Veritas NetBackup™ for VMware Administrator's Guide
- Introduction
- Required tasks: overview
- Notes and prerequisites
- Configure NetBackup communication with VMware
- Adding NetBackup credentials for VMware
- Validating VMware virtualization server certificates in NetBackup
- Configure NetBackup policies for VMware
- VMware backup options
- Exclude Disks tab
- Configure a VMware Intelligent Policy
- Reduce the size of backups
- Back up virtual machines
- Use Accelerator to back up virtual machines
- Restore virtual machines
- Restoring the full VMware virtual machine
- Virtual Machine Recovery dialog boxes (restore to original location)
- Virtual Machine Recovery dialogs boxes (restore to alternate location)
- Restoring VMware virtual machine disks by using Backup, Archive, and Restore
- Restoring VMware virtual machine disks by using NetBackup commands
- Restoring individual VMware virtual machine files
- Browse and search virtual machines for restore
- Restore virtual machines with Instant Recovery
- Use NetBackup for vCloud Director
- Virtual machine recovery dialog boxes for vCloud Director
- Best practices and more information
- Troubleshooting
- Appendix A. NetBackup commands to back up and restore virtual machines
- Using NetBackup commands to create a VMware policy
- Appendix B. Configuring services for NFS on Windows
- About configuring services for NFS on Windows 2012 or 2016 (NetBackup for VMware)
- About configuring services for NFS on Windows 2008 and 2008 R2 (NetBackup for VMware)
- Appendix C. The Reuse VM selection query results option
- Appendix D. Backup of VMware raw devices (RDM)
Validating VMware virtualization server certificates in NetBackup
NetBackup can now validate VMware virtualization server certificates using their root or intermediate certificate authority (CA) certificates.
The following procedure is applicable for the NetBackup master server and all VMware access hosts.
To configure secure communication between VMware virtualization server and VMware access host
- Configure an external CA trust store on the VMware access host.
- Add CA certificates of the required VMware servers (VCenter, ESX, or ESXi server) in the trust store on the access host.
In case of Windows certificate store, you need to add the CA certificate to the Windows Trusted Root Certification Authorities.
Use the following command:
certutil.exe -addstore -f "Root" certificate filename
- Use the nbsetconfig command to configure the following NetBackup configuration options on the access host:
ECA_TRUST_STORE_PATH
Specifies the file path to the certificate bundle file that contains all trusted root CA certificates.
This option is specific to file-based certificates. You should not configure this option if Windows certificate store is used.
If you have already configured this external CA option, append the VMware CA certificates to the existing external certificate trust store.
If you have not configured the option, add all the required virtualization server CA certificates to the trust store and set the option.
ECA_CRL_PATH
Specifies the path to the directory where the certificate revocation lists (CRL) of the external CA are located.
If the configuration option is already configured, append the virtualization server CRLs to the CRL cache.
If the option is not configured, add all the required CRLs to the CRL cache and then set the option.
VIRTUALIZATION_HOSTS_SECURE_CONNECT_ENABLED
Lets you enable the validation of a virtualization server's certificate.
See VIRTUALIZATION_HOSTS_SECURE_CONNECT_ENABLED for servers and clients.
VIRTUALIZATION_CRL_CHECK
Lets you validate the revocation status of the virtualization server certificate against the CRLs.
By default, the option is disabled.
See VIRTUALIZATION_CRL_CHECK for NetBackup servers and clients.
For more information on external CA support in NetBackup, refer to the NetBackup Security and Encryption Guide.