Veritas NetBackup™ 安装指南

使用 NetBackup 安装脚本安装 NetBackup 介质服务器软件

1. 以 root 身份登录到服务器。
2. 导航到 ESD 映像（下载的文件）所在的位置并输入以下所示命令：

   ./install

3. 当显示以下消息时，请按 Enter 继续：

   Veritas Installation Script
   Copyright 1993 - 2016 Veritas Corporation, All Rights Reserved.
   
   
           Installing NetBackup Server Software
   
   
   Please review the VERITAS SOFTWARE LICENSE AGREEMENT located on
   the installation media before proceeding.  The agreement includes
   details on the NetBackup Product Improvement Program.
   
   For NetBackup installation and upgrade information specific to your
   platform and to find out if your installed EEBs or hot fixes are
   contained in this release, check out the Veritas Services and 
   Operations Readiness Tools (SORT) Installation and Upgrade Checklist 
   and Hot fix and EEB Release Auditor, respectively, at 
   https://sort.veritas.com/netbackup.
   
   ATTENTION!  To help ensure a successful upgrade to NetBackup 9.0.0.1,
   please visit the NetBackup 8.x Upgrade Portal:
   http://www.veritas.com/docs/000115678.
   
   Do you wish to continue? [y,n] (y)

4. 当显示以下问题时，回答该问题以指示当前计算机是否为主服务器：

   Is this host the master server? [y,n]

5. 当显示以下消息提示时，确认计算机名称正确或输入正确的计算机名称：

   Installing NetBackup Enterprise Server version: 9.0.0.1
   If this machine will be using a different network interface than 
   the default (name), the name of the preferred interface 
   should be used as the configured server name. If this machine 
   will be part of a cluster, the virtual name should be used as the 
   configured server name.
   The domainname of your server appears to be "domain". You 
   may choose to use this domainname in your configured NetBackup 
   server name, or simply use "name" as the configured 
   NetBackup server name.
   Would you like to use "name" as the configured NetBackup server
   name of this machine? [y, n] (y)

   注意:

   该域名的错误信息将导致在配置身份验证代理和 NetBackup Access Control 期间出现故障。要解决此问题，请使用 bpnbaz -configureauth 命令配置身份验证代理。提供了有关 bpnbaz -configureauth 命令的更多信息。

   NetBackup 命令参考指南

   • 如果显示的（默认）介质服务器名称正确，请按 Enter。

   • 如果显示的（默认）介质服务器名称不正确，请键入 n，然后输入正确的名称。

6. 当系统提示此问题时，请标识主服务器的名称：

   What is the fully qualified name of the master server?

   如果主服务器处于群集环境，请输入主服务器的虚拟名称。

7. 对于 NetBackup 安装位置，请输入相应的平台信息，如下所示：

   • 显示以下问题时，请按 Enter 接受默认的回答 (y)。

     The NetBackup and Media Manager software is built
     for use on <platform> hardware. Do you want to install
     NetBackup and Media Manager files? [y,n] (y)
     

   • 显示以下问题时，请选择安装 NetBackup 和介质管理器软件的位置：

     NetBackup and Media Manager are normally
     installed in /usr/openv.
     Is it OK to install in /usr/openv? [y,n] (y)
     

     针对 Solaris 显示的路径为 /opt/openv。

     要接受默认的回答 (y)，请按 Enter。

     要更改安装位置，请键入 n 并按 Enter。然后输入相应的目标。

   您可找到有关安装文件夹限制的附加信息。

   请参见对 NetBackup 安装目录的限制。

8. 确认二进制文件的安装位置后，安装程序会获取证书颁发机构证书详细信息。

   Getting CA certificate mode from the master server.
   Depending on the network, this action may take a few minutes. To 
   continue without setting up secure communication, press Ctrl+C.

   请注意，如果您按 Ctrl+C，此操作需要您重新运行安装或在没有所需安全组件的情况下继续安装。如果这些安全组件缺失，备份和还原将失败。

9. 然后，安装程序会查看本地系统已配置为使用哪个证书颁发机构。本地系统上的证书颁发机构选项为：NetBackup 证书颁发机构、外部证书颁发机构或不确定。

   然后，安装程序使用主服务器证书颁发机构模式和本地系统证书颁发机构配置的组合来确定后续步骤。

10. 如果安装程序提示您输入证书文件路径，则表示您的环境使用外部证书颁发机构。继续执行步骤 11。

    如果安装程序提示您输入指纹信息，则表示您的环境使用 NetBackup 证书颁发机构。继续执行步骤 17。

    如果安装程序无法确定主服务器上的证书颁发机构配置，系统将为您提供两种选择：

    • 跳过安全配置，并在安装后配置证书颁发机构。有关安装后证书颁发机构配置的更多信息，请访问：

      https://www.veritas.com/support/en_US/article.100044300

      继续执行步骤 21。

    • 退出安装，并在配置证书颁发机构后重新启动安装。

11. 在显示的提示符下提供外部证书颁发机构信息：

    Enter the certificate file path or q to skip security configuration: 
    /usr/eca/cert_chain.pem
    
    Enter the trust store location or q to skip security configuration: 
    /usr/eca/trusted/cacerts.pem
    
    Enter the private key path or q to skip security configuration: 
    /usr/eca/private/key.pem
    
    Enter the passphrase file path or q to skip security configuration 
    (default: NONE): /usr/eca/private/passphrase.txt

    注意:

    请注意，密码文件路径是可选的。

12. 出现提示时，提供 CRL 配置所需的信息：

    Should a CRL be honored for the external certificate?
    1) Use the CRL defined in the certificate.
    2) Use the CRL from a file path.
    3) Do not use a CRL.
    q) skip security configuration
    CRL option (1): 

13. （视情况而定）如果您指定 2，则必须输入 CRL 位置的路径：

    Enter the CRL location path or q to skip security configuration: 
    /usr/eca/crl

14. 安装程序回显您输入的配置信息，并尝试检索外部证书的详细信息：

    External CA values entered:
    Certificate file path:  /usr/eca/cert_chain.pem
    Trust store file path:  /usr/eca/trusted/cacerts.pem
    Private key file path:  /usr/eca/private/key.pem
     Passphrase file path:  /usr/eca/private/passphrase.txt
          CRL check level:  Use the CRL from a file path.
        CRL location path:  /usr/eca/crl
    
    Getting external CA certificate details
             Issued By : CN=IITFRMNUSINT,O=Veritas,OU=iitf
          Subject Name : CN=cuomovm04,O=Veritas,OU=iitf
           Expiry Date : Oct 31 17:25:59 2019 GMT
      SHA1 Fingerprint : 62:B2:C3:31:D5:95:15:85:9D:C9:AE:C6:EA:C2:DF:DF:
                         6D:4B:92:5B
         Serial Number : 0x6c7fa2743072ec3eaae4fd60085d468464319a
      Certificate Path : /usr/eca/cert_chain.pem
    
    Validating host ECA certificate.
    NOTE: Depending on the network, this action may take a few minutes.
          To continue without setting up secure communication, press Ctrl+C.

15. （视情况而定）如果外部证书注册预检查成功完成，请选择 1，并按 Enter 以继续。

    The external certificate enrollment pre-check is successful.
    
    The external certificate is valid for use with master server name
    How do you want to proceed?
    1) Continue the installation using this certificate.
    2) Update external certificate values.
    3) Abort the installation.
    Default option (1): 

    继续执行步骤 21。

16. （视情况而定）如果外部证书注册预检查失败，请从显示的选项中进行选择。默认值为 2。

    The external certificate enrollment pre-check failed.
    
    The external certificate is not valid for use with master server name
    How do you want to proceed?
    1) Continue the installation and set up external certificates later.
    2) Modify the external CA values entered.
    3) Abort the installation.
    Default option (2): 

    继续执行步骤 21。

17. 提示时，检查指纹信息并确认其准确性。

    Master server [master_name] reports CA Certificate fingerprint [fingerprint]. Is this correct? [y/n] (y)

    确认指纹信息后，安装程序会存储证书颁发机构证书详细信息。

    Storing CA certificate.
    Depending on the network, this action may take a few minutes. To 
    continue without setting up secure communication, press Ctrl+C.

    请注意，如果您按 Ctrl+C，此操作需要您重新运行安装或在没有所需安全组件的情况下继续安装。如果这些安全组件缺失，备份和还原将失败。

18. 存储证书颁发机构证书后，安装程序会获取主机证书。

    Getting host certificate.
    Depending on the network, this action may take a few minutes. To 
    continue without setting up secure communication, press Ctrl+C.

    请注意，如果您按 Ctrl+C，此操作需要您重新运行安装或在没有所需安全组件的情况下继续安装。如果这些安全组件缺失，备份和还原将失败。

19. （视情况而定）如果系统提示您输入授权令牌，请输入此令牌。

    An authorization token is required in order to get the host certificate for this host. At the prompt, enter the authorization token or q to skip the question. NOTE: The answer entered will not be displayed to the terminal.

    Enter the authorization token for master_server_FQDN or q to skip:

20. 出现提示时，指定是否要安装 Java GUI 和 JRE 软件包。

    The Java GUI and JRE packages are currently not installed on this host.

    The Java GUI and JRE can be optionally included with NetBackup. The Java GUI and JRE enable the NetBackup Administration Console and the Backup, Archive, and Restore (BAR) GUI.

    Choose an option from the list below.

    1) Include the Java GUI and JRE.

    2) Exclude the Java GUI and JRE.

    如果指定 1，则会显示：Including the installation of Java GUI and JRE packages。如果指定 2，则会显示：Excluding the installation of Java GUI and JRE packages。

21. 输入 NetBackup 服务器或 NetBackup Enterprise Server 的许可证密钥。
22. 键入 y，然后按照提示为其他 NetBackup 选件和代理添加许可证密钥。

    虽然您可以稍后添加许可证密钥，但最好现在输入这些密钥。如果稍后通过 NetBackup-Java 管理控制台添加许可证密钥，则必须重新启动控制台。

23. 输入所有许可证密钥后，键入 q 退出许可证密钥实用程序，完成服务器软件安装。
24. 出现以下消息时，请按 Enter 并接受 EMM 服务器的默认名称。必须在主服务器上配置 EMM。所有主服务器必须有自己的 EMM 配置。不再支持远程 EMM 或共享 EMM。

    Enter the name of the Enterprise Media Manager (default: <name>)

    默认情况下，显示主服务器名称。

25. 重复步骤 1 到 24，在其余的所有介质服务器上安装介质服务器软件。