NetBackup™ for VMware Administrator's Guide

Last Published:
Product(s): NetBackup & Alta Data Protection (10.5)
  1. Introduction
    1.  
      About NetBackup for VMware
    2.  
      About the virtual machine backups that include database data
    3.  
      About the NetBackup appliance as a VMware backup host
    4.  
      NetBackup for VMware components
    5.  
      Appliance as backup host: component overview
    6.  
      Media servers as backup or discovery hosts
    7.  
      Overview of the VMware backup process
    8.  
      NetBackup for VMware terminology
  2. Required tasks: overview
    1.  
      Overview of VMware tasks
    2.  
      Overview of NetBackup tasks
  3. Configuring RBAC roles for VMware administrators
    1.  
      RBAC roles for the VMware administrator
    2.  
      Assigning permissions at specific VMware object levels
    3.  
      Create a custom role for a VMware server or datacenter
    4.  
      Create a custom role for an Organization VDC administrator
    5.  
      Create a custom role to manage specific VMs
    6.  
      Manage permissions for a datacenter
    7.  
      Manage permissions for a single VM
    8.  
      Apply RBAC role permissions for a VM to other VMs
  4. Notes and prerequisites
    1.  
      NetBackup for VMware: notes and restrictions
    2.  
      Notes on VMware Virtual Volumes (VVols)
    3.  
      NetBackup IPv6 parameter required for backups in VMware IPv6 environments
    4.  
      NetBackup for VMware: notes on Linux virtual machines
    5.  
      Notes on the NetBackup appliance as a VMware backup host
    6.  
      NetBackup for VMware support for SAN multi-pathing
    7.  
      NetBackup for VMware support for fault tolerant VMs
    8.  
      NetBackup character restrictions for the Primary VM identifier
    9.  
      In the policy Query Builder, display names, resource pool names, and vApp names are case-sensitive
    10.  
      Notes on the hotadd transport mode
    11.  
      Notes and limitations for tag usage in VMware Intelligent Policy queries
    12.  
      Notes and limitations for the backup and restore of VMware tag associations
    13.  
      Notes and limitations for the backup and restore of VMware storage policies
    14.  
      Support for LVM thin pool based volumes
  5. VMware vSphere privileges
    1.  
      About VMware vSphere privileges
    2.  
      VMware vSphere privileges for virtual machine backups
    3.  
      VMware vSphere privileges for a full VM restore
    4.  
      VMware vSphere privileges to create an instant access VM
    5.  
      VMware vSphere privileges for NetBackup plug-in operations
    6.  
      VMware vSphere privileges for instant rollback
    7.  
      VMware vSphere privileges for agentless SFR privileges
    8.  
      VMware vSphere privileges for individual vmdk restore privileges
    9.  
      VMware vSphere privileges for vApp restore and vApp restore to template
    10.  
      Optional permissions for better integration with VMware vSphere
  6. Managing VMware servers
    1. About VMware discovery
      1.  
        Change the autodiscovery frequency of VMware assets
      2.  
        Discover VMware server assets manually
    2. Add VMware servers
      1.  
        Using the VMware Managed Object Browser to verify the server name
    3.  
      Validate and update VMware server credentials
    4.  
      Browse VMware servers
    5.  
      Remove VMware servers
    6.  
      Create an intelligent VM group
    7.  
      Remove an intelligent VM group
    8.  
      Add a VMware access host
    9.  
      Remove a VMware access host
    10. Change resource limits for VMware resource types
      1.  
        VMware resource types and limits
    11.  
      Setting privileges for posting events to vCenter
    12.  
      Authentication token for the NetBackup vSphere plug-ins
    13.  
      Validating VMware virtualization server certificates in NetBackup
  7. Configuring backup policies for VMware
    1.  
      Configure a VMware policy
    2.  
      Limit jobs per policy on the Attributes tab (for VMware)
    3. Backup options on the VMware tab
      1.  
        VMware backup host
      2.  
        Optimizations options (VMware)
      3.  
        Primary VM identifier options (VMware)
      4.  
        Existing snapshot handling options (VMware)
      5.  
        Transport modes options (VMware)
      6.  
        Application protection options (VMware)
      7.  
        VMware - Advanced attributes
      8.  
        Post vCenter events option (VMware advanced attributes)
    4. Exclude disks tab
      1.  
        About the exclude disk options for virtual disk selection
      2.  
        Exclude disks from backups: an example to avoid
      3.  
        Restoring data from the backups that excluded the boot disk or data disks
    5.  
      Browse for VMware virtual machines
    6.  
      Limiting the VMware servers that NetBackup searches when browsing for virtual machines
    7.  
      Virtual machine host names and display names should be unique if VMs are selected manually in the policy
    8.  
      Primary VM identifier option and manual selection of virtual machines
    9.  
      About incremental backups of virtual machines
    10.  
      Configuring incremental backups
    11.  
      Storage Foundation Volume Manager volumes in the virtual machine
  8. Configuring a VMware Intelligent Policy
    1.  
      About automatic virtual machine selection for NetBackup for VMware
    2.  
      Support and use of VMware tag associations
    3.  
      The basics of a NetBackup query rule
    4.  
      Important notes on automatic virtual machine selection
    5.  
      NetBackup requirements for automatic virtual machine selection
    6.  
      Automatic virtual machine selection: Task overview
    7.  
      Options for selecting VMware virtual machines
    8. About the Reuse VM selection query results option
      1.  
        The effect of virtual machine discovery on vCenter
    9.  
      Configure automatic virtual machine selection
    10.  
      Editing an existing query in Basic mode
    11.  
      Using the Query Builder in Advanced mode
    12.  
      AND vs. OR in queries
    13.  
      Examples for the NetBackup Query Builder
    14.  
      The IsSet operator in queries
    15.  
      About selecting virtual machines by means of multiple policies
    16.  
      Order of operations in queries (precedence rules)
    17.  
      Parentheses in compound queries
    18.  
      Query rules for resource pools
    19.  
      Query rules for datacenter folders (host folder)
    20.  
      Query rules for duplicate names
    21.  
      Query rules for tags
    22.  
      Query Builder field reference
    23.  
      Test Query screen for VMware
    24.  
      Test Query: Failed virtual machines
    25.  
      Effect of Primary VM identifier parameter on Selection column in Test Query results
    26.  
      Effect of Primary VM identifier parameter on VM Name column in Test query results
    27.  
      Refreshing the display of virtual environment changes in the Query Builder
    28.  
      Reducing the time required for VM discovery in a large VMware environment
  9. Use Accelerator to back up virtual machines
    1.  
      About the NetBackup Accelerator for virtual machines
    2.  
      Accelerator: full vs. incremental schedules
    3.  
      How the NetBackup Accelerator works with virtual machines
    4.  
      Accelerator notes and requirements for virtual machines
    5.  
      Accelerator forced rescan for virtual machines (schedule attribute)
    6.  
      Accelerator requires the OptimizedImage attribute
    7.  
      Accelerator backups and the NetBackup catalog
    8.  
      Accelerator messages in the backup job details log
    9.  
      About reporting the amount of Accelerator backup data that was transferred over the network
    10.  
      Replacing the Accelerator image size with the network-transferred data in NetBackup command output
  10. Configuring protection plans for VMware
    1. Protect VMs or intelligent VM groups
      1.  
        Schedules
      2.  
        Backup options and Advanced options
      3.  
        Exclude disks from backups
      4.  
        Snapshot retry options
    2.  
      Customize protection settings for a VMware asset
    3.  
      Remove protection from VMs or intelligent VM groups
    4.  
      View the protection status of VMs or intelligent VM groups
  11. Malware scan
    1.  
      Assets by workload type
  12. Instant access
    1.  
      Prerequisites of instant access
    2.  
      Things to consider before you use the instant access feature
    3.  
      Create an instant access VM
    4.  
      Restore files and folders from a VM backup image
    5.  
      Download files and folders from a VM backup image
    6. Instant access Build Your Own (BYO)
      1.  
        Prerequisites of Instant Access Build Your Own (BYO)
      2.  
        Hardware configuration requirement of Instant Access Build Your Own (BYO)
      3.  
        Frequently asked questions
    7.  
      VM malware scan
  13. Instant rollback
    1.  
      Prerequisites of instant rollback
    2.  
      Things to consider before you use the instant rollback feature
    3.  
      Instant rollback from a VM backup image
  14. Continuous data protection
    1.  
      About continuous data protection
    2.  
      CDP terminology
    3.  
      CDP architecture
    4.  
      Prerequisites
    5.  
      Capacity-based licensing for CDP
    6.  
      Steps to configure CDP
    7.  
      Removing VMs from the CDP gateway
    8.  
      Defining the CDP gateway
    9.  
      Sizing considerations
    10.  
      Limiting concurrent CDP backup jobs
    11.  
      Controlling full sync
    12.  
      Monitoring CDP jobs
    13.  
      Using accelerators with CDP
    14.  
      Recovering CDP protected VMs
    15.  
      Some limitations of CDP
    16.  
      Troubleshooting for CDP
  15. Backing up virtual machines
    1.  
      Manually back up virtual machines
    2.  
      Trial backup for VMware
    3.  
      Using the Activity monitor to monitor virtual machine backups
    4.  
      Restarting jobs individually in the Activity monitor
    5.  
      Viewing NetBackup activity in vSphere Client (HTML5)
  16. VM recovery
    1.  
      Restore notes and restrictions
    2.  
      Restore notes and restrictions on Linux
    3. Recover a full VMware virtual machine
      1.  
        Recovery options
      2.  
        Storage policy
      3.  
        Advanced recovery options
      4.  
        Advanced recovery options: Format of restored virtual disks
      5.  
        Advanced recovery options: Transport mode
    4. Restoring VMware virtual machine disks
      1.  
        About VMware virtual machine disk restore
      2.  
        Selecting virtual disks or file systems
      3.  
        Recovery options for virtual machine disks
      4.  
        Storage target restore options
  17. VMware agentless restore
    1.  
      About VMware agentless restore
    2.  
      Prerequisites and limitations of VMware agentless restores
    3. Provide access to a credential for agentless single file recovery to a guest VM
      1.  
        Add a credential for a VMware guest VM
      2.  
        Create a custom role for agentless single file recovery to a guest VM, with a credential
    4.  
      Recover files and folders with VMware agentless restore
    5.  
      About restricted restore mode
  18. Restoring Individual files and folders from VMware backups
    1.  
      About restoring individual VMware files and folders
    2.  
      Restore individual files and folders
    3.  
      Recovery options for restore of VMware files
    4.  
      Setting up NetBackup Client Service for VMware restores to a Windows shared virtual machine drive
  19. Using NetBackup to back up Cloud Director environments
    1.  
      About NetBackup for vCloud Director
    2.  
      Notes on creating a NetBackup policy for vCloud
    3.  
      Notes on restoring virtual machines into vCloud Director
    4. Recover VMware Cloud Director virtual machines
      1.  
        Recovery target
      2.  
        vApp options
      3.  
        Recovery options
    5.  
      Restore a vApp template that has multiple virtual machines
    6.  
      Reducing the time required for VM discovery in a large vCloud environment
  20. Restore virtual machines with Instant Recovery
    1.  
      About Instant Recovery for VMware
    2.  
      Task overview for Instant Recovery for VMware
    3.  
      Performance recommendations for Instant Recovery for VMware
    4.  
      Requirements for Instant Recovery for VMware
    5.  
      Notes on Instant Recovery for VMware
    6.  
      Restarting the Client for NFS service on a Windows restore host
    7.  
      Instant Recovery options on the nbrestorevm command
    8.  
      Restoring a virtual machine with Instant Recovery for VMware
    9.  
      Restoring a virtual machine to a different location with Instant Recovery for VMware
    10.  
      Restoring individual files with Instant Recovery for VMware while the current virtual machine is running
    11.  
      Job types for Instant Recovery for VMware
    12.  
      Reactivating a restored virtual machine with Instant Recovery for VMware
  21. Protecting VMs using hardware snapshots and replication
    1.  
      About virtual machines and hardware snapshots
    2.  
      Deployment and architecture
    3.  
      Features and applications supported
    4.  
      Prerequisites for hardware snapshot and replication
    5.  
      Operations supported with hardware snapshot
    6.  
      Configuring a VMware policy to use hardware snapshots
    7.  
      Configuring a VMware policy to use NetBackup snapshot manager replication
    8.  
      Jobs in the Activity Monitor that use hardware snapshot for VMs
    9.  
      Notes and limitations
    10.  
      Troubleshooting with VMware hardware snapshot and replication operations
  22. Best practices and more information
    1. NetBackup for VMware best practices
      1.  
        NetBackup for VMware with deduplication
    2.  
      How NetBackup handles VMware tag associations at restore
    3.  
      Best practices for VMware tag usage
    4. About reducing the size of VMware backups
      1.  
        Block-level backup (BLIB): full vs incremental
      2.  
        Deleting a vSphere Client snapshot
    5.  
      Further assistance with NetBackup for VMware
  23. Troubleshooting VMware operations
    1. NetBackup logging for VMware
      1.  
        NetBackup logs for Accelerator with virtual machines
      2.  
        Configuring VxMS logging
      3.  
        Format of the VxMS core.log and provider.log file names
      4.  
        Configuring the VDDK logging level
    2.  
      Troubleshooting VMware backups
    3.  
      Troubleshooting the restore of VMware and restores of files
    4.  
      Troubleshooting the adding of VMware servers
    5.  
      Troubleshooting the browsing of VMware servers
    6.  
      Troubleshooting the status for a newly discovered VM
    7.  
      Troubleshooting policy configuration
    8.  
      Troubleshooting the download of files from an instant access VM
    9.  
      Troubleshooting backups and restores of excluded virtual disks
    10.  
      How to determine the ESX network that NetBackup used for the backup or restore
    11.  
      Preventing browsing delays caused by DNS problems
    12.  
      Changing the browsing timeout for virtual machine discovery
    13.  
      Changing timeout and logging values for vSphere
    14.  
      Credentials for VMware server are not valid
    15. Snapshot error encountered (status code 156)
      1.  
        The origin of the snapshot failure: NetBackup or VMware?
    16.  
      Conflict between NetBackup and VMware Storage vMotion with vSphere 5.0 or later
    17.  
      Backup or restore job hangs
    18.  
      VMware SCSI requirements for application quiesce on Windows
    19.  
      VMware virtual machine does not restart after restore
    20.  
      A restored VM may not start or its file system(s) may not be accessible
    21.  
      NetBackup job fails due to update tasks on the VMware server
    22.  
      The vSphere interface reports that virtual machine consolidation is needed
    23.  
      Linux VMs and persistent device naming
    24.  
      For a VMware virtual machine with Windows dynamic disks, a restore from incremental backup fails with a Windows restore host and the hotadd transport mode
    25.  
      Simultaneous hotadd backups (from the same VMware backup host) fail with status 13
    26.  
      Troubleshooting VMware tag usage
    27.  
      Ensuring that guest customizations can be restored in vCloud Director
    28.  
      Troubleshooting vmdk restore to existing VM
    29.  
      Troubleshooting backups of virtual machines on Virtual Volumes (VVols)
    30.  
      Issues with the CA certificate during installation of the NetBackup client on VMware Cloud (VMC)
  24. Appendix A. Configuring services for NFS on Windows
    1.  
      About installing and configuring Network File System (NFS) for Granular Recovery Technology (GRT)
    2. About configuring services for NFS on Windows 2012 or 2016 (NetBackup for VMware)
      1.  
        Enabling Services for Network File System (NFS) on a Windows 2012 or 2016 media server (NetBackup for VMware)
      2.  
        Enabling Services for Network File System (NFS) on a Windows 2012 or 2016 restore host (NetBackup for VMware)
    3.  
      Disabling the Server for NFS (NetBackup for VMware)
    4.  
      Disabling the Client for NFS on the media server (NetBackup for VMware)
    5.  
      Configuring a UNIX media server and Windows backup or restore host for Granular Recovery Technology (NetBackup for VMware)
    6.  
      Configuring a different network port for NBFSD (NetBackup for VMware)
  25. Appendix B. Backups of VMware raw devices (RDM)
    1.  
      About VMware raw device mapping (RDM)
    2.  
      Configurations for backing up RDMs
    3.  
      About alternate client backup of RDMs
    4.  
      Requirements for alternate client backup of RDMs
    5.  
      Configure an alternate client backup of RDMs

Troubleshooting the restore of VMware and restores of files

The following table describes the issues that may occur when you perform VMware restores.

Table: Errors with VMware restores and file restores

Issue

Explanation

Restore fails because the datastore did not have enough space for the .vmdk files.

This issue can occur when a virtual machine is configured on multiple datastores and a leftover snapshot that existed on the virtual machine when it was backed up. NetBackup tries to restore all .vmdk files to the snapshot datastore.

Alternatively, you can restore the virtual machine to an alternate location.

File recovery from a VM backup is unsuccessful.

For a Linux virtual machine, if unsupported special characters are in the volume name, the Enable file recovery from VM backup option does not work. As a result, you cannot restore individual files from that volume. The following topic for supported characters.

See Optimizations options (VMware).

If a VM is configured on a logical volume (LVM or LDM): Individual file recovery does not work if the volume disk set contains a mixture of disk types:

  • Some of the logical volume disks are regular virtual disks (normal VMDKs).

  • Some of the disks in the same volume are independent disks or are physical disks in raw device mapping mode (RDM).

The backup job succeeds but files cannot be individually restored from the file systems that reside on the disk set (LVM or LDM). To be able to restore files individually, reconfigure the VM's logical volumes to reside on regular virtual disks (vmdk) only. Note that VMware does not make snapshots of independent disks or RDM disks.

An incremental backup does not back up files and the individual files cannot be restored from the incremental backup.

Any files that are moved or renamed or not backed up. However, when you restore the entire VM from a block-level incremental backup, note: the file metadata is updated and the moved or renamed files in the restored VM reflect the updated metadata.

The restore fails when you restore individual files to a virtual machine that has NetBackup client software.

When you restore individual files to a virtual machine that has a NetBackup client, make sure that a firewall does not interfere with the restore. If a firewall stops the restore, turn off the firewall and retry the restore.

Mount point missing on a restored Windows virtual machine.

A Windows virtual machine may fail to write its mount point configuration to disk (the mount point configuration remains in RAM). In that case, the mount point information cannot be backed up. When the virtual machine is restored, the data from the mounted volume is restored, but the mount point is absent from the restored virtual machine.

Reassign the mount point on the restored virtual machine. To make sure the mount point is correctly configured, restart the virtual machine.

Recovery of individual files or folders is not available and requires "Switch to Instant Access".

In some cases you may find you cannot access or recover certain files with an individual file restore from a VMware backup. However, it may be possible to recover these files with the "Switch to Instant Access" feature in the web UI. Some examples of these files include files from unsupported file systems (for example, btrfs or thin-provisioned LVM volumes) or unsupported file system features (for example, files with XFS reflinks or shared extents). Additionally, if certain mount points do not display in the browse tree or list view, you may have to click "Switch to Instant Access" to view these mount points.

See Recover files and folders with VMware agentless restore.

Mount points are not available when restoring files from a Linux virtual machine.

For Linux virtual machines, only the ext2, ext3, ext4, and XFS file systems are supported for individual file restore. If a partition is formatted with some other file system, the backup succeeds but NetBackup cannot map the file system addresses of the files. As a result, NetBackup cannot restore individual files from that partition. Only the files that were on ext2, ext3, ext4, or XFS partitions can be individually restored.

Note:

To restore individual files from their original mount points, the "/" (root) partition must be formatted as ext2, ext3, ext4, or XFS. If the "/" (root) partition is formatted with a different file system (such as ReiserFS), the mount points cannot be resolved. In that case, you can restore ext2, ext3, ext4, or XFS files from the /dev level (such as /dev/sda1). You cannot restore the files from their original mount point level.

Invalid client error when you restore files using the BAR interface that is installed on the virtual machine.

If the virtual machine was backed up by display name or UUID, and the display name is not the same as the host name, note: You cannot restore individual files by means of the Backup, Archive, and Restore (BAR) interface if the interface is installed on the virtual machine itself. The files can be restored if BAR is installed on the primary server or media server. In this case, BAR must not be installed on the virtual machine that you want to restore to.

To restore files, the Destination client for restores field in the BAR interface must have a valid host name or IP address.

An attempt to restore a full virtual machine fails with the SAN transport type.

Recommended action: Try the NBD transport type instead.

Restoring a virtual machine with a transport mode of NBD or NBDSSL is slow.

The virtual machine had many small data extents due to heavy fragmentation. (A file system extent is a contiguous storage area defined by block offset and size.)

Recommended action: Use the hotadd transport mode.

The restore is from a block-level incremental backup and the changed blocks on the disk were heavily fragmented when the incremental backup occurred.

Recommended action: Use the hotadd transport mode.

For the SAN transport mode, the job is slow.

This issue can occur when you restore to a vCenter Server.

Recommended action: For greater speed, designate a VMware restore ESX server as the destination for the restore.

See Add VMware servers.

For other circumstances, see the following article:

VMware Transport Modes: Best practices and troubleshooting

For the SAN transport mode and a restore host on Windows, the restore fail.

The datastore's LUN is offline. The detailed status log contains messages similar to the following:

5/22/2013 4:10:12 AM - Info tar32(pid=5832) done. status: 24: 
socket write failed       
5/22/2013 4:10:12 AM - Error bpbrm(pid=5792) client restore EXIT 
STATUS 24: socket write failed     

Recommended action:

  • Make sure the status of the SAN disk on the restore host is online (not offline). Disk status can be checked or changed using the Windows diskpart.exe utility or the Disk Management utility (diskmgmt.msc). When the disk status reads online, retry the restore.

  • If multipathing is enabled, make sure all the paths are online.

Restores that use the hotadd or SAN transport modes do not include the VM's metadata changes in the restore.

The status log of the NetBackup job contains messages similar to the following:

07/25/2013 12:37:29 - Info tar (pid=16257) INF - Transport Type
= hotadd
07/25/2013 12:42:41 - Warning bpbrm (pid=20895) from client
<client_address>: WRN - Cannot set metadata (key:geometry.
biosSectors, value:62) when using san or hotadd transport.

Recommended action: Retry the restore with a different transport mode (nbd or nbdssl).

This problem is a known VMware issue.

You cannot restore individual VMware files onto the virtual machine itself, except under certain conditions.

Make sure that the VMware Tools are installed and up to date on each virtual machine.