NetBackup™ Snapshot Manager for Cloud Install and Upgrade Guide
- Introduction
- Section I. NetBackup Snapshot Manager for Cloud installation and configuration
- Preparing for NetBackup Snapshot Manager for Cloud installation
- Meeting system requirements
- NetBackup Snapshot Manager host sizing recommendations
- NetBackup Snapshot Manager extension sizing recommendations
- Creating an instance or preparing the host to install NetBackup Snapshot Manager
- Installing container platform (Docker, Podman)
- Creating and mounting a volume to store NetBackup Snapshot Manager data
- Verifying that specific ports are open on the instance or physical host
- Preparing NetBackup Snapshot Manager for backup from snapshot jobs
- OCI - iptables rules for backup from snapshot jobs
- Deploying NetBackup Snapshot Manager for Cloud using container images
- Before you begin installing NetBackup Snapshot Manager
- Installing NetBackup Snapshot Manager in the Docker/Podman environment
- Installing NetBackup Snapshot Manager on CIS Level 2 v2 configured host
- Securing the connection to NetBackup Snapshot Manager
- Verifying that NetBackup Snapshot Manager is installed successfully
- Restarting NetBackup Snapshot Manager
- Deploying NetBackup Snapshot Manager for Cloud extensions
- Before you begin installing NetBackup Snapshot Manager extensions
- Downloading the NetBackup Snapshot Manager extension
- Installing the NetBackup Snapshot Manager extension on a VM
- Installing the NetBackup Snapshot Manager extension on a managed Kubernetes cluster (AKS) in Azure
- Installing the NetBackup Snapshot Manager extension on a managed Kubernetes cluster (EKS) in AWS
- Installing the NetBackup Snapshot Manager extension on a managed Kubernetes cluster (GKE) in GCP
- Install extension using the Kustomize and CR YAMLs
- Managing the extensions
- NetBackup Snapshot Manager for cloud providers
- Why to configure the NetBackup Snapshot Manager cloud providers?
- AWS plug-in configuration notes
- Prerequisites for configuring the AWS plug-in
- Before you create a cross account configuration
- Prerequisites for application consistent snapshots using AWS Systems Service Manager
- Prerequisites for configuring AWS plug-in using VPC endpoint
- AWS permissions required by NetBackup Snapshot Manager
- Configuring AWS permissions for NetBackup Snapshot Manager
- Google Cloud Platform plug-in configuration notes
- Prerequisites for configuring the GCP plug-in using Credential and Service Account option
- Google Cloud Platform permissions required by NetBackup Snapshot Manager
- Preparing the GCP service account for plug-in configuration
- Configuring a GCP service account for NetBackup Snapshot Manager
- GCP cross-project configuration
- GCP shared VPC configuration
- Microsoft Azure plug-in configuration notes
- Microsoft Azure Stack Hub plug-in configuration notes
- OCI plug-in configuration notes
- Cloud Service Provider endpoints for DBPaaS
- Configuration for protecting assets on cloud hosts/VM
- Deciding which feature (on-host agent or agentless) of NetBackup Snapshot Manager is to be used for protecting the assets
- Protecting assets with NetBackup Snapshot Manager's on-host agent feature
- Installing and configuring NetBackup Snapshot Manager agent
- Configuring the NetBackup Snapshot Manager application plug-in
- Configuring an application plug-in
- Microsoft SQL plug-in
- Oracle plug-in
- Protecting assets with NetBackup Snapshot Manager's agentless feature
- Snapshot Manager for cloud catalog backup and recovery
- NetBackup Snapshot Manager for cloud assets protection
- Volume encryption in NetBackup Snapshot Manager for cloud
- NetBackup Snapshot Manager for Cloud security
- Preparing for NetBackup Snapshot Manager for Cloud installation
- Section II. NetBackup Snapshot Manager for Cloud maintenance
- NetBackup Snapshot Manager for Cloud logging
- Upgrading NetBackup Snapshot Manager for Cloud
- About NetBackup Snapshot Manager for Cloud upgrades
- Supported upgrade path
- Upgrade scenarios
- Preparing to upgrade NetBackup Snapshot Manager
- Upgrading NetBackup Snapshot Manager
- Upgrading NetBackup Snapshot Manager using patch or hotfix
- Applying operating system patches on NetBackup Snapshot Manager host
- Migrating and upgrading NetBackup Snapshot Manager
- GCP configuration for migration from zone to region
- Post-upgrade tasks
- Post-migration tasks
- Uninstalling NetBackup Snapshot Manager for Cloud
- Preparing to uninstall NetBackup Snapshot Manager
- Backing up NetBackup Snapshot Manager
- Unconfiguring NetBackup Snapshot Manager plug-ins
- Unconfiguring NetBackup Snapshot Manager agents
- Removing the NetBackup Snapshot Manager agents
- Removing NetBackup Snapshot Manager from a standalone Docker host environment
- Removing NetBackup Snapshot Manager extensions - VM-based or managed Kubernetes cluster-based
- Restoring NetBackup Snapshot Manager
- Troubleshooting NetBackup Snapshot Manager for Cloud
- Troubleshooting NetBackup Snapshot Manager
- SQL snapshot or restore and granular restore operations fail if the Windows instance loses connectivity with the NetBackup Snapshot Manager host
- Disk-level snapshot restore fails if the original disk is detached from the instance
- Discovery is not working even after assigning system managed identity to the control node pool
- Performance issue with GCP backup from snapshot
- Post migration on host agents fail with an error message
- File restore job fails with an error message
- Acknowledgment not received for datamover
- Google Cloud Platform does display the Snapshot ID of the disk
- Application state of the connected/configured cloud VM(s) displays an error after upgrading to NetBackup Snapshot Manager version 11.x
- Backup and restore jobs fail with timeout error
- GCP restore with encryption key failed with an error message
- Amazon Redshift clusters and databases not available after discovery
- Shared VPC subnet not visible
- Container manager may not spawn the ephemeral registration container timely
- GCP restore from VM fails to obtain firewall rules
- Parameterised VM restore fails to retrieve encryption keys
- Restore from snapshot of a VM with security type Trusted Launch fails
- Snapshot Manager failed to retrieve the specified cloud domain(s), against the specified plugin instance
- Issues with SELinux configuration
- Performance issues with OCI backup from snapshot and restore from backup copy
- Connection to Amazon Linux 2023 or Alma Linux machines fail
- Single file restore from snapshot copy fails with an error
- MS SQL application backup, restore, or SFR job on Windows cloud VM fails with an error
- Status 49 error appears
- Restore from backup fails with an error
- (For AWS) If the specified AMI is not subscribed in the given region an error message appears
- Restore of Azure Disk Encrypted VM fails with an error
Post-upgrade tasks
You may need to perform the following tasks after a successful upgrade of the NetBackup Snapshot Manager server.
Post-upgrade tasks
- Upgrade the NetBackup Snapshot Manager agents on the Linux and Windows application hosts.
Note:
If you are upgrading from NetBackup Snapshot Manager 8.3 to 9.0 or 9.1, then you must manually upgrade the on-host agents. If you are upgrading from NetBackup Snapshot Manager 9.0 to 9.1, upgrading the on-host agents is optional.
Perform the following steps to upgrade the agent on Linux hosts:
Sign in to NetBackup UI and download the newer agent package.
Navigate to Cloud > NetBackup Snapshot Managers > Actions > Add agent.
Stop the flexsnap agent service on the Linux host where you want to upgrade the agent.
Run the following command on the Linux host:
# sudo systemctl stop flexsnap-core.service
Upgrade the agent on the Linux host.
Run the following command on the Linux host:
# sudo rpm -Uvh --force flexsnap_agent_rpm_name
Here, flexsnap_agent_rpm_name is the name of the agent rpm package you downloaded earlier.
Reload the daemon, if prompted.
Run the following command on the Linux host:
# sudo systemctl daemon-reload
Repeat these steps on all the Linux hosts where you wish to upgrade the Linux-based agent.
Note the following:
When upgrading from CloudPoint agent to Flexsnap agent, uninstall CloudPoint agent first and then install the Flexsnap agent using the following recommended uninstallation and installation commands:
Uninstallation: sudo yum -y remove cloudpoint_agent_rpm_name
Installation: sudo yum -y install flexnsap_agent_rpm_name
Connect to the Linux host and re-register the agent using the following command:
sudo flexsnap-agent --ip <snapshotmanager_host_FQDN_or_IP> --token <authtoken>
Run discovery task.
Perform the following steps to upgrade the agent on Windows hosts:
Sign in to NetBackup UI and download the newer agent package.
Navigate to Cloud > NetBackup Snapshot Managers > Actions > Add agent.
Stop the Cohesity NetBackup Snapshot Manager Agent service that is running on the host.
Run the newer version of the agent package file and follow the installation wizard workflow to upgrade the on-host agent on the Windows host.
The installer detects the existing installation and upgrades the package to the new version automatically.
Generate the token for agent configuration. Navigate to NetBackup Web UI > Cloud > NetBackup Snapshot Managers > Actions > Add agent > Create Token.
Repeat these steps on all the Windows hosts where you wish to upgrade the Windows-based agent.
For details on how to download the agent installation package from the NetBackup UI, refer to the following:
See Downloading and installing the NetBackup Snapshot Manager agent.
- Perform one of the following actions:
On the NetBackup primary server, run the following command:
./tpconfig -update -snapshot_manager <snapshot_manager_name> -snapshot_manager_user_id <user_ID> -manage_workload <manage_workload> [-requiredport <IP_port_number>] [-security_token <token_value>]
Note:
Additional option -security_token is required for updating NetBackup Snapshot Manager which is managing cloud workloads. The token must be Standard host token. This is required for NetBackup certificates generation on NetBackup Snapshot Manager.
On UNIX systems, the directory path to this command is
/usr/openv/volmgr/bin/. On Windows systems, the directory path to this command isinstall_path\Volmgr\bin\. Refer to the Cohesity NetBackup Commands Reference Guide for details.Or
Make a PATCH API call to the NetBackup primary server using the following URL:
https://primaryserver.domain.com/netbackup/config/servers/snapshot-mgmt-servers/cp-hostname
Or
If the Snapshot Manager is registered with NetBackup version before 10.3, then from NetBackup UI, edit the Snapshot Manager with the reissue token.
- By default, the create snapshot operation in NetBackup Snapshot Manager would create recovery points instead of snapshots. Hence to use Azure recovery points for the snapshots to be application consistent, ensure that the following additional permissions are configured to enable Azure restore points:
actions": [ "Microsoft.Compute/restorePointCollections/read", "Microsoft.Compute/restorePointCollections/write", "Microsoft.Compute/restorePointCollections/delete", "Microsoft.Compute/restorePointCollections/restorePoints/read", "Microsoft.Compute/restorePointCollections/restorePoints/write", "Microsoft.Compute/restorePointCollections/restorePoints/delete", "Microsoft.Compute/restorePointCollections/restorePoints/ retrieveSasUris/action", "Microsoft.Compute/restorePointCollections/restorePoints/ diskRestorePoints/read", "Microsoft.Compute/restorePointCollections/restorePoints/ diskRestorePoints/beginGetAccess/action", "Microsoft.Compute/restorePointCollections/restorePoints/ diskRestorePoints/endGetAccess/action" ]," - After upgrading NetBackup Snapshot Manager to version 11.0, the on-host agent must be restarted to discover and protect assets on LVM storage.
For more details about the tpconfig command and its options, refer to the Cohesity NetBackup Commands Reference Guide.
Note:
After the upgrade is completed, ensure that you enable the policies and SLPs related to Snapshot Manager from the NetBackup console.
Post upgrade task for configuring AWS plug-in using the VPC endpoint
After successful upgrade of NetBackup Snapshot Manager to version 11.0, to use the VPC endpoint for AWS plug-in configuration, perform the following:
Create an endpoint of AWS Security Token Service (STS) from AWS Console.
Navigate to and then select the NetBackup Snapshot Manager's tab.
For the selected Snapshot Manager under the Amazon Web Services cloud provider, click the option under the menu to edit the plug-in.
In the VPC Endpoint, pass the first DNS name of AWS STS where no zone is specified and the NetBackup Snapshot Manager region must be same as the STS Endpoint created region.