NetBackup™ Cloud Administrator's Guide
- About NetBackup cloud storage
- About the cloud storage
- About the cloud storage vendors for NetBackup
- About the Amazon S3 cloud storage API type
- Amazon S3 cloud storage vendors certified for NetBackup
- Amazon S3 storage type requirements
- Permissions required for Amazon S3 cloud provider user
- Amazon S3 cloud storage provider options
- Amazon S3 cloud storage options
- Amazon S3 cloud storage server configuration options
- Amazon S3 credentials broker details
- About private clouds from Amazon S3-compatible cloud providers
- About Amazon S3 storage classes
- Amazon virtual private cloud support with NetBackup
- About protecting data in Amazon for long-term retention
- Protecting data using Amazon S3 Intelligent Tiering (LIFECYCLE)
- About using Amazon IAM roles with NetBackup
- About NetBackup character restrictions for Amazon S3 cloud connector
- Protecting data with Amazon Snowball and Amazon Snowball Edge
- Configuring NetBackup for Amazon Snowball with Amazon Snowball client
- Configuring NetBackup for Amazon Snowball with Amazon S3 API interface
- Using multiple Amazon S3 adapters
- Configuring NetBackup with Amazon Snowball Edge with file interface
- Configuring NetBackup for Amazon Snowball Edge with S3 API interface
- Configuring SSL for Amazon Snowball and Amazon Snowball Edge
- Post backup procedures if you have used S3 API interface
- About Microsoft Azure cloud storage API type
- About OpenStack Swift cloud storage API type
- Configuring cloud storage in NetBackup
- Before you begin to configure cloud storage in NetBackup
- Configuring cloud storage in NetBackup
- Cloud installation requirements
- Scalable Storage properties
- Cloud Storage properties
- About the NetBackup CloudStore Service Container
- Deploying host name-based certificates
- Deploying host ID-based certificates
- About data compression for cloud backups
- About data encryption for cloud storage
- About NetBackup KMS for encryption of NetBackup cloud storage
- About external KMS for encryption of NetBackup cloud storage
- About cloud storage servers
- About object size for cloud storage
- About the NetBackup media servers for cloud storage
- Configuring a storage server for cloud storage
- Changing cloud storage server properties
- NetBackup cloud storage server properties
- About cloud storage disk pools
- Configuring a disk pool for cloud storage
- Saving a record of the KMS key names for NetBackup cloud storage encryption
- Adding backup media servers to your cloud environment
- Configuring a storage unit for cloud storage
- About NetBackup Accelerator and NetBackup Optimized Synthetic backups
- Enabling NetBackup Accelerator with cloud storage
- Enabling optimized synthetic backups with cloud storage
- Creating a backup policy
- Changing cloud storage disk pool properties
- Certificate validation against Certificate Revocation List (CRL)
- Managing Certification Authorities (CA) for NetBackup Cloud
- Monitoring and Reporting
- Operational notes
- NetBackup bpstsinfo command operational notes
- Unable to configure additional media servers
- Cloud configuration may fail if NetBackup Access Control is enabled
- Deleting cloud storage server artifacts
- Using csconfig reinitialize to load updated cloud configuration settings
- Enabling or disabling communication between primary server and legacy cloud storage media servers
- Troubleshooting
- About unified logging
- About legacy logging
- NetBackup cloud storage log files
- Enable libcurl logging
- NetBackup Administration Console fails to open
- Troubleshooting cloud storage configuration issues
- NetBackup Scalable Storage host properties unavailable
- Connection to the NetBackup CloudStore Service Container fails
- Cannot create a cloud storage disk pool
- Cannot create a cloud storage
- Data transfer to cloud storage server fails in the SSL mode
- Amazon GovCloud cloud storage configuration fails in non-SSL mode
- Data restore from the Google Nearline storage class may fail
- Fetching storage regions fails with authentication version V2
- Backup from snapshot parent jobs are failing with the status code 160
- Troubleshooting cloud storage operational issues
- Cloud storage backups fail
- Stopping and starting the NetBackup CloudStore Service Container
- A restart of the nbcssc (on legacy media servers), nbwmc, and nbsl processes reverts all cloudstore.conf settings
- NetBackup CloudStore Service Container startup and shutdown troubleshooting
- bptm process takes time to terminate after cancelling GLACIER restore job
- Handling image cleanup failures for Amazon Glacier vault
- Cleaning up orphaned archives manually
- Restoring from Amazon Glacier vault spans more than 24 hours for single fragment
- Restoring from GLACIER_VAULT takes more than 24 hours for Oracle databases
- Troubleshooting failures due to missing Amazon IAM permissions
- Restore job fails if the restore job start time overlaps with the backup job end time
- Post processing fails for restore from Azure archive
- Troubleshooting Amazon Snowball and Amazon Snowball Edge issues
- Index
NetBackup cloudstore.conf configuration file
Table: cloudstore.conf configuration file parameters and descriptions describes the cloudstore.conf configuration file parameters.
The cloudstore.conf file is available on the primary server and all the media servers that are installed on the platforms that NetBackup cloud supports.
Note:
Before you modify any of the parameters in the cloudstore.conf file, you must stop the nbcssc service (on media server versions 7.7.x to 8.1.2 only) and the nbwmc service (on primary server). Once you modify the parameters, restart these services for the changes to take effect.
The cloudstore.conf file resides in the following directories:
UNIX:
/usr/openv/var/global/cloudOn media server versions 7.7.x to 8.1.2, the path is:
/usr/openv/netbackup/db/cloudWindows:
install_path\NetBackup\var\global\cloudOn media server versions 7.7.x to 8.1.2, the path is:
install_path\Veritas\NetBackup\db\cloud
Table: cloudstore.conf configuration file parameters and descriptions
Parameter | Description |
|---|---|
|
CSSC_VERSION |
It is not recommended to modify this value. Specifies the version of |
|
CSSC_PLUGIN_PATH |
It is not recommended to modify this value. Specifies the path where NetBackup cloud storage plug-ins are installed. The default path is as follows: On Windows: install_path\Veritas\NetBackup\bin\ost-plugins On UNIX: /usr/openv/lib/ost-plugins |
|
CSSC_PORT |
This setting is applicable to media server versions 7.7.x to 8.1.2 only. Specifies the port number for the CloudStore Service Container (nbcssc). Specify the value as 5637. This port is used to provide back-level media server support for the older media servers that are configured for cloud storage. Ensure that the older media servers use this port. Communication with the primary server fails if the older media servers use a different port. |
|
CSSC_LOG_DIR |
Specifies the directory path where csconfig, nbcldutil, and cloud plug-ins generate log files. The default path is as follows: On Windows: install_path\Veritas\NetBackup\logs\nbcssc On UNIX: /usr/openv/netbackup/logs/nbcssc Note: For media server versions 7.7.x to 8.1.2, the |
|
CSSC_LOG_FILE |
This setting is applicable only up to NetBackup release 8.1.2. Specifies the file name that the nbcssc service uses to write its logs. The default value is empty, which means that the NetBackup logging mechanism determines the log file name. |
|
|
Specifies the file name that the csconfig utility uses to write its logs. The default value is empty, which means that the NetBackup logging mechanism determines the log file name. |
|
CSSC_IS_SECURE |
Specifies if the nbcssc service runs in secure (value 64) or non-secure mode (value 0). The default value is 64. |
|
CSSC_CIPHER_LIST |
Specifies the cipher list that NetBackup uses for the following purposes:
It is recommended that you do not modify this value. Depending on the purpose for customizing the cipher list, you must modify the cipher list in the Note: If the cipher list is invalid, the customized cipher list is replaced by the default cipher list. The default value is AES:!aNULL:@STRENGTH. |
|
CSSC_LOG_LEVEL |
Specifies the log level for csconfig and nbcldutil CLI utility logging. Value 0 indicates that the logging is disabled and a non-zero value indicates that the logging is enabled. The default value is 0. |
|
CSSC_MASTER_PORT |
This setting is applicable for media server versions 7.7.x to 8.1.2 only. It is not applicable for NetBackup primary and media server versions 8.2 and later. This parameter value must be set to 5637. This port is used to provide back-level support for the older media servers that are configured for cloud storage. Ensure that the older media servers use this port. Communication with the primary server fails if the older media servers use a different port. |
|
CSSC_MASTER_NAME |
Specifies the NetBackup primary server name. This entry indicates that the nbwmc service runs on this host. It processes all cloud provider-specific requests based on the CloudProvider.xml and CloudInstance.xml files. |
|
|
Specifies if the primary server can communicate with the legacy media servers that are configured for cloud storage. Only media server versions 7.7.x to 8.1.2 are supported. The value 1 (default value) indicates that the communication is enabled while the value 0 means that the communication is disabled. Use this parameter with the option available in the NetBackup web UI (). The GUI option lets you enable or disable primary server communication with all back-level legacy media servers. It works as an all or none kind of a setting and is not specific to cloud storage media servers. This parameter provides that additional level of control for the cloud. You can use this setting to enable or disable primary server communication with back-level cloud storage media servers explicitly. For example, if the GUI option is enabled (default value) and this parameter value is set to 0, the NetBackup primary server continues to work with supported back-level media servers as other storage servers. However, any legacy cloud storage media servers that use the older method of communication using hard-coded credentials are blocked altogether, thus increasing the security of your NetBackup environment. Note: This parameter value has no effect if the GUI option is disabled. If you modify this parameter value, you must restart the NetBackup Web Management Console ( |