Veritas NetBackup™ Upgrade Guide

Last Published:
Product(s): NetBackup (8.3.0.2, 8.3.0.1, 8.3)
  1. Introduction
    1.  
      About the NetBackup 8.3 Upgrade Guide
    2.  
      Available NetBackup upgrade methods
    3. About changes in NetBackup 8.3
      1.  
        Java GUI and JRE installation optional for some computers
      2.  
        Logging directory permissions require reset on rollback
      3.  
        Upgrades from NetBackup 7.6.0.4 and earlier are not supported
      4.  
        External certificate authority certificates supported in NetBackup 8.2 and later
    4.  
      About Veritas Smart Meter
    5.  
      Best practices for Veritas Smart Meter
  2. Planning for an upgrade
    1. General upgrade planning information
      1.  
        About planning a NetBackup 8.3 upgrade
      2.  
        How to plan for an upgrade to NetBackup 8.3
      3.  
        Known catalog backup limitation
      4.  
        About security certificates for NetBackup hosts
      5.  
        About automatic file changes from an upgrade
    2. About upgrade tools
      1.  
        About Veritas Services and Operations Readiness Tools
      2.  
        Recommended SORT procedures for upgrades
      3.  
        Recommended SORT procedures for new installations
      4.  
        About the NetBackup preinstall checker
    3. Upgrade operational notes and limitations
      1.  
        Creating the user account to support the NetBackup web server
      2.  
        About NetBackup 8.3 support for Fibre Transport Media Server with RHEL 7.5
      3.  
        MSDP changes in NetBackup 8.1
      4.  
        Potential required changes for NetApp clusters
      5.  
        Errors when Bare Metal Restore information is replicated using Auto Image Replication
      6.  
        Upgrade issue with pre-8.1 clients and 8.1 or later media servers
  3. Master server upgrade
    1.  
      About master server upgrades
    2.  
      Preinstall procedure for upgrading to NetBackup 8.3
    3.  
      Performing local, remote, or clustered server upgrades on Windows systems
    4.  
      Performing silent upgrades on Windows systems
    5.  
      Upgrading UNIX and Linux server software to NetBackup 8.3
    6.  
      Post-install procedure for upgrading to NetBackup 8.3
    7.  
      About NetBackup startup and shutdown scripts
    8.  
      Completing your system update after an upgrade
  4. Media server upgrade
    1.  
      Upgrading NetBackup media servers to NetBackup 8.3
    2.  
      Silently upgrading NetBackup media server software on UNIX and Linux
  5. MSDP upgrade for NetBackup
    1.  
      MSDP upgrade considerations for NetBackup 8.1
    2.  
      About MSDP rolling data conversion
    3.  
      About MSDP fingerprinting algorithm changes
  6. Client upgrade
    1.  
      About client upgrades
    2.  
      Upgrading UNIX and Linux clients with the NetBackup upgrade script
    3.  
      Upgrade of the UNIX and Linux client binaries with native installers
  7. NetBackup Deployment Management with VxUpdate
    1.  
      About VxUpdate
    2.  
      Commands used in VxUpdate
    3.  
      Repository management
    4.  
      Deployment policy management
    5.  
      Manually initiating upgrades from the master server using VxUpdate
    6.  
      Manually initiating upgrades from the media server or client using VxUpdate
    7.  
      Deployment job status
  8. Appendix A. Reference
    1.  
      NetBackup master server web server user and group creation
    2.  
      Generate a certificate on the inactive nodes of a clustered master server
    3.  
      About the NetBackup Java Runtime Environment
    4.  
      Add or Remove Java GUI and JRE after upgrade
    5.  
      About the NetBackup web user interface
    6.  
      About the NetBackup answer file
    7.  
      About RBAC bootstrapping
    8.  
      About NetBackup software availability
    9.  
      Additional post-upgrade steps for NetApp clusters
    10.  
      Using NetApp disk arrays with Replication Director
    11.  
      About compatibility between NetBackup versions
    12.  
      Upgrade requirements for UNIX and Linux
    13.  
      Installation and upgrade requirements for Windows and Windows clusters
    14.  
      Requirements for Windows cluster installations and upgrades
    15.  
      Removing a clustered media server by migrating all data to a new media server
    16.  
      Disabling the connection between your OpsCenter server and your NetBackup Master Server
    17.  
      Post upgrade procedures for Amazon cloud storage servers
    18.  
      Upgrading clients after servers are upgraded
  9.  
    Index

About RBAC bootstrapping

RBAC Bootstrapping lets you assign role-based access control (RBAC) permissions to a user or a user group during NetBackup installation or upgrade on UNIX platforms. The UNIX installer uses the bpnbaz -AddRBACPrincipal command to grant both security administrator and backup administrator permissions to the user or the user group that you specify in the /tmp/NBInstallAnswer.conf file.

Note:

RBAC bootstrapping provides access to all objects for the specified user or user group, even if previously the user or the user group had restricted access to certain objects. For example, the existing user Tester1 was assigned the backup administrator role with access to only some object groups. If Tester 1 is specified for RBAC bootstrapping, Tester1 is assigned both the backup administrator and the security administrator roles with access to all objects.

After installation or upgrade, you can run the bpnbaz -AddRBACPrincipal command standalone on both Windows and UNIX platforms to assign RBAC permissions. The command is available only on the master server. For more information about this command, see the NetBackup Command Reference Guide.

RBAC Bootstrapping during installation and upgrades on UNIX platforms:

Use the answer file template NBInstallAnswer-master.template available in the install package to create the /tmp/NBInstallAnswer.conf file. In that file, add the following entries before you run the installation or upgrade:

RBAC_DOMAIN_TYPE = domain_type

RBAC_DOMAIN_NAME = domain_name

RBAC_PRINCIPAL_TYPE = USER | USERGROUP

RBAC_PRINCIPAL_NAME = principal_name

Be aware that RBAC_DOMAIN_TYPE supports the values shown: NT, VX, UNIXPWD, LDAP.

Note:

Additional information about the RBAC_* options is available.

See About the NetBackup answer file.

RBAC bootstrapping is not performed if all the entries are empty or missing. In this case, the message Answer file did not contain any RBAC entries is posted in the install trace file. The install process always continues whether the RBAC bootstrapping is successful or not. The audit records are created under the SEC_CONFIG category.

If RBAC bootstrapping is successful, the installer displays the following message:

Successfully configured the RBAC permissions for principal_name.

The installer also displays this message if the user or the user group already exists with the security administrator and the backup administrator RBAC roles.

If one or more RBAC entries exist in the answer file, but a required answer file entry is missing, the installer displays the following message:

Warning: Unable to configure the RBAC permissions. One or more required fields are missing in /tmp/NBInstallAnswer.conf.

If there are other issues with the RBAC Bootstrapping, the installer displays the following message:

Warning: Failed to configure the RBAC permissions for principal_name. Refer to logs in /usr/openv/netbackup/logs/admin for more information.

If RBAC bootstrapping is successful but auditing fails, the install displays the following message:

Successfully configured the RBAC permissions for 
user_or_usergroup_name.
WARNING: Auditing of this operation failed.
Refer to logs in /usr/openv/netbackup/logs/admin for more information.

After the installation or upgrade completes, the specified user or user group is assigned both the security administrator and the backup administrator roles with their corresponding RBAC access permissions. The user can then access APIs and the Web UI.