Veritas NetBackup™ Security and Encryption Guide
- Increasing NetBackup security
- Security deployment models
- Port security
- About NetBackup daemons, ports, and communication
- Additional port information for products that interoperate with NetBackup
- About configuring ports
- Auditing NetBackup operations
- Configuring Enhanced Auditing
- Access control security
- NetBackup Access Control Security (NBAC)
- Configuring NetBackup Access Control (NBAC)
- Configuring Access Control host properties for the master and media server
- Access Control host properties dialog for the client
- Troubleshooting Access Management
- Windows verification points
- UNIX verification points
- Verification points in a mixed environment with a UNIX master server
- Verification points in a mixed environment with a Windows master server
- About determining who can access NetBackup
- Viewing specific user permissions for NetBackup user groups
- Security management in NetBackup
- About the Security Management utilities
- About audit events
- About host management
- Adding shared or cluster mappings
- Allowing or disallowing automatic certificate reissue
- About global security settings
- About host name-based certificates
- About host ID-based certificates
- Using the Certificate Management utility to issue and deploy host ID-based certificates
- About certificate deployment security levels
- Setting up trust with the master server (Certificate Authority)
- About reissuing host ID-based certificates
- About Token Management for host ID-based certificates
- About the host ID-based certificate revocation list
- About revoking host ID-based certificates
- Security certificate deployment in a clustered NetBackup setup
- About deployment of a host ID-based certificate on a clustered NetBackup host
- Data at rest encryption security
- About NetBackup client encryption
- Configuring standard encryption on clients
- About configuring standard encryption from the server
- Configuring legacy encryption on clients
- About configuring legacy encryption from the client
- About configuring legacy encryption from the server
- Additional legacy key file security for UNIX clients
- Data at rest key management
- About the Key Management Service (KMS)
- Installing KMS
- Configuring KMS
- About key groups and key records
- Overview of key record states
- Configuring NetBackup to work with KMS
- About using KMS for encryption
- KMS database constituents
- Command line interface (CLI) commands
- About exporting and importing keys from the KMS database
- Troubleshooting KMS
- Regenerating keys and certificates
- NetBackup web services account
Security certificate deployment in a clustered NetBackup setup
This section provides information on deployment of host name-based and host ID-based certificates in a NetBackup clustered setup.
For more information on NetBackup clusters, see the NetBackup Clustered Master Server Administrator's Guide.
http://www.veritas.com/docs/DOC5332
In a clustered NetBackup master server setup, the host ID-based certificates are deployed as follows:
One certificate for each cluster node: A certificate resides on the local disk of each node.
One certificate for the virtual name: A certificate resides on the shared disk of the cluster.
Consider the following example:
If a cluster setup consists of 4 nodes, 5 host ID-based certificates are deployed. One certificate is deployed on each of the 4 nodes and one on the shared disk, which is used for the virtual name of the master server.
Note:
Only master servers can be clustered in NetBackup.
In a clustered NetBackup master server setup, the host name-based certificates are deployed as follows:
One certificate for each cluster node: A certificate resides on the local disk of each node.
One certificate for the virtual name on each node: A certificate resides on the local disk of each node.