NetBackup™ AdvancedDisk Storage Solutions Guide

To set up the KMS database

1. On the NetBackup primary server, create the KMS database by running the nbkms command with the -createemptydb option, as follows:

   UNIX: /usr/openv/netbackup/bin/nbkms -createemptydb

   Windows: install_path\Veritas\NetBackup\bin\nbkms.exe -createemptydb

   The following prompt appears:

   Enter the Host Master Key (HMK) passphrase (or hit ENTER to use a 
   randomly generated HMK). The passphrase will not be displayed on 
   the screen.
   Enter passphrase :

2. Enter a passphrase for the host master key (HMK) or press Enter to create a randomly generated key.

   After you enter the Host Master Key passphrase, the following prompt appears:

   An ID will be associated with the Host Master Key (HMK) just 
   created. The ID will assist you in determining the HMK associated 
   with any key store.
   Enter HMK ID : 

3. Enter an ID for the HMK. This ID can be anything descriptive that you want to use to identify the HMK.

   After you enter the Host Master Key ID, the following prompt appears:

   Enter the Key Protection Key (KPK) passphrase (or hit ENTER to use 
   a randomly generated KPK). The passphrase will not be displayed on 
   the screen. 
   Enter passphrase :

4. Enter a pass phrase for the Key Protection Key or press Enter to create a randomly generated key.

   After you enter the Key Protection Key passphrase, the following prompt appears:

   An ID will be associated with the Key Protection Key (KPK) just 
   created. The ID will assist you in determining the KPK associated 
   with any key store.
   Enter KPK ID :

5. Enter an ID for the KPK. The ID can be anything descriptive that you want to use to identify the KPK.
6. In the Activity monitor, start the NetBackup Key Management Service on the primary server.

   After you start the service, the initial database setup is complete.

7. After you set up the database, create key groups for the volumes in the disk pool.

   See Create a KMS key group for NetBackup AdvancedDisk storage encryption.