NetBackup812 InstallGuide
NetBackup812 InstallGuide
Installation Guide
Release 8.1.2
21317387
Veritas NetBackup™ Installation Guide
Last updated: 2018-09-21
Legal Notice
Copyright © 2018 Veritas Technologies LLC. All rights reserved.
Veritas, the Veritas Logo, and NetBackup are trademarks or registered trademarks of Veritas
Technologies LLC or its affiliates in the U.S. and other countries. Other names may be
trademarks of their respective owners.
This product may contain third-party software for which Veritas is required to provide attribution
to the third party (“Third-party Programs”). Some of the Third-party Programs are available
under open source or free software licenses. The License Agreement accompanying the
Software does not alter any rights or obligations you may have under those open source or
free software licenses. Refer to the Third-party Legal Notices document accompanying this
Veritas product or available at:
https://www.veritas.com/about/legal/license-agreements
The product described in this document is distributed under licenses restricting its use, copying,
distribution, and decompilation/reverse engineering. No part of this document may be
reproduced in any form by any means without prior written authorization of Veritas Technologies
LLC and its licensors, if any.
The Licensed Software and Documentation are deemed to be commercial computer software
as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19
"Commercial Computer Software - Restricted Rights" and DFARS 227.7202, et seq.
"Commercial Computer Software and Commercial Computer Software Documentation," as
applicable, and any successor regulations, whether delivered by Veritas as on premises or
hosted services. Any use, modification, reproduction release, performance, display or disclosure
of the Licensed Software and Documentation by the U.S. Government shall be solely in
accordance with the terms of this Agreement.
Technical Support
Technical Support maintains support centers globally. All support services will be delivered
in accordance with your support agreement and the then-current enterprise technical support
policies. For information about our support offerings and how to contact Technical Support,
visit our website:
https://www.veritas.com/support
You can manage your Veritas account information at the following URL:
https://my.veritas.com
If you have questions regarding an existing support agreement, please email the support
agreement administration team for your region as follows:
Japan CustomerCare_Japan@veritas.com
Documentation
Make sure that you have the current version of the documentation. Each document displays
the date of the last update on page 2. The latest documentation is available on the Veritas
website:
https://sort.veritas.com/documents
Documentation feedback
Your feedback is important to us. Suggest improvements or report errors or omissions to the
documentation. Include the document title, document version, chapter title, and section title
of the text on which you are reporting. Send feedback to:
NB.docs@veritas.com
You can also see documentation information or ask a question on the Veritas community site:
http://www.veritas.com/community/
https://sort.veritas.com/data/support/SORT_Data_Sheet.pdf
Contents
■ Host ID-based certificate is not deployed during installation on 8.1 media server
or client host with dual stack configuration
Preparing for installation 9
About Veritas Smart Meter
Caution: Smart Meter is compatible with Google Chrome, Mozilla Firefox, and
Microsoft Edge. Veritas does not recommend using Microsoft Internet Explorer, as
does not render all information correctly.
Note: For UNIX and Linux platforms, the UID must be the same for each local
account in a clustered environment. Be sure that the local accounts are defined
consistently on all cluster nodes.
Preparing for installation 12
Creating the user account to support the NetBackup web server
To create the user account and the user group on UNIX or Linux
1 Create the local group with the command shown:
Command: # groupadd group_name
Example: # groupadd nbwebgrp
2 Create the local user account with the command shown:
Command: # useradd -g group_name -c comment -d /usr/openv/wmc
user_name
Installation of the NetBackup master server fails if any of these requirements are
not met. On Windows, you are asked to provide the password for the user account
as part of the installation process.
Media server
Silent UNIX and Not a valid installation method. See “Install and upgrade of the
Linux UNIX and Linux client binaries with
native installers” on page 106.
SFTP
Password-less SSH
Veritas recommends that you review the End of Support Life information available
online.
https://sort.veritas.com/eosl
See “About NetBackup software availability” on page 21.
Table 1-2
Procedure Details
Create a Veritas Account on the SORT See “To create a Veritas Account on the
webpage SORT page” on page 16.
Create generic installation reports See “To create a generic installation checklist”
on page 17.
CAPTCHA text Enter the displayed CAPTCHA text. If necessary, refresh the
image.
4 Click Submit.
5 When you receive your login information, you can log into SORT and begin
uploading your customized information.
To create a generic installation checklist
1 In your web browser, navigate to:
https://sort.veritas.com/netbackup
2 Find and select the Installation and Upgrade Checklist widget.
3 Specify the requested information
Product version you Select the correct version of NetBackup. The most current
are installing or version is always shown at the top of the list.
upgraded to
Product version you For new installations, do not make any selections. For
are upgrading from upgrades, you can select the currently installed version of
(optional) NetBackup.
Preparing for installation 18
Recommended SORT procedures for new installations
13 The utility prompts you to upload the report to the SORT website if you want
to review the report online. The online report provides more detailed information
than the text-based on-system report.
14 When your tasks are finished, you can exit the utility. You have the option to
provide feedback on the tool, which Veritas uses to make improvements to the
tool.
Table 1-3
Procedure Details
Create a Veritas Account on the SORT See “To create a Veritas Account on the
webpage SORT page” on page 16.
Review the future platform and feature plans. See “To review future platform changes and
feature plans” on page 20.
Review the hot fix and emergency
engineering binary release auditor See “To review hot fix and emergency
information. engineering binary information” on page 21.
Hot fix of EEB Shows the hot fix or EEB number that was entered on the
Identifier previous screen.
New installations Before you install NetBackup, Veritas recommends that you
install and configure your devices with the latest version of
drivers.
Preparing for installation 22
About storage device configuration
Connections and settings To prepare and connect new devices, perform the following
tasks:
NetBackup installation After all storage devices are installed, configured, and verified
to work with the operating system, you can install NetBackup.
Warning: An improperly configured device can lead to backup failures, data loss,
or both.
See “Installation and upgrade requirements for UNIX and Linux” on page 33.
See “Installation and upgrade requirements for Windows and Windows clusters”
on page 53.
Before you proceed with any installation procedure, be sure to review the installation
requirements.
See “Installation and upgrade requirements for UNIX and Linux” on page 33.
See “Installation and upgrade requirements for Windows and Windows clusters”
on page 53.
■ UNIX
In the installation trace file in the following path:
/usr/openv/tmp
■ Windows
In the following directory:
%ALLUSERSPROFILE%\Veritas\NetBackup\InstallSummary\
See “About Veritas Services and Operations Readiness Tools” on page 15.
NetBackup provides two types of NetBackup host security certificates: Host ID-based
certificates and host name-based certificates. Host ID-based certificates are based
on Universally Unique Identifiers (UUID) that are assigned to each NetBackup host.
The NetBackup master server assigns these identifiers to the hosts.
Any security certificates that were generated before NetBackup 8.0 are now referred
to as host name-based certificates. NetBackup is in the process of replacing these
older certificates with newer host ID-based certificates. The transition will be
completed in future releases and the use of host name-based certificates will be
eliminated. However, the transition is ongoing and the current NetBackup version
continues to require the older host name-based certificates for certain operations.
Workaround: Manually deploy the host ID-based certificate to the 8.1 host after the
installation. Refer to the article shown:
https://www.veritas.com/support/en_US/article.000127129
Chapter 2
NetBackup licenses
This chapter includes the following topics:
List of NetBackup licenses This list includes all of the licenses for the products that you
purchased ordered.
Serial number for access to Use this serial number to download the Electronic Software
download NetBackup Distribution (ESD) images for NetBackup product installation.
products
Go to the following website and enter this serial number to
download the ESD images to your system:
http://my.veritas.com
NetBackup licenses 28
About license key entry
When you install NetBackup, Veritas recommends that you enter all other product
licenses on the master server when you are prompted. Although you can add these
licenses later, it is easier to enter them when you install the master server software.
For detailed information on how to administer NetBackup licenses, refer to the
NetBackup Administrator’s Guide, Volume I.
http://www.veritas.com/docs/DOC5332
After NetBackup master server or media server installation, use the following
command:
/usr/openv/netbackup/bin/admincmd/get_license_key
Note: You can log on to a NetBackup server from almost any server in a system
to view, enter, and administer licenses. When you administer licenses remotely,
make sure that you view the licenses of the system you intend to change. You do
not want to add or change a license on the wrong server.
Table 2-2
Question Answer
Is the license system for NetBackup uses a common license system that other Veritas
NetBackup the same as the products also use. Please remember, however, that the
license system in other common license system provides flexibility in the license
Veritas products? features that each product implements. For example,
NetBackup does not have a node-locked license system, but
some other products do.
What does the license key The key is a serial number (for example:
look like? What information xxxx-xxxx-xxxx-xxxx-xxxx-xxx). The key contains
does it contain? information on the following:
Is the license key serialized? Yes, serialization information is embedded in the key.
NetBackup licenses 30
Frequently asked questions about license keys
Question Answer
Can I see reports on what Yes. Information about license keys is stored on the master
license keys I have? server.
/usr/openv/netbackup/bin/admincmd/get_license_key
http://www.veritas.com/docs/DOC5332
How do I enable options and When you install NetBackup, you are prompted to enter the
agents? license keys for all options and agents.
/usr/openv/netbackup/bin/admincmd/get_license_key
Should I save license keys Yes. Always store copies of your license keys in a secure
after they have been entered? place.
What should I do if I have lost Veritas has a record of all license keys that are issued to
my license key(s)? customers. Customers who lose their license key(s) can call
Order Management to get copies of their license keys.
How are large volume orders Many NetBackup installations are very large, and the license
handled? keys are long. License keys that you enter multiple times can
be time-consuming. You can request a single license key for
each type of NetBackup component you purchase. For
example, you can obtain one license key for use with 50
Oracle agents. Site licenses enable unrestricted use for
specific NetBackup agents or options.
Question Answer
What about license keys for Site licenses are handled much like large volume orders are.
customers with site licenses? The certificate for a site license states that the license key is
good for unlimited copies.
Can a license key be used Yes. You can use your license keys multiple times. You are,
multiple times? however, legally bound to install and use only the number of
NetBackup servers, clients, agents, and options for which
you purchase licenses.
How do existing customers All NetBackup customers who have current maintenance
get license keys? contracts with Veritas automatically receive the latest version
of NetBackup. You receive the NetBackup media kit and
license keys for every component for which you purchased
licenses.
What if I do not get the right If you believe that you received an incorrect license key,
license keys? contact Order Management using the number on your license
key certificate. Technical support does not issue permanent
license keys. You can obtain license keys only through Order
Management. Technical support can provide temporary
one-month license keys to you while issues regarding
permanent license keys are resolved.
Am I notified when an To find out when a license key expires, open the NetBackup
evaluation is about to expire? Administration Console and select Help > License Keys.
/usr/openv/netbackup/bin/admincmd/get_license_key
What happens when an The NetBackup services or daemons are shut down. When
evaluation license expires? you attempt to use the product you are informed that its
evaluation period has expired.
NetBackup licenses 32
Frequently asked questions about license keys
Question Answer
Does NetBackup save the Yes. Customers who add a permanent license to an
backup configuration and evaluation version of NetBackup have immediate access to
catalog information when their catalog information and configuration information.
evaluation license expire?
How do I upgrade from an It is easy. When you purchase a permanent license, you add
evaluation license to a that license to NetBackup. All the configuration information
permanent license? and catalog data from your evaluation version is retained.
/usr/openv/netbackup/bin/admincmd/get_license_key
Chapter 3
Installing server software
on UNIX systems
This chapter includes the following topics:
Note: NetBackup version 8.1.2 does not support installation of a master or a media
server on an HP-UX or AIX platform.
Installing server software on UNIX systems 34
Installation and upgrade requirements for UNIX and Linux
Table 3-1 NetBackup installation and upgrade requirements for UNIX and
Linux
Operating ■ For a complete list of compatible UNIX and Linux operating systems, refer to the
System Software Compatibility List (SCL) at the following website:
http://www.netbackup.com/compatibility
https://sort.veritas.com/netbackup
Memory ■ Master servers in a production environment with several database agents enabled
should have a minimum of 16 GB of memory and four cores each.
■ Media servers in a production environment with several database agents enabled
should have a minimum of 4 GB of memory each.
Disk space ■ The exact amount of space that is required depends on the hardware platform. More
information about this topic is available.
NetBackup Release Notes for 8.1.2
http://www.veritas.com/docs/DOC5332
■ NetBackup catalogs contain information about your backups that become larger as
you use the product. The disk space that the catalogs require depends primarily on
the following aspects of your backup configuration:
■ The number of files that are backed up.
■ The frequency of your backups.
■ The amount of time that you set to retain your backup data.
If space is an issue, you can install NetBackup on an alternate file system. The installation
lets you select an alternate install location, and creates the appropriate link from
/usr/openv.
Note: The value for disk space is for initial installation only. The NetBackup catalog
requires considerably more space once the master server is placed in a production
environment.
Installing server software on UNIX systems 35
Installation and upgrade requirements for UNIX and Linux
Table 3-1 NetBackup installation and upgrade requirements for UNIX and
Linux (continued)
General ■ Ensure that the gzip and the gunzip commands are installed on the local system.
requirements The directories where these commands are installed must be part of the root user’s
path environment variable setting.
■ All NetBackup installation ESD images, appropriate licenses, and the root password
for all servers.
■ A server of a supported hardware type that runs a supported version of its operating
system (with applicable patches), adequate disk space, and supported peripherals.
For details on these requirements, refer to the NetBackup Release Notes.
http://www.veritas.com/docs/DOC5332
■ All NetBackup servers must recognize and be recognizable by their client systems.
In some environments, this means that each must be defined in the other’s
/etc/hosts file. Other environments may use the Network Information Service (NIS)
or Domain Name Service (DNS).
■ The minimum screen resolution configuration is 1024x768, 256 colors.
Clustered ■ Ensure that each node in the NetBackup cluster can run the ssh command or its
systems equivalent. The root user must be able to perform a remote logon to each node in
the cluster without entering a password. This remote logon is necessary for installation
and configuration of the NetBackup server and any NetBackup agents and options.
After installation and configuration are complete, it is no longer required.
■ You must install, configure, and start the cluster framework before you install
NetBackup.
■ You must have defined a virtual name using DNS, NIS, or the /etc/hosts file. The
IP address is defined at the same time. (The virtual name is a label for the IP address.)
■ Begin the upgrade from the active node, and then upgrade the inactive nodes.
http://www.veritas.com/docs/DOC5332
NFS Veritas does not support installation of NetBackup in an NFS-mounted directory. File
compatibility locking in NFS-mounted file systems can be unreliable.
http://www.veritas.com/docs/DOC5332
Red Hat Linux For Red Hat Linux, NetBackup requires server networking.
Installing server software on UNIX systems 36
Installation and upgrade requirements for UNIX and Linux
Table 3-1 NetBackup installation and upgrade requirements for UNIX and
Linux (continued)
Other backup Veritas recommends that you remove any other vendor backup software currently
software configured on your system before you install this product. Other vendor backup software
can negatively affect how NetBackup installs and functions.
Web Services Beginning with NetBackup 8.0, the NetBackup master server includes a configured
Tomcat web server to support critical backup operations. This web server operates under
user account elements with limited privileges. These user account elements must be
available on each master server (or each node of a clustered master server). You must
create these required account elements before installation. More information is available:
See “NetBackup master server web server user and group creation” on page 165.
Note: Veritas recommends that you save the details of the user account that you use
for the NetBackup Web Services. A master server recovery requires the same NetBackup
Web Services user account and credentials that were used when the NetBackup catalog
was backed up.
Note: If the NetBackup PBX is running in secure mode, please add the web service
user as authorized user in PBX. More information about determining PBX mode and how
to correctly add users is available.
http://www.veritas.com/docs/000115774
By default, the UNIX installation script attempts to associate the web server with user
account nbwebsvc and group account nbwebgrp. You can override these default values
with the NetBackup installation answer file. You must populate the NetBackup installation
answer file on the target host before you start the UNIX installation script. Populate the
NetBackup installation answer file with custom web server account names as shown.
2 Open the file /tmp/NBInstallAnswer.conf with your preferred text editor. Create the
file if it does not exist.
3 Override the default web server user account name by adding the line shown:
WEBSVC_USER=custom_user_account_name
4 Override the default web server group account name by adding the line shown:
WEBSVC_GROUP=custom_group_account_name
Table 3-1 NetBackup installation and upgrade requirements for UNIX and
Linux (continued)
Customer Beginning with NetBackup 8.1.2, you must specify a Customer Registration Key for
Registration Key Veritas Smart Meter. More information about Veritas Smart Meter is available:
for Veritas Smart
See “About Veritas Smart Meter” on page 9.
Meter
During install and upgrade to NetBackup 8.1.2, please allow the installer to copy the
veritas_customer_registration_key.json file to its final destination. NetBackup
can set the file permission and ownership correctly through this process. If you place the
file onto your systems outside of the install or the upgrade process, the process may not
work correctly.
Note: Be aware that NetBackup does not support the short file name format (8.3 format)
for the customer registration key file name.
■ Encryption
■ Informix
■ VxUpdate agent
■ Lotus Notes
■ Oracle
■ SAP
■ Snapshot Client
■ Sybase
After installation is complete, a valid license key for each option must be entered
to enable its functionality. Each option must also be configured as needed.
In addition to server software and options, the installation script performs the
following tasks:
Automatic startup and Adds the automatic startup and shutdown scripts to the
shutdown scripts appropriate directories on the various supported platforms.
PBX If the computer where you install NetBackup does not already
have PBX and the platform supports it, the installation script
installs PBX.
If PBX already exists on the computer, the installation script
performs one of the following tasks:
Designate master server Designate the computer that you want to be the master server
and install the master server software on that computer first.
EMM server You must configure EMM on the master server. All master
servers must have their own EMM configuration. Remote
EMM or shared EMM is no longer supported.
http://www.veritas.com/docs/DOC5332
Customer Registration Key Beginning with NetBackup 8.1.2, you must specify a
for Veritas Smart Meter Customer Registration Key for Veritas Smart Meter. More
information about Veritas Smart Meter is available:
5 If you need to perform a disaster recovery of your master server, select Y when
prompted. Press Enter for the default N.
Do you want to do a disaster recovery on this master server? [y/n]
(n)
The disaster recovery process requires additional steps and information that
is not covered in this manual. More information is available.
Veritas NetBackup Troubleshooting Guide
Installing server software on UNIX systems 42
Installing NetBackup master server software on UNIX
6 When the following question appears, enter the fully qualified path that contains
your customer registration key.
Please enter the fully qualified path containing your customer
registration key file, or enter q to quit the install script.
During install and upgrade to NetBackup 8.1.2, please allow the installer to
copy the veritas_customer_registration_key.json file to its final
destination. NetBackup can set the file permission and ownership correctly
through this process. If you place the file onto your systems outside of the
install or the upgrade process, the process may not work correctly.
7 For the NetBackup installation location, enter the appropriate platform
information as follows:
■ When the following question appears, press Enter to accept the default
(y).
11 Verify or enter the correct computer name when prompted by the following
message:
Note: Incorrect information for the domain name results in failures during the
configuration of Authentication Broker and NetBackup Access Controls. To
correct this problem, use the bpnbaz -configureauth command to configure
Authentication Broker. More information about the bpnbaz -configureauth
command is available.
Veritas NetBackup Commands Reference Guide
http://www.veritas.com/docs/DOC5332
12 Identify or verify the master server by answering the following question when
it appears:
■ To accept the displayed name (which is the name that you identified in the
previous step), press Enter.
■ If you entered a virtual name for the server in the previous step, the
installation script presents the following question:
If the answer is yes, press y and answer the series of cluster configuration
questions that appear.
If the answer is no, press n.
13 Identify whether there are any media servers for this master server by answering
the following question when it appears:
■ If there are no media servers for this master server, press Enter and
proceed to the next step.
■ If there are media servers for this master server, type y and enter the name
of each media server.
When you enter the media server names, you must enter the computer
name and the domain name. For example:
alpha.domain.com
Where alpha is the computer name and domain.com is the domain name.
The media server names that you enter here are added to the bp.conf file
on the master server, automatically. After you install the media server
software later, the master server can then communicate with the media
servers immediately.
■ To add a media server to an existing and an operational NetBackup
environment, you cannot use the procedures in this guide. For complete
details on how to add a media server to an existing and an operational
NetBackup environment, see the NetBackup Administrator's Guide, Volume
II.
http://www.veritas.com/docs/DOC5332
14 When the following message appears, press Enter and accept the default
name of the EMM server. You must configure EMM on the master server. All
master servers must have their own EMM configuration. Remote EMM or
shared EMM is no longer supported.
16 For a clustered NetBackup master server, repeat these steps on every node
on which you want to run NetBackup.
17 (Conditional) On a clustered NetBackup master server, you must obtain the
Certificate Authority certificate and the host certificate for each inactive node.
More information is available:
See “Generate a certificate on the inactive nodes of a clustered master server”
on page 162.
18 (Conditional) If you use cloud storage in your NetBackup environment, you
must update your cloud configuration file. More information is available.
See “Update cloud configuration file on the master server immediately after
install or upgrade to NetBackup 8.1.2” on page 140.
19 After your initial installation is complete, you can install any other NetBackup
add-on products (such as language packages).
Designate media Designate the computers that you want to be media servers and
servers install the media server software on them.
EMM server The EMM server must be installed and running before you install
media server software.
License keys When you install NetBackup media server software, you must enter
a NetBackup product license. You must also enter a license for any
additional NetBackup product options or agents that are used on
the server or its clients. These additional licenses must be entered
on each media server.
For more information on how to administer NetBackup licenses,
see the NetBackup Administrator's Guide, Volume I.
http://www.veritas.com/docs/DOC5332
Note: If you make and save any license changes in the
NetBackup-Administration Console, you must restart the console.
IBMzSeries RedHat These platforms are supported for use as media servers only.
and IBMzSeries SUSE
CA Certificate You must know the CA Certificate fingerprint of the master server
fingerprint at time of installation. More information is available about the details
on the CA Certificate fingerprint and its role in generation of security
certificates.
https://www.veritas.com/support/en_US/article.000127129
Installing server software on UNIX systems 47
Installing NetBackup media server software on UNIX
https://www.veritas.com/support/en_US/article.000127129
4 Indicate if the current computer is the master server by answering the following
question when it appears:
5 Verify or enter the correct computer name when prompted by the following
message:
Note: Incorrect information for the domain name results in failures during the
configuration of Authentication Broker and NetBackup Access Controls. To
correct this problem, use the bpnbaz -configureauth command to configure
Authentication Broker. More information about the bpnbaz -configureauth
command is available.
Veritas NetBackup Commands Reference Guide
http://www.veritas.com/docs/DOC5332
6 Identify the name of the master server when prompted with this question:
What is the fully qualified name of the master server?
If the master server is clustered, enter the virtual name of the master server.
7 For the NetBackup installation location, enter the appropriate platform
information as follows:
■ When the following question appears, press Enter to accept the default
(y).
Be aware if you press Ctrl+C, this action requires you to rerun the installation
or continue with the installation without the required security components. If
these security components are absent, backups and restores fail.
9 When prompted, review the fingerprint information and confirm that it is
accurate.
Master server [master_name] reports CA Certificate fingerprint
[fingerprint]. Is this correct? [y/n] (y)
After you confirm the fingerprint information, the installer stores the certificate
authority certificate details.
Storing CA certificate.
Depending on the network, this action may take a few minutes. To
continue without setting up secure communication, press Ctrl+C.
Be aware if you press Ctrl+C, this action requires you to rerun the installation
or continue with the installation without the required security components. If
these security components are absent, backups and restores fail.
Installing server software on UNIX systems 50
Installing NetBackup media server software on UNIX
10 After the Certificate Authority certificate is stored, the installer fetches the host
certificate.
Be aware if you press Ctrl+C, this action requires you to rerun the installation
or continue with the installation without the required security components. If
these security components are absent, backups and restores fail.
11 (Conditional) If prompted for the Authorization Token, please enter it.
An authorization token is required in order to get the host
certificate for this host. At the prompt, enter the authorization
token or q to skip the question. NOTE: The answer entered will
not be displayed to the terminal.
4 Select all of the client types that you want to install and follow the installation
prompts.
Chapter 4
Installing server software
on Windows systems
This chapter includes the following topics:
Operating ■ Make sure that you have applied the most current operating system patches and
system updates. If you are not certain that your operating system is current, contact your
operating system vendor and request the latest patches and upgrades.
■ For a complete list of compatible Windows operating systems, refer to the Software
Compatibility List (SCL) at the following website:
http://www.netbackup.com/compatibility
Memory ■ Master servers in a production environment with several database agents enabled
should have a minimum of 32 GB of memory and four cores each.
■ Media servers in a production environment with several database agents enabled
should have a minimum of 4 GB of memory each.
Installing server software on Windows systems 55
Installation and upgrade requirements for Windows and Windows clusters
Note: The value for disk space is for initial installation only. The NetBackup catalog
requires considerably more space once the master server is placed in a production
environment.
General Make sure that you have all of the following items:
requirements
■ NetBackup installation ESD images
■ Appropriate license keys
■ Administrator account and password for all servers
■ Screen resolution configured for at least 1024x768, 256 colors.
Note: To install NetBackup on Windows 2008 Server, Windows 2008 R2 Server, Windows
2012 R2, Windows 2012 UAC-enabled, and Windows Server 2016 environments, you
must log on as the official administrator. Users that are assigned to the Administrators
Group and are not the official administrator cannot install NetBackup in UAC-enabled
environments. To allow users in the Administrators Group to install NetBackup, disable
UAC.
Installing server software on Windows systems 56
Installation and upgrade requirements for Windows and Windows clusters
Remote and
cluster
installations
Installing server software on Windows systems 57
Installation and upgrade requirements for Windows and Windows clusters
In addition to all previously stated installation requirements, the following guidelines apply
to remote installations and cluster installations:
■ All nodes in the cluster must run the same operating system version, service pack
level, and NetBackup version. You cannot mix versions of server operating systems.
■ The installation account must have administrator privileges on all remote systems or
on all nodes in the cluster.
■ The source system (or primary node) must run Windows 2008/2008 R2
Server/Windows 2012/2012 R2/Windows 2016.
For Windows 2008 R2, clusters are only supported on Enterprise and Data Center
editions and not Standard edition.
■ The destination PC (or clustered nodes) must have Windows 2008/2008 R2/Windows
2012/2012 R2/Windows 2016.
■ The Remote Registry service must be started on the remote system.
The NetBackup installer can enable and start the Remote Registry service on the
remote system. If the Remote Registry service is not started, the installation receives
the following error message:
Attempting to connect to server server_name failed with the
following error: Unable to connect to the remote system. One
possible cause for this is the absence of the Remote Registry
service. Please ensure this service is started on the remote
host and try again.
■ NetBackup virtual name and IP address
Have the virtual name and IP address for NetBackup available. You must provide
this information during installation.
■ Cluster support changes for media servers
You cannot perform a new installation of a clustered media server.
■ Windows Server Failover Clusters (WSFC)
■ The shared disk that the NetBackup Group uses must already be configured in
the cluster and online on the active node.
■ Install NetBackup from the node with the shared disk (that is, the active node).
■ Computer or host names cannot be longer than 15 characters.
■ Cluster server (VCS) clusters:
All NetBackup disk resources must be configured in Veritas Enterprise Administrator
(VEA) before you install NetBackup.
■ Cluster node device configuration and upgrades
When you upgrade clusters, the ltid and the robotic daemons retrieve the device
configuration for a particular cluster node from the EMM database. The cluster node
name (provided by gethostname) stores or retrieves the device configuration in the
EMM database. The cluster node name is used when any updates are made to the
Installing server software on Windows systems 58
Installation and upgrade requirements for Windows and Windows clusters
device configuration, including when ltid updates the drive status. The cluster node
name is only used to indicate where a device is connected. The NetBackup virtual
name is employed for other uses, such as the robot control host.
http://www.veritas.com/docs/DOC5332
Remote You must provide the names of the Remote Administration Console hosts during master
Administration server installation.
Console host
names
NetBackup Make sure that your network configuration allows all servers and clients to recognize and
communication communicate with one another.
Generally, if you can reach the clients from a server by using the ping command, the
setup works with NetBackup.
■ NetBackup services and port numbers must be the same across the network.
■ Veritas suggests that you use the default port settings for NetBackup services and
Internet service ports. If you modify the port numbers, they must be the same for all
master servers, media servers, and clients. The port entries are in the following file:
%SYSTEMROOT%\system32\drivers\etc\services. To change the default
settings, you must perform a custom installation of NetBackup or manually edit the
services file.
CIFS-mounted Veritas does not support installation of NetBackup in a CIFS-mounted directory. File
file systems locking in CIFS-mounted file systems can be unreliable.
Storage devices Devices such as robots and standalone tape drives must be installed according to the
manufacturers’ instructions and recognized by the Windows software.
Server names When you are prompted for server names, always enter the appropriate host names. Do
not enter IP addresses.
Mixed versions Make sure to install NetBackup servers with a release level that is at least equal to the
latest client version that you plan to use. Earlier versions of server software can encounter
problems with later versions of client software.
Installations on You can only install NetBackup on these computers with the silent installation method.
Windows
See “Installing NetBackup servers silently on Windows systems” on page 78.
2008/2008 R2
Server Core,
2012/2012 R2
Server
Core/Windows
2016
Other backup Remove any other vendor’s backup software currently configured on your system. The
software backup software of another vendor can negatively affect how NetBackup installs and
functions.
Web Services Beginning with NetBackup 8.0, the NetBackup master server includes a configured
Tomcat web server to support critical backup operations. This web server operates under
user account elements with limited privileges. These user account elements must be
available on each master server (or each node of a clustered master server). More
information is available:
See “NetBackup master server web server user and group creation” on page 165.
Note: Veritas recommends that you save the details of the user account that you use
for the NetBackup Web Services. A master server recovery requires the same NetBackup
Web Services user account and credentials that were used when the NetBackup catalog
was backed up.
Note: If the NetBackup PBX is running in secure mode, please add the web service
user as authorized user in PBX. More information about determining PBX mode and how
to correctly add users is available.
http://www.veritas.com/docs/000115774
https://www.veritas.com/support/en_US/article.000127129
https://www.veritas.com/support/en_US/article.000127129
Installing server software on Windows systems 60
Requirements for Windows cluster installations and upgrades
Customer Beginning with NetBackup 8.1.2, you must specify a Customer Registration Key for
Registration Key Veritas Smart Meter. More information about Veritas Smart Meter is available:
for Veritas Smart
See “About Veritas Smart Meter” on page 9.
Meter
During install and upgrade to NetBackup 8.1.2, please allow the installer to copy the
veritas_customer_registration_key.json file to its final destination. NetBackup
can set the file permission and ownership correctly through this process. If you place the
file onto your systems outside of the install or the upgrade process, the process may not
work correctly.
Note: Be aware that NetBackup does not support the short file name format (8.3 format)
for the customer registration key file name.
See “Installation and upgrade requirements for UNIX and Linux” on page 33.
Item Requirement
NetBackup virtual name and Have the virtual name and IP address for NetBackup
IP address available. You must provide this information during
installation.
Operating system on nodes All clustered nodes must use the same operating system
version, service pack level, and NetBackup version. You
cannot run mixed server versions in a clustered environment.
Installing server software on Windows systems 61
Performing local, remote, or clustered server installation on Windows systems
Item Requirement
Cluster support changes for Clustered media servers are not supported.
media servers
Cluster Server (VCS) clusters ■ All NetBackup disk resources must be configured in
Veritas Enterprise Administrator (VEA) before you install
NetBackup.
Cluster node device When you upgrade clusters, the ltid and the robotic
configuration and upgrades daemons retrieve the device configuration for a particular
cluster node from the EMM database. The cluster node name
(provided by gethostname) stores or retrieves the device
configuration in the EMM database. The cluster node name
is used when any updates are made to the device
configuration, including when ltid updates the drive status.
The cluster node name is only used to indicate where a
device is connected. The NetBackup virtual name is employed
for other uses, such as the robot control host.
2 Navigate to the directory where the images reside and run Browser.exe to
start the NetBackup Installation Wizard .
Installing server software on Windows systems 62
Performing local, remote, or clustered server installation on Windows systems
Click Next.
9 On the NetBackup License Key and Server Type screen, provide the following
information:
Installing server software on Windows systems 63
Performing local, remote, or clustered server installation on Windows systems
License Key Enter the product license that you received with your
product.
NetBackup Master Server Click this icon to install master server software.
NetBackup Media Server For local or remote installations, click this icon to install
media server software.
Disaster Recovery Master Select this option to perform a disaster recovery of your
Server master server. The disaster recovery process requires
additional steps and information that is not covered in
this manual. More information is available.
10 On the Customer Registration Key screen, enter the location of the Customer
Registration Key. You download this file from the Veritas Smart Meter site and
place the file on the appropriate master server. More information about Veritas
Smart Meter is available.
See “About Veritas Smart Meter” on page 9.
During install and upgrade to NetBackup 8.1.2, please allow the installer to
copy the veritas_customer_registration_key.json file to its final
destination. NetBackup can set the file permission and ownership correctly
through this process. If you place the file onto your systems outside of the
install or the upgrade process, the process may not work correctly.
11 On the NetBackup Web Services screen, specify the account type and the
account details.
See “Installation and upgrade requirements for Windows and Windows clusters”
on page 53.
12 (Conditional) This step applies only to the local installations that are Custom.
For Typical installations, skip to the next step.
This step describes how to select and configure the NetBackup Installation
Folder, NetBackup Port Numbers, and the NetBackup Services.
■ NetBackup Installation Folder
On this screen, you can select where the NetBackup files are installed.
C:\Program Files\VERITAS
To change the folder destination where NetBackup is
installed:
■ Click Change.
■ Browse to the preferred location and designate a
new or an existing folder.
■ Click Next.
Click Next.
■ NetBackup Port Numbers
On this screen, you can change port numbers, if it is necessary in your
configuration.
You may need to change a port number if you encounter conflicts when
NetBackup and another industry product try to share the same port. Another
example is if a port conflict occurs with a firewall, which may cause security
issues.
To change a port number, select the port number that you want to replace
and type the new number.
Click Next.
■ NetBackup Services
On this screen, provide the following startup account and startup type
information for NetBackup services:
Installing server software on Windows systems 66
Performing local, remote, or clustered server installation on Windows systems
Safe Abort Option This option determines how the installation proceeds
if a restart is required as part of the installation.
Click Next.
Installing server software on Windows systems 67
Performing local, remote, or clustered server installation on Windows systems
Master Server Name (Conditional) For local master server installations, enter
the name of the local computer. For a cluster installation,
enter the cluster virtual server name.
Media Server Name This field appears only for local NetBackup Enterprise
media server installations.
Click Next.
14 After you confirm you want to continue, the installer fetches the certificate
authority certificate details. You have the option to click Cancel to halt this
action. Be aware if you click Cancel, this action requires you to rerun the
installation or continue with the installation without the required security
components. If these security components are absent, backups and restores
fail.
Installing server software on Windows systems 68
Performing local, remote, or clustered server installation on Windows systems
Browse Click here to search the network for the hosts where
you want to install NetBackup.
■ On the Available Systems dialog box, select
the computer to add and click Next.
■ On the Remote Computer Login Credentials
dialog box, enter the User Name and the
Password of the account to be used to perform
the installation on the remote computers.
■ If you plan to install to multiple remote
computers, click the box next to Remember
User Name and Password. Selecting this option
prevents the need to enter this information for
each remote computer.
■ Click OK.
■ On the Remote Destination Folder dialog box,
verify or change the Destination Folder where
NetBackup is installed.
The default location is C:\Program
Files\Veritas.
If you plan to install to multiple remote computers
and you want to use the same location, click the
box next to Use this folder for subsequent
systems. Selecting this option prevents the need
to enter the location for each remote computer.
Domain\ComputerName
Installing server software on Windows systems 70
Performing local, remote, or clustered server installation on Windows systems
■ Click Next.
■ On the Remote Computer Login Credentials dialog box, enter the user
name, password, and domain that NetBackup is to use on the remote
system(s).
If you intend to add more remote computers, click the check box next to
Remember user name and password.
When you provide credentials, you select cluster nodes and add them to
the Windows Destination Systems list. These are the nodes on which
you remotely install NetBackup. Make sure that you select your local host
when you select systems to install.
Each time you choose a system, NetBackup performs system and license
checks. For example, it verifies the system for a server installation that
matches the type that you selected, as follows:
■ Invalid combination Notifies you of the problem and disallows the choice.
One example of an invalid combination is to try to install
a Remote Administration Console on a remote system
that is already a master server.
■ Remote system not a Notifies you of the problem and disallows the choice.
supported platform or
level
The installation procedure also verifies that you have proper administrator
credentials on the remote system. If you do not have administrator
credentials, the Enter Network Password screen appears, and prompts
you to enter the administrator’s user name and password.
Click OK and continue selecting destination systems.
This process repeats for each node that you select. You can elect to retain the
user name and password. In that case, you are prompted only when the user
name or password is not valid.
Note the following about the push-install process in a clustered environment:
■ You can install NetBackup on any number of nodes. However, the clustering
service sets the limit for the number of nodes in a cluster, not NetBackup.
■ Language packages and other NetBackup add-on products cannot be
installed with the push method. Add-on products must be installed on each
individual node in the cluster group. For instructions on how to install these
products, refer to the NetBackup documentation that supports each product.
Installing server software on Windows systems 72
Performing local, remote, or clustered server installation on Windows systems
■ NetBackup pushes to the other nodes only the license keys you enter at
the beginning of the installation. Your license keys may enable add-on
products. If you push NetBackup to nodes that have an add-on product
already installed, your key works for that product.
Click Next.
20 (Conditional) For cluster installations only:
On the Cluster Settings screen, you provide the virtual and the physical
network information.
Note: You can add only one virtual IP address during installation. If your virtual
name can resolve into more than one IP address, you can add multiple IP
addresses after the installation using the bpclusterutil -addIP option. More
information about the bpclusterutil command is available.
NetBackup Commands Reference Guide
http://www.veritas.com/docs/DOC5332
For new installations, the following configuration settings that you enter apply
to all nodes:
Create a new Cluster For new cluster installations, select this option.
Group
NB Cluster Group Name The name that is used to identify a NetBackup service group
or resource group. The resources in any resource group are
related and interdependent.
Virtual Host Name The name by which NetBackup is known in the cluster.
When you install the client software, this host name must
be added to the Additional Servers field on the NetBackup
System Names screen.
Path to Shared Data A directory on one of the shared disks in the cluster where
NetBackup stores configuration information. If the letter for
the disk (or drive) does not appear in the pull-down list, enter
only the letter.
Cluster Configuration After you set all of the parameters, click this icon to configure
the cluster for use with NetBackup. The Next icon is not
available until after successful cluster configuration.
The text box provides the following information about the
configuration:
■ Identifies any existing clusters or NetBackup cluster
groups.
■ Indicates a successful configuration.
■ Identifies any problems or errors that occurred during
the configuration (configuration failure).
http://www.veritas.com/docs/DOC5332
Installing server software on Windows systems 74
Performing local, remote, or clustered server installation on Windows systems
Note: Veritas recommends that you review the summary screen for any warning
messages. You can prevent installation and upgrade issues if you resolve any
problems before you continue the installation.
View installation log file The installation log file provides detailed installation
information and shows whether any errors occurred.
%ALLUSERSPROFILE%\Veritas\
NetBackup\InstallLogs\
Note: When you perform a remote or a cluster
installation to multiple computers, this option only lets
you view the log for the local computer. Each computer
that you selected for installation contains its own
installation log file. To view the log file of a remote
computer, open a Windows Explorer window and enter
\\<COMPUTERNAME>.
Obtain certificates You must obtain the Certificate Authority certificate and the
host certificate for each inactive node. More information is
available:
Restart You may need to restart each of the cluster nodes after the
installation is complete.
Installing server software on Windows systems 77
Verifying Windows cluster installations or upgrades
WSFC and VCS clusters Under normal circumstances, cluster configuration is one of
the final steps when you install NetBackup in a cluster. If this
step is not done or does not complete successfully, you can
use the bpclusterutil command from the active node to
perform this step.
http://www.veritas.com/docs/DOC5332
WSFC clusters Any NetBackup resources that you took offline come back
online automatically.
Note: For Windows 2008 Server Core systems, you can only install NetBackup
with this procedure.
REBOOT="ReallySuppress"
■ SET CA_CERTIFICATE_FINGERPRINT=fingerprint
You must know the CA Certificate fingerprint of the master server at time
of installation. More information is available about the details on the CA
Certificate fingerprint and its role in generation of security certificates.
https://www.veritas.com/support/en_US/article.000127129
■ SET AUTHORIZATION_TOKEN=token
In some cases, the installer requires an authorization token to successfully
deploy security certificates. More information is available about the details
on authorization tokens and their role in generation of security certificates.
https://www.veritas.com/support/en_US/article.000127129
■ SET SMART_METER_FILE_PATH=path
Installing server software on Windows systems 80
Installing NetBackup servers silently on Windows systems
You must specify the path to the Veritas Smart Meter customer registration
key. More information is available. See “About Veritas Smart Meter”
on page 9.
After all server software is installed, you are ready to install client software.
See “About NetBackup client installation” on page 88.
Chapter 5
About the administrative
interfaces
This chapter includes the following topics:
authentication. See the NetBackup Web UI Security Administrator's Guide for more
information.
■ Create access rules for all users that require access to NetBackup.
■ Delegate the task of creating access rules to another user.
Create an access rule for that user with the role of Security administrator.
This user can then create rules for all users that require access to the
NetBackup web UI.
Root or administrator access is no longer needed for the web UI once you have
delegated one or more users as a NetBackup security administrator.
https://sort.veritas.com/eosl
Note: Veritas recommends that after you install or upgrade NetBackup server
software, you should uninstall older versions of the Remote Administration Console
(Windows and Java) present on the host. If the native NetBackup Administration
Console for Windows is present, it is automatically uninstalled when you install or
upgrade the NetBackup server software.
http://www.veritas.com/docs/DOC5332
Console version location You must install each console version to a different folder.
About the administrative interfaces 85
Removing earlier versions of the NetBackup Administration Console on Windows
computer. The computer that runs the NetBackup Remote Administration Console
does not require NetBackup software.
The following is a brief description of the NetBackup Remote Administration Console
operation:
■ The console lets you perform all NetBackup operations exactly like the
NetBackup Administration Console on a local NetBackup server. You can create
backup policies, manage volumes, view status, monitor tape drives, and perform
other operations.
■ The console displays the name of the server it administers, rather than a local
host name.
■ The console can only administer other NetBackup servers. It cannot act as a
master or a media server.
■ Specify an alternate installation location for the new version of the console.
7 On the Ready to Install the Program screen, review the Installation Summary
and click Install.
8 On the Installation Complete screen, click Finish.
9 To open the console, click Start > Programs > Veritas NetBackup >
NetBackup Version Administration Console.
Note: NetBackup includes an administration console for all the supported versions
of NetBackup. More information about supported versions of NetBackup is available.
https://sort.veritas.com/eosl
UNIX or Linux A NetBackup UNIX or Linux server can only push client
software to UNIX or Linux clients.
Note: Additional steps are required to deploy clients in a secure environment where
the clients do not have direct connectivity to the master server. More information
on this topic is available. See the topic on deploying certificates on clients without
connectivity to the master server in the Veritas NetBackup Security and Encryption
Guide.
Note: All scripts must be stored and run locally. One recommendation is that scripts
should not be world-writable. Scripts are not allowed to be run from network or
remote locations. Any script that is created and saved in the NetBackup db_ext
(UNIX) or dbext (Windows) location needs to be protected during a NetBackup
uninstall.
For more information about registering authorized locations and scripts, review the
knowledge base article:
http://www.veritas.com/docs/000126002
For more information about your specific database agent, review the documentation
for that agent:
http://www.veritas.com/docs/DOC5332
Client installation restrictions You cannot install NetBackup client software on the
computers that currently have NetBackup server software.
In these cases, you must first remove the NetBackup server
software.
User permissions ■ By default on Windows 2008, 2008 R2, 2012, 2012 R2,
and 2016 Server systems, only administrators have write
permission to the Program Files directory.
■ NetBackup writes log files and progress files to the
following location:
Program Files\Veritas\NetBackup\Logs
To perform backups and restores with the Backup,
Archive, and Restore interface, users must have write
permission to the Logs directory. Users without write
permission to this directory receive an error message,
and the backup or restore is canceled. The administrator
account has write permission by default, but you must
ensure that other users also have write permission.
Local installation To install NetBackup client The installation wizard installs the
software locally, the system must client software only on the
meet the following configuration computer where you run the
requirements: installation.
Remote installation To install NetBackup client The installation wizard scans the
software remotely, the system must network for available clients where
meet the following configuration you can install the client software.
requirements:
The source computer must run
■ All the requirements for local Windows 2008, 2008 R2, 2012, or
installations must be met. 2016 Server.
■ The source system must run
Also, a remote installation requires
Windows 2008, 2008 R2, 2012, system administrator privileges.
2012 R2, or 2016 Server.
■ Administrator privileges are
Note: You cannot install clients
required for the user that remotely from NetBackup Windows
performs remote installations. servers to UNIX computers.
■ Remote Registry service must
See “Installing NetBackup
be started on the remote Windows clients locally or
system. remotely” on page 92.
If the Remote Registry service
is not started, the installation
receives this error message:
Client name entries During installation, the client name is written to the registry
in lowercase. For backups to work, the policies on the
NetBackup server must specify the client names in lowercase.
Note: After client installation, you may need to restart the system for the changes
to take effect. A message appears to alert you if a restart is necessary.
7 On the License Agreement screen, accept the terms of the agreement and
click Next.
8 On the Veritas NetBackup Client Installation Type screen, provide the
following information:
Click Next.
9 (Conditional) This step applies only to local Custom installations.
On the Veritas NetBackup Client Destination Folder screen, you can select
where the NetBackup files are installed.
C:\Program Files\VERITAS
To change the folder destination where NetBackup is
installed:
■ Click Change.
■ Browse to the preferred location and designate a
new or an existing folder.
■ Click Next.
Click Next.
11 On the NetBackup Services screen, provide the following startup account
and startup type information for NetBackup client services:
Safe Abort Option This option determines how the installation proceeds if
a restart is required as part of the installation or upgrade.
12 On the NetBackup System Names screen, the following fields are populated
automatically. Changes are not normally required. Except for the Client Name,
you can make changes as needed for your configuration.
Additional Servers Enter all of the master server and media server names
that you want this client to access.
13 After you confirm you want to continue, the installer fetches the certificate
authority certificate details. You have the option to click Cancel to halt this
action. Be aware if you click Cancel, this action requires you to rerun the
installation or continue with the installation without the required security
components. If these security components are absent, backups and restores
fail.
14 On the Confirm the CA fingerprint screen, select I recognize the fingerprint
for this host. Proceed with the certificate deployment. if the fingerprint
displayed is one you recognize and trust. Click Next to continue.
If you do not recognize or trust the displayed fingerprint, select Proceed without
the certificate deployment.
After you confirm the fingerprint information, the installer stores the certificate
authority certificate details. You have the option to click Cancel to halt this
action. Be aware if you click Cancel, this action requires you to rerun the
installation or continue with the installation without the required security
components. If these security components are absent, backups and restores
fail.
Installing NetBackup client software 96
About NetBackup client installation on Windows
15 After the Certificate Authority certificate is stored, the installer deploys the host
certificate. You have the option to click Cancel to halt this action. Be aware if
you click Cancel, this action requires you to rerun the installation or continue
with the installation without the required security components. If these security
components are absent, backups and restores fail.
16 (Conditional) If prompted by the Authorization Token screen, enter the security
token.
Please enter an authorization token
The token format is 16 upper case letters. Alternatively, you can also select
the Proceed without providing a security token option. When the option is
selected, this warning is shown:
In some environments, failure to provide a security token can result in
failed backups. Contact your backup administrator if you have questions.
After you enter a security token, you have the option to click Cancel to halt the
deployment of the host certificate. Be aware if you click Cancel, this action
requires you to rerun the installation or continue with the installation without
the required security components. If these security components are absent,
backups and restores fail.
If this installation is a remote installation, the specification of an authorization
token is optional. Contact your backup administrator to determine if authorization
tokens are required for your environment.
17 On the Veritas NetBackup Remote Hosts screen, specify the hosts where
you want NetBackup installed.
■ Destination Systems
Right-click the Windows Destination Computers icon and select from the
drop-down menu , or use the following icons:
Installing NetBackup client software 97
About NetBackup client installation on Windows
Browse Click here to search the network for the hosts where
you want to install NetBackup.
■ On the Available Systems dialog box, select
the computer to add and click Next.
■ On the Remote Computer Login Credentials
dialog box, enter the User Name and the
Password of the account to be used to perform
the installation on the remote computers.
■ If you plan to install to multiple remote
computers, click the box next to Remember
User Name and Password. Selecting this option
prevents the need to enter this information for
each remote computer.
■ Click OK.
■ On the Remote Destination Folder dialog box,
verify or change the Destination Folder where
NetBackup is installed.
The default location is C:\Program
Files\Veritas.
If you plan to install to multiple remote computers
and you want to use the same location, click the
box next to Use this folder for subsequent
systems. Selecting this option prevents the need
to enter the location for each remote computer.
Domain\ComputerName
Installing NetBackup client software 98
About NetBackup client installation on Windows
■ Click Next.
18 On the Ready to Install the Program screen, review the Installation Summary
that shows your selections from the previous steps.
Note: Veritas recommends that you review the summary screen for any warning
messages. You can prevent installation and upgrade issues if you resolve any
problems before you continue the installation.
■ Click Back to view the previous screens and make any changes, then return
to this screen and click Install.
■ Click Cancel to cancel the installation.
After you click Install, the installation process begins and a screen appears
that shows you the installation progress. This process may take several minutes.
Up to five remote installations occur simultaneously. When a remote installation
is completed, another one begins so that a maximum of five installations are
in progress.
If you click Cancel after you click Install, the installation does not stop
immediately. Installation continues on all remote hosts where the installation
has already started. Any specified hosts after that point do not get client
software installed.
NetBackup considers any remote installations that were completed when you
clicked Cancel to be successful.
19 On the Installation Complete screen, click Finish.
Examine the installation log on the following location:
%ALLUSERSPROFILE%\Veritas\NetBackup\InstallLogs\
Note: When you perform a remote installation to multiple computers, this option
only lets you view the log for the local computer. Each computer that you
selected for installation contains its own installation log file. To view the log file
of a remote computer, open a Windows Explorer window, enter
\\COMPUTERNAME, and navigate to the InstallLogs directory.
Silent installations of NetBackup clients are not supported if you want to run the
NetBackup services as a user instead of a local administrator.
To install NetBackup with a custom services account, refer to the following topics:
See “Installing NetBackup Windows clients locally or remotely” on page 92.
Use the following procedure to perform a silent installation of a local NetBackup
client.
To perform a silent installation of NetBackup client software on Windows
1 Navigate to the location where the ESD images (downloaded files) reside.
2 Copy the contents of the directory shown to a temporary folder on your hard
drive. For example, C:\temp.
x64
3 Since the original source files are read-only, change the permissions for the
copied files on the hard drive to allow the update.
4 In the temporary directory, use a text editor to edit the silentclient.cmd file
so the script installs the client software as needed.
5 Run the silentclient.cmd script.
6 To verify that the installation was successful, check the installation log file in
the following directory:
%ALLUSERSPROFILE%\Veritas\NetBackup\InstallLogs
To add servers or media ■ Start the Backup, Archive, and Restore interface.
servers: ■ Click File > Specify NetBackup Machines.
To display and change the ■ Start the Backup, Archive, and Restore interface.
client properties: ■ Click File > NetBackup Client Properties.
UNIX/Linux package Many of the add-on products and database agents are now
consolidation installed with the NetBackup client package. Separate
installation for these products is no longer needed.
The following products are now included in the NetBackup
8.1.2 client package (if the platform supports the product):
The binaries for the listed products are laid down with the
client package. A valid license is still required to enable the
product. If product configuration was required previously
(such as db2_config), configuration is still required.
gzip and gunzip The gzip and the gunzip commands must be installed on
commands each system. The directories where the commands are
installed must be part of the root user’s PATH environment
variable setting.
Installing NetBackup client software 102
About NetBackup client installation on UNIX/Linux
http://www.netbackup.com/compatibility
Note: If a client is listed in the Client Selections for Backup
Policies section of the SCL but not in the NetBackup
Administration Consoles section, the client is supported for
backup and restore, but it does not support any of the
available graphical interfaces.
Local installations ■ This method installs the client software on the computer
where you run the installation script.
■ To install clients to a location other than the default, you
must create and link a directory before you install the
client software. First create the directory where you want
the software to reside, then create /usr/openv as a link
to that directory.
■ On IBM zSeries and IBM pSeries Linux clients, you must
transfer the NetBackup ESD image contents to a location
that is readable by the virtual Linux environment. You can
transfer the image with NFS mounting commands.
Remote (push) installations ■ You can "push" the client software from your UNIX/Linux
NetBackup server to your UNIX/Linux client computers.
The UNIX/Linux client must be a true client and not a
media server or a master server. The preferred installation
method is to push the client software.
■ Before you can push to a UNIX/Linux client, you must first
install the NetBackup client type software on the server.
Then, you must create a policy that includes the client
name.
http://www.veritas.com/docs/DOC5332
See “Installing client type software on a master server”
on page 51.
■ You cannot install Windows client software remotely from
a NetBackup UNIX/Linux server.
■ Firewalls can prevent remote client installation.
■ Clients such as the IBM zSeries and the IBM pSeries
Linux may not have access to the ESD images. In these
cases, you must push the client software from a
UNIX/Linux master server or a media server.
■ The following remote installation methods are available:
See “Installing client software with the ssh method”
on page 118.
See “Installing client software with the sftp method”
on page 119.
ESD images (downloaded ■ Navigate to the location where the installation images
files) reside.
■ Enter the following command:
./install
Installing NetBackup client software 104
About NetBackup client installation on UNIX/Linux
Native install tools NetBackup supports the install and upgrade of the UNIX
and Linux client binaries with native installers. More
information is available.
The client binaries represent the operating system versions where the binaries
were compiled. The binaries typically function perfectly on later versions of the
operating system. The installation procedure attempts to load the appropriate
binaries for your system. If the script does not recognize the local operating
system, it presents choices.
3 Type y and press Enter to continue with the software installation.
Do you want to install the NetBackup client software for this
client? [y,n] (y)
4 Type the name of your NetBackup master server and press Enter to continue.
Enter the name of the NetBackup master server:
Installing NetBackup client software 105
About NetBackup client installation on UNIX/Linux
7 After you confirm you want to continue, the installer fetches the certificate
authority certificate details.
Be aware if you press Ctrl+C, this action requires you to rerun the installation
or continue with the installation without the required security components. If
these security components are absent, backups and restores fail.
8 When prompted, review the fingerprint information and confirm that it is
accurate.
Master server [master_name] reports CA Certificate fingerprint
[fingerprint]. Is this correct? [y/n] (y)
After you confirm the fingerprint information, the installer stores the certificate
authority certificate details.
Storing CA certificate.
Depending on the network, this action may take a few minutes. To
continue without setting up secure communication, press Ctrl+C.
Be aware if you press Ctrl+C, this action requires you to rerun the installation
or continue with the installation without the required security components. If
these security components are absent, backups and restores fail.
Installing NetBackup client software 106
About NetBackup client installation on UNIX/Linux
9 After the Certificate Authority certificate is stored, the installer fetches the host
certificate.
Be aware if you press Ctrl+C, this action requires you to rerun the installation
or continue with the installation without the required security components. If
these security components are absent, backups and restores fail.
10 (Conditional) If prompted for the Authorization Token, please enter it.
An authorization token is required in order to get the host
certificate for this host. At the prompt, enter the authorization
token or q to skip the question. NOTE: The answer entered will
not be displayed to the terminal.
The token format is 16 upper case letters. Be aware if you press Ctrl+C, this
action requires you to rerun the installation or continue with the installation
without the required security components. If these security components are
absent, backups and restores fail.
11 Follow the prompts to complete the installation.
Additional information about installation folder restrictions is available.
See “Restrictions on the NetBackup installation directory” on page 10.
12 After the installation is complete, select Exit from this Script.
Install and upgrade of the UNIX and Linux client binaries with native
installers
You can now install and upgrade NetBackup UNIX and Linux clients with native
installers. You can use either the NetBackup install script or your preferred installer
method. This change does not include those clients that use the Debian package.
Those clients must be installed or upgraded with the NetBackup install script.
■ For AIX: lslpp, installp
■ For HP-UX: swlist, swinstall
■ For Linux: rpm, yum, etc.
■ For Solaris: pkginfo, pkgadd
Installing NetBackup client software 107
About NetBackup client installation on UNIX/Linux
To install or upgrade the UNIX or Linux client binaries using native installers:
1 Please create the NetBackup installation answer file (NBInstallAnswer.conf)
in the client /tmp directory. More information about the answer file and its
contents is available.
See “About the NetBackup answer file” on page 163.
2 Populate NBInstallAnswer.conf with the following information:
SERVER=master_server_name
CLIENT_NAME=client_name
CA_CERTIFICATE_FINGERPRINT=fingerprint
SERVER=master_01
CLIENT_NAME=client_101
CA_CERTIFICATE_FINGERPRINT=01:23:45:67:89:AB:CD:EF:01:23:45:67:
89:AB:CD:EF:01:23:45:67
■ SERVICES=no
3 Extract the required client files from the appropriate client package and copy
them to the client computer.
■ Download the CLIENTS1 package for UNIX clients to a system with sufficient
space.
■ Download the CLIENTS2 package for Linux clients to a system with sufficient
space.
■ Extract the contents of the CLIENTS1 or the CLIENTS2 file.
Example:
Installing NetBackup client software 108
About NetBackup client installation on UNIX/Linux
AIX CLIENTS1/NBClients/anb/Clients/usr/openv/netbackup/client/RS6000/AIX6/
HP-UX CLIENTS1/NBClients/anb/Clients/usr/openv/netbackup/client/HP-UX-IA64/HP-UX11.31/
CLIENTS2/NBClients/anb/Clients/usr/openv/netbackup/client/Linux/RedHat2.6.18/
CLIENTS2/NBClients/anb/Clients/usr/openv/netbackup/client/Linux/SuSE3.0.76
CLIENTS2/NBClients/anb/Clients/usr/openv/netbackup/client/
Linux-s390x/IBMzSeriesSuSE3.0.76
CLIENTS2/NBClients/anb/Clients/usr/openv/netbackup/client/
Linux-ppc64le/IBMpSeriesSuSE4.4.21
CLIENTS1/NBClients/anb/Clients/usr/openv/netbackup/client/Solaris/Solaris10/
CLIENTS1/NBClients/anb/Clients/usr/openv/netbackup/client/Solaris/Solaris_x86_10_64/
Installing NetBackup client software 109
About NetBackup client installation on UNIX/Linux
AIX VRTSnbpck.image
VRTSpbx.image.gz
VRTSnbclt.image.gz
VRTSnbjre.image.gz
VRTSnbjava.image.gz
VRTSpddea.image.gz
VRTSnbcfg.image.gz
HP-UX VRTSnbpck.depot
VRTSpbx.depot.gz
VRTSnbclt.depot.gz
VRTSnbjre.depot.gz
VRTSnbjava.depot.gz
VRTSpddea.depot.gz
VRTSnbcfg.depot.gz
Linux VRTSnbpck.rpm
VRTSpbx.rpm
VRTSnbclt.rpm
VRTSnbjre.rpm
VRTSnbjava.rpm
VRTSpddea.rpm
VRTSnbcfg.rpm
Solaris .pkg_defaults
VRTSnbpck.pkg.gz
VRTSpbx.pkg.gz
VRTSnbclt.pkg.gz
VRTSnbjre.pkg.gz
VRTSnbjava.pkg.gz
VRTSpddea.pkg.gz
VRTSnbcfg.pkg.gz
Note: The NetBackup Java Console RPM, VRTSnbjava, is optional. You may
not want to install the NetBackup Java Console on every client in your
environment.
4 (Conditional) For Solaris, HP-UX, and AIX, extract the compressed package
files with the command shown:
gunzip VRTS*.*
VRTSnbpck.pkg
VRTSpbx.pkg
VRTSnbclt.pkg
VRTSnbjre.pkg
VRTSnbjava.pkg
VRTSpddea.pkg
VRTSnbcfg.pkg
5 Install the files in the order that is shown with the command shown:
6 (Conditional) If you do not have the answer file in place or you do not populate
it correctly, you receive the error message shown:
WARNING: There is no answer file present and no valid bp.conf.
Therefore, security configuration is not complete. Manual steps
are required before backups and restores can occur. For more
information:
https://www.veritas.com/support/en_US/article.000127129
For AIX
User attempts to install # installp -ad VRTSnbpck.image all Use the lslpp –L package_name
the binaries on top of command to determine the name of the
package VRTSnbpck.image is already
the same version of the installed package. Uninstall this package and
installed
binaries. then retry the operation.
User attempts to install # installp -ad VRTSnbcfg.image all Refer to the documentation for the correct
the binaries in the image package installation order. More
error: Failed dependencies:
incorrect order. information is also available in the error which
VRTSnbclt >= 8.1.0.0 is needed by lists the dependent packages.
VRTSnbcfg-version-platform
See “To install or upgrade the UNIX or Linux
client binaries using native installers:”
on page 107.
User attempts to install # installp –d VRTSnbclt.image all Use the lslpp –L package_name
an older version of a command to determine the name of the
WARNING:
binary over the top of a installed package. Uninstall this package and
newer version of the file then retry the operation.
binary. /usr/openv/lib/java/nbvmwaretags.jar
from install of
VRTSnbclt-version-platform
conflicts with file from package
VRTSnbclt-version-platform
For HP-UX
User attempts to install # swinstall –s ./VRTSnbpck.depot Use the swlist command to determine the
the binaries on top of name of the installed package. Uninstall this
1 filesets have the selected
the same version of the package and then retry the operation.
revision already installed.
binaries.
User attempts to install # swinstall -s ./VRTSnbcfg.depot Refer to the documentation for the correct
the binaries in the depot package installation order. More
ERROR: "hostname:/": The software
incorrect order. information is also available in the error which
dependencies for 1 products or
lists the dependent packages.
filesets cannot be resolved.
See “To install or upgrade the UNIX or Linux
client binaries using native installers:”
on page 107.
Installing NetBackup client software 114
About NetBackup client installation on UNIX/Linux
User attempts to install # swinstall –s ./VRTSnbclt.depot Use the swlist command to determine the
an older version of a name of the installed package. Uninstall this
WARNING: "hostname:/": 1 filesets
binary over the top of a package and then retry the operation.
have a version with a higher
newer version of the
revision number already installed.
binary.
For Linux
User attempts to install # rpm -U VRTSnbpck.rpm Use the rpm command to determine the name
the binaries on top of of the installed package. Uninstall this
package
the same version of the package and then retry the operation.
VRTSnbpck.rpm-version-platform is
binaries.
already installed
User attempts to install # rpm -U VRTSnbcfg.rpm Refer to the documentation for the correct
the binaries in the RPM installation order. More information is
error: Failed dependencies:
incorrect order. available.
VRTSnbclt >= 8.1.0.0 is needed by
See “To install or upgrade the UNIX or Linux
VRTSnbcfg-version-platform
client binaries using native installers:”
on page 107.
User attempts to install # rpm -U VRTSnbclt.rpm Use the rpm command to determine the name
an older version of a of the installed package. Uninstall this
file
binary over the top of a package and then retry the operation.
/usr/openv/lib/java/nbvmwaretags.jar
newer version of the
from install of
binary.
VRTSnbclt-version-platform
conflicts with file from package
VRTSnbclt-version-platform
For Solaris
Installing NetBackup client software 115
About NetBackup client installation on UNIX/Linux
pkgadd -a .pkg_defaults -d
VRTSnbpck.pkg VRTSnbpck
Installing NB-Pck.
## Installing part 1 of 1.
User attempts to install # pkgadd -a .pkg_defaults -d Refer to the documentation for the correct
the binaries in the VRTSnbclt.pkg VRTSnbclt package installation order. More information
incorrect order. is available.
ERROR: VRTSnbpck >=8.1.0.0 is
required by VRTSnbclt. See “To install or upgrade the UNIX or Linux
checkinstall script suspends client binaries using native installers:”
on page 107.
User attempts to install # pkgadd -a .pkg_defaults -d Use the pkginfo command to determine the
an older version of a VRTSnbclt.pkg VRTSnbclt name of the package that is currently installed.
binary over the top of a Uninstall this package and then retry the
Processing package instance
newer version of the operation.
<VRTSnbclt> from
binary.
</root/80packages/Solaris/
Solaris_x86_10_64/VRTSnbclt.pkg>
(i386) 8.1.0.0
■ ssh
See “Installing client software with the ssh method” on page 118.
■ sftp
See “Installing client software with the sftp method” on page 119.
■ Password-less ssh
See “Installing client software on UNIX clients using password-less ssh method”
on page 120.
Note: For installation in clustered environments, enter the virtual name for the
NetBackup server and not the actual local host name. You can only push client
software from the active node.
SSH daemon (sshd) To use the ssh method, the UNIX client must have sshd
enabled and configured to allow root user logins.
Client software location If you want to install client software to a location other than
the default, you must first create and link the desired directory.
Create the directory where you want the client software to
reside, and then create /usr/openv as a link to that
directory.
Backup policies Make sure that the clients are assigned to a backup policy.
To install client software from a UNIX master server to UNIX clients with the
ssh method
◆ On the NetBackup server, run the install_client_files script.
Use one of the following commands:
■ To move software to only one client at a time:
Installing NetBackup client software 119
About NetBackup client installation on UNIX/Linux
SSH daemon (sshd) To use this method, the UNIX client must have sshd enabled
and configured to allow root or non-root user logins.
Client file location If you want to install client software to a location other than
the default, you must first create and link the desired directory.
Create the directory where you want the software to reside,
and then create /usr/openv as a link to that directory.
Backup policies Make sure that the clients are assigned to a backup policy.
To install client software from a UNIX master server to UNIX clients with the
sftp method
1 To move the client software from the server to the /tmp directory on the client,
run the install_client_files script on the NetBackup server.
Use one of the following commands:
■ To move software to one client at a time:
/usr/openv/netbackup/bin/install_client_files sftp client user
The client is the host name of the client.
The user is the login ID that SSH requires on the client.
■ To move software to all clients at once:
/usr/openv/netbackup/bin/install_client_files sftp ALL user
Installing NetBackup client software 120
About NetBackup client installation on UNIX/Linux
The ALL option specifies that you want to install all clients that are configured
in any backup policy on the server.
The user is the login ID required by the client.
2 After the script runs, the root user on each client computer must run the
following script:
sh /tmp/bp.<pid>/client_config
The pid is the process ID. The client_config script installs the binaries.
Note: If you want to install client software, you cannot click File > Change
Server to get to another master server. The master server must be the server
that you specified in the logon dialog box.
2 Select the master server name at the top of the All Policies middle pane.
Installing NetBackup client software 121
About NetBackup client installation on UNIX/Linux
For more information about how to create an authorization token, refer to the
About Token Management for host ID-based certificates section in the
NetBackup Security and Encryption Guide.
Select the Show Token check box to view details about the authorization token
which you have entered.
5 In the Don’t install these clients box, select the clients in the list that you
want to receive the software. Click Add to move the client names to the Install
these clients box.
6 Click Install Client Software to start the installation.
Client software installation can take a minute or more per client. NetBackup
writes the messages in the Progress box as the installation proceeds. If the
installation fails on a client, NetBackup notifies you but keeps the client in the
policy. You cannot stop the installation once it starts.
During installation, NetBackup performs the following actions:
■ Copies the client software.
■ Copies from the/usr/openv/netbackup/client directory on the server.
■ Copies to the /usr/openv/netbackup directory on the client.
ESD images (downloaded ■ Navigate to the location where the installation images
files) reside.
■ Enter the following command:
./install
Installing NetBackup client software 123
About NetBackup client installation on UNIX/Linux
Native install tools NetBackup supports the install and upgrade of the UNIX
and Linux client binaries with native installers. More
information is available.
The client binaries represent the operating system versions where the binaries
were compiled. The binaries typically function perfectly on later versions of the
operating system. The installation procedure attempts to load the appropriate
binaries for your system. If the script does not recognize the local operating
system, it presents choices.
3 Select the client type that you want to load and follow the prompts to install
that client type. Repeat as necessary until all of the client types you want are
loaded.
Make sure that you load the software for all of the UNIX/Linux client types that
you intend to install remotely from the server.
4 Install the NetBackup client software on the clients you specified.
See “About remote installation methods for UNIX/Linux clients” on page 117.
Installing NetBackup client software 124
About NetBackup client installation on UNIX/Linux
Note: Additional steps are required to deploy clients in a secure environment where
the clients do not have direct connectivity to the master server. More information
on this topic is available. See the topic on deploying certificates on clients without
connectivity to the master server in the Veritas NetBackup Security and Encryption
Guide.
During a client upgrade, the new client files are written to a directory in /tmp on the
client. This directory must have sufficient space to temporarily store the new client
files to ensure a successful upgrade. If sufficient space is not available, a status
message informs you that the upgrade script could not write to the location in the
/tmp directory. To resolve this issue, allocate more space to the /tmp directory and
perform the upgrade procedure again. The temporary directory is removed when
the upgrade is complete.
To upgrade clients after you have upgraded servers
1 Use one of the following methods to start the installation script:
ESD images (downloaded ■ Navigate to the location where the installation images
files) reside.
■ Enter the following command:
./install
Installing NetBackup client software 125
About NetBackup client installation on UNIX/Linux
Native install tools NetBackup supports the install and upgrade of the UNIX
and Linux client binaries with native installers. More
information is available.
The client binaries represent the operating system versions where the binaries
were compiled. The binaries typically function perfectly on later versions of the
operating system. For example, Solaris 10 binaries are also used on the Solaris
11 level of the operating system.
3 Select the client type that you want to load and follow the prompts to load that
client type. Repeat as necessary until all desired client types have been loaded.
Make sure that you load the software for all of the UNIX client types that you
intend to push to from this server. Otherwise, you cannot add these client types
to the NetBackup policy configuration.
4 As a root user on the NetBackup master server, enter the following command
to see whether bprd is running:
/usr/openv/netbackup/bin/bpps
5 Enter the following command to make sure that backups or restores are not in
progress:
/usr/openv/netbackup/bin/admincmd/bpdbjobs
For more than 30 clients, you can divide the list into multiple files and run
update_clients for each file.
cd /usr/openv/netbackup/bin/admincmd
■ Use the bpplclients command to create a file that contains a list of clients
currently configured in the NetBackup database. The options to use on this
command differ depending on whether you push from a master server or
from a media server, as follows:
file Name of the file to contain the list of unique clients. If no clients
have been configured in the NetBackup database, the file is
empty.
hardware os client
Perform this step to change the contents of file. Edit file to contain only
those clients you want to update with NetBackup client software. The host
names of the clients must be the clients’ individual node names. They cannot
be virtual names. The hostname command and the domainname command
return the correct values for the individual node names. The format can be
either hostname or hostname.domainname.
Type either y or n.
Press Enter.
Be aware if you press Ctrl+C, this action requires you to rerun the installation
or continue with the installation without the required security components. If
these security components are absent, backups and restores fail.
If a certificate authority certificate is found, you receive the message shown:
If you leave the authorization token blank, you receive the message shown:
11 After all servers and clients are updated, start the bprd daemon as the root
user on the master server by entering the following command:
/usr/openv/netbackup/bin/initbprd
Chapter 7
Configuring NetBackup
This chapter includes the following topics:
■ Update cloud configuration file on the master server immediately after install or
upgrade to NetBackup 8.1.2
Platform Links
AIX /etc/rc.netbackup.aix
/sbin/rc2.d/S777netbackup ->/sbin/init.d/netbackup
/etc/rc1.d/K01netbackup ->/etc/init.d/netbackup
/etc/rc2.d/S95netbackup ->/etc/init.d/netbackup
/etc/rc.d/rc1.d/K01netbackup
->/etc/rc.d/init.d/netbackup
/etc/rc.d/rc2.d/S77netbackup
->/etc/rc.d/init.d/netbackup
/etc/rc.d/rc3.d/S77netbackup
->/etc/rc.d/init.d/netbackup
/etc/rc.d/rc5.d/S77netbackup
->/etc/rc.d/init.d/netbackup
/etc/rc.d/rc6.d/K01netbackup
->/etc/rc.d/init.d/netbackup
Configuring NetBackup 131
About NetBackup server configuration
Platform Links
/etc/init.d/rc2.d/S77netbackup
->/etc/init.d/netbackup
/etc/init.d/rc3.d/S77netbackup
->/etc/init.d/netbackup
/etc/init.d/rc5.d/S77netbackup
->/etc/init.d/netbackup
/etc/init.d/rc6.d/K01netbackup
->/etc/init.d/netbackup
/etc/rc1.d/K01netbackup ->/etc/init.d/netbackup
/etc/rc2.d/S77netbackup ->/etc/init.d/netbackup
NetBackup Enterprise servers The procedures for configuring master and media servers
are very similar. Veritas recommends, however, that you
configure all server information such as storage devices and
volumes from the master server. Following this order helps
ensure that the master servers properly administer the media
servers.
Warning: Communication problems between the master
server and the media server do not prevent you from running
the configuration wizards. Therefore, do not run the wizards
on the media server until the problems are corrected. If you
run any of the wizards when a communication problem exists,
the master server cannot recognize the information that you
enter. You must first correct the problem. After you correct
the problem, run the configuration wizards from the master
server.
For initial NetBackup server configuration, Veritas recommends that you launch
the NetBackup Administration Console and click the Getting Started icon. A series
of wizards guide you through the following configuration procedures:
■ Configure Storage Devices
See “About the Device Configuration Wizard” on page 134.
■ Configure Volumes
See “About the Volume Configuration Wizard” on page 136.
■ Configure the Catalog Backup
See “About the Catalog Backup Wizard” on page 137.
■ Create a Backup Policy
See “About the Backup Policy Configuration Wizard” on page 138.
Configuring NetBackup 133
About NetBackup server configuration
If NetBackup is already configured and you want to change a specific area, click
the appropriate wizard on the NetBackup Administration Console.
For complete information on all of the NetBackup wizards and how to configure
NetBackup, see the NetBackup Administrator's Guide, Volume I.
http://www.veritas.com/docs/DOC5332
See “About storage device configuration” on page 21.
Note: Other wizards are available from the initial NetBackup Administration Console
window that are not part of the Getting Started wizard. For example, you can
configure disk pools or create a snapshot backup policy. See the NetBackup
Administrator’s Guide, Volume I for complete information about all NetBackup
wizards.
http://www.veritas.com/docs/DOC5332
On Windows systems, if you clicked the check box Launch Administration Console
that appears at the end of NetBackup installation, you can skip this procedure.
To start the NetBackup Administration Console on Windows
1 Log on to the NetBackup server as the Administrator.
2 Click Start > Programs > Veritas NetBackup > NetBackup Administration
Console.
3 To begin configuration, on the Administration Console, click Getting Started.
The Getting Started screen appears and prompts you to begin device
configuration.
Note: If you still need to configure devices to work with the operating system,
close the wizard. You must first configure those devices as specified by the
device and the operating system vendors.
Configuring NetBackup 134
About NetBackup server configuration
/usr/openv/netbackup/bin/jnbSA &
Note: If you still need to configure devices to work with the operating system,
close the wizard. You must first configure those devices as specified by the
device and the operating system vendors.
Device configuration ■ When the wizard displays the Device Hosts screen, you
must specify the hosts on which to auto-discover and
configure devices (NetBackup Enterprise servers only).
■ When the wizard displays the Backup Devices screen,
confirm that the list of devices is complete and accurate.
If a known backup device does not appear in this list, take
the following action:
■ Verify that the backup device is physically attached to
the host.
■ Verify that all that specified device and operating
system vendor installation procedures are performed
successfully.
■ Verify that all drives correspond to the proper device.
If you need to move a drive, select the drive and drag
it to the correct location.
■ For clusters, ensure that you perform storage device
configuration on each node. Begin on the active node,
then move the NetBackup active node to another node
and perform the storage device configuration on that node.
Repeat for each node of the cluster on which NetBackup
runs.
Note: By default, robotic daemons and NetBackup
add-on products do not cause NetBackup to failover if
they fail. You can configure robotic devices and
NetBackup add-on products to fail over NetBackup if the
robot or the add-on product fails. The operating system
must recognize the robots as configured before you can
configure NetBackup to failover. For complete details
about fail over configuration, refer to the NetBackup
Clustered Master Server Administrator’s Guide.
http://www.veritas.com/docs/DOC5332
Configuring NetBackup 136
About NetBackup server configuration
Defining storage units ■ You define storage units from the Configure Storage
Units screen. If your system does not have a tape device,
you can store data on a disk by defining disk storage units.
■ When you enter a path for a storage unit, the following
rules apply:
■ Use the correct path separators (forward slash (/) for
UNIX and backward slash (\) for Windows).
■ Use a colon (:) to specify a drive separation on
Windows platforms.
■ Use the following characters only:
Alphabetic characters (ASCII A-Z, a-z)
Numeric characters (0-9)
Miscellaneous characters: plus (+), minus (-),
underscore (_), or period (.)
Note: For clustered environments, configure volumes from the active node.
Multiple drive types When you specify multiple drive types, the following are true:
This wizard lets you create a policy for an online, hot catalog backup. Online, hot
catalog backups can back up the catalog while normal client backups are in progress.
A catalog backup policy lets you specify the following information:
■ The destinations for the catalog backup
A backup destination can be any configured storage device. For additional
disaster recovery protection, you can specify a second location for your catalog
backup.
■ Backup rotations
■ Starting times of backups
The wizard prompts you to choose the type of backup that you want a policy to
perform.
Table 7-2 describes the available backup types.
Full backup Backs up all files that are specified in the file list.
Incremental backup Backs up all the changed files that are specified in the file
list.
Backs up the files that have changed since the last successful
incremental or full backup. All files are backed up if no
previous backup has been done.
Only the files that changed since the last full backup that was
successful are backed up. All files are backed up if no
previous backup has been done.
■ Removing NetBackup server and client software from Windows servers, clusters,
and clients
■ About removal of the Java Console state data from Windows servers and
Windows clients
■ Removing a clustered media server by migrating all data to a new media server
This task is very important if you plan to reinstall NetBackup at a later date.
■ Remove any add-on products before you remove NetBackup server software.
■ Remove the NetBackup server software.
Note: As part of the removal of the NetBackup server software, the security
certificates are automatically deleted. If you want to retain the certificates, please
save them before removing NetBackup.
More information about this topic is available. Please refer to the information on
retaining host ID-based certificates when reinstalling NetBackup in the
NetBackupSecurity and Encryption Guide.
See “Removing NetBackup from UNIX and Linux servers and clients” on page 145.
See “About NetBackup client software removal on UNIX and Linux systems”
on page 144.
Warning: Do not remove PBX if your client uses other Veritas software products
that require PBX to run.
Removing NetBackup server and client software 145
Removing NetBackup from UNIX and Linux servers and clients
Clustered environments Before you begin to remove NetBackup, you must remove
NetBackup from the cluster application. Follow the instructions
in your cluster documentation on how to remove a group,
then you can remove NetBackup.
AIX lslpp -L
HP-UX swlist
Solaris pkginfo
The -p option specifies the product ID, which is 51216 for NetBackup.
9 (Conditional: servers only) If BMR is supported and enabled on the server,
remove the associated files with the following command:
/usr/openv/netbackup/bin/bmrsetupmaster -undo -f
11 (Conditional: servers only) If you moved the NBDB files from their default
installation location, you must delete these files manually as follows:
■ Navigate to the following directory where the NBDB files reside:
/usr/openv/db/data
This file contains a list of the database-related files and the path for each
file.
■ Delete each of the database-related files.
14 For the clients that support PureDisk, remove all PureDisk files with the following
command:
/opt/pdde/pddeuninstall.sh -forceclean
15 (Conditional: servers only) For the clients that support MSDP, remove all MSDP
files with the following command:
/opt/pdde/pddeuninstall.sh -basedir /usr/openv/pdde/ -ostdir
/usr/openv/lib/ost-plugins/ -forceclean
16 (Conditional: servers only) To remove the NetBackup server package, run the
command shown.
Note: The virtual host name security certificates are automatically removed
from the shared drive of the cluster as a part of NetBackup server software
removal.
More information about this topic is available. Please refer to the information
on retaining host ID-based certificates when reinstalling NetBackup in the
Veritas NetBackupSecurity and Encryption Guide.
Removing NetBackup server and client software 148
Removing NetBackup from UNIX and Linux servers and clients
Note: As part of the removal of the NetBackup server software, the security
certificates are automatically deleted. If you want to retain the certificates,
please save them before removing NetBackup.
More information about this topic is available. Please refer to the information
on retaining host ID-based certificates when reinstalling NetBackup in the
NetBackupSecurity and Encryption Guide.
Note: If there are running NetBackup processes and daemons, terminate them
manually for a successful NetBackup removal.
Note: Remember, you should not remove PBX if your server uses other Veritas
software products that require PBX to run.
Warning: The rm commands used remove any add-on products that are
installed on the computer where you perform this command.
cd /usr/openv This command changes you into the directory that symbolic
link points to, such as /opt/openv.
Warning: Before you continue, make sure that you are at the correct location
and verify that the subdirectories are what you expect them to be. To help
prevent removing the wrong directories, the previous commands verify your
current location and list the files in that directory. After you verify the directory
location and its contents, remove the directory with the next commands.
rm -rf For the directory value, enter the information from the file
directory command. This command deletes the directory that contains
the NetBackup binaries.
Note: Depending on your operating system, you may need to use the rmdir
command to remove the /usr/openv directory.
rmdir /usr/openv
Depending on the distribution of Linux, the startup and the shutdown scripts
may already be deleted.
See “About NetBackup startup and shutdown scripts” on page 129.
Removing NetBackup server and client software 152
Removing NetBackup from UNIX and Linux servers and clients
24 Remove the scripts shown. Depending on the operating system, the startup
and the shutdown scripts may already be deleted.
/etc/rc.d/init.d/nbftserver
/etc/rc.d/rc0.d/K03nbftserver
/etc/rc.d/rc1.d/K03nbftserver
/etc/rc.d/rc2.d/S21nbftserver
/etc/rc.d/rc3.d/S21nbftserver
/etc/rc.d/rc5.d/S21nbftserver
/etc/rc.d/rc6.d/K03nbftserver
Removing NetBackup server and client software 153
Removing NetBackup from UNIX and Linux servers and clients
/etc/init.d/nbftserver
/etc/init.d/rc2.d/K01nbftserver
/etc/init.d/rc2.d/S05nbftserver
/etc/init.d/rc3.d/K01nbftserver
/etc/init.d/rc3.d/S05nbftserver
/etc/init.d/rc5.d/K01nbftserver
/etc/init.d/rc5.d/S05nbftserver
/etc/init.d/nbftserver
/etc/rc0.d/K03nbftserver
/etc/rc1.d/K03nbftserver
/etc/rc2.d/S21nbftserver
/etc/rc.netbackup.aix
/etc/rc.netbackup.aix stop
■ First, examine the following file to see if NetBackup is the only product that
uses LiveUpdate:
/etc/Product.Catalog.JavaLiveUpdate
■ If NetBackup is the only product that currently uses LiveUpdate, run the
following command:
/opt/Symantec/LiveUpdate/uninstall.sh -a
Note: Before you remove the following product catalog file, make sure that
it is empty. The empty file size is equal to 0 bytes. If the product catalog
file is not empty, do not remove it because other products still require it.
rm -f /etc/Product.Catalog.JavaLiveUpdate
27 To remove the NetBackup-Java application state data for the root account, run
the appropriate command as follows:
Warning: Do not insert a space between the slash character (/) and the period
or the dot character (.) of /.veritas. A space between these characters
removes all of your files from the root level and beyond.
■ To remove the NetBackup-Java application state data for the root account
for all releases, run the following command:
/bin/rm -rf /.veritas
■ To remove the NetBackup-Java application state data for the root account
for a specific release, run the following command:
/bin/rm -rf /.veritas/java/version
Where version is the six-digit NetBackup version number. For example,
NetBackup version 8.0 with no upgrades applied would be entered as
800000.
Removing NetBackup server and client software 155
Removing NetBackup from UNIX and Linux servers and clients
These files are created with the command bpnbat -LoginMachine. If you
plan to reinstall NetBackup on the same computer at a later date, do one
of the following:
■ Preserve the certificates in the vxss/credentials directory.
■ If you do not preserve the certificates, you must provide the computer
identity password as originally set on the Root+AB broker. As an
alternative, you can reset the password on the Root+AB broker when
you reinstall.
For more information on Root+AB brokers, see the NetBackup Security
and Encryption Guide.
Removing NetBackup server and client software 156
About NetBackup server software removal on Windows systems
http://www.veritas.com/docs/DOC5332
For more information on NetBackup Access Control and how to remove it,
see the NetBackup Security and Encryption Guide.
http://www.veritas.com/docs/DOC5332
Note: As part of the removal of the NetBackup server software, the security
certificates are automatically deleted. If you want to retain the certificates, please
save them before removing NetBackup.
More information about this topic is available. Please refer to the information on
retaining host ID-based certificates when reinstalling NetBackup in the
NetBackupSecurity and Encryption Guide.
Note: After an uninstall, some registry and some directory information remain
on a Windows computer. This behavior is by design, as these files may be in
use by either the NetBackup Authentication Service or the NetBackup
Authorization Service.
See “Removing NetBackup server and client software from Windows servers,
clusters, and clients” on page 156.
3 On the Control Panel window, select the appropriate utility for installed
programs and applications. .
4 In the Currently Installed Programs list, click Veritas NetBackup .
5 Click Change. This action lets you modify, repair, or remove NetBackup.
6 On the Program Maintenance dialog box, select Remove.
7 Clear the check mark next to Remove all NetBackup Configuration, Catalog,
and Log files to disable this function. (The box is checked by default.)
8 Click Next.
9 If you enabled NetBackup Access Control, NetBackup placed several files on
clients and servers. These files can be divided into the following categories:
Individual user (cache) files User cache files exist in their home directories, as
follows:
user\Local Settings\Application
Data\VERITAS\NetBackup
user\Local Settings\Application
Data\VERITAS\NetBackup\pc.comp.com
user\Local Settings\Application
Data\VERITAS\NetBackup\dhcp
These files are created with the command bpnbat
-LoginMachine. If you plan to reinstall NetBackup on
the same computer at a later date, do one of the
following:
Note: This step is necessary only if you upgraded to version 8.1.2 from a
previous or earlier version of NetBackup.
USERPROFILE_DIR\Veritas\Java\JAVA_VERSION
Example:
On a Windows 2008 system with the 8.0 NetBackup Java Console previously
installed, and a local user profile policy, the Java Console state folder exists at
%LOCALAPPDATA%\Veritas\Java\800000.
Note: Unless otherwise indicated, all commands are issued from the inactive node
Reference 163
About the NetBackup answer file
is used as candidate to tunnel https requests. These entries are added to the
bp.conf file. This entry is optional for client installation and upgrade.
■ SERVER=master_server_name
This entry tells NetBackup to use the named host as the master server name.
If there are multiple server entries in the answer, the first one is used as the
master server. These entries are added to the bp.conf file. This entry is required
for client installation and upgrade.
■ SERVICES=no
This option tells NetBackup not to start the NetBackup services after the
installation or upgrade. This option lets you perform additional configuration
steps after the install or upgrade complete but before you start the services on
the NetBackup client. This entry is optional for client installation and upgrade.
■ WEBSVC_GROUP=custom_group_account_name
This option tells NetBackup to override the default web server group account
name (nbwebgrp). This group must already exist on the system. This option is
only used on the master server.
■ WEBSVC_USER=custom_user_account_name
This option tells NetBackup to override the default web server user account
name (nbwebsvc). This account must already exist on the system. This option
is only used on the master server.
Note: For security purposes, do not create web server users or groups with
administrator or superuser privileges.
You can use numerous procedures to create users and groups in operating systems.
Some specific approaches are shown, but other methods may accomplish the same
goal. The home directory path, user name, and group names are not hard-coded,
and can be changed. The default local user name is nbwebsvc, and the default local
group name is nbwebgrp. The user and group must have sufficient permissions to
run daemons.
Reference 166
NetBackup master server web server user and group creation
Note: If the password associated with the web server account expires after initial
configuration, NetBackup provides no notification the password has expired. This
behavior is normal and expected, as the operating system manages the account
and the password.
As long as the web server remains active, the account and the web server continue
to operate normally.
When the web server is restarted, or if you attempt to restart the nbwmc service, the
service fails to start, due to the expired password. Navigate to the appropriate area
in the operating system, supply the correct password, and restart the service.
More information about the web services account and group is available. See the
Veritas NetBackup Security and Encryption Guide and the section on the web
services account.
To create the local user account and the local group:
1 Create a local group.
■ Linux and UNIX: # groupadd nbwebgrp
■ Windows: C:\>net localgroup nbwebgrp /add
3 (Conditional) For Windows only, make the user a member of the group:
C:\>net localgroup nbwebgrp nbwebsvc /add
4 (Conditional) For Windows only, grant the Log on as a service right to the
user:
■ Go to Control Panel > Administrative Tools > Local Security Policy.
■ Under Security Settings, click Local Policies > User Rights Assignment.
■ Right-click on Log on as a service and select Properties
■ Add the local user. The default local user name is nbwebsvc.
■ Save your changes and close the Properties dialog for Log on as a
service.
Note: You cannot use this utility to update the JRE for the NetBackup Plug-in for
VMware vCenter.
If your system is running NetBackup 8.0 or later, use Table 10-1 to determine the
location of the nbcomponentupdate utility.
Reference 168
About the NetBackup Java Runtime Environment
UNIX or /usr/openv/java/nbcomponentupdate
Linux
UNIX or SYMCOpsCenterServer/bin/nbcomponentupdate
Linux
Caution: Do not stop the utility while the JRE update is in progress. This action
can cause the product that uses the JRE, such as NetBackup, to become unstable.
If there are additional versions of the JRE installed on your system for other
applications, the NetBackup JRE does not interfere with them. The NetBackup JRE
does not provide integration with web browsers and does not allow Java Applets
or Web Start to run. For that reason, the NetBackup JRE cannot be used in a
browser-based attack that uses Java Applet or Web Start vulnerabilities.
More information about NetBackup JRE alerts is available.
http://www.veritas.com/docs/TECH50711
7.7 and later 1.1 Provides 7-mode support One master server supports MS-Windows, Standard,
for all NetBackup 7.7 many OCUM servers. NDMP, VMware, Oracle
Replication Director
The plug-in must be installed on
features.
the OnCommand Unified
Manager (OCUM) server.
1.1 P1 Provides 7-mode support One master server supports MS-Windows, Standard,
for all NetBackup 7.7 many OCUM servers. NDMP, VMware, Oracle
Replication Director
features.
2.0 Provides cDOT support. One master server supports MS-Windows, Standard,
many OCUM servers. NDMP, VMware, Oracle
Note: You must upgrade the entire NetBackup environment before upgrading the
plug-in. Upgrade all master servers, media servers, clients, and any hosts which
communicate with the plug-in.
Reference 171
Using NetApp disk arrays with Replication Director
NFS/CIFS
iSCSI/FC
iSCSI/FC
NetApp OnCommand Unified Manager
NBUPlugin for 7-mode
SnapMirror
SnapVault
NFS/CIFS
NBUPlugin for cDOT
(Linux or Windows)
Cluster 1 Cluster 2
SnapMirror
SVM1 SVM1
SnapVault
SVM2 SVM2
SVM3 SVM3
C-mode Secondary
4 16GB 10,000 20
8 32GB 20,000 50
A backup policy
about backup types 138
Backup Policy Wizard 138 create 138
client installation 88 Backup Policy Wizard
client installation on Linux 101 about 138
client installation on UNIX 101 backup types
client installation on Windows 89 backup policy 138
license key entry 28 barcode rules
Linux client installation methods 102 cleaning media 137
NetBackup 8.x Upgrade Portal 141 bp.conf file
NetBackup catalog backup configuration 137 installation script 38
NetBackup Linux client removal 144 bpplclients command 126
NetBackup Remote Administration Console for create client list 126
Windows 85
NetBackup server configuration 131 C
NetBackup UNIX client removal 144 catalog backup configuration
preinstall checker 23 NetBackup wizards 137
push client software 51 certificates. See security certificates
remote installation methods for Linux clients 117 Change Server operation 120
remote installation methods for UNIX clients 117 cleaning media
startup and shutdown scripts 129 barcode rules 137
storage device configuration 21 client installation
UNIX and Linux installation requirements 33 about 88
UNIX client installation methods 102 methods for Linux 102
Veritas Services and Operations Readiness methods for UNIX 102
Tools 15 methods for Windows 90
Windows client installation methods 90 client installation methods
Windows client system requirements 90 for remote Linux clients 117
about NetBackup removal for remote UNIX clients 117
on UNIX systems 143 client installation on Linux
access control about 101
remove files 159 client installation on UNIX
adding Linux clients 122 about 101
adding UNIX clients 122 client installation on Windows
authentication certificates. See security certificates about 89
client software
B install locally on Windows 92
backup client type software
online, hot catalog 137 install on master server 51
backup policies client_config script 119
guidelines for creating 138
Index 176
install locally L
client software on Windows 92 license key entry
install locally on Windows about 28
server software 61 license keys
install NetBackup clients frequently asked questions 29
locally 103 licenses
install on clustered Windows environments requirements 27
server software 61 Linux client
install on master server about removing PBX 144
client type software 51 Linux client installation methods
install remotely about 102
Windows client software 92 Linux clients
install remotely on Windows installation methods 102
server software 61 remove NetBackup from 145
install silently Linux servers
Windows client 99 remove NetBackup from 145
install UNIX client loading client types onto server 122
password-less ssh 120 local installation
sftp method 119 UNIX client 102
ssh method 118 Windows client 90
install_client_files script 118–119
installation
methods for Linux clients 102
M
methods for UNIX clients 102 master and media servers
methods for Windows clients 90 configuration 131
UNIX clients locally 103 master server
installation guidelines continue installation after 45
Solaris systems 37 install client type software 51
UNIX clusters 38 software installation 39
installation requirements media server
UNIX and Linux systems 33 software installation 46
Windows systems 53 methods
installation restrictions for Linux client installation 102
Windows client 89 for UNIX client installation 102
installation script for Winodws client installation 90
bp.conf file 38 mixed version support
server installation 38 NetBackup 8.x 14
services file 38
installing client software N
on secure clients 120 NBUPlugin
on trusting clients 120 determining the version 172
inventory upgrading 173
robot 137 NetBackup
standalone drive 137 how to install 23
IPv4 clusters 72 NetBackup 8.x
IPv6 clusters 72 mixed version support 14
NetBackup Access Control
remove files 155
Index 178