Veritas NetBackup™ Virtual Appliance Documentation

To perform the initial configuration of a NetBackup Virtual Appliance

1. After you have deployed a new virtual appliance, log on to the NetBackup Virtual Appliance Shell Menu.

   The logon is admin, and the default password is P@ssw0rd.

2. Use the following commands to change the admin and the maintenance account passwords from the known default password (P@ssw0rd):

   • Main > Settings > Password admin

   • Main > Settings > Password maintenance

   See Changing NetBackup Virtual Appliance user passwords.

3. (Optional) Configure the appliance date and time.

   NTP is an optional during the initial configuration wizard. If you do not use an NTP server in your environment, make sure to configure the appliance date and time before the initial configuration.

   Caution:

   If the date and time of this media server matches the date and time of the master server, the initial configuration wizard fails.

   • Navigate to the Main > Network view.

   • Set the time zone by entering the following command:

     TimeZone Set

     Select the appropriate time zone from the displayed list.

   • Set the date and the time by entering the following command:

     Date Set Month Day HHMMSS Year

     Where Month is the name of the month.

     Where Day is the day of the month from 1 to 31.

     Where HHMMSS is the hour, minute, and seconds in a 24-hour format. The fields are separated by semi-colons, for example, HH:MM:SS.

     Where Year is the calendar year from 1970 through 2037.

4. (Optional)

   If you plan to use this media server in a NAT network, perform the following tasks on the associated master server before you start the initial configuration:

   • Enable the DNAT feature on the master server.

   • Add the name of this media server to the NetBackup Servers list on the master server.

     See Configuring a master server to communicate with an appliance media server.

5. Use the following command to start the initial configuration:

   Main > Appliance > Configure

   A message about the Virtual Appliance Initial Configuration Wizard appears. This wizard will walk you through a two-step process to configure this appliance.

6. The wizard takes you to the network configuration.

   Specify the following:

   • Hostname

     Enter a short host name or a fully qualified domain name (FQDN) for this appliance. As a best practice, Veritas recommends that you use FQDN.

     Caution:

     After the initial deployment has completed successfully, the only way to change the host name is to perform a factory reset.

     Note:

     If you plan to configure Active Directory (AD) authentication on this appliance, the host name must be 15 characters or less. Otherwise, AD configuration can fail.

   • DNS domain name

     Enter a DNS domain name for this appliance.

   • IPv4 address

     Enter the IPv4 address to be used for this appliance.

   • Netmask

     Enter the netmask that corresponds to the IP address.

   • Gateway IP address

     Enter the IPv4 address of the gateway (network point) that acts as an entrance to another network.

   • DNS server 1 IP address

     Enter the IPv4 address of the primary DNS server for this appliance.

   • DNS server 2 IP address(Optional)

     Enter the IPv4 address of the secondary DNS server for this appliance.

7. (Optional) The following prompt appears:

   The host name must be resolvable with a DNS or a HOSTS file for the initial configuration to be successful. Do you want to write the host name resolution information to the HOSTS file? [yes, no](no)

   Note:

   If the host name is not resolvable with a DNS or a HOSTS file during the initial configuration, the initial configuration wizard will fail.

   Type yes to use the HOSTS file to resolve the appliance host name. This ensures that the host name is resolvable when DNS is not available.

   Type no to use the DNS you entered.

8. After the network configuration is completed, the wizard takes you to the next step for storage configuration.

   In the second step, specify the following:

   • NTP server (Optional)

     Enter the Network Time Protocol (NTP) server for this appliance.

   • Master server

     Enter the NetBackup master server name or IP address for this appliance. The master server can be a traditional (non-appliance) NetBackup master server or a NetBackup physical appliance.

     Note:

     If the host name of the master server is an FQDN, Veritas recommends that you use the FQDN to specify the master server for the media server.

   • After you have entered the master server name, the appliance pings the master server for the Certificate Authority (CA) status and shows the result. Each of the following bullet statements describes the possible status results. Follow the instructions that appear below the applicable status result to complete the certificate configuration.

     • The master server <master_server_name> has an enabled External CA-signed certificate. Do you want to import the External CA-signed certificate for this Media server now [yes,no](yes):

       Press Enter to continue. The following message appears:

       The following shares have been opened on the appliance for you to upload certificate files:

       NFS share <media_server_name>:/inst/share

       CIFS share \\<media_server_name>\general_share

       Enter the following details for external certificate configuration:

       Enter the certificate file path:

       Enter the trust store file path:

       Enter the private key path:

       Enter the password for the passphrase file path or skip security configuration (default: NONE):

       Enter the following details for CRL usage:

       Should a CRL be honored for the external certificate?

       1) Use the CRL defined in the certificate.

       2) Use the specific CRL directory.

       3) Do not use a CRL.

       q) Skip security configuration.

       CRL option: Enter 1, 2, 3, or q.

       Verify the External CA details that you entered:

       Certificate file name:

       Trust store file name:

       Private key file name:

       CRL check level: (Shows the selected CRL option.)

       Do you want to use the above certificate files? [yes, no](yes):

       After verifying that the entered information is correct, press Enter to continue and answer the following prompt:

       Is this correct? [yes, no](yes):

       If all of the information is correct, press Enter to continue.

       The appliance performs an ECA health check and shows the result of each validation check. When the health check has completed successfully, the following messages appear:

       ECA health check was successful.

       The external certificate has been registered successfully.

     • The master server <master_server_name> currently uses an external CA issued certificate and its own internal certificate. Would you like to proceed with the external CA issued certificate? [yes,no](yes):

       If you select no, the following message appears:

       This appliance will use a NetBackup issued certificate for secure communication.

       If you select yes, enter the following details for external certificate configuration:

       Enter the certificate file path:

       Enter the trust store file path:

       Enter the private key path:

       Enter the password for the passphrase file path or skip security configuration (default: NONE):

       Enter the following details for CRL usage:

       Should a CRL be honored for the external certificate?

       1) Use the CRL defined in the certificate.

       2) Use the specific CRL directory.

       3) Do not use a CRL.

       q) Skip security configuration.

       CRL option: Enter 1, 2, 3, or q.

       Verify the External CA details that you entered:

       Certificate file name:

       Trust store file name:

       Private key file name:

       CRL check level: (Shows the selected CRL option.)

       Do you want to use the above certificate files? [yes, no](yes):

       After verifying that the entered information is correct, press Enter to continue and answer the following prompt:

       Is this correct? [yes, no](yes):

       If all of the information is correct, press Enter to continue.

       The appliance performs an ECA health check and shows the result of each validation check. When the health check has completed successfully, the following messages appear:

       ECA health check was successful.

       The external certificate has been registered successfully.

     • This appliance will use a NetBackup issued certificate for secure communication.

       No further certificate configuration is required. Click Next to continue

     For more information about security certificates, refer to the NetBackup Security and Encryption Guide.

9. Complete the remaining prompts for the storage configuration as follows:

   • AdvancedDisk disk pool name

     Enter a name for the AdvancedDisk disk pool on the appliance.

   • AdvancedDisk storage unit name

     Enter a name for the AdvancedDisk storage unit on the appliance.

   • AdvancedDisk storage size

     Enter a size for the AdvancedDisk storage.

   • MSDP storage unit name

     Enter a name for the MSDP storage unit on the appliance.

   • MSDP disk pool name

     Enter a name for the MSDP disk pool on the appliance.

   • MSDP storage size

     Enter a size for the MSDP storage.

   • MSDP Catalog size

     Enter a size for the MDSP Catalog storage.

10. Use the following command to verify that the automatic configuration completed successfully:

    Main > Appliance > Status

    The command output should contain a message similar to the following:

    Appliance Version is 3.3.0.1.
    
    Appliance is configured as media appliance.
    

    If the output does not show that the appliance is configured as a media appliance, you need to redeploy the appliance or perform other troubleshooting steps to fix the issue before you proceed to the next step. See Troubleshooting NetBackup Virtual Appliance initial deployment issues.

11. Use the following command to set the time zone:

    Main > Network > TimeZone Set

    Select the appropriate time zone from the displayed list.

12. Add a permanent license key before the evaluation key expires with the following command:

    Main > Manage > License > Add

    You can locate your permanent license key from the Veritas Entitlement Management System (VEMS). To access VEMS, click Licensing on the Veritas Support website.

    Warning:

    If the correct license key is not installed, the appliance services stop functioning after the evaluation key expires. Make sure that the NetBackup license you add includes support for NetBackup Virtual Appliance.

    See Managing license keys on the NetBackup Virtual Appliance.

13. (Optional)

    If you want to configure an IPv6 address for the appliance, run the following command:

    Main > Network > IPv6 <IPAddress> <Prefix> InterfaceName

    Where <IPAddress> is the IPv6 address and <Prefix> is the prefix length.

    See About IPv4-IPv6-based network support.

14. (Optional)

    If you want to an IPv6 DNS server on the appliance, run the following command:

    Main > Network > DNS Add NameServer <IPAddress>

    Where <IPAddress> is the IPv6 address of the additional DNS server. Only global-scope and unique-local IPv6 addresses are allowed.

    See Configuring DNS and host name mapping for the NetBackup Virtual Appliance.

15. If you want to configure the appliance for MSDP cloud, log in to the NetBackup web UI as the nbasecadmin user and configure the MSDP cloud storage as follows:

    • Create a disk pool.

    • Create a storage unit.

      For details, see the NetBackup Web UI Administrator's Guide.