Veritas Velocity™ User's Guide
- Getting to know Velocity
- Setting up Velocity
- Velocity administrator's checklist for setting up Veritas Velocity
- Database administrator's checklist for setting up Veritas Velocity
- Sandbox user's checklist for setting up Veritas Velocity
- How to set up the Velocity Storage Server
- Deploying the Velocity Storage Server image on a virtual machine
- Velocity Appliance initial configuration requirements
- Configuring network and storage settings for the Velocity Storage Server in a virtual environment
- Registering the Velocity Storage Server
- Joining the Velocity Storage Server to the Active Directory domain
- Adding a Certificate Authority signed certificate to the Velocity Storage Server
- How to set up the Velocity Client
- Deleting a Velocity Client
- Configuring a proxy server for Velocity
- Required and optional ports for Velocity
- Installing the NetBackup Client on the Velocity Storage Server
- Setting up the Velocity on-premises management server
- How to set up the Velocity on-premises management server
- Deploying the Velocity on-premises management server image on a virtual machine
- Configuring the network settings for the Velocity on-premises management server
- Configuring Active Directory/LDAP settings on the Velocity on-premises management server
- Adding users to the Velocity on-premises management server
- Upgrading Velocity
- How to upgrade to Velocity version 2.8
- Finding the Velocity Storage Server and Velocity Client version numbers
- Downloading and transferring software updates to the Velocity Storage Server
- Removing previous upgrade files
- Upgrading the Velocity Storage Server
- Upgrading the Velocity Client for Linux
- Upgrading the Velocity Client for Windows
- Upgrading the Velocity Client for Solaris
- Velocity Storage Server
- About the Velocity Storage Server
- Viewing physical storage usage on the Velocity Storage Server
- About reclaiming storage space on the Veritas Velocity Storage Server
- Increasing meta and data storage capacity on the Velocity Storage Server
- Deregistering a Velocity Storage Server
- How to reset the Velocity Storage Server
- Users and roles
- Oracle database ingestion using Velocity
- How to provide copies of Oracle databases for sandboxes in Velocity
- Adding an Oracle database to ingest into Velocity
- Ingesting an Oracle database into Velocity for the first time
- Ingesting an Oracle database again after the first ingest
- Canceling an Oracle database ingestion
- How to use copy preparation to mask or sanitize sensitive data
- Masking sensitive data manually in database copies
- Masking sensitive data in database copies by using a script
- Masking sensitive data manually in database copies that are already ingested
- Masking sensitive data by using a script in database copies that are already ingested
- Disabling copy preparation for Oracle database copies
- Ingesting an Oracle database into Velocity from the command line
- About setting custom initialization parameters for a sandbox for an Oracle database copy
- Editing default options for the ingest method for Oracle databases
- Oracle database ingestion using NetBackup CoPilot
- Microsoft SQL Server database ingestion using Velocity
- Database sources and copies
- About database sources and copies
- Viewing details of an Oracle database source
- Viewing details of a SQL Server database source
- Changing the nickname or description of a database source
- Deleting a database source from Velocity
- About scheduling ingestions for a database source
- Viewing the ingestion schedule for a database source
- Adding an ingestion schedule to a database source
- Editing the ingestion schedule for a database source
- Deleting the ingestion schedule for a database source
- Restarting scheduled database ingestions after changing the system time or time zone on the Velocity Storage Server
- Retention periods for database sources and copies
- Viewing database copies
- Viewing the number of sandboxes that were created from a database copy
- Viewing the status of database copies
- Deleting database copies
- Sandboxes
- About sandboxes
- Creating a sandbox from an Oracle database copy
- Starting an Oracle database instance manually
- Creating a sandbox from a SQL Server database copy
- Starting a SQL database manually
- Finding your sandbox
- Viewing details about your sandboxes
- Deleting a sandbox
- Managing sandboxes when you restart the host Oracle Database server
- Unmounting a sandbox from an Oracle host server
- Database recovery
- Alerts and logs
- Managing the Velocity physical appliance
- Configuring network address settings on the Velocity physical appliance
- About IPv4-IPv6-based network support on the Velocity physical appliance
- About NIC1 (eth0) port usage on the Velocity physical appliance
- Creating a network interface bond (NIC bond) on the Velocity physical appliance
- VLAN tagging on the Velocity physical appliance
- Configuring static routes on the Velocity physical appliance
- Configuring DNS and host name mapping on the Velocity physical appliance
- Setting the host name for the Velocity physical appliance
- Using a proxy server with the Velocity physical appliance
- About WAN optimization on the Velocity physical appliance
- About the maximum transmission unit size on the Velocity physical appliance
- Setting the date and time on the Velocity physical appliance
- About the Veritas Remote Management Console on the Velocity physical appliance
- About Velocity physical appliance storage
- About users on the Velocity physical appliance
- About Velocity physical appliance checkpoints
- About factory reset on the Velocity physical appliance
- Configuring network address settings on the Velocity physical appliance
- Monitoring the Velocity physical appliance
- Velocity physical appliance security
- About Velocity physical appliance user account privileges
- About the Velocity physical appliance intrusion detection system
- About Velocity physical appliance operating system security
- About data security on the Velocity physical appliance
- About data integrity on the Velocity physical appliance
- About the Velocity physical appliance ports
- Recommended IPMI settings on the Velocity physical appliance
- Best practices
- Troubleshooting
- NFS export paths where ingested Oracle Database sources are stored are inaccessible
- NFS export path is not created during a database ingestion
- Database ingestion fails with the Oracle error 'diskgroup {xx} space exhausted'
- After restart of the vpfsd service, links to the applications are broken
- Sandbox creation fails on an Oracle Database server
- Sandbox creation fails for a SQL Server database copy
- Sandbox creation fails after you use the --adGroups argument when you configure the Velocity Client for Windows
- Sandbox creation may take longer than usual on Oracle Database 12c
- A sandbox cannot be deleted from an Oracle Database server because the mount point is busy
- Error occurs when registering the Velocity Client; provide the Oracle DBA with access to the Velocity registration files
- Error occurs when a new sandbox name has the same name as a deleted sandbox
- Ingestions and sandboxes are stuck 'In Progress' after the Velocity Storage Server is restarted
- Glossary
- Context-sensitive topics
- Create Sandbox - Choose Database
- Create Sandbox - Configure Host
- Create Sandbox - Review Settings
- Create Sandbox - Choose Database
- Create Sandbox - Configure Host
- Create Sandbox - Review Settings
- Sandboxes window
- Sandbox details
- Sandbox details for an Oracle database copy
- Sandbox details for a SQL Server database copy
- Role Wizard - Select User Type
- Role Wizard - Select Users
- Role Wizard - Select Sources
- Role Wizard - Review
- Copies dialog
- Database source details
- Database Sources dialog
- How to set up the Velocity Client
- Schedule dialog
- Section I. Velocity shell menu commands
- Introduction
- Appendix A. Main > Manage > Storage
- Appendix B. Main > Manage > Cloud
- Appendix C. Main > Manage > Software
- Appendix D. Main > Monitor
- Appendix E. Main > Network
- Network > Configure
- Network > Date
- Network > DNS
- Network > Gateway
- Network > Hostname
- Network > Hosts
- Network > IPv4
- Network > IPv6
- Network > NetStat
- Network > NTPServer
- Network > LinkAggregation
- Network > VLAN
- Network > WANOptimization
- Network > Ping
- Network > Proxy
- Network > SetProperty
- Network > Show
- Network > TimeZone
- Network > TraceRoute
- Network > Unconfigure
- Appendix F. Main > Settings
- Appendix G. Main > Support
Adding a Certificate Authority signed certificate to the Velocity Storage Server
By default, the Velocity Storage Server uses a self-signed certificate that Veritas provides. You can, however, replace the certificate with your own Certificate Authority (CA) signed certificate. To use your own certificate, you must create a new keystore file, install the certificate chain, and reference the new chain using the appropriate keystore alias.
Adding your own CA-signed certificate helps to ensure that your Oracle Database servers communicate only with the Velocity Storage Server.
To add a Certificate Authority signed certificate to the Velocity Storage Server
- Log on to your Velocity Storage Server.
- Type the following command to change the directory:
cd /opt/apache-tomcat/security
- Type the following command to create a new keystore file with a self-signed certificate and private key:
keytool -genkey -alias tomcat -keyalg RSA -keystore keystore.tomcat-velocity -keysize 2048
Note:
The private key that is generated is part of the CA signing request. It is important to save a copy of this file in a secure location for future use.
Make a note of the alias from the command. You must use the same value for the "-alias" flag throughout this procedure. In this example, the alias is "tomcat".
- Answer the questions with information about your organization and provide a password for the keystore.
- Type the following command on the newly created keystore file to produce the certificate request text file. The certificate request text file is used for the certificate signing request:
keytool -certreq -keyalg RSA -alias tomcat -file certreq.csr -keystore keystore.tomcat-velocity
- Use the text that is included in the certreq.csr file to request a certificate from your certificate authority. The FQDN that you use for the Subject Alternative Name (SAN) field must be fully resolvable in your network's DNS namespace.
Warning:
You must use the correct FQDN in the SAN field. If you do not use the correct FQDN, the procedure fails.
- Once you have received the issued certificate chain, save the text in the following file:
/opt/apache-tomcat/security/cert.p7b
- Use the following command to change the directory to the original keystore work location:
cd /opt/apache-tomcat/security
- Import the new certificate chain into the newly generated keystore using the following command:
keytool -import -alias tomcat -trustcacerts -file cert.p7b -keystore keystore.tomcat-velocity
Where "file cert.p7b" is the certificate chain text that was issued from your CA and that you saved in step 7.
- Type the following command to save a copy of the file named keystore to keystore.orig:
cp keystore keystore.orig
- Type the following command to import the new keystore file, which now contains your CA-issued certificate chain, into the existing keystore:
keytool -importkeystore -deststorepass appliance -destkeypass appliance -destkeystore keystore -srckeystore keystore.tomcat-velocity -srcstorepass appliance -alias tomcat
Note:
You may need to update the passwords in the command to match the commands that were used earlier in this procedure.
When you are prompted to overwrite the existing alias, select Yes.
- Type the following command to restart Velocity tomcat:
service tomcat-velocity restart
- Log on to the Oracle server as root.
- Navigate to /opt/veritas/velocity/etc/controller.conf and change the following values:
Change the "verifyhost" value from "false" to "true".
Change the "verifypeer" value from "false" to "true".
- Type the following command to restart the Velocity Client:
service vexecd restart