Veritas NetBackup™ Cloud Administrator's Guide
- About NetBackup cloud storage
- About the cloud storage
- About the Amazon S3 cloud storage API type
- About protecting data in Amazon for long-term retention
- Protecting data using Amazon's cloud tiering
- About using Amazon IAM roles with NetBackup
- Protecting data with Amazon Snowball and Amazon Snowball Edge
- About Microsoft Azure cloud storage API type
- About OpenStack Swift cloud storage API type
- Configuring cloud storage in NetBackup
- Scalable Storage properties
- Cloud Storage properties
- About the NetBackup CloudStore Service Container
- About the NetBackup media servers for cloud storage
- Configuring a storage server for cloud storage
- NetBackup cloud storage server properties
- Configuring a storage unit for cloud storage
- Changing cloud storage disk pool properties
- Monitoring and Reporting
- Operational notes
- About unified logging
- About legacy logging
- Troubleshooting cloud storage configuration issues
- Troubleshooting cloud storage operational issues
Connection to the NetBackup CloudStore Service Container fails
This is applicable for media server versions 7.7.x to 8.1.2 only.
The NetBackup cloud storage csconfig configuration command makes three attempts to connect to the NetBackup CloudStore Service Container with a 60-second time-out for each connection attempt. The NetBackup OpsCenter also connects to the NetBackup CloudStore Service Container to obtain data for reporting.
If they cannot establish a connection, verify the following information:
The NetBackup CloudStore Service Container is active.
Your firewall settings are appropriate.
The NetBackup Administration Console on the Security Management > Global Security Settings > Secure Communication tab.option on the NetBackup master server is selected if the media server is of the version 8.0 or earlier. The option is available in the
cacert.pemfile is present on both NetBackup master and media server in following locations:
cacert.pemfile is not present on the master server or a media server, run the nbcertcmd -getCACertificate command on that host. After running this command, restart the NetBackup CloudStore Service Container on that host.
See the NetBackup Commands Reference Guide for a complete description of the command.
This cacert.pem file contains the CA certificates that the NetBackup authorization service generates.
cacert.pemfile is same on the NetBackup master and media server.
The security certificate is present in following locations:
If the security certificate is not present, run the bpnbaz -ProvisionCert on the master server. After running this command, restart the NetBackup CloudStore Service Container on the master server and the media servers.
If the master server runs on an operating system that does not support NetBackup cloud configurations: You can choose to use the NetBackup CloudStore Service Container on a media server as the master service container. To do so, update the CSSC_MASTER_NAME parameter of the
cloudstore.conffile on all the cloud-supported media servers with the media server name you chose earlier. However, communication from other media servers to the media server that now functions as the master configuration for the nbcssc service and vice versa fails. The failure happens because both these media servers verify if a trusted host has made the communication request.
The media server that now functions as the master configuration for the nbcssc service must run the same NetBackup version as the NetBackupmaster server.
For the operating systems that NetBackup supports for cloud storage, see the NetBackupoperating system compatibility list available through the following URL:
To fix this issue, add the authorized host entries on the media and the master servers that support cloud configurations.
See the 'Adding a server to a servers list' topic in the NetBackup™ Administrator's Guide, Volume I for detailed steps.
On the media server, if the certificate deployment security level if set to Very High, automatic certificate deployment is disabled. An authorization token must accompany every new certificate request. Therefore, you must create an authorization token before deploying the certificates.
See the 'Creating authorization tokens' topic in the NetBackup™ Security and Encryption Guide for detailed steps.