NetBackup™ AdvancedDisk Storage Solutions Guide
- Introducing AdvancedDisk
- Licensing AdvancedDisk
- Configuring AdvancedDisk
- Configuring the AdvancedDisk option
- About AdvancedDisk file system requirements
- Configure the NetBackup service credentials for CIFS storage and disk storage units
- About AdvancedDisk storage servers
- About AdvancedDisk data movers
- About AdvancedDisk preferred or required read servers
- About data encryption for AdvancedDisk storage
- About key management for encryption of NetBackup AdvancedDisk storage
- Configuring key management for NetBackup AdvancedDisk storage encryption
- Configure an AdvancedDisk storage server
- About AdvancedDisk disk pools
- Configure a CIFS disk volume for AdvancedDisk encryption
- Configure an AdvancedDisk disk pool
- Configure an AdvancedDisk storage unit
- About storage lifecycle policies
- Creating a storage lifecycle policy
- Creating a backup policy
- Resilient network properties
- Specify resilient connections for clients
- Managing AdvancedDisk
- Manage AdvancedDisk storage servers
- Manage AdvancedDisk disk pools
- View AdvancedDisk disk pools
- About changing the AdvancedDisk disk pool size
- Adding volumes to an AdvancedDisk disk pool
- Change the AdvancedDisk disk pool properties
- Determine the AdvancedDisk disk pool state
- Changing AdvancedDisk disk pool state
- Determine the AdvancedDisk disk volume state
- Change AdvancedDisk disk volume state
- Merge AdvancedDisk disk pools
- Remove a volume from an AdvancedDisk disk pool
- Delete an AdvancedDisk disk pool
- About monitoring AdvancedDisk storage capacity and usage
- Monitor NetBackup disk activity
- View AdvancedDisk disk reports
- Display detailed AdvancedDisk storage usage information
- Display KMS key information for AdvancedDisk encryption
- Troubleshooting AdvancedDisk
Save a record of the KMS key names for NetBackup AdvancedDisk storage encryption
Cohesity recommends that you save a record of the encryption key names and tags. The key tag is necessary if you need to recover or recreate the keys.
See Configuring key management for NetBackup AdvancedDisk storage encryption.
To save a record of the key names
- To determine the key group names, use the following command on the primary server:
UNIX: /usr/openv/netbackup/bin/admincmd/nbkmsutil -listkgs
Windows: install_path\Program Files\Veritas\NetBackup\bin\admincmd\nbkmsutil.exe -listkgs
The following is example output:
Key Group Name : UX_Host.example.com:backups Supported Cipher : AES_256 Number of Keys : 1 Has Active Key : Yes Creation Time : Tues Oct 01 01:00:00 2013 Last Modification Time: Tues Oct 01 01:00:00 2013 Description : - FIPS Approved Key : Yes
Key Group Name : Win_Host.example.com: Supported Cipher : AES_256 Number of Keys : 1 Has Active Key : Yes Creation Time : Tues Oct 01 01:05:00 2013 Last Modification Time: Tues Oct 01 01:05:00 2013 Description : - FIPS Approved Key : Yes
- For each key group, write all of the keys that belong to the group to a file. Run the command on the primary server. The following is the command syntax:
UNIX: /usr/openv/netbackup/bin/admincmd/nbkmsutil -listkeys -kgname key_group_name > filename.txt
Windows: install_path\Program Files\Veritas\NetBackup\bin\admincmd\nbkmsutil.exe -listkeys -kgname key_group_name > filename.txt
The following is example output:
nbkmsutil.exe -listkeys -kgname UX_Host.example.com:backups > encrypt_keys_UX_Host.example.com_backups.txt
Key Group Name : UX_Host.example.com:backups Supported Cipher : AES_256 Number of Keys : 1 Has Active Key : Yes Creation Time : Tues Oct 01 01:00:00 2013 Last Modification Time: Tues Oct 01 01:00:00 2013 Description : - FIPS Approved Key : Yes Key Tag : 867d710aa7f4c64dcdd2cec6...cce d0c831c1812c510acd05 Key Name : AdvDisk_Key Current State : ACTIVE Creation Time : Tues Oct 01 01:05:00 2013 Last Modification Time: Tues Oct 01 01:05:00 2013 Description : - FIPS Approved Key : Yes Number of Keys: 1 - Include in the file the pass phrase that you used to create the key record.
- Store the file in a secure location.