NetBackup™ 11.0 Application Guide
- Product overview
- Release notes
- Geting started
- Creating NetBackup application instances
- Managing NetBackup application instances
- Accessing NetBackup primary and media server instances for management tasks
- Managing users on a primary or a media server instance
- Managing multifactor authentication on a primary or a media server instance
- Running NetBackup commands on a primary or a media server application instance
- Managing users on a primary or a media server instance
- Accessing NetBackup WORM storage server instances for management tasks
- Managing users from the deduplication shell
- Managing multifactor authentication on a WORM storage server
- Managing certificates from the deduplication shell
- Configuring an isolated recovery environment using the web UI
- Managing NetBackup services from the deduplication shell
- Monitoring and troubleshooting NetBackup services from the deduplication shell
- Managing S3 service from the deduplication shell
- Managing users from the deduplication shell
Managing post-quantum cryptography (PQC) mode from the deduplication shell
You can enable post-quantum cryptography (PQC) mode on a WORM storage server to enable use of the PQC algorithm in TLS 1.3 Hybrid Key Exchange. PQC mode can be enabled only if FIPS mode is disabled.
To learn more about PQC support in NetBackup, refer to the NetBackup Security and Encryption guide.
Caution:
NetBackup uses the OQS provider to support post-quantum cryptography (PQC) for secure communications. While the OQS provider is a significant step towards preparing for a quantum-safe future, it is currently widely used in experimental and research environments. Veritas recommends that you thoroughly assess all associated risks and ensure that its usage aligns with your organization's security policies and compliance requirements before enabling PQC mode.
Use the following procedures to manage PQC mode.
To check if PQC mode is enabled or disabled
- Open an SSH session on the server as the msdpadm user.
- Run the following command:
setting PQC status
To enable PQC mode
- Open an SSH session on the server as the msdpadm user.
- Run the following command:
setting PQC enable
To disable PQC mode
- Open an SSH session on the server as the msdpadm user.
- Run the following command:
setting PQC disable