Veritas NetBackup™ for Nutanix Acropolis Hypervisor (AHV) Administrator's Guide

Last Published:
Product(s): NetBackup (8.2)
  1. Introduction to NetBackup for Acropolis Hypervisor (AHV)
    1.  
      Protect AHV using NetBackup
    2. About the Hypervisor policy type to protect Nutanix AHV VMs
      1.  
        Migrating BigData policy to Hypervisor policy
    3.  
      NetBackup terminology related to the AHV backup
    4.  
      NetBackup for AHV environment
  2. Prerequisites and things to consider before using the plug-in
    1.  
      Prerequisites
    2. Things to consider before using the NetBackup plug-in for Nutanix AHV
      1.  
        NetBackup character restrictions for virtual machine names
  3. Downloading and installing the Nutanix plug-in
    1.  
      Plan the installation for Nutanix AHV
    2.  
      NetBackup server and client requirements
    3.  
      License requirements for the Nutanix AHV
    4.  
      Download the Nutanix AHV plug-in binaries
    5.  
      Install the Nutanix AHV plug-in
  4. Configuring NetBackup communication with AHV
    1.  
      Establishing communication between NetBackup and Nutanix AHV
    2. Configuring secure communication between the Nutanix Acropolis Hypervisor server and NetBackup host
      1.  
        About the nb_nutanix-ahv configuration file
      2. Managing SSL certificates through ECA framework
        1.  
          ECA_TRUST_STORE_PATH for NetBackup servers and clients
        2.  
          ECA_CRL_PATH for NetBackup servers and clients
        3.  
          VIRTUALIZATION_HOSTS_SECURE_CONNECT_ENABLED for servers and clients
        4.  
          VIRTUALIZATION_CRL_CHECK for NetBackup servers and clients
    3.  
      Adding the Nutanix Acropolis Cluster credentials for NetBackup
    4. Adding a backup host to the NetBackup master server
      1.  
        Adding a backup host to the NetBackup master access list
    5.  
      Adding a backup host to the Acropolis Cluster access list
  5. Configuring NetBackup policies for AHV
    1.  
      Creating a backup policy using the NetBackup Policies utility
    2.  
      Creating a backup policy using the NetBackup Command Line Interface
  6. Backup and recovery
    1. Back up the Nutanix AHV virtual machines
      1.  
        Basic phases in a NetBackup backup of an AHV
    2. Overview of the Nutanix AHV virtual machines recovery process
      1.  
        About recovering the Nutanix AHV virtual machines
      2.  
        Planning the recovery of a Nutanix AHV VM
      3.  
        Recovering a Nutanix AHV VM using the Backup, Archive, and Restore console
      4.  
        About recovering AHV VMs from the images that are backed up using NetBackup versions 8.1, 8.1.1, or 8.1.2
      5. Recovering a Nutanix AHV VM using the command line for Hypervisor policy
        1.  
          Creating or modifying the rename file
        2.  
          Using the command line to recover Nutanix AHV virtual machines for Hypervisor policy
  7. Troubleshooting issues
    1.  
      Troubleshooting issues related to AHV backup
    2.  
      NetBackup logs
    3.  
      About errors during policy creation, restore, and validation
    4.  
      NetBackup status codes
  8. Appendix A. NetBackup commands to backup and restore Nutanix AHV virtual machines
    1.  
      NetBackup commands for protecting the AHV
  9. Appendix B. Protect Nutanix AHV virtual machines with BigData policy
    1.  
      Using the BigData policy to backup and restore Nutanix AHV virtual machines
    2. Recovering a Nutanix AHV VM using the command line for BigData policy
      1.  
        Creating or modifying the rename file
      2.  
        Using the command line to recover Nutanix AHV virtual machines for BigData policy

Managing SSL certificates through ECA framework

NetBackup can now validate Nutanix Acropolis Hypervisor (AHV) server certificates using their root or intermediate certificate authority (CA) certificates.

For NetBackup 8.2, only PEM certificate format is supported for virtualization servers.

For more information, See VIRTUALIZATION_HOSTS_SECURE_CONNECT_ENABLED for servers and clients.

The following procedure is applicable for the NetBackup master server and all virtualization access hosts.

To configure secure communication between the Nutanix AHV server and virtualization access host

  1. Configure a external certificate authority trust store on the virtualization access host.
  2. Add CA certificates of the required Nutanix AHV server in the trust store on the access host.
  3. Use the nbsetconfig command to configure the following NetBackup configuration options on the access host:

    For more information on the configuration options, refer to the NetBackup Administrator's Guide.

    ECA_TRUST_STORE_PATH

    Specifies the file path to the certificate bundle file that contains all trusted root CA certificates.

    This option is specific to file-based certificates. You should not configure this option if Windows certificate store is used.

    If you have already configured this external CA option, append the Nutanix AHV CA certificates to the existing external certificate trust store.

    If you have not configured the option, add all the required Nutanix AHV server CA certificates to the trust store and set the option.

    See ECA_TRUST_STORE_PATH for NetBackup servers and clients.

    ECA_CRL_PATH

    Specifies the path to the directory where the certificate revocation lists (CRL) of the external CA are located.

    If you have already configured this external CA option, append the Nutanix AHV server CRLs to the CRL cache.

    If you have not configured the option, add all the required CRLs to the CRL cache and then set the option.

    See ECA_CRL_PATH for NetBackup servers and clients.

    VIRTUALIZATION_HOSTS_SECURE_CONNECT_ENABLED

    This option affects Nutanix AHV, RHV, and VMware secure communication. Without this option, the secure or insecure communication with workload is decided by each workload and plug-in separately.

    For Nutanix AHV, secure communication is enabled by default.

    This option lets you skip the security certificate validation.

    See VIRTUALIZATION_HOSTS_SECURE_CONNECT_ENABLED for servers and clients.

    VIRTUALIZATION_CRL_CHECK

    Lets you validate the revocation status of the virtualization server certificate against the CRLs.

    By default, the option is disabled.

    See VIRTUALIZATION_CRL_CHECK for NetBackup servers and clients.

    For more information on external CA support, refer to the NetBackup Security and Encryption Guide.