Please enter search query.
Search <book_title>...
NetBackup and Veritas Appliances Hardening Guide
Last Published:
2025-04-18
Product(s):
Appliances (10.4.0.1, 8.3, 5.3, 5.0, 3.2), NetBackup & Alta Data Protection (10.4.0.1, 8.3, 5.3, 5.0, 3.2)
Platform: Linux,NetBackup Appliance OS,Flex Appliance OS,NetBackup Flex Scale OS,Veritas 3340,UNIX,Windows,Veritas 3350,Veritas 3360
- Top recommendations to improve your NetBackup and Veritas appliances security posture
- Steps to protect Flex Appliance
- Managing multifactor authentication
- Managing single sign-on (SSO)
- About lockdown mode
- Configuring an isolated recovery environment using the web UI
- Steps to protect NetBackup Appliance
- About single sign-on (SSO) authentication and authorization
- About authentication using smart cards and digital certificates
- About data encryption
- About forwarding logs to an external server
- Steps to protect NetBackup
- About multifactor authentication
- Configure NetBackup for single sign-on (SSO)
- Configure user authentication with smart cards or digital certificates
- Workflow to configure multi-person authorization for NetBackup operations
- Access codes
- Workflow to configure immutable and indelible data
- Add a configuration for an external CMS server
- Configuring an isolated recovery environment on a NetBackup BYO media server
- About FIPS support in NetBackup
- Workflow for external KMS configuration
- Workflow to configure data-in-transit encryption
- Workflow to use external certificates for NetBackup host communication
- About certificate revocation lists for external CA
- Configuring an external certificate for a clustered primary server
- Configuring a NetBackup host (media server, client, or cluster node) to use an external CA-signed certificate after installation
- Configuration options for external CA-signed certificates
- ECA_CERT_PATH for NetBackup servers and clients
- About protecting the MSDP catalog
- How to set up malware scanning
- About backup anomaly detection
- Steps to protect NetBackup Flex Scale
- STIG overview for NetBackup Flex Scale
- FIPS overview for NetBackup Flex Scale
- Support for immutability in NetBackup Flex Scale
- Deploying external certificates on NetBackup Flex Scale
- About multifactor authentication
- About single sign-on (SSO) configuration
- Steps to protect Access Appliance
- FIPS 140-2 conformance for Access Appliance
- Managing the login banner using the UI
- Managing the password policy using the UI
- Support for immutability in Access Appliance
- About system certificates on Access Appliance
- About single sign-on (SSO) configuration
- Configuring user authentication using digital certificates or smart cards
- About multifactor authentication
- Configuring an isolated recovery environment using the command line
- Forwarding logs to an external server
Importing single sign-on (SSO) users
Use the following procedure to import single sign-on (SSO) users.
To import SSO users
- Sign in to the Flex Appliance Console as the default admin user and click the gear icon in the upper-right corner of the page, then click Single sign-on.
- If you have not done so already, add the SSO identity provider (IDP). See Adding an IDP.
- On the left, click the User management icon.
- Click Add user > Import single sign-on users.
- Select User or User group.
- Depending on your selection, enter the username or the group name. Do not include the domain name.
- Click Import.
After you have imported the user or the user group, you can view the details on the User management page.
Note:
You cannot view the members of a user group from the Flex Appliance Console. Use the IDP to manage the users within a group.