Veritas NetBackup™ Deduplication Guide
- Introducing the NetBackup media server deduplication option
- Planning your deployment
- About MSDP storage and connectivity requirements
- About NetBackup media server deduplication
- About NetBackup Client Direct deduplication
- About MSDP remote office client deduplication
- About MSDP performance
- MSDP deployment best practices
- Provisioning the storage
- Licensing deduplication
- Configuring deduplication
- Configuring the Deduplication Multi-Threaded Agent behavior
- Configuring the MSDP fingerprint cache behavior
- Configuring MSDP fingerprint cache seeding on the storage server
- About MSDP Encryption using KMS service
- Configuring a storage server for a Media Server Deduplication Pool
- Configuring a disk pool for deduplication
- Configuring a Media Server Deduplication Pool storage unit
- About MSDP optimized duplication within the same domain
- Configuring MSDP optimized duplication within the same NetBackup domain
- Configuring MSDP replication to a different NetBackup domain
- About NetBackup Auto Image Replication
- Configuring a target for MSDP replication to a remote domain
- Creating a storage lifecycle policy
- Resilient Network properties
- Editing the MSDP pd.conf file
- About protecting the MSDP catalog
- Configuring an MSDP catalog backup
- Configuring deduplication to the cloud with NetBackup CloudCatalyst
- Using NetBackup CloudCatalyst to upload deduplicated data to the cloud
- Configuring a CloudCatalyst storage server for deduplication to the cloud
- Monitoring deduplication activity
- Viewing MSDP job details
- Managing deduplication
- Managing MSDP servers
- Managing NetBackup Deduplication Engine credentials
- Managing Media Server Deduplication Pools
- Changing a Media Server Deduplication Pool properties
- Configuring MSDP data integrity checking behavior
- About MSDP storage rebasing
- Managing MSDP servers
- Recovering MSDP
- Replacing MSDP hosts
- Uninstalling MSDP
- Deduplication architecture
- Troubleshooting
- About unified logging
- About legacy logging
- Troubleshooting MSDP installation issues
- Troubleshooting MSDP configuration issues
- Troubleshooting MSDP operational issues
- Troubleshooting CloudCatalyst issues
- CloudCatalyst logs
- Problems encountered while using the Cloud Storage Server Configuration Wizard
- Disk pool problems
- Problems during cloud storage server configuration
- CloudCatalyst troubleshooting tools
- Appendix A. Migrating to MSDP storage
About the certificate to be used for adding a trusted master server
Source or target master servers may use NetBackup CA-signed certificates (host ID-based certificates) or external CA-signed certificates.
For more information on NetBackup host ID-based certificates and external CA support, refer to the NetBackup Security and Encryption Guide.
To establish trust between source and target master servers, NetBackup verifies the following:
Can the source master server establish trust using external CA-signed certificate? | If the external CA configuration options - ECA_CERT_PATH, ECA_PRIVATE_KEY_PATH, and ECA_TRUST_STORE_PATH - are defined in the NetBackup configuration file of the source master server, it can establish the trust using an external certificate. In case of Windows certificate trust store, only ECA_CERT_PATH is defined. For more information on the configuration options, refer to the NetBackup Administrator's Guide, Volume I. |
Which certificate authorities (CA) does the target master server support? | The target master server may support external CA, NetBackup CA, or both. The following settings show the CA usage information of the master server:
|
The following table lists CA support scenarios and certificate to be used to establish trust between the source and the target master servers.
Table: Certificate to be used for trust setup
Source master server capability to use external certificate | CA usage of the target master server | Certificate to be used for trust setup |
---|---|---|
Yes The source master server can use NetBackup CA and external CA for communication with a remote master server | External CA | External CA See Adding a trusted master server using external CA-signed certificate. |
NetBackup CA | NetBackup CA See Adding a trusted master server using NetBackup CA-signed (host ID-based) certificate. | |
External CA and NetBackup CA | NetBackup prompts to select the CA that you want to use for trust setup
| |
No The source master server can use only NetBackup CA for communication with a remote maser server | External CA | No trust is established |
NetBackup CA | NetBackup CA See Adding a trusted master server using NetBackup CA-signed (host ID-based) certificate. | |
External CA and NetBackup CA | NetBackup CA See Adding a trusted master server using NetBackup CA-signed (host ID-based) certificate. |