Veritas NetBackup™ Installation Guide

Last Published:
Product(s): NetBackup (9.0)
  1. Preparing for installation
    1. General installation information
      1.  
        Available NetBackup installation methods
      2.  
        About compatibility between NetBackup versions
      3.  
        About NetBackup software availability
      4. How to install NetBackup
        1.  
          About the NetBackup preinstall checker
        2.  
          About the NetBackup Product Improvement Program
      5.  
        Creating the user account to support the NetBackup web server
      6. About storage device configuration
        1.  
          Locating supported robot types
      7.  
        About security certificates for NetBackup hosts
      8.  
        Environment variable for certificate key size
      9.  
        Restrictions on the NetBackup installation directory
      10.  
        NetBackup database is not supported on the btrfs file system
    2. Installation operational notes and limitations
      1.  
        Java GUI and JRE installation optional for some computers
      2.  
        Enable 8dot3 name file setting for NetBackup master servers that support NAT
      3.  
        NetBackup servers must use a host name that is compliant with RFC 1123 and RFC 952
      4.  
        Host ID-based certificate is not deployed during installation on 8.1 media server or client host with dual stack configuration
      5.  
        NetBackup 8.2 and later RHEL 8 installation issue
      6.  
        NetBackup 8.2 and later SUSE 15 installation issue
      7.  
        External certificate authority certificates supported in NetBackup 8.2 and later
      8.  
        SCCM and Chef deployment tools and documentation now available
    3. SORT information
      1.  
        About Veritas Services and Operations Readiness Tools
      2.  
        Recommended SORT procedures for new installations
      3.  
        Recommended SORT procedures for upgrades
    4. Veritas NetInsights Console information
      1.  
        About Veritas Usage Insights
      2.  
        Best practices for Veritas Usage Insights
  2. NetBackup licenses
    1.  
      About NetBackup license requirements
    2.  
      About license key entry
    3.  
      Frequently asked questions about license keys
  3. Installing server software on UNIX systems
    1. Installation requirements for UNIX and Linux
      1.  
        Do not mix non-English versions of Windows and UNIX platforms unless master and media servers are NetBackup appliances
      2.  
        NetBackup installations on environments that run different versions of UNIX-based operating systems
      3.  
        Special installation guidelines for Solaris systems
      4.  
        Special installation guidelines for UNIX clustered environments
    2.  
      How the installation script works
    3. Installing NetBackup master server software on UNIX
      1.  
        Continuing with NetBackup software installation
    4. Installing NetBackup media server software on UNIX
      1.  
        Silently installing NetBackup media server software on UNIX and Linux
    5. About pushing client software from a master server to clients
      1.  
        Installing client type software on a master server
  4. Installing server software on Windows systems
    1.  
      Installation and upgrade requirements for Windows and Windows clusters
    2.  
      Requirements for Windows cluster installations and upgrades
    3.  
      Performing local, remote, or clustered server installation on Windows systems
    4.  
      Post-installation tasks for NetBackup cluster environments
    5.  
      Verifying Windows cluster installations or upgrades
    6.  
      Installing NetBackup servers silently on Windows systems
  5. About the administrative interfaces
    1.  
      About the NetBackup web user interface
    2.  
      About the NetBackup Administration Console
    3.  
      Installing the NetBackup Administration Console
    4.  
      Installing multiple versions of the NetBackup Administration Console on Windows
    5.  
      Removing earlier versions of the NetBackup Administration Console on Windows
    6.  
      About the NetBackup Remote Administration Console
    7.  
      Installing the NetBackup Remote Administration Console
  6. Installing NetBackup client software
    1.  
      About NetBackup client installation
    2. About NetBackup client installation on Windows
      1.  
        About Windows client installation methods and requirements
      2.  
        Installing NetBackup Windows clients locally or remotely
      3.  
        Installing NetBackup Windows clients silently
      4.  
        How to configure NetBackup clients
    3. About NetBackup client installation on UNIX and Linux
      1.  
        About UNIX and Linux client installation methods
      2.  
        Installing UNIX clients locally
      3.  
        Install of the UNIX and Linux client binaries with native installers
      4. About remote installation methods for UNIX/Linux clients
        1.  
          Installing client software with the ssh method
        2.  
          Installing client software with the sftp method
      5.  
        Adding a UNIX/Linux client after initial server installation
  7. Configuring NetBackup
    1.  
      About NetBackup startup and shutdown scripts
    2. About NetBackup server configuration
      1.  
        Starting the NetBackup Administration Console
      2.  
        About the Device Configuration Wizard
      3.  
        About the Volume Configuration Wizard
      4.  
        About the Catalog Backup Wizard
      5.  
        About the Backup Policy Configuration Wizard
  8. Upgrading NetBackup software
    1.  
      About upgrading NetBackup
    2.  
      About the NetBackup 8.x Upgrade Portal
  9. Removing NetBackup server and client software
    1.  
      About NetBackup server software removal on UNIX systems
    2.  
      About NetBackup client software removal on UNIX and Linux systems
    3.  
      Removing NetBackup from UNIX and Linux servers and clients
    4.  
      About NetBackup server software removal on Windows systems
    5.  
      Removing NetBackup server and client software from Windows servers, clusters, and clients
    6.  
      About removal of the Java Console state data from Windows servers and Windows clients
    7.  
      Removing a clustered media server by migrating all data to a new media server
  10. Reference
    1.  
      Generate a certificate on the inactive nodes of a clustered master server
    2.  
      About the NetBackup answer file
    3.  
      Persistent Java Virtual Machine options
    4.  
      About RBAC bootstrapping
    5.  
      NetBackup master server web server user and group creation
    6.  
      About the NetBackup Java Runtime Environment
    7.  
      Add or Remove Java GUI and JRE after install
    8.  
      Using NetApp disk arrays with Replication Director
    9.  
      Security updates to the NetBackup database
    10.  
      Size guidance for Veritas NetBackup master server and domain
  11.  
    Index

NetBackup master server web server user and group creation

Beginning with NetBackup 8.0, the NetBackup master server includes a configured web server to support critical backup operations. This web server operates under user account elements with limited privileges. These user account elements must be available on each master server (or each node of a clustered master server).

Note:

For security purposes, do not create web server users or groups with administrator or superuser privileges.

You can use numerous procedures to create users and groups in operating systems. Some specific approaches are shown, but other methods may accomplish the same goal. The home directory path, user name, and group names are not hard-coded, and can be changed. The default local user name is nbwebsvc, and the default local group name is nbwebgrp. The user and group must have sufficient permissions to run daemons.

More information about this topic is available.

See Installation requirements for UNIX and Linux.

Please be aware of the operating system-specific account and group requirements:

  • In UNIX and Linux clustered environments, make sure that the local accounts are defined consistently on all cluster nodes. The UID must be the same for each local account. You can use LDAP accounts on UNIX.

  • For Windows clustered master servers, you must use a domain account. You can use a domain account for non-clustered environments, but it is not required.

  • For Windows clustered master servers, you must use a domain group.

The NetBackup Master Server installation fails if any of these requirements are not met. On Windows, you are asked to provide the password for the user account as part of the installation process.

Note:

If the password associated with the web server account expires after initial configuration, NetBackup provides no notification the password has expired. This behavior is normal and expected, as the operating system manages the account and the password.

As long as the web server remains active, the account and the web server continue to operate normally.

When the web server is restarted, or if you attempt to restart the nbwmc service, the service fails to start, due to the expired password. Navigate to the appropriate area in the operating system, supply the correct password, and restart the service.

More information about the web services account and group is available. See the Veritas NetBackup Security and Encryption Guide and the section on the web services account.

To create the local user account and the local group:

  1. Create a local group.
    • Linux and UNIX: # groupadd nbwebgrp

    • Windows: C:\>net localgroup nbwebgrp /add

  2. Create a local user.
    • Linux and UNIX:# useradd -g nbwebgrp -c 'NetBackup Web Services account' -d /usr/openv/wmc nbwebsvc

    • Windows: C:\>net user nbwebsvc strong_password /add

  3. (Conditional) For Windows only, make the user a member of the group:

    C:\>net localgroup nbwebgrp nbwebsvc /add

  4. (Conditional) For Windows only, grant the Log on as a service right to the user:
    • Go to Control Panel > Administrative Tools > Local Security Policy.

    • Under Security Settings, click Local Policies > User Rights Assignment.

    • Right-click on Log on as a service and select Properties

    • Add the local user. The default local user name is nbwebsvc.

    • Save your changes and close the Properties dialog for Log on as a service.