Veritas NetBackup™ Appliance Administrator's Guide

Last Published:
Product(s): Appliances (3.1.1)
Platform: 5220,5230,5240,5330,5340
  1. Overview
    1.  
      About NetBackup appliances
    2.  
      About the Master Server role
    3.  
      About the Media Server role
    4. About accessing the NetBackup Appliance Web Console
      1.  
        Web browsers supported by the appliance
      2.  
        Disabling the Untrusted Connection page in Mozilla Firefox
    5. About the NetBackup Appliance Shell Menu
      1.  
        Logging on to the NetBackup Appliance Shell Menu
      2.  
        Limitations of the NetBackup Appliance Shell Menu
      3.  
        Command limitations on appliances that are not configured
    6. About appliance console components
      1.  
        About using the links on the title bar
      2.  
        Accessing and using help
      3.  
        About using Web browser bookmarks
      4.  
        Avoiding CSRF (Cross Site Request Forgery)
    7.  
      About the NetBackup Appliance Web Console login page
    8.  
      NetBackup appliance home page
    9.  
      Common tasks in NetBackup appliance
    10.  
      About the NetBackup appliance documentation
  2. Monitoring the NetBackup appliance
    1.  
      About monitoring the NetBackup appliance
    2. About hardware monitoring and alerts
      1. Monitor > Hardware options
        1.  
          Hardware components that are monitored
      2.  
        About Email notification from a NetBackup appliance
    3. About Symantec Data Center Security on the NetBackup appliance
      1.  
        Monitor > SDCS Events
      2.  
        Viewing SDCS audit log details
      3.  
        Filtering SDCS audit logs
      4.  
        Setting the SDCS audit log retention specification
      5. About Symantec Data Center Security Downloads
        1.  
          Downloading the IPS and IDS policies from the NetBackup appliance
      6.  
        Connecting to the SDCS server
      7.  
        Revert SDCS to unmanaged mode on a NetBackup appliance
  3. Managing a NetBackup appliance from the NetBackup Appliance Web Console
    1.  
      About the Manage views
    2. About storage configuration
      1.  
        Manage > Storage
      2.  
        Manage > Storage > Shares
      3.  
        Manage > Storage > Universal Shares
      4.  
        Checking partition details
      5.  
        Resizing a partition
      6.  
        Resize dialog
      7.  
        Troubleshooting resize-related issues
      8.  
        Moving a partition
      9.  
        Move <partition> dialog
      10.  
        Moving the MSDP partition from a base disk to an expansion disk for optimum performance
      11.  
        Scanning storage devices from the NetBackup Appliance Web Console
      12.  
        Adding the storage space from a newly available disk
      13.  
        Removing an existing storage disk
      14.  
        Monitoring the progress of storage manipulation tasks
      15.  
        Scanning storage devices using the NetBackup Appliance Shell Menu
      16. About Copilot functionality and Share management
        1.  
          About Optimized Shares and the Optimized Share Reserve
        2.  
          Creating a Share
        3.  
          Editing a Share
        4.  
          Deleting a Share
        5.  
          Moving a Share
        6.  
          Creating the Optimized Share Reserve
        7.  
          Deleting the Optimized Share Reserve
        8.  
          Viewing Share information from the NetBackup Appliance Shell Menu
        9.  
          NFS export options
        10.  
          Mounting a Universal Share
      17. About viewing storage space information using the Show command
        1.  
          Viewing all storage information
        2.  
          Viewing disk information
        3.  
          Viewing partition information
        4.  
          Viewing the partition distribution on disks
      18.  
        About storage email alerts
    3. About appliance supported tape devices
      1.  
        Adding external robots to the NetBackup appliance
    4. About configuring Host parameters for your appliance
      1.  
        Manage > Host > Data Buffer options
      2.  
        Configuring data buffer parameters
      3.  
        Manage > Host > Lifecycle options
      4.  
        Configuring lifecycle parameters
      5. About configuring deduplication solutions
        1.  
          Adding the deduplication solution to a 5230 media appliance
        2.  
          Manage > Host > Deduplication
        3.  
          Configuring deduplication parameters
      6. About BMR integration
        1.  
          Manage > Host > Advanced options
        2.  
          Enabling BMR from the NetBackup Appliance Web Console
      7. Manage > Host > IPMI options
        1.  
          Resetting the IPMI
    5. Manage > Appliance Restore
      1. About creating an appliance checkpoint
        1.  
          Creating an appliance checkpoint
        2.  
          Checkpoint creation status
        3.  
          Creating an appliance checkpoint from the appliance shell menu
      2. About rollback to a checkpoint
        1.  
          About appliance rollback
        2.  
          About appliance rollback validation
        3.  
          Rollback to an appliance checkpoint from the NetBackup Appliance Web Console
        4.  
          About checkpoint rollback status
        5.  
          Rollback to an appliance checkpoint from the appliance shell menu
      3. About NetBackup appliance factory reset
        1.  
          Factory reset best practices
        2.  
          Starting a factory reset from the NetBackup Appliance Web Console
        3.  
          About factory reset status
        4.  
          Starting a factory reset from the appliance shell menu
    6. Manage > License
      1.  
        Managing license keys on the NetBackup appliance
      2.  
        Adding a permanent license key if an evaluation license key expires
    7. About the Migration Utility
      1.  
        Manage > Migration Utility > Configure Migration
      2.  
        Manage > Migration Utility > Migration Status
      3.  
        Configuring a new migration task
      4.  
        Viewing the migration task status
      5.  
        Best practices for migration utility
    8. Software release updates for NetBackup Appliances
      1.  
        Manage > Software Updates
      2. Methods for downloading appliance software release updates
        1.  
          Downloading software updates to a NetBackup appliance using the NetBackup Appliance Web Console
        2.  
          Downloading software updates directly to a NetBackup appliance
        3.  
          Downloading software updates to a NetBackup appliance using a client share
      3.  
        Installing a NetBackup appliance software update using the NetBackup Appliance Shell Menu
      4.  
        Appliance servers to upgrade
      5.  
        Software Updates Installation Status
      6.  
        Installing NetBackup PSF add-ons using the NetBackup Appliance Shell Menu
    9. About installing an EEB
      1.  
        Installing an EEB
    10. About installing NetBackup Administration Console and client software
      1.  
        Installing NetBackup client software through CIFS and NFS shares
      2.  
        Downloading NetBackup client packages to a client from a NetBackup appliance
      3.  
        Downloading the NetBackup Administration Console to a Windows computer from a NetBackup appliance
    11. Manage > Additional Servers
      1.  
        Managing additional servers to the appliance
    12.  
      Manage > Certificates
    13. Manage > High Availability
      1.  
        Monitoring a high availability configuration from the NetBackup Appliance Web Console
  4. Managing NetBackup appliance using the NetBackup Appliance Shell Menu
    1.  
      Expanding the bandwidth on the NetBackup appliance
    2.  
      About configuring the maximum transmission unit size
    3. About OpenStorage plugin installation
      1.  
        Installing OpenStorage plugin
      2.  
        Uninstalling OpenStorage plugin
    4. About mounting a remote NFS
      1.  
        Mounting a remote NFS drive
      2.  
        Unmounting an NFS drive
    5. About running NetBackup commands from the appliance
      1. About NetBackup administrator capabilities
        1.  
          Running NetBackup commands from the NetBackup appliance
        2. Creating a NetBackup touch file from the NetBackup appliance
          1.  
            Loading the NetBackup notify scripts
        3.  
          About NetBackup operating system commands
        4.  
          Best practices for running NetBackup commands from the NetBackup appliance
        5.  
          Known limitations of running NetBackup commands from the NetBackup appliance
      2. Creating NetBackup administrator user accounts
        1.  
          Logging on as a NetBackup administrator
        2.  
          Managing NetBackup administrator user account passwords
        3.  
          Auditing NetBackup administrator accounts
      3.  
        Deleting NetBackup administrator user accounts
      4.  
        Viewing NetBackup administrator user accounts
    6. About Auto Image Replication between appliances
      1. About Auto Image Replication between NetBackup appliances
        1.  
          Adding a trusted master server using NetBackup CA-signed (host ID-based) certificate
        2.  
          Prerequisites for Auto Image Replication
        3. Configuring a replication target
          1.  
            Determining the appliance deduplication password
      2.  
        About Auto Image Replication between NetBackup appliances and deduplication appliances
    7. About forwarding logs to an external server
      1.  
        Uploading certificates for TLS
      2.  
        Enabling log forwarding
      3.  
        Changing the log forwarding interval
      4.  
        Viewing the log forwarding configuration
      5.  
        Disabling log forwarding
    8. About high availability configuration
      1.  
        Checking the status
      2.  
        Getting the asset tag
      3.  
        Switching the services over
      4.  
        Removing a node
    9. About data erasure
      1.  
        Configuring the data erasure
      2.  
        Viewing the data erasure status
      3.  
        Aborting the data erasure
  5. Understanding the NetBackup appliance settings
    1.  
      About modifying the appliance settings
    2. Settings > Notifications
      1. Settings > Notifications > Alert Configuration
        1.  
          Configuring alert settings
        2. About SNMP
          1.  
            About the Management Information Base (MIB)
        3. About Call Home
          1.  
            Enabling and disabling Call Home from the appliance shell menu
          2.  
            Configuring a Call Home proxy server from the NetBackup Appliance Shell Menu
          3.  
            Understanding the Call Home workflow
          4.  
            About the Product Improvement Program
      2. Settings > Notifications > Login Banner
        1.  
          Creating the appliance login banner
        2.  
          Removing the appliance login banner
      3. Settings > Notification > Registration
        1.  
          About AutoSupport
    3. Settings > Network
      1.  
        VLAN configuration for NetBackup Appliances
      2. Settings > Network > Network Settings
        1.  
          NetBackup 5330 compute node Ethernet port configurations
        2. About WAN Optimization
          1.  
            How to enable WAN optimization for a network interface port or a network interface port bond
          2.  
            How to disable WAN optimization for a network interface port or a network bond
          3.  
            Viewing the WAN optimization status
        3.  
          Network and VLAN configuration guidelines
        4.  
          Creating a bond
        5.  
          Tagging VLAN
        6.  
          Adding static route
      3. Settings > Network > Fibre Transport
        1.  
          About the HBA port mode configuration table
        2.  
          Configuring Fibre Transport media server settings
        3.  
          Configuring Fibre Transport to other NetBackup appliances
        4.  
          Configuring Fibre Transport on a target appliance for optimized duplication and replication
      4. Settings > Network > Host
        1.  
          Changing DNS and Host Name Resolution (non-DNS) configuration settings
      5.  
        About IPv4-IPv6-based network support
    4.  
      Settings > Date and Time
    5. Settings > Authentication
      1. About configuring user authentication
        1.  
          Generic user authentication guidelines
      2. About authorizing NetBackup appliance users
        1.  
          NetBackup appliance user role privileges
      3.  
        Settings > Authentication
      4. Settings > Authentication > LDAP
        1.  
          Adding an LDAP server configuration
        2.  
          Importing an LDAP server configuration
        3.  
          Setting the SSL certification
        4.  
          Exporting an LDAP configuration
        5.  
          Unconfiguring LDAP user authentication
        6.  
          Enabling the LDAP server configuration
        7.  
          Disabling the LDAP server configuration
        8.  
          Deleting LDAP configuration parameters
        9.  
          Adding LDAP configuration parameters
        10.  
          Adding an LDAP attribute mapping
        11.  
          Deleting an LDAP attribute mapping
      5. Settings > Authentication > Active Directory
        1.  
          Adding an Active Directory server configuration
        2.  
          Unconfiguring the Active Directory user authentication
      6. Settings > Authentication > Kerberos-NIS
        1.  
          Adding a Kerberos-NIS authentication configuration
        2.  
          Unconfiguring the Kerberos-NIS user authentication
      7. Settings > Authentication > User Management
        1.  
          Adding appliance users
        2.  
          Deleting appliance users
        3.  
          Adding appliance user groups
        4.  
          Deleting appliance user groups
        5.  
          Granting roles to users and user groups
        6.  
          Revoking roles from users and user groups
        7.  
          Synchronizing the user groups
    6.  
      Settings > Password Management
  6. Troubleshooting
    1.  
      Viewing log files using the Support command
    2.  
      Where to find NetBackup appliance log files using the Browse command
    3. About disaster recovery
      1.  
        Recovering a NetBackup appliance master server using NetBackup catalog restore
    4.  
      Gathering device logs on a NetBackup appliance
  7. Deduplication pool catalog backup and recovery
    1.  
      Deduplication pool catalog backup policy
    2.  
      Automatic configuration of the deduplication pool catalog backup policy
    3.  
      Manually configuring the deduplication pool catalog backup policy
    4.  
      Manually updating the deduplication pool catalog backup policy
    5.  
      Recovering the deduplication pool catalog

Installing a NetBackup appliance software update using the NetBackup Appliance Shell Menu

Use the following procedure to start the appliance upgrade.

Note:

If you have enabled the STIG feature on an appliance and you need to upgrade it or install an EEB on it, do not plan such installations during the 4:00am - 4:30am time frame. By following this best practice, you can avoid interrupting the automatic update of the AIDE database and any monitored files, which can cause multiple alert messages from the appliance.

To install a downloaded release update using the NetBackup Appliance Shell Menu

  1. Check to make sure that the following pre-upgrade tasks have already been performed:
    • All jobs have been stopped or suspended and all SLPs have been paused.

    • The Support > Test Software command has been run and it returned a Pass result.

    • All of the necessary RHEL plug-in packages have been copied into the appropriate location.

  2. Log in to the NetBackup Appliance Shell Menu from the IPMI console.

    Note:

    Veritas recommends that you log in using the shell menu from the IPMI console instead of an SSH session. The IPMI console is also known as the Veritas Remote Manager interface. For details about how to access and use the Veritas Remote Manager, refer to the following document: NetBackup Appliance Hardware Installation Guide.

  3. To install the software release update, run the following command:

    Main_Menu > Manage > Software > Install patch_name

    Where patch_name is the name of the release update to install. Make sure that this patch name is the one that you want to install.

  4. Monitor the preflight check and watch for any Check failed messages.
    • If no Check failed messages appear, you are prompted to continue to the next step to start the upgrade.

    • If any Check failed messages appear, the upgrade is not allowed. You must resolve the reported failures, then launch the upgrade script again so that the preflight check can verify that the failures have been resolved. Click on the UMI links (V-409-xxx-xxxx) for information about how to resolve the reported issues.

    • If any Check failed messages indicate that a RHEL version third-party plug-in was not found, you must obtain the plug-in from the appropriate vendor. Refer to the following topic for installation details:

  5. After all preflight check items have passed, you may need to trust the CA certificate and the host ID-based certificate to start the upgrade process.

    To trust and deploy the CA certificates, do the following:

    • Verify the CA certificate detail and enter yes to trust the CA certificate, as follows:

      To continue with the upgrade, verify the following CA 
      certificate detail and enter "yes" to trust the CA certificate.
      CA Certificate Details:
           Subject Name : /CN=nbatd/OU=root@abc.example.com/O=vx
             Start Date : Jul 14 12:59:18 2017 GMT
            Expiry Date : Jul 09 14:14:18 2037 GMT
       SHA1 Fingerprint : 31:E9:97:2E:50:11:51:7C:D6:25:7F:32:86:3D:
                          6B:D5:33:5C:11:E2
      
      >> Do you want to trust the CA certificate? [yes, no](yes) 
      
    • If the security level of the master server is Very High, you must manually enter an authorization token to deploy the host ID-based certificate on the appliance, as follows:

      >> Enter token:

      Note:

      If the appliance is ever factory reset or re-imaged after it has been upgraded to version 3.1 or later, a reissue token is required for the next upgrade.

    • If the security level of the master server is High or Medium, the authentication token is not required. The host ID-based certificate is automatically deployed onto the appliance.

    For more information about security certificates, refer to the chapter "Security certificates in NetBackup" in the NetBackup Security and Encryption Guide.

  6. To check the upgrade status before the AIM window appears, enter the following command:

    Main_Menu > Manage > Software >UpgradeStatus

    The system reboots at least two times during the upgrade process. After the first reboot, the NetBackup Appliance Web Console and any SSH-based connections to the server are unavailable until the reboot process has completed. This condition may last two hours or more, depending on the complexity of the appliance configuration. It is important that you do not attempt to manually reboot the appliance during this time. You can use the Veritas Remote Management interface (IPMI) to view the system status. In addition, you may view the logs under /log or wait for the appliance to send an email upon completion of the upgrade process.

    During the upgrade process, you can open the AIM window to view the upgrade progress and the estimated remaining time.

  7. If problems are detected during the post-upgrade self-test, the AIM window shows the upgrade status as Paused. Other SSH sessions and email notifications also indicate this status.

    To clear the Paused status, perform the following tasks:

    • Press the V key to switch to the Verbose view to see the logs. If there are any Unique Message Identification (UMI) codes for the errors, search for them on the Veritas Support website to get more detailed information.

    • Try to fix the problem that the AIM window reports.

      If you need to use the shell menu, log on to the NetBackup Appliance Shell Menu through an SSH session. When the AIM window appears, press the S key to close it.

    • Go back to the AIM window on the IPMI console.

      If you tried fixing the problem, press the A key to attempt the self-test again. If you cannot fix the problem, contact Technical Support or press the R key to roll back the appliance to the previous software version.

      Note:

      A rollback occurs automatically after one hour if there is no user response on the AIM window during a pause condition.

  8. After the upgrade has completed, the AIM window shows a summary of the upgrade results.

    After

    the disk pools are back online, the appliance runs a self-diagnostic test. Refer to the following file for the test results:

    /log/selftest_report_<appliance_serial>_<timedate>.txt

    If SMTP is configured, an email notification that contains the self-test result is sent.

  9. Complete this step only if your backup environment includes SAN client computers.

    The Fibre Channel (FC) ports must be re-scanned to allow any SAN client computers to reconnect to the Fibre Transport (FT) devices. The re-scan must be done from the NetBackup CLI view on the appliance.

    To re-scan the FC ports:

    • Enter the following command to see a list of NetBackup user accounts:

      Manage > NetBackupCLI > List

    • Log on to this appliance as one of the listed NetBackup users.

    • Run the following command to rescan the FC ports:

      nbftconfig -rescanallclients

    • If any SAN clients still do not work, run the following commands on each of those clients in the order as shown:

      On UNIX clients:

      /usr/openv/netbackup/bin/bp.kill_all

      /usr/openv/netbackup/bin/bp.start_all

      On Windows clients:

      <install_path>\NetBackup\bin\bpdown

      <install_path>\NetBackup\bin\bpup

    • If any SAN clients still do not work, manually initiate a SCSI device refresh at the OS level. The refresh method depends on the operating system of the client. Once the refresh has completed, attempt the nbftconfig -rescanallclients command again.

    • If any SAN clients still do not work, reboot those clients.

      Note:

      If you have SLES 10 or SLES 11 SAN clients that still do not work, Veritas recommends upgrading the QLogic driver on those clients. For the affected SLES 10 clients, upgrade to version 8.04.00.06.10.3-K. For the affected SLES 11 clients, upgrade to version 8.04.00.06.11.1.

  10. Refer to the following topic for tasks that may be required after the upgrade has completed: