetBackup licenses
    1.  
      About NetBackup license requirements
    2.  
      About license key entry
    3.  
      Frequently asked questions about license keys
  3. Installing server software on UNIX systems
    1. Installation requirements for UNIX and Linux
      1.  
        Do not mix non-English versions of Windows and UNIX platforms unless master and media servers are NetBackup appliances
      2.  
        NetBackup installations on environments that run different versions of UNIX-based operating systems
      3.  
        Special installation guidelines for Solaris systems
      4.  
        Special installation guidelines for UNIX clustered environments
    2.  
      How the installation script works
    3. Installing NetBackup master server software on UNIX
      1.  
        Continuing with NetBackup software installation
    4. Installing NetBackup media server software on UNIX
      1.  
        Silently installing NetBackup media server software on UNIX and Linux
    5. About pushing client software from a master server to clients
      1.  
        Installing client type software on a master server
  4. Installing server software on Windows systems
    1.  
      Installation and upgrade requirements for Windows and Windows clusters
    2.  
      Requirements for Windows cluster installations and upgrades
    3.  
      Performing local, remote, or clustered server installation on Windows systems
    4.  
      Post-installation tasks for NetBackup cluster environments
    5.  
      Verifying Windows cluster installations or upgrades
    6.  
      Installing NetBackup servers silently on Windows systems
  5. About the administrative interfaces
    1.  
      About the NetBackup web user interface
    2.  
      About the NetBackup Administration Console
    3.  
      Installing the NetBackup Administration Console
    4.  
      Installing multiple versions of the NetBackup Administration Console on Windows
    5.  
      Removing earlier versions of the NetBackup Administration Console on Windows
    6.  
      About the NetBackup Remote Administration Console
    7.  
      Installing the NetBackup Remote Administration Console
  6. Installing NetBackup client software
    1.  
      About NetBackup client installation
    2. About NetBackup client installation on Windows
      1.  
        About Windows client installation methods and requirements
      2.  
        Installing NetBackup Windows clients locally or remotely
      3.  
        Installing NetBackup Windows clients silently
      4.  
        How to configure NetBackup clients
    3. About NetBackup client installation on UNIX and Linux
      1.  
        About UNIX and Linux client installation methods
      2.  
        Installing UNIX clients locally
      3.  
        Install of the UNIX and Linux client binaries with native installers
      4. About remote installation methods for UNIX/Linux clients
        1.  
          Installing client software with the ssh method
        2.  
          Installing client software with the sftp method
      5.  
        Adding a UNIX/Linux client after initial server installation
  7. Configuring NetBackup
    1.  
      About NetBackup startup and shutdown scripts
    2. About NetBackup server configuration
      1.  
        Starting the NetBackup Administration Console
      2.  
        About the Device Configuration Wizard
      3.  
        About the Volume Configuration Wizard
      4.  
        About the Catalog Backup Wizard
      5.  
        About the Backup Policy Configuration Wizard
  8. Upgrading NetBackup software
    1.  
      About upgrading NetBackup
    2.  
      About the NetBackup 8.x Upgrade Portal
  9. Removing NetBackup server and client software
    1.  
      About NetBackup server software removal on UNIX systems
    2.  
      About NetBackup client software removal on UNIX and Linux systems
    3.  
      Removing NetBackup from UNIX and Linux servers and clients
    4.  
      About NetBackup server software removal on Windows systems
    5.  
      Removing NetBackup server and client software from Windows servers, clusters, and clients
    6.  
      About removal of the Java Console state data from Windows servers and Windows clients
    7.  
      Removing a clustered media server by migrating all data to a new media server
  10. Reference
    1.  
      Generate a certificate on the inactive nodes of a clustered master server
    2.  
      About the NetBackup answer file
    3.  
      Persistent Java Virtual Machine options
    4.  
      About RBAC bootstrapping
    5.  
      NetBackup master server web server user and group creation
    6.  
      About the NetBackup Java Runtime Environment
    7.  
      Add or Remove Java GUI and JRE after install
    8.  
      Using NetApp disk arrays with Replication Director
    9.  
      Security updates to the NetBackup database
    10.  
      Size guidance for Veritas NetBackup master server and domain
  11.  
    Index

Installing NetBackup media server software on UNIX

This section describes how to install a new NetBackup media server. After you have installed the master server, you are ready to install media server software on media server computers. Use this information to install the server software on a computer with no existing version of NetBackup.

Veritas supports two media server installation methods: either the NetBackup installation script or the native UNIX and Linux installers. The NetBackup installation script is the standard installation method and is recommended for new users. The native UNIX and Linux installers are potentially more difficult and require additional steps.

Customers who use the NetBackup installation script for their UNIX and Linux media servers only see a single change to the installation behavior. The NetBackup installation script no longer copies the installation package into the /usr/openv/pack/ directory on the client. A successful installation or upgrade is recorded in the /usr/openv/pack/install.history file.

Media server software manages the robotic and the storage devices within your NetBackup environment.

Use the following guidelines when you install new media servers:

Designate media servers

Designate the computers that you want to be media servers and install the media server software on them.

License keys

When you install NetBackup media server software, you must enter a NetBackup product license. You must also enter a license for any additional NetBackup product options or agents that are used on the server or its clients. These additional licenses must be entered on each media server.

For more information on how to administer NetBackup licenses, see the NetBackup Administrator's Guide, Volume I.

Note:

If you make and save any license changes in the NetBackup-Administration Console, you must restart the console.

CA Certificate fingerprint

If you use a NetBackup Certificate Authority, you must know the CA Certificate fingerprint of the master server at time of installation. This requirement only applies if you use a NetBackup Certificate Authority. More information is available about the details on the CA Certificate fingerprint and its role in generation of security certificates.

https://www.veritas.com/support/en_US/article.000127129

Authorization Token

In some cases, if you use a NetBackup Certificate Authority, the installer requires an authorization token to successfully deploy security certificates. This requirement only applies if you use a NetBackup Certificate Authority. More information is available about the details on authorization tokens and their role in generation of security certificates.

https://www.veritas.com/support/en_US/article.000127129

External certificate authority

If you use an external certificate authority (ECA), you need to know the location of your certificate. You also need know how you want to configure the Certificate Revocation Lists (CRLs).

Install method

Java GUI and JRE

Installation of the Java GUI and the JRE is optional. Decide if you want to install the Java GUI and JRE on this computer.

If you change your mind after the installation completes, you can add or remove the Java GUI and the JRE after the installation. More information about the Java GUI and the JRE is available.

See Add or Remove Java GUI and JRE after install.

To install NetBackup media server software with the NetBackup installation script

  1. Log in to the server as root.
  2. Navigate to where the ESD images (downloaded files) reside and enter the command shown:

    ./install

  3. When the following message appears, press Enter to continue:
    Veritas Installation Script
    Copyright 1993 - 2016 Veritas Corporation, All Rights Reserved.
    
    
            Installing NetBackup Server Software
    
    
    Please review the VERITAS SOFTWARE LICENSE AGREEMENT located on
    the installation media before proceeding.  The agreement includes
    details on the NetBackup Product Improvement Program.
    
    For NetBackup installation and upgrade information specific to your
    platform and to find out if your installed EEBs or hot fixes are
    contained in this release, check out the Veritas Services and 
    Operations Readiness Tools (SORT) Installation and Upgrade Checklist 
    and Hot fix and EEB Release Auditor, respectively, at 
    https://sort.veritas.com/netbackup.
    
    ATTENTION!  To help ensure a successful upgrade to NetBackup 9.0,
    please visit the NetBackup 8.x Upgrade Portal:
    http://www.veritas.com/docs/000115678.
    
    Do you wish to continue? [y,n] (y)
  4. Indicate if the current computer is the master server by answering the following question when it appears:
    Is this host the master server? [y,n]
  5. Verify or enter the correct computer name when prompted by the following message:
    Installing NetBackup Enterprise Server version: 9.0
    If this machine will be using a different network interface than 
    the default (name), the name of the preferred interface 
    should be used as the configured server name. If this machine 
    will be part of a cluster, the virtual name should be used as the 
    configured server name.
    The domainname of your server appears to be "domain". You 
    may choose to use this domainname in your configured NetBackup 
    server name, or simply use "name" as the configured 
    NetBackup server name.
    Would you like to use "name" as the configured NetBackup server
    name of this machine? [y, n] (y)

    Note:

    Incorrect information for the domain name results in failures during the configuration of Authentication Broker and NetBackup Access Controls. To correct this problem, use the bpnbaz -configureauth command to configure Authentication Broker. More information about the bpnbaz -configureauth command is available.

    NetBackup Commands Reference Guide

    • If the displayed (default) media server name is correct, press Enter.

    • If the displayed (default) media server name is not correct, type n and enter the correct name.

  6. Identify the name of the master server when prompted with this question:

    What is the fully qualified name of the master server?

    If the master server is clustered, enter the virtual name of the master server.

  7. For the NetBackup installation location, enter the appropriate platform information as follows:
    • When the following question appears, press Enter to accept the default (y).

      The NetBackup and Media Manager software is built
      for use on <platform> hardware. Do you want to install
      NetBackup and Media Manager files? [y,n] (y)
      
    • When the following question appears, select where to install NetBackup and Media Manager software:

      NetBackup and Media Manager are normally
      installed in /usr/openv.
      Is it OK to install in /usr/openv? [y,n] (y)
      

      The path displayed for Solaris is /opt/openv.

      To accept the default (y), press Enter.

      To change the installation location, type n and press Enter. Then enter the appropriate destination.

    Additional information about installation folder restrictions is available.

    See Restrictions on the NetBackup installation directory.

  8. After you confirm the installation location for the binaries, the installer fetches the certificate authority certificate details.
    Getting CA certificate mode from the master server.
    Depending on the network, this action may take a few minutes. To 
    continue without setting up secure communication, press Ctrl+C.

    Be aware if you press Ctrl+C, this action requires you to rerun the installation or continue with the installation without the required security components. If these security components are absent, backups and restores fail.

  9. The installer then looks to see what certificate authority the local system is configured to use. The options for certificate authority on the local system are: NetBackup Certificate Authority, external certificate authority, or indeterminate.

    The installer then uses a combination of the master server certificate authority mode and the local system certificate authority configuration to determine the next steps.

  10. If the installer prompts you for a certificate file path, your environment uses an external certificate authority. Proceed to step 11.

    If the installer prompts you for fingerprint information, your environment uses a NetBackup Certificate Authority. Proceed to step 17.

    If the installer cannot determine the configuration of the certificate authority on the master server, you are presented with two options:

    • Skip the security configuration and configure your certificate authority after installation. More information about post-installation certificate authority configuration is available:

      https://www.veritas.com/support/en_US/article.100044300

      Proceed to step 21.

    • Exit the installation and restart the installation once you configure your certificate authority.

  11. Provide the external certificate authority information at the prompts shown:
    Enter the certificate file path or q to skip security configuration: 
    /usr/eca/cert_chain.pem
    
    Enter the trust store location or q to skip security configuration: 
    /usr/eca/trusted/cacerts.pem
    
    Enter the private key path or q to skip security configuration: 
    /usr/eca/private/key.pem
    
    Enter the passphrase file path or q to skip security configuration 
    (default: NONE): /usr/eca/private/passphrase.txt

    Note:

    Be aware the passphrase file path is optional.

  12. When prompted, provide the required information for the CRL configuration:
    Should a CRL be honored for the external certificate?
    1) Use the CRL defined in the certificate.
    2) Use the CRL from a file path.
    3) Do not use a CRL.
    q) skip security configuration
    CRL option (1): 
  13. (Conditional) If you specify 2, you must enter the path to the CRL location:
    Enter the CRL location path or q to skip security configuration: 
    /usr/eca/crl
  14. The installer echoes the configuration information you entered and attempts to retrieve details for the external certificate:
    External CA values entered:
    Certificate file path:  /usr/eca/cert_chain.pem
    Trust store file path:  /usr/eca/trusted/cacerts.pem
    Private key file path:  /usr/eca/private/key.pem
     Passphrase file path:  /usr/eca/private/passphrase.txt
          CRL check level:  Use the CRL from a file path.
        CRL location path:  /usr/eca/crl
    
    Getting external CA certificate details
             Issued By : CN=IITFRMNUSINT,O=Veritas,OU=iitf
          Subject Name : CN=cuomovm04,O=Veritas,OU=iitf
           Expiry Date : Oct 31 17:25:59 2019 GMT
      SHA1 Fingerprint : 62:B2:C3:31:D5:95:15:85:9D:C9:AE:C6:EA:C2:DF:DF:
                         6D:4B:92:5B
         Serial Number : 0x6c7fa2743072ec3eaae4fd60085d468464319a
      Certificate Path : /usr/eca/cert_chain.pem
    
    Validating host ECA certificate.
    NOTE: Depending on the network, this action may take a few minutes.
          To continue without setting up secure communication, press Ctrl+C.
  15. (Conditional) If the external certificate enrollment pre-check finishes successfully, select 1 and press Enter to continue.
    The external certificate enrollment pre-check is successful.
    
    The external certificate is valid for use with master server name
    How do you want to proceed?
    1) Continue the installation using this certificate.
    2) Update external certificate values.
    3) Abort the installation.
    Default option (1): 

    Proceed to step 21.

  16. (Conditional) If the external certificate enrollment pre-check fails, select from the choices shown. The default is 2.
    The external certificate enrollment pre-check failed.
    
    The external certificate is not valid for use with master server name
    How do you want to proceed?
    1) Continue the installation and set up external certificates later.
    2) Modify the external CA values entered.
    3) Abort the installation.
    Default option (2): 

    Proceed to step 21.

  17. When prompted, review the fingerprint information and confirm that it is accurate.

    Master server [master_name] reports CA Certificate fingerprint [fingerprint]. Is this correct? [y/n] (y)

    After you confirm the fingerprint information, the installer stores the certificate authority certificate details.

    Storing CA certificate.
    Depending on the network, this action may take a few minutes. To 
    continue without setting up secure communication, press Ctrl+C.

    Be aware if you press Ctrl+C, this action requires you to rerun the installation or continue with the installation without the required security components. If these security components are absent, backups and restores fail.

  18. After the Certificate Authority certificate is stored, the installer fetches the host certificate.
    Getting host certificate.
    Depending on the network, this action may take a few minutes. To 
    continue without setting up secure communication, press Ctrl+C.

    Be aware if you press Ctrl+C, this action requires you to rerun the installation or continue with the installation without the required security components. If these security components are absent, backups and restores fail.

  19. (Conditional) If prompted for the Authorization Token, please enter it.

    An authorization token is required in order to get the host certificate for this host. At the prompt, enter the authorization token or q to skip the question. NOTE: The answer entered will not be displayed to the terminal.

    Enter the authorization token for master_server_FQDN or q to skip:

  20. When prompted, specify if you want Java GUI and the JRE packages installed.

    The Java GUI and JRE packages are currently not installed on this host.

    The Java GUI and JRE can be optionally included with NetBackup. The Java GUI and JRE enable the NetBackup Administration Console and the Backup, Archive, and Restore (BAR) GUI.

    Choose an option from the list below.

    1) Include the Java GUI and JRE.

    2) Exclude the Java GUI and JRE.

    If you specify 1, you see: Including the installation of Java GUI and JRE packages. If you specify 2, you see: Excluding the installation of Java GUI and JRE packages.

  21. Enter the NetBackup Server or NetBackup Enterprise Server license key.
  22. Type y, then follow the prompts to add license keys for other NetBackup options and agents.

    Although you can add license keys later, you should enter them now. If you add any license keys later through the NetBackup-Java Administration Console, you must restart the console.

  23. After all license keys are entered, type q to quit the License Key Utility and complete the server software installation.
  24. When the following message appears, press Enter and accept the default name of the EMM server. You must configure EMM on the master server. All master servers must have their own EMM configuration. Remote EMM or shared EMM is no longer supported.
    Enter the name of the Enterprise Media Manager (default: <name>)

    The master server name is displayed by default.

  25. Repeat steps 1 through 24 to install media server software on any remaining media servers.