NetBackup™ Installation Guide

To install NetBackup client software locally or remotely on Windows systems

1. Log on as administrator on the host where you want to install the client software.
2. Navigate to the directory where the images reside and run Browser.exe to start the NetBackup Installation Wizard.
3. On the initial screen, select Installation.
4. On the Installation screen, select NetBackup Client Software Installation.
5. If you are prompted about the absence of required Visual C++ run-time libraries, review the information and respond accordingly. More information is available.

   See Windows compiler and security requirements for NetBackup 10.4 and later installation.

6. On the Welcome screen, review the content and click Next.
7. (Conditional) If you previously installed NetBackup 10.4 on this host, you see the Program Maintenance dialog.

   • Select Modify to change installation settings for the local host, or to use the local host as a platform to perform push installation to remote hosts.

   • Select Repair to restore NetBackup 10.4 to its original state on the local host.

   • Select Remove to remove NetBackup 10.4 from the local host.

8. On the License Agreement screen, accept the terms of the agreement and click Next.
9. On the Veritas NetBackup Client Installation Type screen, provide the following information:

   Where to install	For a local installation, select Install to this computer only. For remote installation, select Install to multiple computers on your network. The procedure does not install the client on the local host unless you add it to the list of systems that you want to install.
   Typical	Select this option to install NetBackup with the default settings.
   Custom	Select this option to install NetBackup with the settings that you want.

   Click Next.

10. Enable or disable FIPS mode in NetBackup on the FIPS Compliance in NetBackup screen. By default FIPS mode is disabled.

    By enabling FIPS, the NetBackup installer and any further operations run in FIPS mode. Please check requisite before you enable FIPS mode in your NetBackup Domain.

    The NetBackup installation and all further options on remote hosts run in FIPS-compliant mode if you enable FIPS mode during remote installation.

    For more information about FIPS, see the NetBackup Encryption and Security Guide.

    Click Next.

11. (Conditional) This step applies only to local Custom installations.

    On the Veritas NetBackup Client Destination Folder screen, you can select where the NetBackup files are installed.

    Destination Folder

    By default, NetBackup files are installed to the following location: C:\Program Files\VERITAS To change the folder destination where NetBackup is installed: Click Change. Browse to the preferred location and designate a new or an existing folder. Click Next. Additional information about installation folder restrictions is available. See Restrictions on the NetBackup installation directory. Note: For upgrades, you cannot change the destination.

12. (Conditional) This step applies only to Custom installations.

    On the NetBackup Options screen, select from the following options:

    At System Startup

    Enable or disable the following options: Start NetBackup Client Service Automatically By default, this option is enabled so that NetBackup services are available immediately after system startup. Start NetBackup Client Job Tracker Automatically By default, this option is disabled. To start this option manually after installation, click Start > All Programs > Veritas NetBackup > NetBackup Client Job Tracker.

    Ports

    On this screen, you can change port numbers, if it is necessary in your configuration. You may need to change a port number if you encounter conflicts when NetBackup and another industry product try to share the same port. Another example is if a port conflict occurs with a firewall, which may cause security issues. To change a port number, select the port number that you want to replace and type the new number.

    Click Next.

13. (Conditional) This step applies only to Custom installations.

    On the NetBackup Services screen, provide the following startup account and startup type information for NetBackup client services:

    Log On

    Specify either Local System account or This account. By default, the Local System account is selected, so that NetBackup uses the built-in system account. When this option is selected, the fields below it are disabled. To specify a different system account: Select this option. Enter the account information in the following fields: Domain Username Password

    Safe Abort Option

    This option determines how the installation proceeds if a restart is required as part of the installation or upgrade. If you select this option and the installation process determines that a restart is required, the installation (or upgrade) stops. The system is then rolled back to its original state. If you do not select this option, the installation (or upgrade) proceeds even if the installation process determines that a restart is required.

14. On the NetBackup System Names screen, the following fields are populated automatically. Changes are not normally required.

    Primary Server Name	If necessary, change this name to the appropriate primary server where the client backup images are to be stored.
    Additional Servers	Enter all of the primary server and media server names that you want this client to access.

15. After you provide the required computer names, the installer determines your security configuration.

    • If the installer finds your environment uses an external certificate authority, you are presented with the External Certificate screen. Proceed to step 16.

    • If the installer finds your environment uses NetBackup Certificate Authority, you are presented with the NetBackup Certificate screen. Proceed to step 17.

16. On the External Certificate screen, select one of the three radio buttons based on how you want to configure the external certificate authority (ECA). Depending on which one you select, you must complete different information:

    • Use Windows certificate store

      You must enter the certificate location as Certificate Store Name\Issuer Distinguished Name\Subject Distinguished Name.

      Note:

      You can use the $hostname variable for any of the names in the certificate store specification. The $hostname variable evaluates at run time to the name of the local host. This option provides flexibility when you push NetBackup software to a large number of clients.

      Alternatively, you can specify a comma-separated list of Windows certificate locations. For example, you can specify: MyCertStore\IssuerName1\SubjectName, MyCertStore\IssuerName2\SubjectName2, MyCertStore4\IssuerName1\SubjectName5

      Then select the Certificate Revocation List (CRL) option from the radio buttons shown:

      • Use the CRL defined in the certificate. No additional information is required.

      • Use the CRL at the following path: You are prompted to provide a path to the CRL.

      • Do not use a CRL.

    • Use certificate from a file

      After you select this option, specify the following:

      • Certificate file: This field requires you to provide the path to the certificate file and the certificate file name.

      • Trust store location: This field requires you to provide the path to the trust store and the trust store file name.

      • Private key path: This field requires you to provide the path to the private key file and the private key file name.

      • Passphrase file: This field requires you to provide the path of the passphrase file and the passphrase file name. This field is optional.

      • CRL option: Specify the correct CRL option for your environment:

        • Use the CRL defined in the certificate. No additional information is required.

        • Use the CRL at the following path: You are prompted to provide a path to the CRL.

        • Do not use a CRL.

    • Proceed without security

      You receive a warning message listing potential issues. Depending on the state of the current security configuration, NetBackup may be unable to perform backups or restores until an external CA certificate has been configured.

    Click Next to continue. Go to step 21 in this procedure.

17. After you confirm you want to continue, the installer fetches the certificate authority certificate details. You have the option to click Cancel to halt this action. Be aware if you click Cancel, this action requires you to rerun the installation or continue with the installation without the required security components. If these security components are absent, backups and restores fail.
18. On the Confirm the CA fingerprint screen, select I recognize the fingerprint for this host. Proceed with the certificate deployment. if the fingerprint displayed is one you recognize and trust. Click Next to continue.

    If you do not recognize or trust the displayed fingerprint, select Proceed without the certificate deployment.

    After you confirm the fingerprint information, the installer stores the certificate authority certificate details. You have the option to click Cancel to halt this action. Be aware if you click Cancel, this action requires you to rerun the installation or continue with the installation without the required security components. If these security components are absent, backups and restores fail.

19. After the Certificate Authority certificate is stored, the installer deploys the host certificate. You have the option to click Cancel to halt this action. Be aware if you click Cancel, this action requires you to rerun the installation or continue with the installation without the required security components. If these security components are absent, backups and restores fail.
20. (Conditional) If prompted by the Authorization Token screen, enter the security token.

    Please enter an authorization token

    The token format is 16 upper case letters. Alternatively, you can also select the Proceed without providing a security token option. When the option is selected, this warning is shown:

    In some environments, failure to provide a security token can result in failed backups. Contact your backup administrator if you have questions.

    After you enter a security token, you have the option to click Cancel to halt the deployment of the host certificate. Be aware if you click Cancel, this action requires you to rerun the installation or continue with the installation without the required security components. If these security components are absent, backups and restores fail.

    If this installation is a remote installation, the specification of an authorization token is optional. Contact your backup administrator to determine if authorization tokens are required for your environment.

21. After you enter all the security information, you are prompted with the certificate status screen. If the screen indicates there are no issues, click Next to continue. If the screen Security Certificate Status indicates there are issues, click Back to reenter the required security information.

    If this install is a push install or if you selected Proceed without security, this dialog is skipped.

22. On the Veritas NetBackup Remote Hosts screen, specify the hosts where you want NetBackup installed.

    • Destination Systems

      Right-click the Windows Destination Computers icon and select from the drop-down menu , or use the following icons:

      Browse	Click here to search the network for the hosts where you want to install NetBackup. On the Available Systems dialog box, select the computer to add and click Next. On the Remote Computer Login Credentials dialog box, enter the User Name and the Password of the account to be used to perform the installation on the remote computers. If you plan to install to multiple remote computers, click the box next to Remember User Name and Password. Selecting this option prevents the need to enter this information for each remote computer. Click OK. On the Remote Destination Folder dialog box, verify or change the Destination Folder where NetBackup is installed. The default location is C:\Program Files\Veritas. If you plan to install to multiple remote computers and you want to use the same location, click the box next to Use this folder for subsequent systems. Selecting this option prevents the need to enter the location for each remote computer.
      Import	Click here to import a text file that contains a list of host names. When you create the text file, the host names must be defined in the following format: Domain\ComputerName
      Add	Click here to add a host manually. On the Manual Remote Computer Selection dialog box appears, enter the Domain and the Computer Name, then click OK. On the Remote Computer Login Credentials dialog box, enter the User Name and the Password of the account to be used to perform the installation on the remote computers. If you plan to add and install to multiple remote computers, click the box next to Remember User Name and Password. Selecting this option prevents the need to enter this information for each remote computer. Click OK. On the Remote Destination Folder dialog box, verify or change the Destination Folder where NetBackup is installed. The default location is C:\Program Files\Veritas. If you plan to install to multiple remote computers and you want to use the same location, click the box next to Use this folder for subsequent systems. Selecting this option prevents the need to enter the location for each remote computer. Click OK.
      Remove	To remove a host from the Destination Systems list, select the host and click here.
      Change	Click here to change the destination for NetBackup file installation on the selected remote host.

    • Click Next.

23. On the Ready to Install the Program screen, review the Installation Summary that shows your selections from the previous steps.

    Note:

    Veritas recommends that you review the summary screen for any warning messages. You can prevent installation and upgrade issues if you resolve any problems before you continue the installation.

    Then select one of the following options:

    • Click Install to start the installation.

    • Click Back to view the previous screens and make any changes, then return to this screen and click Install.

    • Click Cancel to cancel the installation.

    After you click Install, the installation process begins and a screen appears that shows you the installation progress. This process may take several minutes.

    Up to five remote installations occur simultaneously. When a remote installation is completed, another one begins so that a maximum of five installations are in progress.

    If you click Cancel after you click Install, the installation does not stop immediately. Installation continues on all remote hosts where the installation has already started. Any specified hosts after that point do not get client software installed.

    NetBackup considers any remote installations that were completed when you clicked Cancel to be successful.

24. On the Installation Complete screen, click Finish.

    Examine the installation log on the following location:

    %ALLUSERSPROFILE%\Veritas\NetBackup\InstallLogs\

    An installation log file provides detailed installation information and shows whether any errors occurred.

    Note:

    When you perform a remote installation to multiple computers, this option only lets you view the log for the local computer. Each computer that you selected for installation contains its own installation log file. To view the log file of a remote computer, open a Windows Explorer window, enter \\COMPUTERNAME, and navigate to the InstallLogs directory.

    Search the installation log for the following error indications:

    • Strings that include Return Value 3.

    • Important log messages are color coded as follows:

      Yellow = warning.

      Red = error.