Veritas NetBackup™ Virtual Appliance Getting Started Guide

To perform the initial configuration of a NetBackup Virtual Appliance

1. After you have deployed a new virtual appliance, log on to the NetBackup Virtual Appliance Shell Menu.

   The logon is admin, and the default password is P@ssw0rd.

2. (Optional) Configure the appliance to use a proxy server for cloud access.

   If your environment requires a proxy server to connect to cloud services, you can use the following procedure:

   • From the Main_Menu > Settings > Alerts view, type the following command:

     CallHome Proxy Add Server Port

     Where <server> is the fully qualified host name or IP address of the proxy server, and <port> is the port number used by the proxy server.

     Note:

     The proxy is automatically enabled during the initial configuration wizard.

3. (Optional) Configure the appliance date and time.

   NTP is an optional during the initial configuration wizard. If you do not use an NTP server in your environment, make sure to configure the appliance date and time before the initial configuration.

   Caution:

   If the date and time of this media server matches the date and time of the master server, the initial configuration wizard fails.

   • Navigate to the Main > Network view.

   • Set the time zone by entering the following command:

     TimeZone Set

     Select the appropriate time zone from the displayed list.

   • Set the date and time by entering the following command:

     Date Set Month Day HHMMSS Year

     Where Month is the name of the month.

     Where Day is the day of the month from 1 to 31.

     Where HHMMSS is the hour, minute, and seconds in a 24-hour format. The fields are separated by semi-colons, for example. HH:MM:SS.

     Where Year is the calendar year form 1970 through 2037.

4. Launch the initial configuration wizard:

   Main > Appliance > Configure

   A message about the Virtual Appliance Configuration Wizard appears. This wizard will walk you through the process to configure appliance network, storage, and NetBackup CloudCatalyst.

   The following prompt appears:

   >> Do you want to continue? [yes, no] (no)yes
   

   Type yes.

5. The network configuration prompts appear in the following order:

   • Hostname

     Enter a short host name or a fully qualified domain name (FQDN) for this appliance. As a best practice, Veritas recommends that you use FQDN.

     Caution:

     After the initial deployment has completed successfully, the only way to change the host name is to perform a factory reset.

     Note:

     If you plan to configure Active Directory (AD) authentication on this appliance, the host name must be 15 characters or less. Otherwise, AD configuration can fail.

   • DNS domain name

     Enter a DNS domain name for this appliance.

   • IPv4 address

     Enter the IPv4 address to be used for this appliance.

   • Netmask

     Enter the netmask that corresponds to the IP address.

   • Gateway IP address

     Enter the IPv4 address of the gateway (network point) that acts as an entrance to another network.

   • DNS server 1 IP address

     Enter the IPv4 address of the primary DNS server for this appliance.

   • DNS server 2 IP address(Optional)

     Enter the IPv4 address of the secondary DNS server for this appliance.

6. (Optional) The following prompt appears:

   The host name must be resolvable with a DNS or a HOSTS file for the initial configuration to be successful. Do you want to write the host name resolution information to the HOSTS file? [yes, no](no)

   Note:

   If the host name is not resolvable with a DNS or a HOSTS file during the initial configuration, the initial configuration wizard will fail.

   Type yes to use the HOSTS file to resolve the appliance host name. This ensures that the host name is resolvable when DNS is not available.

   Type no to use the DNS you entered.

7. The following prompts appear:

   • NTP server (Optional)

     Enter the Network Time Protocol (NTP) server for this appliance.

   • Master server

     Enter the NetBackup master server name or IP address for this appliance.

     Note:

     The NetBackup Virtual Appliance combined master and media server does not support adding additional media servers. In this scenario, do not use it as the master server for the media server.

     Note:

     If the host name of the master server is an FQDN, Veritas recommends that you use the FQDN to specify the master server for the media server.

8. When the CA certificate detail appear, confirm the detail, and then respond to the following prompt:

   >> Do you trust the CA certificate? [yes, no]

   Type yes

   Enter a token when it is required to deploy the host ID-based certificate:

   >> Enter token:

   Obtain the token from the NetBackup administrator of the master server. For more information about security certificates, refer to the NetBackup Security and Encryption Guide.

9. The following prompt appears:

   >> Enter the password for the host name-based certificate:

   Type the password that you created on the master server. If you do not have the password, run the following command on the master server.

   /usr/openv/netbackup/bin/bpnbat -addmachine appliance_name admin_password

   Where appliance_name is the host name of the appliance, and password is an arbitrary password that you will use to verify the host name-based certificate later during the NetBackup CloudCatalyst wizard.

10. Complete the NetBackup CloudCatalyst Appliance Configuration Wizard for your desired cloud provider.

    A NetBackup Virtual Appliance CloudCatalyst can only be configured with one cloud storage provider. For example, the appliance cannot be used with Amazon S3 and Amazon GovCloud at the same time.

    For detailed information about the required parameters in NetBackup CloudCatalyst Appliance Configuration Wizard, refer to the NetBackup Cloud Administrator's Guide.

    • Amazon S3

      Step 1: Cloud storage provider	Select Amazon.
      Step 2a: Cloud storage region	Select or create a storage region.
      Step 2b: NetBackup KMS encryption	Type yes if you enabled NetBackup KMS on the master server in Step [[UNRESOLVED XREF: v127187636]].
      Step 2c: SSL	Authentication only: Select this option, if you want to use SSL only at the time of authenticating users while they access the cloud storage. Data Transfer: Select this option, if you want to use SSL to authenticate users and transfer the data from NetBackup to the cloud storage.
      Step 2d: Storage class	Select a storage class for Amazon cloud storage, such as STANDARD or STANDARD - Infrequent Access.
      Step 3: Access details	Enter the access key ID and secret access key for your Amazon account.
      Step 4: Configure storage bucket	Select or create a storage bucket.
      Step 5a: MSDP cache diskpool	Enter a name for the MSDP cache diskpool.
      Step 5b: MSDP cache storage unit	Enter a name for the MSDP cache storage unit.

    • Amazon GovCloud

      Step 1: Cloud storage provider	Select Amazon GovCloud
      Step 2a: Cloud storage region	Select or create a storage region.
      Step 2b: NetBackup KMS encryption	Type yes if you enabled NetBackup KMS on the master server in Step [[UNRESOLVED XREF: v127187636]].
      Step 2c: SSL	Authentication only: Select this option, if you want to use SSL only at the time of authenticating users while they access the cloud storage. Data Transfer: Select this option, if you want to use SSL to authenticate users and transfer the data from NetBackup to the cloud storage.
      Step 3a: Credentials broker	Select whether to use a credentials broker or standard access details.
      Step 3b: Credentials broker information	Enter the credentials broker details. Ensure that the necessary Certificate and Private key files reside at the db/cloud location on the NetBackup master server. UNIX: /usr/openv/netbackup/db/cloud Windows: install_dir\NetBackup\db\cloud Appliance master:
      Step 3b: Access details	Enter the access key ID and secret access key for your Amazon account.
      Step 4: Configure storage bucket	Select or create a storage bucket.
      Step 5a: MSDP cache diskpool	Enter a name for the MSDP cache diskpool.
      Step 5b: MSDP cache storage unit	Enter a name for the MSDP cache storage unit.

    • Microsoft Azure and Azure Government

      Step 1: Cloud storage provider	Select Microsoft Azure.
      Step 2a: Blob service endpoint	Select a blob service endpoint.
      Step 2b: NetBackup KMS encryption	Type yes if you enabled NetBackup KMS on the master server in Step [[UNRESOLVED XREF: v127187636]].
      Step 2c: SSL	Authentication only: Select this option, if you want to use SSL only at the time of authenticating users while they access the cloud storage. Data Transfer: Select this option, if you want to use SSL to authenticate users and transfer the data from NetBackup to the cloud storage.
      Step 3: Access details	Enter the storage account and access key ID for your Azure account.
      Step 4: Configure container	Select or create a container.
      Step 5a: MSDP cache diskpool	Enter a name for the MSDP cache diskpool.
      Step 5b: MSDP cache storage unit	Enter a name for the MSDP cache storage unit.

11. Use the following command to verify that the automatic configuration completed successfully:

    Main > Appliance > Status

    The command output should contain a message similar to the following:

    Appliance Version is 3.1.2.
    
    Appliance is configured as media appliance for NetBackup CloudCatalyst.
    

    If the output does not show that the appliance is configured as a media appliance, you need to redeploy the appliance or perform other troubleshooting steps to fix the issue before you proceed to the next step. See Troubleshooting NetBackup Virtual Appliance initial deployment issues.

12. Use the following command to set the time zone:

    Main > Network > TimeZone Set

    Select the appropriate time zone from the displayed list.

13. Add a permanent license key before the evaluation key expires with the following command:

    Main > Manage > License > Add

    You can locate your permanent license key from the Veritas Entitlement Management System (VEMS). To access VEMS, click Licensing on the Veritas Support website.

    Warning:

    The NetBackup Virtual Appliance has a specific license key, and if the correct key is not installed, the appliance services stop functioning after the evaluation key expires. Make sure that the permanent license key that you add is correct for NetBackup Virtual Appliance.

    See Managing license keys on the NetBackup Virtual Appliance.

14. Use the following commands to change the admin and the maintenance account passwords from the known default password (P@ssw0rd):

    • Main > Settings > Password admin

    • Main > Settings > Password maintenance