Veritas NetBackup™ Commands Reference Guide
- Introduction
- Appendix A. NetBackup Commands
- acsd
- add_media_server_on_clients
- backupdbtrace
- backuptrace
- bmrc
- bmrconfig
- bmrepadm
- bmrprep
- bmrs
- bmrsrtadm
- bp
- bparchive
- bpbackup
- bpbackupdb
- bpcatarc
- bpcatlist
- bpcatres
- bpcatrm
- bpcd
- bpchangeprimary
- bpclient
- bpclimagelist
- bpclntcmd
- bpclusterutil
- bpcompatd
- bpconfig
- bpdbjobs
- bpdbm
- bpdgclone
- bpdown
- bpduplicate
- bperror
- bpexpdate
- bpfis
- bpflist
- bpgetconfig
- bpgetdebuglog
- bpimage
- bpimagelist
- bpimmedia
- bpimport
- bpinst
- bpkeyfile
- bpkeyutil
- bplabel
- bplist
- bpmedia
- bpmedialist
- bpminlicense
- bpnbat
- bpnbaz
- bppficorr
- bpplcatdrinfo
- bpplclients
- bppldelete
- bpplinclude
- bpplinfo
- bppllist
- bpplsched
- bpplschedrep
- bpplschedwin
- bppolicynew
- bpps
- bprd
- bprecover
- bprestore
- bpretlevel
- bpschedule
- bpschedulerep
- bpsetconfig
- bpstsinfo
- bpstuadd
- bpstudel
- bpstulist
- bpsturep
- bptestbpcd
- bptestnetconn
- bptpcinfo
- bpup
- bpverify
- cat_convert
- cat_export
- cat_import
- configureCertsForPlugins
- configureMQ
- configurePorts
- configureWebServerCerts
- create_nbdb
- csconfig cldinstance
- csconfig cldprovider
- csconfig meter
- csconfig throttle
- csconfig reinitialize
- duplicatetrace
- importtrace
- jbpSA
- jnbSA
- ltid
- manageClientCerts
- mklogdir
- nbauditreport
- nbcatsync
- NBCC
- NBCCR
- nbcertcmd
- nbcertupdater
- nbcldutil
- nbcloudrestore
- nbcomponentupdate
- nbcplogs
- nbdb_admin
- nbdb_backup
- nbdb_move
- nbdb_ping
- nbdb_restore
- nbdb_unload
- nbdbms_start_server
- nbdbms_start_stop
- nbdc
- nbdecommission
- nbdelete
- nbdeployutil
- nbdevconfig
- nbdevquery
- nbdiscover
- nbdna
- nbemm
- nbemmcmd
- nbfindfile
- nbfirescan
- nbftadm
- nbftconfig
- nbgetconfig
- nbhba
- nbholdutil
- nbhostidentity
- nbhostmgmt
- nbhypervtool
- nbimageshare
- nbinstallcmd
- nbjm
- nbkmsutil
- nboraadm
- nborair
- nbpem
- nbpemreq
- nbperfchk
- nbplupgrade
- nbrb
- nbrbutil
- nbregopsc
- nbreplicate
- nbrepo
- nbrestorevm
- nbseccmd
- nbsetconfig
- nbsnapimport
- nbsnapreplicate
- nbsqladm
- nbstl
- nbstlutil
- nbstop
- nbsu
- nbsvrgrp
- resilient_clients
- restoretrace
- stopltid
- tl4d
- tl8d
- tl8cd
- tldd
- tldcd
- tlhd
- tlhcd
- tlmd
- tpautoconf
- tpclean
- tpconfig
- tpext
- tpreq
- tpunmount
- verifytrace
- vltadm
- vltcontainers
- vlteject
- vltinject
- vltoffsitemedia
- vltopmenu
- vltrun
- vmadd
- vmchange
- vmcheckxxx
- vmd
- vmdelete
- vmoprcmd
- vmphyinv
- vmpool
- vmquery
- vmrule
- vmupdate
- vnetd
- vssat
- vwcp_manage
- vxlogcfg
- vxlogmgr
- vxlogview
- W2KOption
Name
configureWebServerCerts — provides a way to enable the NetBackup domain to support NetBackup or external certificate authorities. Lets the user configure certificates for the NetBackup web server.
SYNOPSIS
-addNBCert
-removeNBCert [-force]
-addExternalCert [-nbHost | -webUI | -all] {[-certPath path_to_certificate_file] [-privateKeyPath path_to_certificate_key_file] [-trustStorePath path_to_CA_certificate_file] [-passphrasePath path_to_passphrase_file]} [-crlCheckLevel DISABLE | LEAF | CHAIN] [-crlPath directory_path_to_CRLs]
-addExternalCert [-nbHost | -webUI] [-copyNbHost | -copyWebUI ]
-removeExternalCert [-nbHost | -webUI | -all] [-force]
-validateExternalCert {[-certPath path_to_certificate_file] [-privateKeyPath path_to_certificate_key_file] [-trustStorePathpath_to_CA_certificate_file] [-passphrasePathpath_to_passphrase_file] [-crlCheckLevel DISABLE | LEAF | CHAIN] [-crlPath directory_path_to_CRLs] [-fmt DETAILS | FAILURES_ONLY]}
On UNIX systems, the directory path to this command is /usr/openv/wmc/bin/install/
On Windows systems, the directory path to this command is install_path\NetBackup\wmc\bin\install\
DESCRIPTION
The configureWebServerCerts command provides a way to configure external or NetBackup certificates for the NetBackup web server. A NetBackup web server instance uses the Java Keystore as the repository for security certificates.
You must have root or administrator rights on the master server to run this command.
If you are running this command for the first time, you need to restart the NetBackup Web Management Console service (nbwmc) after you run the command.
If the NetBackup Messaging Broker (nbmqbroker) service is enabled, then you must restart the service after you successfully run the configureWebServerCerts command.
This command does not apply to the NetBackup appliance.
OPTIONS
- -addExternalCert
Configures an external certificate for the web server.
- -addNBCert
Configures the NetBackup certificate authority signed certificate for the web server.
- -all
Configures an external certificate for communication between NetBackup hosts as well as with the NetBackup web user interface.
- -certPath
Specifies the path to the certificate file.
- -copyNbHost
Specifies that web UI communication uses the same certificate that is used for host communication.
- -copyWebUI
Specifies that host communication uses the same certificate that is used for web UI communication.
- -crlCheckLevel
Specifies the revocation check level for external certificates of the host. You can specify the following values:
DISABLE: Revocation check is disabled. Revocation status of the certificate is not validated against the CRL during host communication.
LEAF: The revocation status of the leaf certificate is validated against the certificate revocation list (CRL). LEAF is the default value for this option.
CHAIN: The revocation status of all certificates in the certificate chain are validated against the CRL.
- -crlPath
Specifies the path to the directory where the certificate revocation lists (CRL) of the external CA are located.
- -fmt DETAILS | FAILURES_ONLY
Provides details of the validation checks that are run for the external certificate-specific configuration options. The DETAILS option provides a report of all successful and all failed validation checks. The FAILURES_ONLY option provides a report of only the failed checks.
- -force
Use the -force option to forcefully remove certificate. After the removal, if there is no certificate configured for the web server, the NetBackup Web Management Console service cannot start.
- -nbHost
Configures an external certificate for communication between NetBackup hosts.
- -passphrasePath
Specifies the path to the passphrase file that stores the passphrase, which is used to encrypt the private key.
- -privateKeyPath
Specifies the path to the private key file of the certificate.
- -removeExternalCert
Removes the external certificate that you have configured for the web server for communication between NetBackup hosts, the NetBackup web user interface, or both, based on the option you have configured. Use this command with the -nbHost, -webUI, or -all options.
- -removeNBCert
Removes the NetBackup certificate that you have configured for the web server for communication between NetBackup hosts as well as with the NetBackup web user interface.
- -trustStorePath
Specifies the path to the certificate authority bundle file.
- -validateExternalCert
Verifies whether the external certificate-specific configurations that are provided are valid or not. It provides a report of successful and failed validation checks.
- -webUI
Configures an external certificate for communication with the NetBackup web user interface.
EXAMPLES
Example 1: Configure an external certificate for the web server for NetBackup host communication.
configureWebServerCerts -addExternaCert -nbHost -certPath /root/ example_certs/device.crt -privateKeyPath /root/example_certs/ device.key -trustStorePath /root/example_certs/rootCA.pem -passphrasePath root/example_certs/PassPhrase.txt
Example 2: Configure an external certificate for the web server for host communication using the certificate that you have configured for communication with web UI.
configureWebServerCerts -addExternalCert -webUI -copyNbHost
Example 3: Remove the external certificates that you have configured for all kinds of communication - web UI and NetBackup host.
configureWebServerCerts -removeExternalCert -all