NetBackup InstallGuide
NetBackup InstallGuide
NetBackup InstallGuide
Installation Guide
Release 8.2
21317387
Veritas NetBackup™ Installation Guide
Last updated: 2019-10-30
Legal Notice
Copyright © 2019 Veritas Technologies LLC. All rights reserved.
Veritas, the Veritas Logo, and NetBackup are trademarks or registered trademarks of Veritas
Technologies LLC or its affiliates in the U.S. and other countries. Other names may be
trademarks of their respective owners.
This product may contain third-party software for which Veritas is required to provide attribution
to the third party (“Third-party Programs”). Some of the Third-party Programs are available
under open source or free software licenses. The License Agreement accompanying the
Software does not alter any rights or obligations you may have under those open source or
free software licenses. Refer to the Third-party Legal Notices document accompanying this
Veritas product or available at:
https://www.veritas.com/about/legal/license-agreements
The product described in this document is distributed under licenses restricting its use, copying,
distribution, and decompilation/reverse engineering. No part of this document may be
reproduced in any form by any means without prior written authorization of Veritas Technologies
LLC and its licensors, if any.
The Licensed Software and Documentation are deemed to be commercial computer software
as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19
"Commercial Computer Software - Restricted Rights" and DFARS 227.7202, et seq.
"Commercial Computer Software and Commercial Computer Software Documentation," as
applicable, and any successor regulations, whether delivered by Veritas as on premises or
hosted services. Any use, modification, reproduction release, performance, display or disclosure
of the Licensed Software and Documentation by the U.S. Government shall be solely in
accordance with the terms of this Agreement.
http://www.veritas.com
Technical Support
Technical Support maintains support centers globally. All support services will be delivered
in accordance with your support agreement and the then-current enterprise technical support
policies. For information about our support offerings and how to contact Technical Support,
visit our website:
https://www.veritas.com/support
You can manage your Veritas account information at the following URL:
https://my.veritas.com
If you have questions regarding an existing support agreement, please email the support
agreement administration team for your region as follows:
Japan [email protected]
Documentation
Make sure that you have the current version of the documentation. Each document displays
the date of the last update on page 2. The latest documentation is available on the Veritas
website:
https://sort.veritas.com/documents
Documentation feedback
Your feedback is important to us. Suggest improvements or report errors or omissions to the
documentation. Include the document title, document version, chapter title, and section title
of the text on which you are reporting. Send feedback to:
You can also see documentation information or ask a question on the Veritas community site:
http://www.veritas.com/community/
https://sort.veritas.com/data/support/SORT_Data_Sheet.pdf
Contents
■ SORT information
Media server
Silent UNIX and Media server See “Install of the UNIX and Linux
Linux client binaries with native installers”
See “Silently installing NetBackup
on page 120.
media server software on UNIX
and Linux” on page 53.
SFTP
Before you proceed with any installation procedure, be sure to review the installation
requirements.
See “Installation and upgrade requirements for UNIX and Linux” on page 32.
See “Installation and upgrade requirements for Windows and Windows clusters”
on page 62.
■ Windows
In the following directory:
%ALLUSERSPROFILE%\Veritas\NetBackup\InstallSummary\
Preparing for installation 12
General installation information
See “About Veritas Services and Operations Readiness Tools” on page 18.
Note: For UNIX and Linux platforms, the UID must be the same for each local
account in a clustered environment. Be sure that the local accounts are defined
consistently on all cluster nodes.
Preparing for installation 13
General installation information
To create the user account and the user group on UNIX or Linux
1 Create the local group with the command shown:
Command: # groupadd group_name
Example: # groupadd nbwebgrp
2 Create the local user account with the command shown:
Command: # useradd -g group_name -c comment -d /usr/openv/wmc
user_name
Installation of the NetBackup master server fails if any of these requirements are
not met. On Windows, you are asked to provide the password for the user account
as part of the installation process.
New installations Before you install NetBackup, Veritas recommends that you
install and configure your devices with the latest version of
drivers.
Connections and settings To prepare and connect new devices, perform the following
tasks:
NetBackup installation After all storage devices are installed, configured, and verified
to work with the operating system, you can install NetBackup.
Warning: An improperly configured device can lead to backup failures, data loss,
or both.
See “Installation and upgrade requirements for UNIX and Linux” on page 32.
See “Installation and upgrade requirements for Windows and Windows clusters”
on page 62.
Preparing for installation 15
General installation information
possibly result in lost data. The NetBackup supported characters for the installation
folder are:
■ UNIX/Linux
The POSIX fully portable file name characters (A–Z a–z 0–9 . _ -)
■ Windows
The printable characters within the ASCII 7-bit range
NetBackup servers must use a host name that is compliant with RFC
1123 and RFC 952
All NetBackup server names must use a host name that is complaint with RFC 1123
("Requirements for Internet Hosts - Application and Support") and RFC 952 ("DOD
Internet Host Table Specification") standards. These standards include the supported
and unsupported characters that can be used in a host name. For example, the
underscore character ( _ ) is not a supported character for host names.
More information is available about these standards and about this issue:
RFC 1123: http://www.ietf.org/rfc/rfc1123.txt
RFC 952: http://www.ietf.org/rfc/rfc952.txt
NetBackup Status Code 130 System Error Occurred:
http://www.veritas.com/docs/000125019
■ NetBackup 8.1 software is installed on a media server or a client host with dual
stack configuration.
The host ID-based certificate is not deployed because the web service connection
between the host and the master server was not established.
Workaround: Manually deploy the host ID-based certificate to the 8.1 host after the
installation. Refer to the article shown:
https://www.veritas.com/support/en_US/article.000127129
This issue results from the upgrade of the libnsl.so.1 library by Red Hat. To
resolve this installation issue, do one of the following:
1 Before you start the NetBackup installation, log into the RHEL 8 server with
root credentials and install the libnsl library.
2 Log into the RHEL 8 server with root credentials and install the libnsl library.
Then reinstall NetBackup.
SORT information
Review this section for the details that are related to Services and Operations
Readiness Tools (SORT).
https://sort.veritas.com/netbackup
Once you get to the SORT page, more information is available as follows:
■ Installation and Upgrade Checklist
Use this tool to create a checklist to see if your system is ready for a NetBackup
installation or an upgrade. This report contains all the software and the hardware
compatibility information specific to the information provided. The report also
includes product installation or upgrade instructions, as well as links to other
references.
■ Hot fix and EEB Release Auditor
Use this tool to find out whether a release that you plan to install contains the
hot fixes that you need.
■ Custom Reports
Use this tool to get recommendations for your system and Veritas enterprise
products.
■ NetBackup Future Platform and Feature Plans
Use this tool to get information about what items Veritas intends to replace with
newer and improved functionality. The tool also provides insight about what
items Veritas intends to discontinue without replacement. Some of these items
include certain NetBackup features, functionality, 3rd-party product integration,
Veritas product integration, applications, databases, and the OS platforms.
Help for the SORT tools is available. Click Help in the upper right corner of the
SORT home page. You have the option to:
■ Page through the contents of the help similar to a book
■ Look for topics in the index
■ Search the help with the search option
Table 1-2
Procedure Details
Create a Veritas Account on the SORT See “To create a Veritas Account on the
webpage SORT page” on page 20.
Preparing for installation 20
SORT information
Procedure Details
Create generic installation reports See “To create a generic installation checklist”
on page 20.
CAPTCHA text Enter the displayed CAPTCHA text. If necessary, refresh the
image.
4 Click Submit.
5 When you receive your login information, you can log into SORT and begin
uploading your customized information.
To create a generic installation checklist
1 In your web browser, navigate to:
https://sort.veritas.com/netbackup
2 Find and select the Installation and Upgrade Checklist widget.
Preparing for installation 21
SORT information
Product version you Select the correct version of NetBackup. The most current
are installing or version is always shown at the top of the list.
upgraded to
Product version you For new installations, do not make any selections. For
are upgrading from upgrades, you can select the currently installed version of
(optional) NetBackup.
6 On the Welcome screen, select NetBackup from the product family section
and click Next.
7 On the System Selection screen, add all computers you want analyzed. Click
Browse to see a list of computers you can add to the analysis. Veritas
recommends starting the tool with an administrator or a root account.
8 When all systems are selected, review the System names section and click
Next.
9 In the Validation Options screen, under Validation options, select the version
to which you plan to upgrade.
10 Click Next to continue
11 The utility performs the requested checks and displays the results. You can
upload the report to My SORT, print the results, or save them. Veritas
recommends that you upload the results to the My SORT website for ease of
centralized analysis. Click Upload and enter your My SORT login information
to upload the data to My SORT.
12 When you are finished, click Finish to close the utility.
To create a system-specific installation report for UNIX or Linux
1 Go to the SORT website:
https://sort.veritas.com/netbackup
2 In the Installation and Upgrade section, select Installation and Upgrade
custom reports by SORT data collectors.
3 Select the Data Collector tab.
4 Download the appropriate data collector for your platform.
The data collector is OS-specific. To collect information about Windows
computers, you need the Windows data collector. To collect information about
UNIX computers, you need the UNIX data collector.
5 Change to directory that contains downloaded utility.
6 Run ./sortdc
The utility performs checks to confirm the latest version of the utility is installed.
In addition, the utility checks to see it has the latest data. The utility then lists
the location of the log file for this session.
7 If requested, press Enter to continue.
8 Select the NetBackup Family at the Main Menu.
Preparing for installation 23
SORT information
Table 1-3
Procedure Details
Create a Veritas Account on the SORT See “To create a Veritas Account on the
webpage SORT page” on page 20.
Procedure Details
Review the future platform and feature plans. See “To review future platform changes and
feature plans” on page 24.
Review the hot fix and emergency
engineering binary release auditor See “To review hot fix and emergency
information. engineering binary information” on page 24.
Hot fix of EEB Shows the hot fix or EEB number that was entered on the
Identifier previous screen.
Caution: Smart Meter is compatible with Google Chrome, Mozilla Firefox, and
Microsoft Edge. Veritas does not recommend using Microsoft Internet Explorer, as
it does not render all information correctly.
Smart Meter uses HTTPS to send relevant information. Your master server must
allow outbound HTTPS traffic to take advantage of the automatic upload feature.
Manual uploads require HTTPS traffic from the upload location.
■ Your customer registration key is not a license key.
The registration key is required for Smart Meter to work, but it is not your
NetBackup license key. The customer registration key is downloaded from the
Smart Meter website and is specific to Smart Meter.
■ If you have multiple account IDs, when you download your customer registration
key, you may have an aggregate registration key. This aggregate registration
key includes all of your account IDs. You can use the aggregate key on all of
your master servers. NetBackup does, however, prompt you to assign the specific
key with a specific account ID to a specific master server. If you want, you can
use this aggregate key for all your master servers.
■ During install and upgrade to NetBackup 8.1.2, please allow the installer to copy
the veritas_customer_registration_key.json file to its final destination.
NetBackup can set the file permission and ownership correctly through this
process. If you place the file onto your systems outside of the install or the
upgrade process, the process may not work correctly.
■ Be aware that NetBackup does not support the short file name format (8.3
format) for the customer registration key file name.
■ For answers to frequently asked questions, visit the URL shown:
https://help.veritas.com/Welcome?context=veritas_smart_meter&token=vsm_nbu_faqs
To download the customer registration key
1 Log into Veritas Smart Meter with Google Chrome, Mozilla Firefox, or Microsoft
Edge.
https://taas.veritas.com/
2 Navigate to the Customer Registration Keys page.
3 Download the appropriate customer registration key for your master server.
Chapter 2
NetBackup licenses
This chapter includes the following topics:
List of NetBackup licenses This list includes all of the licenses for the products that you
purchased ordered.
Serial number for access to Go to the following website and enter this serial number to
download NetBackup download the ESD images to your system:
products
http://my.veritas.com
When you install NetBackup, Veritas recommends that you enter all other product
licenses on the master server when you are prompted. Although you can add these
licenses later, it is easier to enter them when you install the master server software.
NetBackup licenses 28
About license key entry
/usr/openv/netbackup/bin/admincmd/get_license_key
NetBackup licenses 29
Frequently asked questions about license keys
Note: You can log on to a NetBackup server from almost any server in a system
to view, enter, and administer licenses. When you administer licenses remotely,
make sure that you view the licenses of the system you intend to change. You do
not want to add or change a license on the wrong server.
Table 2-2
Question Answer
Is the license system for NetBackup uses a common license system that other Veritas
NetBackup the same as the products also use. Please remember, however, that the
license system in other common license system provides flexibility in the license
Veritas products? features that each product implements. For example,
NetBackup does not have a node-locked license system, but
some other products do.
What does the license key The key is a serial number (for example:
look like? What information xxxx-xxxx-xxxx-xxxx-xxxx-xxx). The key contains
does it contain? information on the following:
Is the license key serialized? Yes, serialization information is embedded in the key.
Can I see reports on what Yes. Information about license keys is stored on the master
license keys I have? server.
/usr/openv/netbackup/bin/admincmd/get_license_key
Question Answer
How do I enable options and When you install NetBackup, you are prompted to enter the
agents? license keys for all options and agents.
/usr/openv/netbackup/bin/admincmd/get_license_key
Should I save license keys Yes. Always store copies of your license keys in a secure
after they have been entered? place.
What should I do if I have lost Veritas has a record of all license keys that are issued to
my license key(s)? customers. Customers who lose their license key(s) can call
Order Management to get copies of their license keys.
How are large volume orders Many NetBackup installations are very large, and the license
handled? keys are long. License keys that you enter multiple times can
be time-consuming. You can request a single license key for
each type of NetBackup component you purchase. For
example, you can obtain one license key for use with 50
Oracle agents. Site licenses enable unrestricted use for
specific NetBackup agents or options.
What about license keys for Site licenses are handled much like large volume orders are.
customers with site licenses? The certificate for a site license states that the license key is
good for unlimited copies.
Can a license key be used Yes. You can use your license keys multiple times. You are,
multiple times? however, legally bound to install and use only the number of
NetBackup servers, clients, agents, and options for which
you purchase licenses.
NetBackup licenses 31
Frequently asked questions about license keys
Question Answer
How do existing customers All NetBackup customers who have current maintenance
get license keys? contracts with Veritas automatically receive the latest version
of NetBackup. You receive the NetBackup media kit and
license keys for every component for which you purchased
licenses.
What if I do not get the right If you believe that you received an incorrect license key,
license keys? contact Order Management using the number on your license
key certificate. Technical support does not issue permanent
license keys. You can obtain license keys only through Order
Management. Technical support can provide temporary
one-month license keys to you while issues regarding
permanent license keys are resolved.
Am I notified when an To find out when a license key expires, open the NetBackup
evaluation is about to expire? Administration Console and select Help > License Keys.
/usr/openv/netbackup/bin/admincmd/get_license_key
What happens when an The NetBackup services or daemons are shut down. When
evaluation license expires? you attempt to use the product you are informed that its
evaluation period has expired.
Does NetBackup save the Yes. Customers who add a permanent license to an
backup configuration and evaluation version of NetBackup have immediate access to
catalog information when their catalog information and configuration information.
evaluation license expire?
How do I upgrade from an It is easy. When you purchase a permanent license, you add
evaluation license to a that license to NetBackup. All the configuration information
permanent license? and catalog data from your evaluation version is retained.
/usr/openv/netbackup/bin/admincmd/get_license_key
Chapter 3
Installing server software
on UNIX systems
This chapter includes the following topics:
Table 3-1 NetBackup installation and upgrade requirements for UNIX and
Linux
Operating ■ For a complete list of compatible UNIX and Linux operating systems, refer to the
System Software Compatibility List (SCL) at the following website:
http://www.netbackup.com/compatibility
https://sort.veritas.com/netbackup
Memory ■ Master servers in a production environment with several database agents enabled
should have a minimum of 16 GB of memory and four cores each.
NetBackup does not enforce minimum memory requirements. Veritas does, however,
recommend using at least the minimum recommended memory. Failure to use the
minimum recommended memory amounts can result in unacceptable performance.
■ Media servers in a production environment with several database agents enabled
should have a minimum of 4 GB of memory each.
Disk space ■ The exact amount of space that is required depends on the hardware platform. More
information about this topic is available.
NetBackup Release Notes for 8.2
■ NetBackup catalogs contain information about your backups that become larger as
you use the product. The disk space that the catalogs require depends primarily on
the following aspects of your backup configuration:
■ The number of files that are backed up.
■ The frequency of your backups.
■ The amount of time that you set to retain your backup data.
If space is an issue, you can install NetBackup on an alternate file system. The installation
lets you select an alternate install location, and creates the appropriate link from
/usr/openv.
Note: The value for disk space is for initial installation only. The NetBackup catalog
requires considerably more space once the master server is placed in a production
environment.
Installing server software on UNIX systems 34
Installation and upgrade requirements for UNIX and Linux
Table 3-1 NetBackup installation and upgrade requirements for UNIX and
Linux (continued)
General ■ Ensure that the gzip and the gunzip commands are installed on the local system.
requirements The directories where these commands are installed must be part of the root user’s
path environment variable setting.
■ All NetBackup installation ESD images, appropriate licenses, and the root password
for all servers.
■ A server of a supported hardware type that runs a supported version of its operating
system (with applicable patches), adequate disk space, and supported peripherals.
For details on these requirements, refer to the NetBackup Release Notes for 8.2.
■ All NetBackup servers must recognize and be recognizable by their client systems.
In some environments, this means that each must be defined in the other’s
/etc/hosts file. Other environments may use the Network Information Service (NIS)
or Domain Name Service (DNS).
■ The minimum screen resolution configuration is 1024x768, 256 colors.
Clustered ■ Ensure that each node in the NetBackup cluster can run the ssh command or its
systems equivalent. The root user must be able to perform a remote logon to each node in
the cluster without entering a password. This remote logon is necessary for installation
and configuration of the NetBackup server and any NetBackup agents and options.
After installation and configuration are complete, it is no longer required.
■ You must install, configure, and start the cluster framework before you install
NetBackup.
■ You must have defined a virtual name using DNS, NIS, or the /etc/hosts file. The
IP address is defined at the same time. (The virtual name is a label for the IP address.)
■ Begin the upgrade from the active node, and then upgrade the inactive nodes.
NFS Veritas does not support installation of NetBackup in an NFS-mounted directory. File
compatibility locking in NFS-mounted file systems can be unreliable.
Linux Before NetBackup installation, confirm the system libraries that are shown are present.
If any library is not present, install the one provided by your operating system.
■ libnsl.so.1
■ insserv-compat
■ libXtst
Red Hat Linux For Red Hat Linux, NetBackup requires server networking.
Installing server software on UNIX systems 35
Installation and upgrade requirements for UNIX and Linux
Table 3-1 NetBackup installation and upgrade requirements for UNIX and
Linux (continued)
Other backup Veritas recommends that you remove any other vendor backup software currently
software configured on your system before you install this product. Other vendor backup software
can negatively affect how NetBackup installs and functions.
Web Services Beginning with NetBackup 8.0, the NetBackup master server includes a configured
Tomcat web server to support critical backup operations. This web server operates under
user account elements with limited privileges. These user account elements must be
available on each master server (or each node of a clustered master server). You must
create these required account elements before installation. More information is available:
See “NetBackup master server web server user and group creation” on page 188.
Note: Veritas recommends that you save the details of the user account that you use
for the NetBackup Web Services. A master server recovery requires the same NetBackup
Web Services user account and credentials that were used when the NetBackup catalog
was backed up.
Note: If the NetBackup PBX is running in secure mode, please add the web service
user as authorized user in PBX. More information about determining PBX mode and how
to correctly add users is available.
http://www.veritas.com/docs/000115774
By default, the UNIX installation script attempts to associate the web server with user
account nbwebsvc and group account nbwebgrp. You can override these default values
with the NetBackup installation answer file. You must populate the NetBackup installation
answer file on the target host before you start the UNIX installation script. Populate the
NetBackup installation answer file with custom web server account names as shown.
2 Open the file /tmp/NBInstallAnswer.conf with your preferred text editor. Create the
file if it does not exist.
3 Override the default web server user account name by adding the line shown:
WEBSVC_USER=custom_user_account_name
4 Override the default web server group account name by adding the line shown:
WEBSVC_GROUP=custom_group_account_name
Table 3-1 NetBackup installation and upgrade requirements for UNIX and
Linux (continued)
Customer Beginning with NetBackup 8.1.2, you must specify a Customer Registration Key for
Registration Key Veritas Smart Meter. More information about Veritas Smart Meter is available:
for Veritas Smart
See “About Veritas Smart Meter” on page 25.
Meter
During install and upgrade to NetBackup 8.1.2, please allow the installer to copy the
veritas_customer_registration_key.json file to its final destination. NetBackup
can set the file permission and ownership correctly through this process. If you place the
file onto your systems outside of the install or the upgrade process, the process may not
work correctly.
Note: Be aware that NetBackup does not support the short file name format (8.3 format)
for the customer registration key file name.
■ Encryption
■ Informix
■ VxUpdate agent
■ Lotus Notes
■ Oracle
■ SAP
■ Snapshot Client
■ Sybase
After installation is complete, a valid license key for each option must be entered
to enable its functionality. Each option must also be configured as needed.
In addition to server software and options, the installation script performs the
following tasks:
Automatic startup and Adds the automatic startup and shutdown scripts to the
shutdown scripts appropriate directories on the various supported platforms.
PBX If the computer where you install NetBackup does not already
have PBX and the platform supports it, the installation script
installs PBX.
If PBX already exists on the computer, the installation script
performs one of the following tasks:
Customers who use the NetBackup installation script for their UNIX and Linux
master servers only see a single change to the installation behavior. The NetBackup
installation script no longer copies the installation package into the
/usr/openv/pack/ directory on the client. A successful installation or upgrade is
recorded in the /usr/openv/pack/install.history file.
Use the following guidelines for a new master server installation:
Designate master server Designate the computer that you want to be the master server
and install the master server software on that computer first.
Customer Registration Key Beginning with NetBackup 8.1.2, you must specify a
for Veritas Smart Meter Customer Registration Key for Veritas Smart Meter. More
information about Veritas Smart Meter is available:
5 If you need to perform a disaster recovery of your master server, select Y when
prompted. Press Enter for the default N.
Do you want to do a disaster recovery on this master server? [y/n]
(n)
The disaster recovery process requires additional steps and information that
is not covered in this manual. More information is available.
NetBackup Troubleshooting Guide
6 When the following question appears, enter the fully qualified path that contains
your customer registration key.
Please enter the fully qualified path containing your customer
registration key file, or enter q to quit the install script.
During install and upgrade to NetBackup 8.1.2, please allow the installer to
copy the veritas_customer_registration_key.json file to its final
destination. NetBackup can set the file permission and ownership correctly
through this process. If you place the file onto your systems outside of the
install or the upgrade process, the process may not work correctly.
7 For the NetBackup installation location, enter the appropriate platform
information as follows:
■ When the following question appears, press Enter to accept the default
(y).
9 Type y, then follow the prompts to add license keys for other NetBackup options
and agents.
Although you can add licenses later, you should enter them now. If you add
any licenses later through the NetBackup Administration Console, you must
restart the console.
10 After all licenses are entered, type q to quit the License Key Utility and complete
the server software installation.
11 Verify or enter the correct computer name when prompted by the following
message:
Note: Incorrect information for the domain name results in failures during the
configuration of Authentication Broker and NetBackup Access Controls. To
correct this problem, use the bpnbaz -configureauth command to configure
Authentication Broker. More information about the bpnbaz -configureauth
command is available.
NetBackup Commands Reference Guide
12 Identify or verify the master server by answering the following question when
it appears:
■ To accept the displayed name (which is the name that you identified in the
previous step), press Enter.
■ If you entered a virtual name for the server in the previous step, the
installation script presents the following question:
If the answer is yes, press y and answer the series of cluster configuration
questions that appear.
If the answer is no, press n.
13 Identify whether there are any media servers for this master server by answering
the following question when it appears:
■ If there are no media servers for this master server, press Enter and
proceed to the next step.
■ If there are media servers for this master server, type y and enter the name
of each media server.
When you enter the media server names, you must enter the computer
name and the domain name. For example:
alpha.domain.com
Where alpha is the computer name and domain.com is the domain name.
The media server names that you enter here are added to the bp.conf file
on the master server, automatically. After you install the media server
software later, the master server can then communicate with the media
servers immediately.
■ To add a media server to an existing and an operational NetBackup
environment, you cannot use the procedures in this guide. For complete
details on how to add a media server to an existing and an operational
NetBackup environment, see the NetBackup Administrator's Guide, Volume
II.
Installing server software on UNIX systems 44
Installing NetBackup master server software on UNIX
14 When the following message appears, press Enter and accept the default
name of the EMM server. You must configure EMM on the master server. All
master servers must have their own EMM configuration. Remote EMM or
shared EMM is no longer supported.
16 For a clustered NetBackup master server, repeat these steps on every node
on which you want to run NetBackup.
17 (Conditional) On a clustered NetBackup master server, you must obtain the
Certificate Authority certificate and the host certificate for each inactive node.
More information is available:
See “Generate a certificate on the inactive nodes of a clustered master server”
on page 175.
18 (Conditional) If you use cloud storage in your NetBackup environment, you
must update your cloud configuration file. More information is available.
See “Update cloud configuration file on the master server immediately after
install or upgrade to NetBackup 8.2” on page 152.
19 After your initial installation is complete, you can install any other NetBackup
add-on products (such as language packages).
Installing server software on UNIX systems 45
Installing NetBackup media server software on UNIX
Media server software manages the robotic and the storage devices within your
NetBackup environment.
Use the following guidelines when you install new media servers:
Designate media Designate the computers that you want to be media servers and
servers install the media server software on them.
License keys When you install NetBackup media server software, you must enter
a NetBackup product license. You must also enter a license for any
additional NetBackup product options or agents that are used on
the server or its clients. These additional licenses must be entered
on each media server.
IBMzSeries RedHat These platforms are supported for use as media servers only.
and IBMzSeries SUSE
Note: If you use the native Linux installers, you do not need to
install the Veritas Deduplication Agent (VRTSpddea) or the Veritas
Deduplication Service (VRTSpddes) on these platforms. These two
packages are the Media Server Deduplication Pool, which is not
supported on these platforms.
CA Certificate If you use a NetBackup Certificate Authority, you must know the
fingerprint CA Certificate fingerprint of the master server at time of installation.
This requirement only applies if you use a NetBackup Certificate
Authority. More information is available about the details on the CA
Certificate fingerprint and its role in generation of security
certificates.
https://www.veritas.com/support/en_US/article.000127129
Authorization Token In some cases, if you use a NetBackup Certificate Authority, the
installer requires an authorization token to successfully deploy
security certificates. This requirement only applies if you use a
NetBackup Certificate Authority. More information is available about
the details on authorization tokens and their role in generation of
security certificates.
https://www.veritas.com/support/en_US/article.000127129
External certificate If you use an external certificate authority (ECA), you need to know
authority the location of your certificate. You also need know how you want
to configure the Certificate Revocation Lists (CRLs).
Installing server software on UNIX systems 47
Installing NetBackup media server software on UNIX
4 Indicate if the current computer is the master server by answering the following
question when it appears:
5 Verify or enter the correct computer name when prompted by the following
message:
Note: Incorrect information for the domain name results in failures during the
configuration of Authentication Broker and NetBackup Access Controls. To
correct this problem, use the bpnbaz -configureauth command to configure
Authentication Broker. More information about the bpnbaz -configureauth
command is available.
NetBackup Commands Reference Guide
6 Identify the name of the master server when prompted with this question:
What is the fully qualified name of the master server?
If the master server is clustered, enter the virtual name of the master server.
7 For the NetBackup installation location, enter the appropriate platform
information as follows:
■ When the following question appears, press Enter to accept the default
(y).
Installing server software on UNIX systems 49
Installing NetBackup media server software on UNIX
Be aware if you press Ctrl+C, this action requires you to rerun the installation
or continue with the installation without the required security components. If
these security components are absent, backups and restores fail.
9 The installer then looks to see what certificate authority the local system is
configured to use. The options for certificate authority on the local system are:
NetBackup Certificate Authority, external certificate authority, or indeterminate.
The installer then uses a combination of the master server certificate authority
mode and the local system certificate authority configuration to determine the
next steps.
10 If the installer prompts you for a certificate file path, your environment uses an
external certificate authority. Proceed to step 11.
If the installer prompts you for fingerprint information, your environment uses
a NetBackup Certificate Authority. Proceed to step 17.
If the installer cannot determine the configuration of the certificate authority on
the master server, you are presented with two options:
Installing server software on UNIX systems 50
Installing NetBackup media server software on UNIX
■ Skip the security configuration and configure your certificate authority after
installation. More information about post-installation certificate authority
configuration is available:
https://www.veritas.com/support/en_US/article.100044300
Proceed to step 20.
■ Exit the installation and restart the installation once you configure your
certificate authority.
12 When prompted, provide the required information for the CRL configuration:
Should a CRL be honored for the external certificate?
1) Use the CRL defined in the certificate.
2) Use the CRL from a file path.
3) Do not use a CRL.
q) skip security configuration
CRL option (1):
13 (Conditional) If you specify 2, you must enter the path to the CRL location:
Enter the CRL location path or q to skip security configuration:
/usr/eca/crl
Installing server software on UNIX systems 51
Installing NetBackup media server software on UNIX
14 The installer echoes the configuration information you entered and attempts
to retrieve details for the external certificate:
The external certificate is valid for use with master server name
How do you want to proceed?
1) Continue the installation using this certificate.
2) Update external certificate values.
3) Abort the installation.
Default option (1):
The external certificate is not valid for use with master server name
How do you want to proceed?
1) Continue the installation and set up external certificates later.
2) Modify the external CA values entered.
3) Abort the installation.
Default option (2):
After you confirm the fingerprint information, the installer stores the certificate
authority certificate details.
Storing CA certificate.
Depending on the network, this action may take a few minutes. To
continue without setting up secure communication, press Ctrl+C.
Be aware if you press Ctrl+C, this action requires you to rerun the installation
or continue with the installation without the required security components. If
these security components are absent, backups and restores fail.
18 After the Certificate Authority certificate is stored, the installer fetches the host
certificate.
Be aware if you press Ctrl+C, this action requires you to rerun the installation
or continue with the installation without the required security components. If
these security components are absent, backups and restores fail.
Installing server software on UNIX systems 53
Installing NetBackup media server software on UNIX
To install the UNIX or Linux media server binaries using native installers:
1 Please create the NetBackup installation answer file (NBInstallAnswer.conf)
in the media server /tmp directory. More information about the answer file and
its contents is available.
See “About the NetBackup answer file” on page 176.
2 Populate NBInstallAnswer.conf with the following required information:
SERVER=master_server_name
CLIENT_NAME=media_server_name
MACHINE_ROLE=MEDIA
LICENSE=license_key
CA_CERTIFICATE_FINGERPRINT=fingerprint
CA_CERTIFICATE_FINGERPRINT=01:23:45:67:89:AB:CD:EF:01:23:45:67:
89:AB:CD:EF:01:23:45:67
■ ECA_CERT_PATH
Use this field to specify the path and the file name of the external certificate
file. This field is required to set up an external certificate from a file.
■ ECA_TRUST_STORE_PATH
Use this field to specify the path and the file name of the file representing
the trust store location. This field is required to set up an external certificate
from a file.
■ ECA_PRIVATE_KEY_PATH
Installing server software on UNIX systems 55
Installing NetBackup media server software on UNIX
Use this field to specify the path and the file name of the file representing
the private key. This field is required to set up an external certificate from
a file.
■ ECA_KEY_PASSPHRASEFILE
Use this field to specify the path and the file name of the file that contains
the passphrase to access the keystore. This field is optional and applies
only when setting up an external certificate from a file.
■ ECA_CRL_CHECK_LEVEL
Use this field to specify the CRL mode. This field is required. Supported
values are:
■ USE_CDP: Use the CRL defined in the certificate.
■ SKIP: Used to skip setting up the certificate authority. To skip the ECA
configuration, you must set all required ECA_ values to SKIP. Be aware
that if you continue with the installation without a certificate authority,
the backups and restores fail.
■ ECA_CRL_PATH
Use this field to specify the path to the CRL associated with the external
CA certificate. This field is required only when ECA_CRL_CHECK_LEVEL is
set to USE_PATH. If not applicable, leave this field empty.
■ INSTALL_PATH
7 Change to the directory for your desired operating system and copy server
files to the media server.
Operating system directory:
■ For Linux RedHat:
NetBackup_8.2_LinuxR_x86_64/linuxR_x86/anb
8 Extract the client binaries and copy them to the media server:
Extract the client binaries:
tar -xzvf client_dist.tar.gz
■ SuSE: openv/netbackup/client/Linux/SuSE3.0.76
■ Linux-s390x RedHat:
openv/netbackup/client/Linux-s390x/IBMzSeriesRedHat2.6.32
Linux VRTSnbpck.rpm
VRTSpbx.rpm
VRTSnbclt.rpm
VRTSnbjre.rpm
VRTSnbjava.rpm
VRTSpddea.rpm
VRTSnbcfg.rpm
Solaris .pkg_defaults
VRTSnbpck.pkg.gz
VRTSpbx.pkg.gz
VRTSnbclt.pkg.gz
VRTSnbjre.pkg.gz
VRTSnbjava.pkg.gz
VRTSpddea.pkg.gz
VRTSnbcfg.pkg.gz
9 (Conditional) For Solaris, extract the compressed package files with the
command shown:
gunzip VRTS*.*
VRTSnbpck.pkg
VRTSpbx.pkg
VRTSnbclt.pkg
VRTSnbjre.pkg
VRTSnbjava.pkg
VRTSpddea.pkg
VRTSnbcfg.pkg
10 Install the files in the order that is shown with the commands shown:
■ After the required policies are created, you can push client software from the
master server to the clients.
See “About remote installation methods for UNIX/Linux clients” on page 132.
4 Select all of the client types that you want to install and follow the installation
prompts.
Chapter 4
Installing server software
on Windows systems
This chapter includes the following topics:
Caution: Veritas supports moving the NetBackup catalog with the nbdb_move
command to a non-default location on a Windows cluster after installation or upgrade.
Before any upgrades, however, you must move the NetBackup catalog back to the
default location for the upgrade to succeed. Do not attempt a NetBackup upgrade
if the catalog is not in the default location. You master server is rendered unusable
if you fail to move the database back to the default location before upgrade. More
information about the nbdb_move is available.
NetBackup Commands Reference Guide
Operating ■ Make sure that you have applied the most current operating system patches and
system updates. If you are not certain that your operating system is current, contact your
operating system vendor and request the latest patches and upgrades.
■ For a complete list of compatible Windows operating systems, refer to the Software
Compatibility List (SCL) at the following website:
http://www.netbackup.com/compatibility
Note: The value for disk space is for initial installation only. The NetBackup catalog
requires considerably more space once the master server is placed in a production
environment.
General Make sure that you have all of the following items:
requirements
■ NetBackup installation ESD images
■ Appropriate license keys
■ Administrator account and password for all servers
■ Screen resolution configured for at least 1024x768, 256 colors.
Note: To install NetBackup on Windows 2008 Server, Windows 2008 R2 Server, Windows
2012 R2, Windows 2012 UAC-enabled, and Windows Server 2016 environments, you
must log on as the official administrator. Users that are assigned to the Administrators
Group and are not the official administrator cannot install NetBackup in UAC-enabled
environments. To allow users in the Administrators Group to install NetBackup, disable
UAC.
Installing server software on Windows systems 65
Installation and upgrade requirements for Windows and Windows clusters
Remote and
cluster
installations
Installing server software on Windows systems 66
Installation and upgrade requirements for Windows and Windows clusters
In addition to all previously stated installation requirements, the following guidelines apply
to remote installations and cluster installations:
■ All nodes in the cluster must run the same operating system version, service pack
level, and NetBackup version. You cannot mix versions of server operating systems.
■ The installation account must have administrator privileges on all remote systems or
on all nodes in the cluster.
■ The source system (or primary node) must run Windows 2008/2008 R2
Server/Windows 2012/2012 R2/Windows 2016.
For Windows 2008 R2, clusters are only supported on Enterprise and Data Center
editions and not Standard edition.
■ The destination PC (or clustered nodes) must have Windows 2008/2008 R2/Windows
2012/2012 R2/Windows 2016.
■ The Remote Registry service must be started on the remote system.
The NetBackup installer can enable and start the Remote Registry service on the
remote system. If the Remote Registry service is not started, the installation receives
the following error message:
Attempting to connect to server server_name failed with the
following error: Unable to connect to the remote system. One
possible cause for this is the absence of the Remote Registry
service. Please ensure this service is started on the remote
host and try again.
■ NetBackup virtual name and IP address
Have the virtual name and IP address for NetBackup available. You must provide
this information during installation.
■ Cluster support changes for media servers
You cannot perform a new installation of a clustered media server.
■ Windows Server Failover Clusters (WSFC)
■ The shared disk that the NetBackup Group uses must already be configured in
the cluster and online on the active node.
■ Install NetBackup from the node with the shared disk (that is, the active node).
■ Computer or host names cannot be longer than 15 characters.
■ Cluster server (VCS) clusters:
All NetBackup disk resources must be configured in Veritas Enterprise Administrator
(VEA) before you install NetBackup.
■ Cluster node device configuration and upgrades
When you upgrade clusters, the ltid and the robotic daemons retrieve the device
configuration for a particular cluster node from the EMM database. The cluster node
name (provided by gethostname) stores or retrieves the device configuration in the
EMM database. The cluster node name is used when any updates are made to the
Installing server software on Windows systems 67
Installation and upgrade requirements for Windows and Windows clusters
device configuration, including when ltid updates the drive status. The cluster node
name is only used to indicate where a device is connected. The NetBackup virtual
name is employed for other uses, such as the robot control host.
Remote You must provide the names of the Remote Administration Console hosts during master
Administration server installation.
Console host
names
NetBackup Make sure that your network configuration allows all servers and clients to recognize and
communication communicate with one another.
Generally, if you can reach the clients from a server by using the ping command, the
setup works with NetBackup.
■ NetBackup services and port numbers must be the same across the network.
■ Veritas suggests that you use the default port settings for NetBackup services and
Internet service ports. If you modify the port numbers, they must be the same for all
master servers, media servers, and clients. The port entries are in the following file:
%SYSTEMROOT%\system32\drivers\etc\services. To change the default
settings, you must perform a custom installation of NetBackup or manually edit the
services file.
CIFS-mounted Veritas does not support installation of NetBackup in a CIFS-mounted directory. File
file systems locking in CIFS-mounted file systems can be unreliable.
Storage devices Devices such as robots and standalone tape drives must be installed according to the
manufacturers’ instructions and recognized by the Windows software.
Server names When you are prompted for server names, always enter the appropriate host names. Do
not enter IP addresses.
Mixed versions Make sure to install NetBackup servers with a release level that is at least equal to the
latest client version that you plan to use. Earlier versions of server software can encounter
problems with later versions of client software.
Installations on You can only install NetBackup on these computers with the silent installation method.
Windows
See “Installing NetBackup servers silently on Windows systems” on page 88.
2008/2008 R2
Server Core,
2012/2012 R2
Server
Core/Windows
2016
Other backup Remove any other vendor’s backup software currently configured on your system. The
software backup software of another vendor can negatively affect how NetBackup installs and
functions.
Web Services Beginning with NetBackup 8.0, the NetBackup master server includes a configured
Tomcat web server to support critical backup operations. This web server operates under
user account elements with limited privileges. These user account elements must be
available on each master server (or each node of a clustered master server). More
information is available:
See “NetBackup master server web server user and group creation” on page 188.
Note: Veritas recommends that you save the details of the user account that you use
for the NetBackup Web Services. A master server recovery requires the same NetBackup
Web Services user account and credentials that were used when the NetBackup catalog
was backed up.
Note: If the NetBackup PBX is running in secure mode, please add the web service
user as authorized user in PBX. More information about determining PBX mode and how
to correctly add users is available.
http://www.veritas.com/docs/000115774
In some cases, if you use a NetBackup Certificate Authority, the installer requires an
authorization token to successfully deploy security certificates. More information is
available about the details on authorization tokens and their role in generation of security
certificates.
https://www.veritas.com/support/en_US/article.000127129
External For master servers (including cluster): The configuration of an external certificate authority
certificate is a post-installation activity.
authority
For media servers and clients: You can configure the ECA during the install procedure
or after the installation completes. More information about post-installation configuration
is available:
https://www.veritas.com/support/en_US/article.100044300
Customer Beginning with NetBackup 8.1.2, you must specify a Customer Registration Key for
Registration Key Veritas Smart Meter. More information about Veritas Smart Meter is available:
for Veritas Smart
See “About Veritas Smart Meter” on page 25.
Meter
During install and upgrade to NetBackup 8.1.2, please allow the installer to copy the
veritas_customer_registration_key.json file to its final destination. NetBackup
can set the file permission and ownership correctly through this process. If you place the
file onto your systems outside of the install or the upgrade process, the process may not
work correctly.
Note: Be aware that NetBackup does not support the short file name format (8.3 format)
for the customer registration key file name.
See “Installation and upgrade requirements for UNIX and Linux” on page 32.
The following describes the guidelines for NetBackup cluster installations and
upgrades on Windows systems:
Item Requirement
NetBackup virtual name and Have the virtual name and IP address for NetBackup
IP address available. You must provide this information during
installation.
Operating system on nodes All clustered nodes must use the same operating system
version, service pack level, and NetBackup version. You
cannot run mixed server versions in a clustered environment.
Cluster support changes for Clustered media servers are not supported.
media servers
Cluster Server (VCS) clusters ■ All NetBackup disk resources must be configured in
Veritas Enterprise Administrator (VEA) before you install
NetBackup.
Cluster node device When you upgrade clusters, the ltid and the robotic
configuration and upgrades daemons retrieve the device configuration for a particular
cluster node from the EMM database. The cluster node name
(provided by gethostname) stores or retrieves the device
configuration in the EMM database. The cluster node name
is used when any updates are made to the device
configuration, including when ltid updates the drive status.
The cluster node name is only used to indicate where a
device is connected. The NetBackup virtual name is employed
for other uses, such as the robot control host.
Installing server software on Windows systems 71
Performing local, remote, or clustered server installation on Windows systems
2 Navigate to the directory where the images reside and run Browser.exe to
start the NetBackup Installation Wizard .
3 On the initial browser screen (Home), click Installation.
4 On the Installation screen, click NetBackup Server Software Installation.
5 On the Welcome screen, review the content and click Next.
6 (Conditional) If you previously installed NetBackup 8.2 on this host, you see
the Program Maintenance dialog.
■ Select Modify to change installation settings for the local host, or to use
the local host as a platform to perform push installation to remote hosts.
■ Select Repair to restore NetBackup 8.2 to its original state on the local
host.
■ Select Remove to remove NetBackup 8.2 from the local host.
Click Next.
9 On the NetBackup License Key and Server Type screen, provide the following
information:
Installing server software on Windows systems 73
Performing local, remote, or clustered server installation on Windows systems
License Key Enter the product license that you received with your
product.
NetBackup Master Server Click this icon to install master server software.
NetBackup Media Server For local or remote installations, click this icon to install
media server software.
Disaster Recovery Master Select this option to perform a disaster recovery of your
Server master server. The disaster recovery process requires
additional steps and information that is not covered in
this manual. More information is available.
10 On the Customer Registration Key screen, enter the location of the Customer
Registration Key. You download this file from the Veritas Smart Meter site and
place the file on the appropriate master server. More information about Veritas
Smart Meter is available.
See “About Veritas Smart Meter” on page 25.
During install and upgrade to NetBackup 8.1.2, please allow the installer to
copy the veritas_customer_registration_key.json file to its final
destination. NetBackup can set the file permission and ownership correctly
through this process. If you place the file onto your systems outside of the
install or the upgrade process, the process may not work correctly.
11 On the NetBackup Web Services screen, specify the account type and the
account details.
See “Installation and upgrade requirements for Windows and Windows clusters”
on page 62.
12 (Conditional) This step applies only to the local installations that are Custom.
For Typical installations, skip to the next step.
This step describes how to select and configure the NetBackup Installation
Folder, NetBackup Port Numbers, and the NetBackup Services.
■ NetBackup Installation Folder
On this screen, you can select where the NetBackup files are installed.
C:\Program Files\VERITAS
To change the folder destination where NetBackup is
installed:
■ Click Change.
■ Browse to the preferred location and designate a
new or an existing folder.
■ Click Next.
Click Next.
■ NetBackup Port Numbers
On this screen, you can change port numbers, if it is necessary in your
configuration.
You may need to change a port number if you encounter conflicts when
NetBackup and another industry product try to share the same port. Another
example is if a port conflict occurs with a firewall, which may cause security
issues.
To change a port number, select the port number that you want to replace
and type the new number.
Click Next.
■ NetBackup Services
On this screen, provide the following startup account and startup type
information for NetBackup services:
Installing server software on Windows systems 76
Performing local, remote, or clustered server installation on Windows systems
Safe Abort Option This option determines how the installation proceeds
if a restart is required as part of the installation.
Click Next.
Installing server software on Windows systems 77
Performing local, remote, or clustered server installation on Windows systems
Master Server Name (Conditional) For local master server installations, enter
the name of the local computer. For a cluster installation,
enter the cluster virtual server name.
Media Server Name This field appears only for local NetBackup Enterprise
media server installations.
Click Next.
14 After you provide the required computer names, the installer determines your
security configuration.
■ If the installer finds your environment uses an external certificate authority,
you are presented with the External Certificate screen. Proceed to step
15.
■ If the installer finds your environment uses NetBackup Certificate Authority,
you are presented with the NetBackup Certificate screen. Proceed to
step16 .
15 On the External Certificate screen, select one of the three radio buttons based
on how you want to configure the external certificate authority (ECA). Depending
on which one you select, you must complete different information:
Installing server software on Windows systems 78
Performing local, remote, or clustered server installation on Windows systems
Note: You can use the $hostname variable for any of the names in the
certificate store specification. The $hostname variable evaluates at run time
to the name of the local host. This option provides flexibility when you push
NetBackup software to a large number of clients.
20 After you enter all the security information, you are prompted with the certificate
status screen. If the screen indicates there are no issues, click Next to continue.
If the screen Security Certificate Status indicates there are issues, click Back
to reenter the required security information.
If this install is a push install or if you selected Proceed without security, this
dialog is skipped.
21 (Conditional) For remote installations only:
On the Veritas NetBackup Remote Hosts screen, specify the hosts where
you want NetBackup installed.
■ Windows Destination Systems
Right-click Windows Destination Computers and select from the
drop-down menu, or use the following methods:
Browse Click here to search the network for the hosts where
you want to install NetBackup.
■ On the Available Systems dialog box, select
the computer to add and click Next.
■ On the Remote Computer Login Credentials
dialog box, enter the User Name and the
Password of the account to be used to perform
the installation on the remote computers.
■ If you plan to install to multiple remote
computers, click the box next to Remember
User Name and Password. Selecting this option
prevents the need to enter this information for
each remote computer.
■ Click OK.
■ On the Remote Destination Folder dialog box,
verify or change the Destination Folder where
NetBackup is installed.
The default location is C:\Program
Files\Veritas.
If you plan to install to multiple remote computers
and you want to use the same location, click the
box next to Use this folder for subsequent
systems. Selecting this option prevents the need
to enter the location for each remote computer.
Domain\ComputerName
Installing server software on Windows systems 81
Performing local, remote, or clustered server installation on Windows systems
■ Click Next.
■ On the Remote Computer Login Credentials dialog box, enter the user
name, password, and domain that NetBackup is to use on the remote
system(s).
If you intend to add more remote computers, click the check box next to
Remember user name and password.
When you provide credentials, you select cluster nodes and add them to
the Windows Destination Systems list. These are the nodes on which
you remotely install NetBackup. Make sure that you select your local host
when you select systems to install.
Each time you choose a system, NetBackup performs system and license
checks. For example, it verifies the system for a server installation that
matches the type that you selected, as follows:
■ Invalid combination Notifies you of the problem and disallows the choice.
One example of an invalid combination is to try to install
a Remote Administration Console on a remote system
that is already a master server.
■ Remote system not a Notifies you of the problem and disallows the choice.
supported platform or
level
The installation procedure also verifies that you have proper administrator
credentials on the remote system. If you do not have administrator
credentials, the Enter Network Password screen appears, and prompts
you to enter the administrator’s user name and password.
Click OK and continue selecting destination systems.
This process repeats for each node that you select. You can elect to retain the
user name and password. In that case, you are prompted only when the user
name or password is not valid.
Note the following about the push-install process in a clustered environment:
■ You can install NetBackup on any number of nodes. However, the clustering
service sets the limit for the number of nodes in a cluster, not NetBackup.
■ Language packages and other NetBackup add-on products cannot be
installed with the push method. Add-on products must be installed on each
individual node in the cluster group. For instructions on how to install these
products, refer to the NetBackup documentation that supports each product.
Installing server software on Windows systems 83
Performing local, remote, or clustered server installation on Windows systems
■ NetBackup pushes to the other nodes only the license keys you enter at
the beginning of the installation. Your license keys may enable add-on
products. If you push NetBackup to nodes that have an add-on product
already installed, your key works for that product.
Click Next.
23 (Conditional) For cluster installations only:
On the Cluster Settings screen, you provide the virtual and the physical
network information.
Note: You can add only one virtual IP address during installation. If your virtual
name can resolve into more than one IP address, you can add multiple IP
addresses after the installation using the bpclusterutil -addIP option. More
information about the bpclusterutil command is available.
NetBackup Commands Reference Guide
For new installations, the following configuration settings that you enter apply
to all nodes:
Create a new Cluster For new cluster installations, select this option.
Group
NB Cluster Group Name The name that is used to identify a NetBackup service group
or resource group. The resources in any resource group are
related and interdependent.
Installing server software on Windows systems 84
Performing local, remote, or clustered server installation on Windows systems
Virtual Host Name The name by which NetBackup is known in the cluster.
When you install the client software, this host name must
be added to the Additional Servers field on the NetBackup
System Names screen.
Path to Shared Data A directory on one of the shared disks in the cluster where
NetBackup stores configuration information. If the letter for
the disk (or drive) does not appear in the pull-down list, enter
only the letter.
Cluster Configuration After you set all of the parameters, click this icon to configure
the cluster for use with NetBackup. The Next icon is not
available until after successful cluster configuration.
The text box provides the following information about the
configuration:
Note: Veritas recommends that you review the summary screen for any warning
messages. You can prevent installation and upgrade issues if you resolve any
problems before you continue the installation.
View installation log file The installation log file provides detailed installation
information and shows whether any errors occurred.
%ALLUSERSPROFILE%\Veritas\
NetBackup\InstallLogs\
Note: When you perform a remote or a cluster
installation to multiple computers, this option only lets
you view the log for the local computer. Each computer
that you selected for installation contains its own
installation log file. To view the log file of a remote
computer, open a Windows Explorer window and enter
\\<COMPUTERNAME>.
Obtain certificates You must obtain the Certificate Authority certificate and the
host certificate for each inactive node. More information is
available:
External certificate authority Configure your external certificate authority. If you opted to
skip the security configuration or if you have a master server,
you may need to configure an ECA. More information about
configuring ECAs is available:
https://www.veritas.com/support/en_US/article.100044300
Restart You may need to restart each of the cluster nodes after the
installation is complete.
WSFC and VCS clusters Under normal circumstances, cluster configuration is one of
the final steps when you install NetBackup in a cluster. If this
step is not done or does not complete successfully, you can
use the bpclusterutil command from the active node to
perform this step.
WSFC clusters Any NetBackup resources that you took offline come back
online automatically.
Note: For Windows 2008 Server Core systems, you can only install NetBackup
with this procedure.
Enter the names of any additional NetBackup master servers and media
servers that you want to communicate with this host. Include the names of
servers where you plan to install NetBackup later.
If no other servers are to communicate with this host, remove this line from
the script.
■ SET ABORT_REBOOT_INSTALL=num
This line lets you determine how you want the installation to continue if a
restart is required. Select from the following settings:
REBOOT="ReallySuppress"
■ SET CA_CERTIFICATE_FINGERPRINT=fingerprint
If you use a NetBackup Certificate Authority, you must know the CA
Certificate fingerprint of the master server at time of installation. More
information is available about the details on the CA Certificate fingerprint
and its role in generation of security certificates.
https://www.veritas.com/support/en_US/article.000127129
■ SET AUTHORIZATION_TOKEN=token
In some cases, if you use a NetBackup Certificate Authority, the installer
requires an authorization token to successfully deploy security certificates.
Installing server software on Windows systems 90
Installing NetBackup servers silently on Windows systems
■ SET SMART_METER_FILE_PATH=path
You must specify the path to the Veritas Smart Meter customer registration
key. More information is available. See “About Veritas Smart Meter”
on page 25.
■ ECA_CERT_STORE
Use this field to specify the external certificate location in a Windows
certificate store. This field is specified in the form
store_name\issuer_DN\subject. This field is required to use an external
certificate from the Windows certificate store.
■ ECA_CERT_PATH
Use this field to specify the path and the file name of the external certificate
file. This field is required to set up an external certificate from a file.
■ ECA_TRUST_STORE_PATH
Use this field to specify the path and the file name of the file representing
the trust store location. This field is required to set up an external certificate
from a file.
■ ECA_PRIVATE_KEY_PATH
Use this field to specify the path and the file name of the file representing
the private key. This field is required to set up an external certificate from
a file.
■ ECA_CRL_CHECK_LEVEL
Use this field to specify the CRL mode. This field is required. Supported
values are:
■ USE_CDP: Use the CRL defined in the certificate.
■ ECA_CRL_PATH
Installing server software on Windows systems 91
Installing NetBackup servers silently on Windows systems
Use this field to specify the path and the file name of the CRL associated
with the external CA certificate. This field is required only when
ECA_CRL_CHECK_LEVEL is set to USE_PATH. If not applicable, leave this field
empty.
■ ECA_KEY_PASSPHRASEFILE
Use this field to specify the path and the file name of the file that contains
the passphrase to access the keystore. This field is optional and applies
only when setting up an external certificate from a file.
After all server software is installed, you are ready to install client software.
See “About NetBackup client installation” on page 97.
Chapter 5
About the administrative
interfaces
This chapter includes the following topics:
authentication. See the NetBackup Web UI Security Administrator's Guide for more
information.
Note: Veritas recommends that after you install or upgrade NetBackup server
software, you should uninstall older versions of the Remote Administration Console
(Windows and Java) present on the host. If the native NetBackup Administration
Console for Windows is present, it is automatically uninstalled when you install or
upgrade the NetBackup server software.
Console version location You must install each console version to a different folder.
7 On the Ready to Install the Program screen, review the Installation Summary
and click Install.
8 On the Installation Complete screen, click Finish.
9 To open the console, click Start > Programs > Veritas NetBackup >
NetBackup Version Administration Console.
Note: NetBackup includes an administration console for all the supported versions
of NetBackup. More information about supported versions of NetBackup is available.
https://sort.veritas.com/eosl
UNIX or Linux A NetBackup UNIX or Linux server can only push client
software to UNIX or Linux clients.
Note: Additional steps are required to deploy clients in a secure environment where
the clients do not have direct connectivity to the master server. More information
on this topic is available. See the topic on deploying certificates on clients without
connectivity to the master server in the NetBackup Security and Encryption Guide.
Note: All scripts must be stored and run locally. One recommendation is that scripts
should not be world-writable. Scripts are not allowed to be run from network or
remote locations. Any script that is created and saved in the NetBackup db_ext
(UNIX) or dbext (Windows) location needs to be protected during a NetBackup
uninstall.
For more information about registering authorized locations and scripts, review the
knowledge base article:
http://www.veritas.com/docs/000126002
For more information about your specific database agent, review the documentation
for that agent:
http://www.veritas.com/docs/DOC5332
Client installation restrictions You cannot install NetBackup client software on the
computers that currently have NetBackup server software.
In these cases, you must first remove the NetBackup server
software.
User permissions ■ By default on Windows 2008, 2008 R2, 2012, 2012 R2,
and 2016 Server systems, only administrators have write
permission to the Program Files directory.
■ NetBackup writes log files and progress files to the
following location:
Program Files\Veritas\NetBackup\Logs
To perform backups and restores with the Backup,
Archive, and Restore interface, users must have write
permission to the Logs directory. Users without write
permission to this directory receive an error message,
and the backup or restore is canceled. The administrator
account has write permission by default, but you must
ensure that other users also have write permission.
Local installation To install NetBackup client The installation wizard installs the
software locally, the system must client software only on the
meet the following configuration computer where you run the
requirements: installation.
Remote installation To install NetBackup client The installation wizard scans the
software remotely, the system must network for available clients where
meet the following configuration you can install the client software.
requirements:
The source computer must run
■ All the requirements for local Windows 2008, 2008 R2, 2012, or
installations must be met. 2016 Server.
■ The source system must run
Also, a remote installation requires
Windows 2008, 2008 R2, 2012, system administrator privileges.
2012 R2, or 2016 Server.
■ Administrator privileges are
Note: You cannot install clients
required for the user that remotely from NetBackup Windows
performs remote installations. servers to UNIX computers.
■ Remote Registry service must
See “Installing NetBackup
be started on the remote Windows clients locally or
system. remotely” on page 101.
If the Remote Registry service
is not started, the installation
receives this error message:
Attempting to connect
to server server_name
failed with the
following error: Unable
to connect to the
remote system. One
possible cause for this
is the absence of the
Remote Registry
service. Please ensure
this service is started
on the remote host and
try again.
Client name entries During installation, the client name is written to the registry
in lowercase. For backups to work, the policies on the
NetBackup server must specify the client names in lowercase.
Note: After client installation, you may need to restart the system for the changes
to take effect. A message appears to alert you if a restart is necessary.
■ Select Modify to change installation settings for the local host, or to use
the local host as a platform to perform push installation to remote hosts.
■ Select Repair to restore NetBackup 8.2 to its original state on the local
host.
■ Select Remove to remove NetBackup 8.2 from the local host.
7 On the License Agreement screen, accept the terms of the agreement and
click Next.
8 On the Veritas NetBackup Client Installation Type screen, provide the
following information:
Click Next.
9 (Conditional) This step applies only to local Custom installations.
On the Veritas NetBackup Client Destination Folder screen, you can select
where the NetBackup files are installed.
Installing NetBackup client software 103
About NetBackup client installation on Windows
C:\Program Files\VERITAS
To change the folder destination where NetBackup is
installed:
■ Click Change.
■ Browse to the preferred location and designate a
new or an existing folder.
■ Click Next.
Click Next.
Installing NetBackup client software 104
About NetBackup client installation on Windows
Safe Abort Option This option determines how the installation proceeds if
a restart is required as part of the installation or upgrade.
12 On the NetBackup System Names screen, the following fields are populated
automatically. Changes are not normally required. Except for the Client Name,
you can make changes as needed for your configuration.
Additional Servers Enter all of the master server and media server names
that you want this client to access.
13 After you provide the required computer names, the installer determines your
security configuration.
Installing NetBackup client software 105
About NetBackup client installation on Windows
14 On the External Certificate screen, select one of the three radio buttons based
on how you want to configure the external certificate authority (ECA). Depending
on which one you select, you must complete different information:
■ Use Windows certificate store
You must enter the certificate location as Certificate Store Name\Issuer
Distinguished Name\Subject Distinguished Name.
Note: You can use the $hostname variable for any of the names in the
certificate store specification. The $hostname variable evaluates at run time
to the name of the local host. This option provides flexibility when you push
NetBackup software to a large number of clients.
■ Private key path: This field requires you to provide the path to the
private key file and the private key file name.
■ Passphrase file: This field requires you to provide the path of the
passphrase file and the passphrase file name. This field is optional.
■ CRL option: Specify the correct CRL option for your environment:
■ Use the CRL defined in the certificate. No additional information
is required.
■ Use the CRL at the following path: You are prompted to provide
a path to the CRL.
■ Do not use a CRL.
Browse Click here to search the network for the hosts where
you want to install NetBackup.
■ On the Available Systems dialog box, select
the computer to add and click Next.
■ On the Remote Computer Login Credentials
dialog box, enter the User Name and the
Password of the account to be used to perform
the installation on the remote computers.
■ If you plan to install to multiple remote
computers, click the box next to Remember
User Name and Password. Selecting this option
prevents the need to enter this information for
each remote computer.
■ Click OK.
■ On the Remote Destination Folder dialog box,
verify or change the Destination Folder where
NetBackup is installed.
The default location is C:\Program
Files\Veritas.
If you plan to install to multiple remote computers
and you want to use the same location, click the
box next to Use this folder for subsequent
systems. Selecting this option prevents the need
to enter the location for each remote computer.
Domain\ComputerName
Installing NetBackup client software 109
About NetBackup client installation on Windows
■ Click Next.
21 On the Ready to Install the Program screen, review the Installation Summary
that shows your selections from the previous steps.
Note: Veritas recommends that you review the summary screen for any warning
messages. You can prevent installation and upgrade issues if you resolve any
problems before you continue the installation.
■ Click Back to view the previous screens and make any changes, then return
to this screen and click Install.
■ Click Cancel to cancel the installation.
After you click Install, the installation process begins and a screen appears
that shows you the installation progress. This process may take several minutes.
Up to five remote installations occur simultaneously. When a remote installation
is completed, another one begins so that a maximum of five installations are
in progress.
If you click Cancel after you click Install, the installation does not stop
immediately. Installation continues on all remote hosts where the installation
has already started. Any specified hosts after that point do not get client
software installed.
NetBackup considers any remote installations that were completed when you
clicked Cancel to be successful.
22 On the Installation Complete screen, click Finish.
Examine the installation log on the following location:
%ALLUSERSPROFILE%\Veritas\NetBackup\InstallLogs\
Note: When you perform a remote installation to multiple computers, this option
only lets you view the log for the local computer. Each computer that you
selected for installation contains its own installation log file. To view the log file
of a remote computer, open a Windows Explorer window, enter
\\COMPUTERNAME, and navigate to the InstallLogs directory.
Silent installations of NetBackup clients are not supported if you want to run the
NetBackup services as a user instead of a local administrator.
To install NetBackup with a custom services account, refer to the following topics:
See “Installing NetBackup Windows clients locally or remotely” on page 101.
Use the following procedure to perform a silent installation of a local NetBackup
client.
To perform a silent installation of NetBackup client software on Windows
1 Navigate to the location where the ESD images (downloaded files) reside.
2 Copy the contents of the directory shown to a temporary folder on your hard
drive. For example, C:\temp.
x64
3 Since the original source files are read-only, change the permissions for the
copied files on the hard drive to allow the update.
4 In the temporary directory, use a text editor to edit the silentclient.cmd file
so the script installs the client software as needed.
5 Run the silentclient.cmd script.
6 To verify that the installation was successful, check the installation log file in
the following directory:
%ALLUSERSPROFILE%\Veritas\NetBackup\InstallLogs
To add servers or media ■ Start the Backup, Archive, and Restore interface.
servers: ■ Click File > Specify NetBackup Machines.
To display and change the ■ Start the Backup, Archive, and Restore interface.
client properties: ■ Click File > NetBackup Client Properties.
UNIX/Linux package Many of the add-on products and database agents are now
consolidation installed with the NetBackup client package. Separate
installation for these products is no longer needed.
The following products are now included in the NetBackup
8.2 client package (if the platform supports the product):
The binaries for the listed products are laid down with the
client package. A valid license is still required to enable the
product. If product configuration was required previously
(such as db2_config), configuration is still required.
gzip and gunzip The gzip and the gunzip commands must be installed on
commands each system. The directories where the commands are
installed must be part of the root user’s PATH environment
variable setting.
Installing NetBackup client software 113
About NetBackup client installation on UNIX/Linux
http://www.netbackup.com/compatibility
Note: If a client is listed in the Client Selections for Backup
Policies section of the SCL but not in the NetBackup
Administration Consoles section, the client is supported for
backup and restore, but it does not support any of the
available graphical interfaces.
Local installations ■ This method installs the client software on the computer
where you run the installation script.
■ To install clients to a location other than the default, you
must create and link a directory before you install the
client software. First create the directory where you want
the software to reside, then create /usr/openv as a link
to that directory.
■ On IBM zSeries and IBM pSeries Linux clients, you must
transfer the NetBackup ESD image contents to a location
that is readable by the virtual Linux environment. You can
transfer the image with NFS mounting commands.
Remote (push) installations ■ You can "push" the client software from your UNIX/Linux
NetBackup server to your UNIX/Linux client computers.
The UNIX/Linux client must be a true client and not a
media server or a master server. The preferred installation
method is to push the client software.
■ Before you can push to a UNIX/Linux client, you must first
install the NetBackup client type software on the server.
Then, you must create a policy that includes the client
name.
NetBackup Administrator's Guide, Volume I
See “Installing client type software on a master server”
on page 60.
■ You cannot install Windows client software remotely from
a NetBackup UNIX/Linux server.
■ Firewalls can prevent remote client installation.
■ Clients such as the IBM zSeries and the IBM pSeries
Linux may not have access to the ESD images. In these
cases, you must push the client software from a
UNIX/Linux master server or a media server.
■ The following remote installation methods are available:
See “Installing client software with the ssh method”
on page 133.
See “Installing client software with the sftp method”
on page 134.
Native UNIX and Linux You can install and upgrade NetBackup UNIX and Linux
installer clients with native installers. You can use either the
NetBackup install script or your preferred installer method.
This change does not include those clients that use the
Debian package. Those clients must be installed or upgraded
with the NetBackup install script. More information is
available:
See “Install of the UNIX and Linux client binaries with native
installers” on page 120.
ESD images (downloaded ■ Navigate to the location where the installation images
files) reside.
■ Enter the following command:
./install
Native install tools NetBackup supports the install and upgrade of the UNIX
and Linux client binaries with native installers. More
information is available.
The client binaries represent the operating system versions where the binaries
were compiled. The binaries typically function perfectly on later versions of the
operating system. The installation procedure attempts to load the appropriate
binaries for your system. If the script does not recognize the local operating
system, it presents choices.
3 Type y and press Enter to continue with the software installation.
Do you want to install the NetBackup client software for this
client? [y,n] (y)
Installing NetBackup client software 116
About NetBackup client installation on UNIX/Linux
4 Type the name of your NetBackup master server and press Enter to continue.
Enter the name of the NetBackup master server:
7 After you confirm you want to continue, the installer fetches the certificate
authority certificate details.
Be aware if you press Ctrl+C, this action requires you to rerun the installation
or continue with the installation without the required security components. If
these security components are absent, backups and restores fail.
8 The installer then looks to see what certificate authority the local system is
configured to use. The options for certificate authority on the local system are:
NetBackup Certificate Authority, external certificate authority, or indeterminate.
The installer then uses a combination of the master server certificate authority
mode and the local system certificate authority configuration to determine the
next steps.
9 If the installer prompts you for a certificate file path, your environment uses an
external certificate authority. Proceed to step 10.
If the installer prompts you for fingerprint information, your environment uses
a NetBackup Certificate Authority. Proceed to step 16.
If the installer cannot determine the configuration of the certificate authority on
the master server, you are presented with two options:
Installing NetBackup client software 117
About NetBackup client installation on UNIX/Linux
■ Skip the security configuration and configure your certificate authority after
installation. More information about post-installation certificate authority
configuration is available:
https://www.veritas.com/support/en_US/article.100044300
Proceed to step 19.
■ Exit the installation and restart the installation once you configure your
certificate authority.
11 When prompted, provide the required information for the CRL configuration:
Should a CRL be honored for the external certificate?
1) Use the CRL defined in the certificate.
2) Use the CRL from a file path.
3) Do not use a CRL.
q) skip security configuration
CRL option (1):
12 (Conditional) If you specify 2, you must enter the path to the CRL location:
Enter the CRL location path or q to skip security configuration:
/usr/eca/crl
Installing NetBackup client software 118
About NetBackup client installation on UNIX/Linux
13 The installer echoes the configuration information you entered and attempts
to retrieve details for the external certificate:
The external certificate is valid for use with master server name
How do you want to proceed?
1) Continue the installation using this certificate.
2) Update external certificate values.
3) Abort the installation.
Default option (1):
The external certificate is not valid for use with master server name
How do you want to proceed?
1) Continue the installation and set up external certificates later.
2) Modify the external CA values entered.
3) Abort the installation.
Default option (2):
After you confirm the fingerprint information, the installer stores the certificate
authority certificate details.
Storing CA certificate.
Depending on the network, this action may take a few minutes. To
continue without setting up secure communication, press Ctrl+C.
Be aware if you press Ctrl+C, this action requires you to rerun the installation
or continue with the installation without the required security components. If
these security components are absent, backups and restores fail.
17 After the Certificate Authority certificate is stored, the installer fetches the host
certificate.
Be aware if you press Ctrl+C, this action requires you to rerun the installation
or continue with the installation without the required security components. If
these security components are absent, backups and restores fail.
Installing NetBackup client software 120
About NetBackup client installation on UNIX/Linux
The token format is 16 upper case letters. Be aware if you press Ctrl+C, this
action requires you to rerun the installation or continue with the installation
without the required security components. If these security components are
absent, backups and restores fail.
19 Follow the prompts to complete the installation.
Additional information about installation folder restrictions is available.
See “Restrictions on the NetBackup installation directory” on page 15.
20 After the installation is complete, select Exit from this Script.
Install of the UNIX and Linux client binaries with native installers
You can install NetBackup UNIX and Linux clients with native installers. You can
use either the NetBackup install script or your preferred installer method. This
change does not include those clients that use the Debian package. Those clients
must be installed with the NetBackup install script.
■ For AIX: lslpp, installp
■ For HP-UX: swlist, swinstall
■ For Linux: rpm, yum, etc.
■ For Solaris: pkginfo, pkgadd
A successful installation or upgrade is recorded in the
/usr/openv/pack/install.history file.
Installing NetBackup client software 121
About NetBackup client installation on UNIX/Linux
CA_CERTIFICATE_FINGERPRINT=fingerprint
CA_CERTIFICATE_FINGERPRINT=01:23:45:67:89:AB:CD:EF:01:23:45:67:
89:AB:CD:EF:01:23:45:67
■ ECA_CERT_PATH
Use this field to specify the path and the file name of the external certificate
file. This field is required to set up an external certificate from a file.
■ ECA_TRUST_STORE_PATH
Use this field to specify the path and the file name of the file representing
the trust store location. This field is required to set up an external certificate
from a file.
■ ECA_PRIVATE_KEY_PATH
Use this field to specify the path and the file name of the file representing
the private key. This field is required to set up an external certificate from
a file.
■ ECA_KEY_PASSPHRASEFILE
Use this field to specify the path and the file name of the file that contains
the passphrase to access the keystore. This field is optional and applies
only when setting up an external certificate from a file.
■ ECA_CRL_CHECK_LEVEL
Use this field to specify the CRL mode. This field is required. Supported
values are:
Installing NetBackup client software 122
About NetBackup client installation on UNIX/Linux
■ SKIP: Used to skip setting up the certificate authority. To skip the ECA
configuration, you must set all required ECA_ values to SKIP. Be aware
that if you continue with the installation without a certificate authority,
the backups and restores fail.
■ ECA_CRL_PATH
Use this field to specify the path to the CRL associated with the external
CA certificate. This field is required only when ECA_CRL_CHECK_LEVEL is
set to USE_PATH. If not applicable, leave this field empty.
■ SERVICES=no
■ INSTALL_PATH
■ MERGE_SERVER_LIST
AIX CLIENTS1/NBClients/anb/Clients/usr/openv/netbackup/client/RS6000/AIX6/
HP-UX CLIENTS1/NBClients/anb/Clients/usr/openv/netbackup/client/HP-UX-IA64/HP-UX11.31/
CLIENTS2/NBClients/anb/Clients/usr/openv/netbackup/client/Linux/RedHat2.6.18/
CLIENTS2/NBClients/anb/Clients/usr/openv/netbackup/client/Linux/SuSE3.0.76
CLIENTS2/NBClients/anb/Clients/usr/openv/netbackup/client/
Linux-s390x/IBMzSeriesSuSE3.0.76
CLIENTS2/NBClients/anb/Clients/usr/openv/netbackup/client/
Linux-ppc64le/IBMpSeriesSuSE4.4.21
CLIENTS1/NBClients/anb/Clients/usr/openv/netbackup/client/Solaris/Solaris10/
CLIENTS1/NBClients/anb/Clients/usr/openv/netbackup/client/Solaris/Solaris_x86_10_64/
AIX VRTSnbpck.image
VRTSpbx.image.gz
VRTSnbclt.image.gz
VRTSnbjre.image.gz
VRTSnbjava.image.gz
VRTSpddea.image.gz
VRTSnbcfg.image.gz
HP-UX VRTSnbpck.depot
VRTSpbx.depot.gz
VRTSnbclt.depot.gz
VRTSnbjre.depot.gz
VRTSnbjava.depot.gz
VRTSpddea.depot.gz
VRTSnbcfg.depot.gz
Linux VRTSnbpck.rpm
VRTSpbx.rpm
VRTSnbclt.rpm
VRTSnbjre.rpm
VRTSnbjava.rpm
VRTSpddea.rpm
VRTSnbcfg.rpm
Solaris .pkg_defaults
VRTSnbpck.pkg.gz
VRTSpbx.pkg.gz
VRTSnbclt.pkg.gz
VRTSnbjre.pkg.gz
VRTSnbjava.pkg.gz
VRTSpddea.pkg.gz
VRTSnbcfg.pkg.gz
Note: The NetBackup Java Console RPM, VRTSnbjava, is optional. You may
not want to install the NetBackup Java Console on every client in your
environment.
7 (Conditional) For Solaris, HP-UX, and AIX, extract the compressed package
files with the command shown:
gunzip VRTS*.*
VRTSnbpck.pkg
VRTSpbx.pkg
VRTSnbclt.pkg
VRTSnbjre.pkg
VRTSnbjava.pkg
VRTSpddea.pkg
VRTSnbcfg.pkg
8 Install the files in the order that is shown with the command shown:
9 (Conditional) If you do not have the answer file in place or you do not populate
it correctly, you receive the error message shown:
WARNING: There is no answer file present and no valid bp.conf.
Therefore, security configuration is not complete. Manual steps
are required before backups and restores can occur. For more
information:
https://www.veritas.com/support/en_US/article.000127129
For AIX
User attempts to install # installp -ad VRTSnbpck.image all Use the lslpp –L package_name
the binaries on top of command to determine the name of the
package VRTSnbpck.image is already
the same version of the installed package. Uninstall this package and
installed
binaries. then retry the operation.
User attempts to install # installp -ad VRTSnbcfg.image all Refer to the documentation for the correct
the binaries in the image package installation order. More
error: Failed dependencies:
incorrect order. information is also available in the error which
VRTSnbclt >= 8.1.0.0 is needed by lists the dependent packages.
VRTSnbcfg-version-platform
See “To install the UNIX or Linux client
binaries using native installers:” on page 121.
User attempts to install # installp –d VRTSnbclt.image all Use the lslpp –L package_name
an older version of a command to determine the name of the
WARNING:
binary over the top of a installed package. Uninstall this package and
newer version of the file then retry the operation.
binary. /usr/openv/lib/java/nbvmwaretags.jar
from install of
VRTSnbclt-version-platform
conflicts with file from package
VRTSnbclt-version-platform
For HP-UX
User attempts to install # swinstall –s ./VRTSnbpck.depot Use the swlist command to determine the
the binaries on top of name of the installed package. Uninstall this
1 filesets have the selected
the same version of the package and then retry the operation.
revision already installed.
binaries.
User attempts to install # swinstall -s ./VRTSnbcfg.depot Refer to the documentation for the correct
the binaries in the depot package installation order. More
ERROR: "hostname:/": The software
incorrect order. information is also available in the error which
dependencies for 1 products or
lists the dependent packages.
filesets cannot be resolved.
See “To install the UNIX or Linux client
binaries using native installers:” on page 121.
User attempts to install # swinstall –s ./VRTSnbclt.depot Use the swlist command to determine the
an older version of a name of the installed package. Uninstall this
WARNING: "hostname:/": 1 filesets
binary over the top of a package and then retry the operation.
have a version with a higher
newer version of the
revision number already installed.
binary.
Installing NetBackup client software 129
About NetBackup client installation on UNIX/Linux
For Linux
User attempts to install # rpm -U VRTSnbpck.rpm Use the rpm command to determine the name
the binaries on top of of the installed package. Uninstall this
package
the same version of the package and then retry the operation.
VRTSnbpck.rpm-version-platform is
binaries.
already installed
User attempts to install # rpm -U VRTSnbcfg.rpm Refer to the documentation for the correct
the binaries in the RPM installation order. More information is
error: Failed dependencies:
incorrect order. available.
VRTSnbclt >= 8.1.0.0 is needed by
See “To install the UNIX or Linux client
VRTSnbcfg-version-platform
binaries using native installers:” on page 121.
User attempts to install # rpm -U VRTSnbclt.rpm Use the rpm command to determine the name
an older version of a of the installed package. Uninstall this
file
binary over the top of a package and then retry the operation.
/usr/openv/lib/java/nbvmwaretags.jar
newer version of the
from install of
binary.
VRTSnbclt-version-platform
conflicts with file from package
VRTSnbclt-version-platform
For Solaris
Installing NetBackup client software 130
About NetBackup client installation on UNIX/Linux
pkgadd -a .pkg_defaults -d
VRTSnbpck.pkg VRTSnbpck
Installing NB-Pck.
## Installing part 1 of 1.
User attempts to install # pkgadd -a .pkg_defaults -d Refer to the documentation for the correct
the binaries in the VRTSnbclt.pkg VRTSnbclt package installation order. More information
incorrect order. is available.
ERROR: VRTSnbpck >=8.1.0.0 is
required by VRTSnbclt. See “To install the UNIX or Linux client
checkinstall script suspends binaries using native installers:” on page 121.
User attempts to install # pkgadd -a .pkg_defaults -d Use the pkginfo command to determine the
an older version of a VRTSnbclt.pkg VRTSnbclt name of the package that is currently installed.
binary over the top of a Uninstall this package and then retry the
Processing package instance
newer version of the operation.
<VRTSnbclt> from
binary.
</root/80packages/Solaris/
Solaris_x86_10_64/VRTSnbclt.pkg>
(i386) 8.1.0.0
■ ssh
See “Installing client software with the ssh method” on page 133.
■ sftp
See “Installing client software with the sftp method” on page 134.
Note: For installation in clustered environments, enter the virtual name for the
NetBackup server and not the actual local host name. You can only push client
software from the active node.
SSH daemon (sshd) To use the ssh method, the UNIX client must have sshd
enabled and configured to allow root user logins.
Client software location If you want to install client software to a location other than
the default, you must first create and link the desired directory.
Create the directory where you want the client software to
reside, and then create /usr/openv as a link to that
directory.
Additional information about installation folder restrictions is
available.
Backup policies Make sure that the clients are assigned to a backup policy.
To install client software from a UNIX master server to UNIX clients with the
ssh method
◆ On the NetBackup server, run the install_client_files script.
Use one of the following commands:
■ To move software to only one client at a time:
/usr/openv/netbackup/bin/install_client_files ssh client
The client is the host name of the client.
■ To move software to all clients at once:
/usr/openv/netbackup/bin/install_client_files ssh ALL
Installing NetBackup client software 134
About NetBackup client installation on UNIX/Linux
The ALL option specifies that you want to install all clients that are configured
in any backup policy on the server.
SSH daemon (sshd) To use this method, the UNIX client must have sshd enabled
and configured to allow root or non-root user logins.
Client file location If you want to install client software to a location other than
the default, you must first create and link the desired directory.
Create the directory where you want the software to reside,
and then create /usr/openv as a link to that directory.
Backup policies Make sure that the clients are assigned to a backup policy.
To install client software from a UNIX master server to UNIX clients with the
sftp method
1 To move the client software from the server to the /tmp directory on the client,
run the install_client_files script on the NetBackup server.
Use one of the following commands:
■ To move software to one client at a time:
/usr/openv/netbackup/bin/install_client_files sftp client user
The client is the host name of the client.
The user is the login ID that SSH requires on the client.
■ To move software to all clients at once:
/usr/openv/netbackup/bin/install_client_files sftp ALL user
The ALL option specifies that you want to install all clients that are configured
in any backup policy on the server.
Installing NetBackup client software 135
About NetBackup client installation on UNIX/Linux
2 After the script runs, the root user on each client computer must run the
following script:
sh /tmp/bp.<pid>/client_config
The pid is the process ID. The client_config script installs the binaries.
ESD images (downloaded ■ Navigate to the location where the installation images
files) reside.
■ Enter the following command:
./install
Installing NetBackup client software 136
About NetBackup client installation on UNIX/Linux
Native install tools NetBackup supports the install and upgrade of the UNIX
and Linux client binaries with native installers. More
information is available.
The client binaries represent the operating system versions where the binaries
were compiled. The binaries typically function perfectly on later versions of the
operating system. The installation procedure attempts to load the appropriate
binaries for your system. If the script does not recognize the local operating
system, it presents choices.
3 Select the client type that you want to load and follow the prompts to install
that client type. Repeat as necessary until all of the client types you want are
loaded.
Make sure that you load the software for all of the UNIX/Linux client types that
you intend to install remotely from the server.
4 Install the NetBackup client software on the clients you specified.
See “About remote installation methods for UNIX/Linux clients” on page 132.
Installing NetBackup client software 137
About NetBackup client installation on UNIX/Linux
Note: Be aware you cannot use the update_clients installation script to push
NetBackup 8.2 or later clients. You must use VxUpdate.
The update_clients installation script can determine the full client list that is
configured on the server. When it is run without any parameters, it attempts to
update all clients (as determined by
/usr/openv/netbackup/bin/admincmd/bpplclients). If you do not want to
upgrade all clients, you can specify a subset of clients. Use the hardware type and
operating system parameters or use the -ClientList parameter.
You can run update_clients from a media server. The -ClientList parameter
is required in this situation. The script lets you maintain a media server and a set
of clients at an earlier release level than the master server. Doing so requires the
informed use of the update_clients -ClientList command on a master server
and a media server to avoid unwanted client upgrades.
For clustered environments, you can push client software only from the active node.
Note: Additional steps are required to deploy clients in a secure environment where
the clients do not have direct connectivity to the master server. More information
on this topic is available. See the topic on deploying certificates on clients without
connectivity to the master server in the NetBackup Security and Encryption Guide.
During a client upgrade, the new client files are written to a directory in /tmp on the
client. This directory must have sufficient space to temporarily store the new client
files to ensure a successful upgrade. If sufficient space is not available, a status
message informs you that the upgrade script could not write to the location in the
/tmp directory. To resolve this issue, allocate more space to the /tmp directory and
perform the upgrade procedure again. The temporary directory is removed when
the upgrade is complete.
To upgrade clients after you have upgraded servers
1 Use one of the following methods to start the installation script:
Installing NetBackup client software 138
About NetBackup client installation on UNIX/Linux
ESD images (downloaded ■ Navigate to the location where the installation images
files) reside.
■ Enter the following command:
./install
Native install tools NetBackup supports the install and upgrade of the UNIX
and Linux client binaries with native installers. More
information is available.
The client binaries represent the operating system versions where the binaries
were compiled. The binaries typically function perfectly on later versions of the
operating system. For example, Solaris 10 binaries are also used on the Solaris
11 level of the operating system.
3 Select the client type that you want to load and follow the prompts to load that
client type. Repeat as necessary until all desired client types have been loaded.
Make sure that you load the software for all of the UNIX client types that you
intend to push to from this server. Otherwise, you cannot add these client types
to the NetBackup policy configuration.
4 As a root user on the NetBackup master server, enter the following command
to see whether bprd is running:
/usr/openv/netbackup/bin/bpps
5 Enter the following command to make sure that backups or restores are not in
progress:
/usr/openv/netbackup/bin/admincmd/bpdbjobs
cd /usr/openv/netbackup/bin/admincmd
■ Use the bpplclients command to create a file that contains a list of clients
currently configured in the NetBackup database. The options to use on this
command differ depending on whether you push from a master server or
from a media server, as follows:
file Name of the file to contain the list of unique clients. If no clients
have been configured in the NetBackup database, the file is
empty.
hardware os client
Type either y or n.
Press Enter.
Be aware if you press Ctrl+C, this action requires you to rerun the installation
or continue with the installation without the required security components. If
these security components are absent, backups and restores fail.
If a certificate authority certificate is found, you receive the message shown:
If you leave the authorization token blank, you receive the message shown:
11 After all servers and clients are updated, start the bprd daemon as the root
user on the master server by entering the following command:
/usr/openv/netbackup/bin/initbprd
Chapter 7
Configuring NetBackup
This chapter includes the following topics:
■ Update cloud configuration file on the master server immediately after install or
upgrade to NetBackup 8.2
Platform Links
AIX /etc/rc.netbackup.aix
/sbin/rc2.d/S777netbackup ->/sbin/init.d/netbackup
/etc/rc1.d/K01netbackup ->/etc/init.d/netbackup
/etc/rc2.d/S95netbackup ->/etc/init.d/netbackup
/etc/rc.d/rc1.d/K01netbackup
->/etc/rc.d/init.d/netbackup
/etc/rc.d/rc2.d/S77netbackup
->/etc/rc.d/init.d/netbackup
/etc/rc.d/rc3.d/S77netbackup
->/etc/rc.d/init.d/netbackup
/etc/rc.d/rc5.d/S77netbackup
->/etc/rc.d/init.d/netbackup
/etc/rc.d/rc6.d/K01netbackup
->/etc/rc.d/init.d/netbackup
Configuring NetBackup 144
About NetBackup server configuration
Platform Links
/etc/init.d/rc2.d/S77netbackup
->/etc/init.d/netbackup
/etc/init.d/rc3.d/S77netbackup
->/etc/init.d/netbackup
/etc/init.d/rc5.d/S77netbackup
->/etc/init.d/netbackup
/etc/init.d/rc6.d/K01netbackup
->/etc/init.d/netbackup
/etc/rc1.d/K01netbackup ->/etc/init.d/netbackup
/etc/rc2.d/S77netbackup ->/etc/init.d/netbackup
NetBackup Enterprise servers The procedures for configuring master and media servers
are very similar. Veritas recommends, however, that you
configure all server information such as storage devices and
volumes from the master server. Following this order helps
ensure that the master servers properly administer the media
servers.
Warning: Communication problems between the master
server and the media server do not prevent you from running
the configuration wizards. Therefore, do not run the wizards
on the media server until the problems are corrected. If you
run any of the wizards when a communication problem exists,
the master server cannot recognize the information that you
enter. You must first correct the problem. After you correct
the problem, run the configuration wizards from the master
server.
For initial NetBackup server configuration, Veritas recommends that you launch
the NetBackup Administration Console and click the Getting Started icon. A series
of wizards guide you through the following configuration procedures:
■ Configure Storage Devices
See “About the Device Configuration Wizard” on page 147.
■ Configure Volumes
See “About the Volume Configuration Wizard” on page 149.
■ Configure the Catalog Backup
See “About the Catalog Backup Wizard” on page 150.
■ Create a Backup Policy
See “About the Backup Policy Configuration Wizard” on page 151.
Configuring NetBackup 146
About NetBackup server configuration
If NetBackup is already configured and you want to change a specific area, click
the appropriate wizard on the NetBackup Administration Console.
For complete information on all of the NetBackup wizards and how to configure
NetBackup, see the NetBackup Administrator's Guide, Volume I.
See “About storage device configuration” on page 14.
Note: Other wizards are available from the initial NetBackup Administration Console
window that are not part of the Getting Started wizard. For example, you can
configure disk pools or create a snapshot backup policy. See the NetBackup
Administrator’s Guide, Volume I for complete information about all NetBackup
wizards.
On Windows systems, if you clicked the check box Launch Administration Console
that appears at the end of NetBackup installation, you can skip this procedure.
To start the NetBackup Administration Console on Windows
1 Log on to the NetBackup server as the Administrator.
2 Click Start > Programs > Veritas NetBackup > NetBackup Administration
Console.
3 To begin configuration, on the Administration Console, click Getting Started.
The Getting Started screen appears and prompts you to begin device
configuration.
Note: If you still need to configure devices to work with the operating system,
close the wizard. You must first configure those devices as specified by the
device and the operating system vendors.
Configuring NetBackup 147
About NetBackup server configuration
/usr/openv/netbackup/bin/jnbSA &
Note: If you still need to configure devices to work with the operating system,
close the wizard. You must first configure those devices as specified by the
device and the operating system vendors.
Device configuration ■ When the wizard displays the Device Hosts screen, you
must specify the hosts on which to auto-discover and
configure devices (NetBackup Enterprise servers only).
■ When the wizard displays the Backup Devices screen,
confirm that the list of devices is complete and accurate.
If a known backup device does not appear in this list, take
the following action:
■ Verify that the backup device is physically attached to
the host.
■ Verify that all that specified device and operating
system vendor installation procedures are performed
successfully.
■ Verify that all drives correspond to the proper device.
If you need to move a drive, select the drive and drag
it to the correct location.
■ For clusters, ensure that you perform storage device
configuration on each node. Begin on the active node,
then move the NetBackup active node to another node
and perform the storage device configuration on that node.
Repeat for each node of the cluster on which NetBackup
runs.
Note: By default, robotic daemons and NetBackup
add-on products do not cause NetBackup to failover if
they fail. You can configure robotic devices and
NetBackup add-on products to fail over NetBackup if the
robot or the add-on product fails. The operating system
must recognize the robots as configured before you can
configure NetBackup to failover. For complete details
about fail over configuration, refer to the NetBackup
Clustered Master Server Administrator’s Guide.
Configuring NetBackup 149
About NetBackup server configuration
Defining storage units ■ You define storage units from the Configure Storage
Units screen. If your system does not have a tape device,
you can store data on a disk by defining disk storage units.
■ When you enter a path for a storage unit, the following
rules apply:
■ Use the correct path separators (forward slash (/) for
UNIX and backward slash (\) for Windows).
■ Use a colon (:) to specify a drive separation on
Windows platforms.
■ Use the following characters only:
Alphabetic characters (ASCII A-Z, a-z)
Numeric characters (0-9)
Miscellaneous characters: plus (+), minus (-),
underscore (_), or period (.)
Note: For clustered environments, configure volumes from the active node.
Multiple drive types When you specify multiple drive types, the following are true:
This wizard lets you create a policy for an online, hot catalog backup. Online, hot
catalog backups can back up the catalog while normal client backups are in progress.
A catalog backup policy lets you specify the following information:
■ The destinations for the catalog backup
A backup destination can be any configured storage device. For additional
disaster recovery protection, you can specify a second location for your catalog
backup.
The wizard prompts you to choose the type of backup that you want a policy to
perform.
Table 7-2 describes the available backup types.
Full backup Backs up all files that are specified in the file list.
Incremental backup Backs up all the changed files that are specified in the file
list.
Backs up the files that have changed since the last successful
incremental or full backup. All files are backed up if no
previous backup has been done.
Only the files that changed since the last full backup that was
successful are backed up. All files are backed up if no
previous backup has been done.
■ Removing NetBackup server and client software from Windows servers, clusters,
and clients
■ About removal of the Java Console state data from Windows servers and
Windows clients
■ Removing a clustered media server by migrating all data to a new media server
This task is very important if you plan to reinstall NetBackup at a later date.
■ Remove any add-on products before you remove NetBackup server software.
■ Remove the NetBackup server software.
Note: As part of the removal of the NetBackup server software, the security
certificates are automatically deleted. If you want to retain the certificates, please
save them before removing NetBackup.
More information about this topic is available. Please refer to the information on
retaining host ID-based certificates when reinstalling NetBackup in the
NetBackupSecurity and Encryption Guide.
See “Removing NetBackup from UNIX and Linux servers and clients” on page 158.
See “About NetBackup client software removal on UNIX and Linux systems”
on page 157.
Warning: Do not remove PBX if your client uses other Veritas software products
that require PBX to run.
Removing NetBackup server and client software 158
Removing NetBackup from UNIX and Linux servers and clients
Clustered environments Before you begin to remove NetBackup, you must remove
NetBackup from the cluster application. Follow the instructions
in your cluster documentation on how to remove a group,
then you can remove NetBackup.
AIX lslpp -L
HP-UX swlist
Solaris pkginfo
The -p option specifies the product ID, which is 51216 for NetBackup.
9 (Conditional: servers only) If BMR is supported and enabled on the server,
remove the associated files with the following command:
/usr/openv/netbackup/bin/bmrsetupmaster -undo -f
10 (Conditional: servers only) If you moved the NBDB files from their default
installation location, you must delete these files manually as follows:
■ Navigate to the following directory where the NBDB files reside:
/usr/openv/db/data
13 For the clients that support PureDisk, remove all PureDisk files with the following
command:
/opt/pdde/pddeuninstall.sh -forceclean
14 (Conditional: servers only) For the clients that support MSDP, remove all MSDP
files with the following command:
/opt/pdde/pddeuninstall.sh -basedir /usr/openv/pdde/ -ostdir
/usr/openv/lib/ost-plugins/ -forceclean
15 (Conditional: servers only) To remove the NetBackup server package, run the
command shown.
Note: The virtual host name security certificates are automatically removed
from the shared drive of the cluster as a part of NetBackup server software
removal.
More information about this topic is available. Please refer to the information
on retaining host ID-based certificates when reinstalling NetBackup in the
NetBackupSecurity and Encryption Guide.
Note: As part of the removal of the NetBackup server software, the security
certificates are automatically deleted. If you want to retain the certificates,
please save them before removing NetBackup.
More information about this topic is available. Please refer to the information
on retaining host ID-based certificates when reinstalling NetBackup in the
NetBackupSecurity and Encryption Guide.
Note: If there are running NetBackup processes and daemons, terminate them
manually for a successful NetBackup removal.
Note: Remember, you should not remove PBX if your server uses other Veritas
software products that require PBX to run.
Warning: The rm commands used remove any add-on products that are
installed on the computer where you perform this command.
cd /usr/openv This command changes you into the directory that symbolic
link points to, such as /opt/openv.
Warning: Before you continue, make sure that you are at the correct location
and verify that the subdirectories are what you expect them to be. To help
prevent removing the wrong directories, the previous commands verify your
current location and list the files in that directory. After you verify the directory
location and its contents, remove the directory with the next commands.
rm -rf For the directory value, enter the information from the file
directory command. This command deletes the directory that contains
the NetBackup binaries.
Note: Depending on your operating system, you may need to use the rmdir
command to remove the /usr/openv directory.
rmdir /usr/openv
Depending on the distribution of Linux, the startup and the shutdown scripts
may already be deleted.
See “About NetBackup startup and shutdown scripts” on page 142.
Removing NetBackup server and client software 165
Removing NetBackup from UNIX and Linux servers and clients
23 Remove the scripts shown. Depending on the operating system, the startup
and the shutdown scripts may already be deleted.
/etc/rc.d/init.d/nbftserver
/etc/rc.d/rc0.d/K03nbftserver
/etc/rc.d/rc1.d/K03nbftserver
/etc/rc.d/rc2.d/S21nbftserver
/etc/rc.d/rc3.d/S21nbftserver
/etc/rc.d/rc5.d/S21nbftserver
/etc/rc.d/rc6.d/K03nbftserver
Removing NetBackup server and client software 166
Removing NetBackup from UNIX and Linux servers and clients
/etc/init.d/nbftserver
/etc/init.d/rc2.d/K01nbftserver
/etc/init.d/rc2.d/S05nbftserver
/etc/init.d/rc3.d/K01nbftserver
/etc/init.d/rc3.d/S05nbftserver
/etc/init.d/rc5.d/K01nbftserver
/etc/init.d/rc5.d/S05nbftserver
/etc/init.d/nbftserver
/etc/rc0.d/K03nbftserver
/etc/rc1.d/K03nbftserver
/etc/rc2.d/S21nbftserver
/etc/rc.netbackup.aix
/etc/rc.netbackup.aix stop
■ First, examine the following file to see if NetBackup is the only product that
uses LiveUpdate:
/etc/Product.Catalog.JavaLiveUpdate
■ If NetBackup is the only product that currently uses LiveUpdate, run the
following command:
/opt/Symantec/LiveUpdate/uninstall.sh -a
Note: Before you remove the following product catalog file, make sure that
it is empty. The empty file size is equal to 0 bytes. If the product catalog
file is not empty, do not remove it because other products still require it.
rm -f /etc/Product.Catalog.JavaLiveUpdate
26 To remove the NetBackup-Java application state data for the root account, run
the appropriate command as follows:
Warning: Do not insert a space between the slash character (/) and the period
or the dot character (.) of /.veritas. A space between these characters
removes all of your files from the root level and beyond.
■ To remove the NetBackup-Java application state data for the root account
for all releases, run the following command:
/bin/rm -rf /.veritas
■ To remove the NetBackup-Java application state data for the root account
for a specific release, run the following command:
/bin/rm -rf /.veritas/java/version
Where version is the six-digit NetBackup version number. For example,
NetBackup version 8.0 with no upgrades applied would be entered as
800000.
Removing NetBackup server and client software 168
Removing NetBackup from UNIX and Linux servers and clients
These files are created with the command bpnbat -LoginMachine. If you
plan to reinstall NetBackup on the same computer at a later date, do one
of the following:
■ Preserve the certificates in the vxss/credentials directory.
■ If you do not preserve the certificates, you must provide the computer
identity password as originally set on the Root+AB broker. As an
alternative, you can reset the password on the Root+AB broker when
you reinstall.
For more information on Root+AB brokers, see the .NetBackup Security
and Encryption Guide
Removing NetBackup server and client software 169
About NetBackup server software removal on Windows systems
For more information on NetBackup Access Control and how to remove it,
see the NetBackup Security and Encryption Guide.
Note: As part of the removal of the NetBackup server software, the security
certificates are automatically deleted. If you want to retain the certificates, please
save them before removing NetBackup.
More information about this topic is available. Please refer to the information on
retaining host ID-based certificates when reinstalling NetBackup in the
NetBackupSecurity and Encryption Guide.
Note: After an uninstall, some registry and some directory information remain
on a Windows computer. This behavior is by design, as these files may be in
use by either the NetBackup Authentication Service or the NetBackup
Authorization Service.
See “Removing NetBackup server and client software from Windows servers,
clusters, and clients” on page 169.
3 On the Control Panel window, select the appropriate utility for installed
programs and applications. .
4 In the Currently Installed Programs list, click Veritas NetBackup .
5 Click Change. This action lets you modify, repair, or remove NetBackup.
6 On the Program Maintenance dialog box, select Remove.
7 Clear the check mark next to Remove all NetBackup Configuration, Catalog,
and Log files to disable this function. (The box is checked by default.)
8 Click Next.
9 If you enabled NetBackup Access Control, NetBackup placed several files on
clients and servers. These files can be divided into the following categories:
Individual user (cache) files User cache files exist in their home directories, as
follows:
user\Local Settings\Application
Data\VERITAS\NetBackup
user\Local Settings\Application
Data\VERITAS\NetBackup\pc.comp.com
user\Local Settings\Application
Data\VERITAS\NetBackup\dhcp
These files are created with the command bpnbat
-LoginMachine. If you plan to reinstall NetBackup on
the same computer at a later date, do one of the
following:
Note: This step is necessary only if you upgraded to version 8.2 from a previous
or earlier version of NetBackup.
USERPROFILE_DIR\Veritas\Java\JAVA_VERSION
Example:
On a Windows 2008 system with the 8.0 NetBackup Java Console previously
installed, and a local user profile policy, the Java Console state folder exists at
%LOCALAPPDATA%\Veritas\Java\800000.
Note: Unless otherwise indicated, all commands are issued from the inactive node
Reference 176
About the NetBackup answer file
MEDIA_SERVER Client No
MERGE_SERVERS_LIST Client No
RBAC_DOMAIN_NAME Master No
RBAC_DOMAIN_TYPE Master No
RBAC_PRINCIPAL_NAME Master No
RBAC_PRINCIPAL_TYPE Master No
SERVICES Client No
WEBSVC_GROUP Master No
WEBSVC_USER Master No
ACCEPT_REVERSE_CONNECTION
■ Description: Use this option to identify how a NAT client connects with a
NetBackup host. Accepted values are TRUE and FALSE. Set this option to TRUE
if NetBackup needs to support NAT, otherwise set it to FALSE. Set
ACCEPT_REVERSE_CONNECTION = FALSE if:
AUTHORIZATION_TOKEN
CA_CERTIFICATE_FINGERPRINT
CLIENT_NAME
■ Description: This option specifies the name that NetBackup uses to identify this
computer. The XLOCALHOSTX value lets the local host provide the computer
name. If this value is used, it may be possible to use the same answer file on
all computers within a single master server domain. This value is added to the
bp.conf file.
If CLIENT_NAME is specified on upgrade, a check is made to validate that the
name that is provided in the answer file matches the value that is configured in
the bp.conf file.
■ Default value: None.
■ Required: Yes
■ CLIENT_NAME=name | XLOCALHOSTX
ECA_CERT_PATH
■ Description: This option specifies the path and the file name of the external
certificate file.
Reference 181
About the NetBackup answer file
To skip setting up the certificate authority, set all required ECA_ values to SKIP.
Be aware that if you continue with the installation without a certificate authority,
the backups and restores fail.
The ECA_CERT_PATH option is ignored on upgrade if ECA is already configured
on the host or if NBCA only is in use on the master server.
■ Default value: None.
■ Required: Review About security configuration considerations for details.
■ ECA_CERT_PATH=path_and_file_name
ECA_CRL_CHECK_LEVEL
■ Description: This option specifies the CRL mode. Supported values are:
■ USE_CDP: Use the CRL defined in the certificate.
■ SKIP: Used to skip setting up the certificate authority. To skip the ECA
configuration, you must set all required ECA_ values to SKIP. Be aware that
if you continue with the installation without a certificate authority, the backups
and restores fail.
The ECA_CERT_PATH option is ignored on upgrade if ECA is already configured
on the host or if NBCA only is in use on the master server.
ECA_CRL_PATH
■ Description: This option specifies the path and the file name of the CRL
associated with the external CA certificate.
To skip setting up the certificate authority, set all required ECA_ values to SKIP.
Be aware that if you continue with the installation without a certificate authority,
the backups and restores fail.
The ECA_CERT_PATH option is ignored on upgrade if ECA is already configured
on the host or if NBCA only is in use on the master server.
■ Default value: None.
Reference 182
About the NetBackup answer file
ECA_KEY_PASSPHRASEFILE
■ Description: This option specifies the path and the file name of the file that
contains the passphrase to access the keystore.
The ECA_CERT_PATH option is ignored on upgrade if ECA is already configured
on the host or if NBCA only is in use on the master server.
■ Default value: None.
■ Required: No
■ ECA_KEY_PASSPHRASEFILE=path/filename
ECA_PRIVATE_KEY_PATH
■ Description: This option specifies the path and the file name of the file
representing the private key.
To skip setting up the certificate authority, set all required ECA_ values to SKIP.
Be aware that if you continue with the installation without a certificate authority,
the backups and restores fail.
The ECA_CERT_PATH option is ignored on upgrade if ECA is already configured
on the host or if NBCA only is in use on the master server.
■ Default value: None.
■ Required: Review About security configuration considerations for details.
■ ECA_PRIVATE_KEY_PATH=path/filename
ECA_TRUST_STORE_PATH
■ Description: This option specifies the path and the file name of the file
representing the trust store location.
To skip setting up the certificate authority, set all required ECA_ values to SKIP.
Be aware that if you continue with the installation without a certificate authority,
the backups and restores fail.
The ECA_CERT_PATH option is ignored on upgrade if ECA is already configured
on the host or if NBCA only is in use on the master server.
■ Default value: None.
Reference 183
About the NetBackup answer file
INSTALL_PATH
■ Description: This option specifies the location to install the NetBackup binaries.
Only the absolute path to a base directory is required for this option. The installer
automatically appends /openv. This option cannot be used to change the location
of NetBackup during an upgrade.
Be aware that the INSTALL_PATH option is ignored on upgrade.
■ Default value: /usr
■ Required: No
■ INSTALL_PATH = path
LICENSE
■ Description: This option specifies the license key string to apply to the server.
Additional LICENSE = key_string lines may be added if more licenses are to
be applied. This option only adds additional keys - no existing keys are removed.
■ Default value: None.
■ Required: Yes.
■ LICENSE = key_string
MACHINE_ROLE
■ Description: This option specifies the NetBackup role to install and configure on
this computer. For upgrades, this value must match the configured role on the
computer.
■ Default value: None. Supported values are MASTER, MEDIA, and CLIENT.
■ Required: Yes.
■ MACHINE_ROLE = MASTER | MEDIA | CLIENT
MEDIA_SERVER
■ Description: This option specifies that NetBackup may use the named host to
tunnel secure web requests for this client. A tunnel is required when
communication between the client and the NetBackup Web Service on the
master server is blocked. This communication is required to obtain a host
certificate during the NetBackup installation or upgrade. Multiple MEDIA_SERVER
entries may exist in the answer file. Each one is used as a candidate to tunnel
https requests. These entries are added to the bp.conf file.
■ Default value: None.
■ Required: No.
■ MEDIA_SERVER=media_server_name
MERGE_SERVERS_LIST
■ Description: Merge the servers present in bp.conf on the master with the server
list contained in this client's bp.conf.
■ Default value: NO
■ Required: No.
■ MERGE_SERVERS_LIST = yes | no
RBAC_DOMAIN_NAME
■ Description: This option specifies the domain name of the principal that is
configured to have the role-based access control (RBAC) permissions for the
security administrator and backup administrator roles.
■ Default value: None.
■ Required: No
■ RBAC_DOMAIN_NAME = domain_name
RBAC_DOMAIN_TYPE
■ Description: This option specifies the domain type of the principal that is
configured to have the role-based access control (RBAC) permissions for the
security administrator and backup administrator roles.
■ Default value: None.
Reference 185
About the NetBackup answer file
■ Required: No
■ RBAC_DOMAIN_TYPE = domain_type
RBAC_PRINCIPAL_NAME
■ Description: This option specifies the name of the principal that is configured to
have the role-based access control (RBAC) permissions for the security
administrator and backup administrator roles. This user or the user group must
already exist on the system.
■ Default value: None.
■ Required: No
■ RBAC_PRINCIPAL_NAME = principal_name
RBAC_PRINCIPAL_TYPE
■ Description: This option specifies the type of the principal that is configured to
have the role-based access control (RBAC) permissions for the security
administrator and backup administrator roles.
■ Default value: None.
■ Required: No
■ RBAC_PRINCIPAL_TYPE = USER | USERGROUP
SERVER
■ Description: This option specifies the server name this computer recognizes as
the current NetBackup master server. Additional SERVER= lines may be added
if there are other servers that should be recognized. In the case where multiple
SERVER= lines are present, the first occurrence is the master server. These
entries are added to the bp.conf file.
■ Default value: None.
■ Required: Yes.
■ SERVER=master_server_name
SERVICES
WEBSVC_GROUP
■ Description: This option specifies the group name of the account that the
NetBackup web server uses. This group must already exist on the system.
■ Default value: nbwebgrp
■ Required: No.
■ WEBSVC_GROUP=custom_group_account_name
WEBSVC_USER
■ Description: This option specifies the user name of the account that the
NetBackup web server uses. This user must already exist on the system.
■ Default value: nbwebsvc
■ Required: No.
■ WEBSVC_USER=custom_user_account_name
Note: RBAC bootstrapping provides access to all objects for the specified user or
user group, even if previously the user or the user group had restricted access to
certain objects. For example, the existing user Tester1 was assigned the backup
administrator role with access to only some object groups. If Tester 1 is specified
for RBAC bootstrapping, Tester1 is assigned both the backup administrator and
the security administrator roles with access to all objects.
After installation or upgrade, you can run the bpnbaz -AddRBACPrincipal command
standalone on both Windows and UNIX platforms to assign RBAC permissions.
The command is available only on the master server. For more information about
this command, see the NetBackup Command Reference Guide.
RBAC_DOMAIN_NAME = domain_name
RBAC_PRINCIPAL_NAME = principal_name
Be aware that RBAC_DOMAIN_TYPE supports the values shown: NT, VX, UNIXPWD,
LDAP.
RBAC bootstrapping is not performed if all the entries are empty or missing. In this
case, the message Answer file did not contain any RBAC entries is posted
in the install trace file. The install process always continues whether the RBAC
bootstrapping is successful or not. The audit records are created under the
SEC_CONFIG category.
The installer also displays this message if the user or the user group already exists
with the security administrator and the backup administrator RBAC roles.
Reference 188
NetBackup master server web server user and group creation
If one or more RBAC entries exist in the answer file, but a required answer file entry
is missing, the installer displays the following message:
Warning: Unable to configure the RBAC permissions. One or more
required fields are missing in /tmp/NBInstallAnswer.conf.
If there are other issues with the RBAC Bootstrapping, the installer displays the
following message:
Warning: Failed to configure the RBAC permissions for principal_name.
Refer to logs in /usr/openv/netbackup/logs/admin for more information.
If RBAC bootstrapping is successful but auditing fails, the install displays the
following message:
After the installation or upgrade completes, the specified user or user group is
assigned both the security administrator and the backup administrator roles with
their corresponding RBAC access permissions. The user can then access APIs
and the Web UI.
Note: For security purposes, do not create web server users or groups with
administrator or superuser privileges.
You can use numerous procedures to create users and groups in operating systems.
Some specific approaches are shown, but other methods may accomplish the same
goal. The home directory path, user name, and group names are not hard-coded,
and can be changed. The default local user name is nbwebsvc, and the default local
group name is nbwebgrp. The user and group must have sufficient permissions to
run daemons.
More information about this topic is available.
Reference 189
NetBackup master server web server user and group creation
See “Installation and upgrade requirements for UNIX and Linux” on page 32.
Please be aware of the operating system-specific account and group requirements:
■ In UNIX and Linux clustered environments, make sure that the local accounts
are defined consistently on all cluster nodes. The UID must be the same for
each local account. You can use LDAP accounts on UNIX.
■ For Windows clustered master servers, you must use a domain account. You
can use a domain account for non-clustered environments, but it is not required.
■ For Windows clustered master servers, you must use a domain group.
The NetBackup Master Server installation fails if any of these requirements are not
met. On Windows, you are asked to provide the password for the user account as
part of the installation process.
Note: If the password associated with the web server account expires after initial
configuration, NetBackup provides no notification the password has expired. This
behavior is normal and expected, as the operating system manages the account
and the password.
As long as the web server remains active, the account and the web server continue
to operate normally.
When the web server is restarted, or if you attempt to restart the nbwmc service, the
service fails to start, due to the expired password. Navigate to the appropriate area
in the operating system, supply the correct password, and restart the service.
More information about the web services account and group is available. See the
Veritas NetBackup Security and Encryption Guide and the section on the web
services account.
To create the local user account and the local group:
1 Create a local group.
■ Linux and UNIX: # groupadd nbwebgrp
■ Windows: C:\>net localgroup nbwebgrp /add
3 (Conditional) For Windows only, make the user a member of the group:
C:\>net localgroup nbwebgrp nbwebsvc /add
4 (Conditional) For Windows only, grant the Log on as a service right to the
user:
■ Go to Control Panel > Administrative Tools > Local Security Policy.
■ Under Security Settings, click Local Policies > User Rights Assignment.
■ Right-click on Log on as a service and select Properties
■ Add the local user. The default local user name is nbwebsvc.
■ Save your changes and close the Properties dialog for Log on as a
service.
Note: You cannot use this utility to update the JRE for the NetBackup Plug-in for
VMware vCenter.
If your system is running NetBackup 8.0 or later, use Table 10-2 to determine the
location of the nbcomponentupdate utility.
Reference 191
About the NetBackup Java Runtime Environment
UNIX or /usr/openv/java/nbcomponentupdate
Linux
UNIX or SYMCOpsCenterServer/bin/nbcomponentupdate
Linux
Caution: Do not stop the utility while the JRE update is in progress. This action
can cause the product that uses the JRE, such as NetBackup, to become unstable.
If there are additional versions of the JRE installed on your system for other
applications, the NetBackup JRE does not interfere with them. The NetBackup JRE
does not provide integration with web browsers and does not allow Java Applets
or Web Start to run. For that reason, the NetBackup JRE cannot be used in a
browser-based attack that uses Java Applet or Web Start vulnerabilities.
More information about NetBackup JRE alerts is available.
http://www.veritas.com/docs/TECH50711
7.7 and later 1.1 Provides 7-mode support One master server supports MS-Windows, Standard,
for all NetBackup 7.7 many OCUM servers. NDMP, VMware, Oracle
Replication Director
The plug-in must be installed on
features.
the OnCommand Unified
Manager (OCUM) server.
1.1 P1 Provides 7-mode support One master server supports MS-Windows, Standard,
for all NetBackup 7.7 many OCUM servers. NDMP, VMware, Oracle
Replication Director
features.
2.0 Provides cDOT support. One master server supports MS-Windows, Standard,
many OCUM servers. NDMP, VMware, Oracle
Note: You must upgrade the entire NetBackup environment before upgrading the
plug-in. Upgrade all master servers, media servers, clients, and any hosts which
communicate with the plug-in.
Reference 194
Using NetApp disk arrays with Replication Director
NFS/CIFS
iSCSI/FC
iSCSI/FC
NetApp OnCommand Unified Manager
NBUPlugin for 7-mode
SnapMirror
SnapVault
NFS/CIFS
NBUPlugin for cDOT
(Linux or Windows)
Cluster 1 Cluster 2
SnapMirror
SVM1 SVM1
SnapVault
SVM2 SVM2
SVM3 SVM3
C-mode Secondary
4 16GB 10,000 20
8 32GB 20,000 50
A backup policy
about backup types 151
Backup Policy Wizard 151 create 151
client installation 97 Backup Policy Wizard
client installation on Linux 112 about 151
client installation on UNIX 112 backup types
client installation on Windows 98 backup policy 151
license key entry 28 barcode rules
Linux client installation methods 113 cleaning media 150
NetBackup 8.x Upgrade Portal 154 bp.conf file
NetBackup catalog backup configuration 150 installation script 37
NetBackup Linux client removal 157 bpplclients command 139
NetBackup Remote Administration Console for create client list 139
Windows 95
NetBackup server configuration 144 C
NetBackup UNIX client removal 157 catalog backup configuration
preinstall checker 11 NetBackup wizards 150
push client software 59 certificates. See security certificates
remote installation methods for Linux clients 132 cleaning media
remote installation methods for UNIX clients 132 barcode rules 150
startup and shutdown scripts 142 client installation
storage device configuration 14 about 97
UNIX and Linux installation requirements 32 methods for Linux 113
UNIX client installation methods 113 methods for UNIX 113
Veritas Services and Operations Readiness methods for Windows 99
Tools 18 client installation methods
Windows client installation methods 99 for remote Linux clients 132
Windows client system requirements 99 for remote UNIX clients 132
about NetBackup removal client installation on Linux
on UNIX systems 156 about 112
access control client installation on UNIX
remove files 172 about 112
adding Linux clients 135 client installation on Windows
adding UNIX clients 135 about 98
authentication certificates. See security certificates client software
install locally on Windows 101
B client type software
backup install on master server 60
online, hot catalog 150 client_config script 134
backup policies
guidelines for creating 151
Index 199
clients D
about remote installation methods for Linux define
clients 132 storage units 149
about remote installation methods for UNIX device configuration
clients 132 guidelines 148
adding after initial install 135 NetBackup wizards 147
loading onto server 135 Domain Name Service (DNS) 34
pushing software to 135
upgrading after server upgrades 137
cluster
F
private network 84 frequently asked questions
Cluster Administrator console license keys 29
verify Windows cluster installation or upgrade 87
cluster group G
configuration 84 Getting Started
install new 83 NetBackup wizards 144
cluster group name 83 guidelines
cluster installation and upgrade configure catalog backup 150
requirements 69 device configuration 148
cluster installations for creating backup policies 151
post-installation tasks 86 robot inventory 150
cluster installations or upgrades standalone drive inventory 150
verify Windows 87 gunzip command
commands UNIX client installation 112
bpplclients 139 gzip command
compatibility UNIX client installation 112
NetBackup-Java 113
configuration H
master and media servers 144
hosts file 34
NetBackup servers 144
how to install
configuration guidelines
sequence for new installations 10
NetBackup Enterprise servers 144
how to start
configure
NetBackup Administration Console 146
cluster group 84
NetBackup catalog backup 150
NetBackup storage devices 147 I
NetBackup volumes 149 install
Windows client 111 multiple versions of NetBackup Administration
configure catalog backup Console, on Windows 94
guidelines 150 multiple versions of NetBackup Administration
configure storage devices Console, restrictions and guidelines 94
for the operating system 14 NetBackup Administration Console 93
continue installation NetBackup Remote Administration Console 96
after master server installation 45 new cluster group 83
create install locally
backup policy 151 client software on Windows 101
create client list install locally on Windows
bpplclients command 139 server software 71
Index 200
W
web server
user account 12