NetBackup™ for VMware Administrator's Guide
- Introduction
- About NetBackup for VMware
- About the virtual machine backups that include database data
- About the NetBackup appliance as a VMware backup host
- NetBackup for VMware components
- Appliance as backup host: component overview
- Media servers as backup or discovery hosts
- Overview of the VMware backup process
- NetBackup for VMware terminology
- Required tasks: overview
- Configuring RBAC roles for VMware administrators
- RBAC roles for the VMware administrator
- Assigning permissions at specific VMware object levels
- Create a custom role for a VMware server or datacenter
- Create a custom role for an Organization VDC administrator
- Create a custom role to manage specific VMs
- Manage permissions for a datacenter
- Manage permissions for a single VM
- Apply RBAC role permissions for a VM to other VMs
- Notes and prerequisites
- NetBackup for VMware: notes and restrictions
- Notes on VMware Virtual Volumes (VVols)
- NetBackup IPv6 parameter required for backups in VMware IPv6 environments
- NetBackup for VMware: notes on Linux virtual machines
- Notes on the NetBackup appliance as a VMware backup host
- NetBackup for VMware support for SAN multi-pathing
- NetBackup for VMware support for fault tolerant VMs
- NetBackup character restrictions for the Primary VM identifier
- In the policy Query Builder, display names, resource pool names, and vApp names are case-sensitive
- Notes on the hotadd transport mode
- Notes and limitations for tag usage in VMware Intelligent Policy queries
- Notes and limitations for the backup and restore of VMware tag associations
- Notes and limitations for the backup and restore of VMware storage policies
- Support for LVM thin pool based volumes
- VMware vSphere privileges
- About VMware vSphere privileges
- VMware vSphere privileges for virtual machine backups
- VMware vSphere privileges for a full VM restore
- VMware vSphere privileges to create an instant access VM
- VMware vSphere privileges for NetBackup plug-in operations
- VMware vSphere privileges for instant rollback
- VMware vSphere privileges for agentless SFR privileges
- VMware vSphere privileges for individual vmdk restore privileges
- VMware vSphere privileges for vApp restore and vApp restore to template
- Optional permissions for better integration with VMware vSphere
- Managing VMware servers
- About VMware discovery
- Add VMware servers
- Validate and update VMware server credentials
- Browse VMware servers
- Remove VMware servers
- Create an intelligent VM group
- Remove an intelligent VM group
- Add a VMware access host
- Remove a VMware access host
- Change resource limits for VMware resource types
- Setting privileges for posting events to vCenter
- Authentication token for the NetBackup vSphere plug-ins
- Validating VMware virtualization server certificates in NetBackup
- Configuring backup policies for VMware
- Configure a VMware policy
- Limit jobs per policy on the Attributes tab (for VMware)
- Backup options on the VMware tab
- Exclude disks tab
- Browse for VMware virtual machines
- Limiting the VMware servers that NetBackup searches when browsing for virtual machines
- Virtual machine host names and display names should be unique if VMs are selected manually in the policy
- Primary VM identifier option and manual selection of virtual machines
- About incremental backups of virtual machines
- Configuring incremental backups
- Storage Foundation Volume Manager volumes in the virtual machine
- Configuring a VMware Intelligent Policy
- About automatic virtual machine selection for NetBackup for VMware
- Support and use of VMware tag associations
- The basics of a NetBackup query rule
- Important notes on automatic virtual machine selection
- NetBackup requirements for automatic virtual machine selection
- Automatic virtual machine selection: Task overview
- Options for selecting VMware virtual machines
- About the Reuse VM selection query results option
- Configure automatic virtual machine selection
- Editing an existing query in Basic mode
- Using the Query Builder in Advanced mode
- AND vs. OR in queries
- Examples for the NetBackup Query Builder
- The IsSet operator in queries
- About selecting virtual machines by means of multiple policies
- Order of operations in queries (precedence rules)
- Parentheses in compound queries
- Query rules for resource pools
- Query rules for datacenter folders (host folder)
- Query rules for duplicate names
- Query rules for tags
- Query Builder field reference
- Test Query screen for VMware
- Test Query: Failed virtual machines
- Effect of Primary VM identifier parameter on Selection column in Test Query results
- Effect of Primary VM identifier parameter on VM Name column in Test query results
- Refreshing the display of virtual environment changes in the Query Builder
- Reducing the time required for VM discovery in a large VMware environment
- Use Accelerator to back up virtual machines
- About the NetBackup Accelerator for virtual machines
- Accelerator: full vs. incremental schedules
- How the NetBackup Accelerator works with virtual machines
- Accelerator notes and requirements for virtual machines
- Accelerator forced rescan for virtual machines (schedule attribute)
- Accelerator requires the OptimizedImage attribute
- Accelerator backups and the NetBackup catalog
- Accelerator messages in the backup job details log
- About reporting the amount of Accelerator backup data that was transferred over the network
- Replacing the Accelerator image size with the network-transferred data in NetBackup command output
- Configuring protection plans for VMware
- Malware scan
- Instant access
- Instant rollback
- Continuous data protection
- About continuous data protection
- CDP terminology
- CDP architecture
- Prerequisites
- Capacity-based licensing for CDP
- Steps to configure CDP
- Removing VMs from the CDP gateway
- Defining the CDP gateway
- Sizing considerations
- Limiting concurrent CDP backup jobs
- Controlling full sync
- Monitoring CDP jobs
- Using accelerators with CDP
- Recovering CDP protected VMs
- Some limitations of CDP
- Troubleshooting for CDP
- Backing up virtual machines
- VM recovery
- VMware agentless restore
- Restoring Individual files and folders from VMware backups
- Using NetBackup to back up Cloud Director environments
- About NetBackup for vCloud Director
- Notes on creating a NetBackup policy for vCloud
- Notes on restoring virtual machines into vCloud Director
- Recover VMware Cloud Director virtual machines
- Restore a vApp template that has multiple virtual machines
- Reducing the time required for VM discovery in a large vCloud environment
- Restore virtual machines with Instant Recovery
- About Instant Recovery for VMware
- Task overview for Instant Recovery for VMware
- Performance recommendations for Instant Recovery for VMware
- Requirements for Instant Recovery for VMware
- Notes on Instant Recovery for VMware
- Restarting the Client for NFS service on a Windows restore host
- Instant Recovery options on the nbrestorevm command
- Restoring a virtual machine with Instant Recovery for VMware
- Restoring a virtual machine to a different location with Instant Recovery for VMware
- Restoring individual files with Instant Recovery for VMware while the current virtual machine is running
- Job types for Instant Recovery for VMware
- Reactivating a restored virtual machine with Instant Recovery for VMware
- Protecting VMs using hardware snapshots and replication
- About virtual machines and hardware snapshots
- Deployment and architecture
- Features and applications supported
- Prerequisites for hardware snapshot and replication
- Operations supported with hardware snapshot
- Configuring a VMware policy to use hardware snapshots
- Configuring a VMware policy to use NetBackup snapshot manager replication
- Jobs in the Activity Monitor that use hardware snapshot for VMs
- Notes and limitations
- Troubleshooting with VMware hardware snapshot and replication operations
- Best practices and more information
- Troubleshooting VMware operations
- NetBackup logging for VMware
- Troubleshooting VMware backups
- Troubleshooting the restore of VMware and restores of files
- Troubleshooting the adding of VMware servers
- Troubleshooting the browsing of VMware servers
- Troubleshooting the status for a newly discovered VM
- Troubleshooting policy configuration
- Troubleshooting the download of files from an instant access VM
- Troubleshooting backups and restores of excluded virtual disks
- How to determine the ESX network that NetBackup used for the backup or restore
- Preventing browsing delays caused by DNS problems
- Changing the browsing timeout for virtual machine discovery
- Changing timeout and logging values for vSphere
- Credentials for VMware server are not valid
- Snapshot error encountered (status code 156)
- Conflict between NetBackup and VMware Storage vMotion with vSphere 5.0 or later
- Backup or restore job hangs
- VMware SCSI requirements for application quiesce on Windows
- VMware virtual machine does not restart after restore
- A restored VM may not start or its file system(s) may not be accessible
- NetBackup job fails due to update tasks on the VMware server
- The vSphere interface reports that virtual machine consolidation is needed
- Linux VMs and persistent device naming
- For a VMware virtual machine with Windows dynamic disks, a restore from incremental backup fails with a Windows restore host and the hotadd transport mode
- Simultaneous hotadd backups (from the same VMware backup host) fail with status 13
- Troubleshooting VMware tag usage
- Ensuring that guest customizations can be restored in vCloud Director
- Troubleshooting vmdk restore to existing VM
- Troubleshooting backups of virtual machines on Virtual Volumes (VVols)
- Issues with the CA certificate during installation of the NetBackup client on VMware Cloud (VMC)
- Appendix A. Configuring services for NFS on Windows
- About installing and configuring Network File System (NFS) for Granular Recovery Technology (GRT)
- About configuring services for NFS on Windows 2012 or 2016 (NetBackup for VMware)
- Disabling the Server for NFS (NetBackup for VMware)
- Disabling the Client for NFS on the media server (NetBackup for VMware)
- Configuring a UNIX media server and Windows backup or restore host for Granular Recovery Technology (NetBackup for VMware)
- Configuring a different network port for NBFSD (NetBackup for VMware)
- Appendix B. Backups of VMware raw devices (RDM)
Restore notes and restrictions
Before you begin the restore, note the following:
Cross-platform restore of individual files is not supported. You can restore Windows files to Windows guest operating systems but not to Linux. You can restore Linux files to supported Linux guest operating systems but not to Windows. In other words, the restore host must be the same platform as the files that you want to restore.
If you have back-level hosts in your environment, note the following about mixed-level backups and restores: The recovery host must be at the same or a later NetBackup release level as the backup host. For example, you cannot use a NetBackup 8.x recovery host to restore a virtual machine that was backed up by a NetBackup 9.x backup host.
Unless a NetBackup client is installed on the virtual machine, you must do the restore from the NetBackup primary server. Or, perform a VMware agentless restore or create an instant access VM for the restore.
To restore files to the original virtual machine location, the destination must be specified as the virtual machine's host name (not display name or UUID).
To restore directly to an ESX server, the name that is specified for the restore must match the ESX server's official host name. The name must be in the same format in which it is registered in DNS and in the VMware server (whether short or fully-qualified).
See Add VMware servers.
If the VM's display name was changed after the VM was backed up, the pre-recovery check may fail when you click :
VM exists overwrite -Failed. Vmxdir for VM exists
You can ignore the error and click , but note: The restore may succeed but the folder that contains the vmx file for the newly restored VM has a different name than the vmx folder of the existing VM. VMware does not rename this folder when the VM is renamed, but continues to use the existing folder.
As an alternative, restore the VM to a different location.
A virtual machine template cannot be restored to a standalone ESX server. Because templates are a feature of vCenter servers, you must restore the template through vCenter. If you restore a template to a standalone ESX server, the template is converted to a normal virtual machine and is no longer a template.
NetBackup supports backup and recovery of VMware NVRAM files and the vTPM devices that are associated with virtual machines.
A NetBackup 8.3 or later backup or recovery host is required for NVRAM and vTPM protection. Supported recovery methods include Full VM recovery and VMware Instant Recovery.
NetBackup does not support the backup or restore of NVRAM and vTPM for the virtual machines whose display names begin with a period ('.'). An existing VMware limitation prevents downloading or uploading data store files beginning with a period ('.') to a virtual machine's working directory as these appear as hidden files.
Restore of individual files from a backup of the full virtual machine is not supported if the virtual machine contains Storage Foundation Volume Manager volumes.
To restore Windows NTFS-encrypted files individually, you must install a NetBackup client on the virtual machine.
VMware does not support the restore of virtual machines directly to an ESX 5.x server that vCenter manages. To restore the virtual machine, select the vCenter server as the destination.
As an alternative, you can set up an independent ESX server to be used for restores. You must add NetBackup restore credentials for that ESX server by means of the VMware restore ESX server server type.
See Add VMware servers.
The APIs in VMware's Virtual Disk Development Kit (VDDK) contain the following limitation: The maximum write speed during virtual machine restore is roughly one third of the hardware's maximum speed.
If a virtual machine had vmdk files in different directories in the same datastore, note: When the virtual machine is restored to the original location its vmdk files are restored to a single directory, not to the original directories. (This behavior follows current VMware design.)
As a workaround, do the following: Remove the vmdk files from the restored virtual machine, move the files to their respective directories, then re-attach the moved files to the virtual machine.
If the original VM contains encrypted vmdk files, after restoring the full VMware virtual machine to the original location or after an in-place disk restore, the restored disks may not be compliant to the VM encryption policy. Therefore, the restored VM must be reconfigured manually to comply with the policy. Otherwise, the virtual disks of the restored VM might be left in an unencrypted state.
When restoring large files, make sure that no snapshots are active on the destination virtual machine. Otherwise, the files are restored to the VMware configuration datastore, which may be too small to contain the files you want to restore. In that case, the restore fails.
The configuration datastore (sometimes called the vmx directory) contains the configuration files that describe the virtual machine, such as
*.vmxfiles. Note that active snapshots of vmdk files are also stored on the configuration datastore.If you cancel the virtual machine restore before it completes, the not-fully-restored virtual machine remains at the target location. NetBackup does not delete the incomplete virtual machine when the restore job is canceled. You must manually remove the incomplete virtual machine.
If the virtual machine display name contains unsupported characters, the backup may succeed but the restore fail. To restore the virtual machine, you must change the display name to contain supported characters only and retry the restore.
See NetBackup character restrictions for the Primary VM identifier.
NetBackup for VMware does not support individual file restore by means of client-direct restore.
On a restore, NetBackup recreates the linking between a hard link and its original file only in this case: The link file and its target file are restored in the same job. If each file is restored individually in separate restore jobs, they are restored as separate files and the link is not re-established.
If you restore a VM in vCloud to an expired vApp, the vApp is automatically renewed and added back into the vCloud organization. If the expired vApp contained other VMs, all those VMs are also removed from the expired list and added to the organization.
Note that in vCloud Director, an expired vApp must be renewed before you can import a VM into that vApp.
With a remote connection from a Windows Java GUI that uses the English locale, the restore of files that have non-ASCII characters may fail.
See the following tech note for further information on how to restore the files:
In VMware for Replication Director and Integrated Snapshot Management policies, if you configure SLP as combination of Snapshot and Index from Snapshot (IFS), then the restore of files on XFS formatted volumes and partitions is not supported via NetBackup Java UI, use NetBackup web UI.
In VMware vSphere 6.0 U1b and later, a full restore of a virtual machine may trigger an alarm if the original VM was not deleted. The alarm is a VM MAC address conflict alarm. This VMware alarm behavior is by design. If there is a MAC address conflict, VMware eventually changes the MAC address of the new VM. If you do not want to receive alarms, disable the VM MAC address conflict alarms in vCenter.