Search <book_title>...

Veritas NetBackup™ Deduplication Guide

Last Published: 2019-09-18

Product(s): NetBackup (8.1.2)

Enabling NetBackup clustered master server inter-node authentication

NetBackup requires inter-node authentication among the master servers in a cluster. For authentication, you must provision an authentication certificate on all of the nodes of the cluster. The certificates are used to establish SSL connections between the NetBackup hosts. The inter-node authentication allows the following NetBackup functionality:

NetBackup Administration Console

The NetBackup Administration Console in master server clusters requires the NetBackup authentication certificates for correct functionality.

Targeted A.I.R. (Auto Image Replication)

Auto Image Replication in which a master server is in a cluster requires inter-node authentication among the hosts in that cluster. The NetBackup authentication certificates provide the means to establish the proper trust relationships.

Provision the certificates on the cluster hosts before you add the trusted master server. This requirement applies regardless of whether the clustered mastered server is the source of the replication operation or the target.

See About trusted master servers for Auto Image Replication.

To enable clustered master server inter-node authentication

On the active node of the NetBackup master server cluster, run the following NetBackup command:

Windows: install_path\NetBackup\bin\admincmd\bpnbaz -setupat
UNIX: /usr/openv/netbackup/bin/admincmd/bpnbaz -setupat

NetBackup creates the certificates on every node in the master server cluster.

The following is example output:

# bpnbaz -setupat
You will have to restart NetBackup services on this machine after 
the command completes successfully.
Do you want to continue(y/n)y
Gathering configuration information.
Please be patient as we wait for 10 sec for the security services 
to start their operation.
Generating identity for host 'bit1.remote.example.com'
Setting up security on target host: bit1.remote.example.com
nbatd is successfully configured on NetBackup Master Server.
Operation completed successfully.