NetBackup™ Web UI Cloud Administrator's Guide
- Managing and protecting cloud assets
- About protecting cloud assets
- Limitations and considerations
- Configure Snapshot Manager in NetBackup
- Managing intelligent groups for cloud assets
- Protecting cloud assets or intelligent groups for cloud assets
- Cloud asset cleanup
- Cloud asset filtering
- AWS and Azure government cloud support
- About protecting Microsoft Azure resources using resource groups
- About the NetBackup Accelerator for cloud workloads
- Configuring backup schedules for cloud workloads
- Backup options for cloud workloads
- Snapshot replication
- Configure AWS snapshot replication
- Using AWS snapshot replication
- Support matrix for account replication
- Protect applications in-cloud with application-consistent snapshots
- Protecting AWS or Azure VMs for recovering to VMware
- Protecting PaaS assets
- Prerequisites for protecting PaaS assets
- Installing the native client utilities
- Configuring the storage server for instant access
- Prerequisites for protecting Amazon RDS SQL Server database assets
- Configuring storage for different deployments
- About incremental backup for PaaS workloads
- About archive redo log backup for PaaS workloads
- About Auto Image Replication for PaaS workloads
- Limitations and considerations
- Discovering PaaS assets
- Viewing PaaS assets
- Managing PaaS credentials
- View the credential name that is applied to a database
- Add credentials to a database
- Add protection to PaaS assets
- Perform backup now
- Recovering cloud assets
- Performing granular restore
- Troubleshooting protection and recovery of cloud assets
- Troubleshoot cloud workload protection issues
- Error Code 9855: Error occurred while exporting snapshot for the asset: <asset_name>
- Backup from snapshot jobs take longer time than expected
- Backup from snapshot job fails due to connectivity issues when Snapshot Manager is deployed on an Ubuntu host
- Error disambiguation in NetBackup UI
- Troubleshoot PaaS workload protection and recovery issues
Add a cloud provider for a Snapshot Manager
You can protect the assets on the Amazon Web Services (AWS), Google Cloud Platform (GCP), Microsoft Azure, Microsoft Azure Stack Hub, and Oracle Cloud Infrastructure (OCI) providers. Starting with 9.0, the Snapshot Manager can discover Amazon Web Services and Microsoft Azure US Government cloud workloads.
To add a cloud provider for Snapshot Manager
- On the left, click Workloads > Cloud.
- Click the Providers tab or click Add under the cloud provider for which you want to add a configuration.
- Enter a value in the Configuration Name field in the Add configuration pane.
- Select the preferred Snapshot Manager.
- Enter the required details.
Cloud provider
Parameter
Description
Microsoft Azure
Credential type: Application service principal
Tenant ID
The ID of the AAD directory in which you created the application.
Client ID
The application ID.
Secret key
The secret key of the application.
Credential type: System managed identity
Enable system-managed identity on Snapshot Manager host in Azure.
Note:
Assign a role to the system-managed identity.
Credential type: User managed identity
Client ID
The ID of the user-managed identity connected to the Snapshot Manager host.
The following parameters are applicable for all the above credential types
Regions
One or more regions in which to discover cloud assets.
Note:
If you configure a government cloud, select US Gov Arizona, US Gov Texas US, or Gov Virginia.
Resource Group prefix
The string with which you want to append all the resources in a resource group.
Protect assets even if prefixed Resource Groups are not found
The check box determines whether the assets are protected if they are not associated with any resource groups.
Microsoft Azure Stack Hub
Using AAD:
Azure Stack Hub Resource Manager endpoint URL
The endpoint URL in the following format allows Snapshot Manager to connect with your Azure resources.
https://management.<location>.<FQDN>Tenant ID
The ID of the AAD directory in which you created the application.
Client ID
The application ID.
Secret Key
The secret key of the application.
Authentication Resource URL (optional)
The URL where the authentication token is sent to.
Using ADFS:
Azure Stack Hub Resource Manager endpoint URL
The endpoint URL in the following format that allows Snapshot Manager to connect with your Azure resources.
https://management.<location>.<FQDN>Tenant ID
The ID of the AAD directory in which you created the application.
Client ID
The application ID.
Secret Key
The secret key of the application.
Authentication Resource URL (optional)
The URL where the authentication token is sent to.
Amazon AWS
Access Key
The access key ID, when specified with the secret access key, authorizes Snapshot Manager to interact with the AWS APIs.
Secret Key
The secret key of the application.
Note:
If the Snapshot Manager is configured with IAM Config, the Access Key and Secret Key options are not available.
Regions
One or more AWS regions in which to discover cloud assets.
Note:
If you configure a government cloud, select us-gov-east-1 or us-gov-west-1.
VPC Endpoint
First DNS name of AWS Security Token Service (STS) endpoint service with no zone specified.
Google Cloud Platform
Project ID
The ID of the project from which the resources are managed. Listed as in the project_id JSON file.
Client Email
The email address of the Client ID. Listed as client_email in the JSON file.
Private Key
The private key. Listed as private_key in the JSON file.
Note:
You must enter this key without quotes. Do not enter any spaces or return characters at the beginning or end of the key.
Regions
A list of regions in which the provider operates.
Oracle Cloud Infrastructure
Credential type: API Key
User OCID
User's OCID for which you generate the credentials.
Tenancy
Tenant ID of the OCI account.
Fingerprint
The fingerprint that you obtain while generating the credential.
Private Key
The private key that you obtain while generating the credential.
Regions
One or more OCI regions in which you want to discover the cloud assets.
Credential type: IAM
NetBackup Snapshot Manager must be a part of a dynamic group and that dynamic group must have enough permissions.
- Enter the connection and authentication details in the Add Configuration pane.
- Click Save.
The assets on the cloud providers are automatically discovered.