How to use NetBackup with Amazon Snowball and Snowball Edge

Article: 100045015
Last Published: 2019-07-15
Ratings: 1 0
Product(s): NetBackup & Alta Data Protection
  1. In case you have created custom instance of the Amazon s3 provider for Snowball, make sure the below entries are typed correctly:
  • Service host in General Settings tab. 
  • http and https port - 443 and 8443
  • access style
  • location constraint
  • service host in Region Setting tab

Check Cloud Storage Properties from Guide. Pages 26, 27 and 98 for point 1 and 2.

Veritas NetBackup™ Cloud Administrator's Guide 

  1. In case of Snowball Edge device, make sure you ran tpconfig command to update the storage server credentials
  • Update the storage server credentials with Snowball Edge credentials when the service host is set to Snowball Edge
  • Update the storage server credentials with AWS account credentials when service host is set to AWS endpoint

(Required for Snowball Edge) Update the storage server credentials from the media server that is attached to the storage server. Run the following command:

tpconfig -update -storage_server storage server name -stype storage server type -sts_user_id [user ID] -password password

  1. Make sure OFFLINE_TRANSFER_MODE is set to correct value:
  • It should be set to NONE when the backup and restore needs to be done from AWS Cloud endpoint
  • It should be set to FILESYSTEM or PROVIDER_API if the backup or restore needs to be done from Snowball device

To change a property, select a VALUE column and change it.

  1.  If you have SSL check-box checked in Advanced settings of the storage server, then make sure to run Snowball adapter with ssl option and append the certificate to cacert.pem file on media server.

To configure SSL for Amazon Snowball

  1. Ensure that the entries in the /.aws/snowball/config/snowball-adapter.config file are correct. Especially, ensure that the host name is set.
  2. Start the adapter. Following is a sample command:

    ./snowball-adapter -i Snowball IP address -m path to manifest file -u 29 character unlock code --ssl-enabled --aws-secret-key key

  3. Self-signed SSL certificate and key are generated in the /.aws/snowball/config/ directory.
  4. Append the certificate provided to the Amazon Snowball adapter on the command line as it is to /usr/openv/var/global/wmc/cloud/cacert.pem file on the media server. Ensure that the format and length of the newly copied certificate matches with the existing certificates in cacert.pem.

To configure SSL for Amazon Snowball Edge

  1. Lists the certificates available for use. Run the following Amazon Snowball client command:

    ./snowballEdge list-certificates

  2. Obtain the certificate. Run the following Amazon Snowball client command:

    ./snowballEdge get-certificate --certificate-arn arn_value

  3. Append the certificate provided on the command line as it is to /usr/openv/var/global/wmc/cloud/cacert.pem file on the media server. Ensure that the format and length of the newly copied certificate matches with the existing certificates in cacert.pem

       5. In case of CloudCatalyst Storage server, make sure you re-start the deduplication daemons after updating  storage server properties.

        6. If you are using AWS Snowball Edge device with FILESYSTEM value selected for OFFLINE_TRANSFER_MODE storage server property, make sure you mounted the root filesystem of Snowball Edge device onto the media server, and not the individual bucket(s).

 

Was this content helpful?