Veritas NetBackup™ Cloud Administrator's Guide
- About NetBackup cloud storage
- About the cloud storage
- About the Amazon S3 cloud storage API type
- About protecting data in Amazon for long-term retention
- Protecting data using Amazon's cloud tiering
- About Microsoft Azure cloud storage API type
- About OpenStack Swift cloud storage API type
- Configuring cloud storage in NetBackup
- Scalable Storage properties
- Cloud Storage properties
- About the NetBackup CloudStore Service Container
- About the NetBackup media servers for cloud storage
- Configuring a storage server for cloud storage
- NetBackup cloud storage server properties
- Configuring a storage unit for cloud storage
- Changing cloud storage disk pool properties
- Monitoring and Reporting
- Operational notes
- Troubleshooting
- About unified logging
- About legacy logging
- Troubleshooting cloud storage configuration issues
- Troubleshooting cloud storage operational issues
Deploying host ID-based certificates
Depending on the certificate deployment security level, a non-master host may require an authorization token before it can obtain a host ID-based certificate from the Certificate Authority (master server). When certificates are not deployed automatically, they must be deployed manually by the administrator on a NetBackup host using the nbcertcmd command.
The following topic describes the deployment levels and whether the level requires an authorization token.
Use the following procedure when the security level is such that a host administrator can deploy a certificate on a non-master host without requiring an authorization token.
To generate and deploy a host ID-based certificate when no token is needed
- The host administrator runs the following command on the non-master host to establish that the master server can be trusted:
nbcertcmd -getCACertificate
- Run the following command on the non-master host:
nbcertcmd -getCertificate
Note:
To communicate with multiple NetBackup domains, the administrator of the host must request a certificate from each master server using the -server option.
Run the following command to get a certificate from a specific master server:
nbcertcmd -getCertificate -server master_server_name
- To verify that the certificate is deployed on the host, run the following command:
nbcertcmd -listCertDetails
Use the following procedure when the security level is such that a host requires an authorization token before it can deploy a host ID-based certificate from the CA.
To generate and deploy a host ID-based certificate when a token is required
- The host administrator must have obtained the authorization token value from the CA before proceeding. The token may be conveyed to the administrator by email, by file, or verbally, depending on the various security guidelines of the environment.
- Run the following command on the non-master host to establish that the master server can be trusted:
nbcertcmd -getCACertificate
- Run the following command on the non-master host and enter the token when prompted:
nbcertcmd -getCertificate -token
Note:
To communicate with multiple NetBackup domains, the administrator of the host must request a certificate from each master server using the -server option.
If the administrator obtained the token in a file, enter the following:
nbcertcmd -getCertificate -file authorization_token_file
- To verify that the certificate is deployed on the host, run the following command:
nbcertcmd -listCertDetails
Use the -cluster option to display cluster certificates.