NetBackup™ Web UI Security Administrator's Guide
- Introducing the NetBackup web user interface
- Managing role-based access control
- About role-based access control (RBAC) in NetBackup
- NetBackup default RBAC roles
- Configuring RBAC
- Add a custom role
- Edit or delete a custom role
- Add an object group
- Previewing the assets, application servers, or protection plans for an object group
- Edit or delete an object group
- Add access for a user through access rules
- Edit or remove user access rules
- How can I limit role permissions to specific objects or assets?
- Security events and audit logs
- Managing host mappings and certificates
- About security management and certificates in NetBackup
- NetBackup host IDs and host ID-based certificates
- View NetBackup host information
- Approve or add mappings for a host that has multiple host names
- Reissue a certificate when a host's certificate is no longer valid
- Remove mappings for a host that has multiple host names
- Reset a host's attributes
- Managing global security settings
- Troubleshooting the web UI
Select a security level for certificate deployment
NetBackup offers several security levels for the certificate deployment. The security level determines what security checks the Certificate Authority (CA) performs before it issues a certificate to a NetBackup host. The level also determines how frequently the Certificate Revocation List (CRL) is refreshed on the host.
For more details on security levels, certificate deployment, and the CRL, see the NetBackup Security and Encryption Guide.
To select a security level for certificate deployment
- At the top, click Settings > Global security.
- Click Secure communication.
Certificates are deployed on hosts during installation, after the host's administrator confirms the master server fingerprint. The security level determines if an authorization token is required or not for a host.
Very high
NetBackup requires an authorization token for every new certificate request.
High (Default)
NetBackup does not require an authorization token if the host is known to the master server, which means the host appears in a NetBackup configuration file, the EMM database, a backup policy, or the host is a legacy client.
See "About certificate deployment security levels" in the NetBackup Security and Encryption Guide.
Medium
NetBackup issues certificates without an authorization token if the master server can resolve the host name to the IP address from which the request was originated.
- Click Save.