Veritas NetBackup™ Cloud Administrator's Guide

Last Published:
Product(s): NetBackup (8.1.2)
  1. About NetBackup cloud storage
    1.  
      About cloud storage features and functionality
    2.  
      About the catalog backup of cloud configuration files
    3.  
      About support limitations for NetBackup cloud storage
  2. About the cloud storage
    1.  
      About the cloud storage vendors for NetBackup
    2. About the Amazon S3 cloud storage API type
      1.  
        Amazon S3 cloud storage vendors certified for NetBackup
      2.  
        Amazon S3 storage type requirements
      3.  
        Amazon S3 cloud storage provider options
      4.  
        Amazon S3 cloud storage options
      5.  
        Amazon S3 advanced server configuration options
      6.  
        Amazon S3 credentials broker details
      7.  
        About private clouds from Amazon S3-compatible cloud providers
      8.  
        About Amazon S3 storage classes
      9.  
        Amazon virtual private cloud support with NetBackup
      10. About protecting data in Amazon for long-term retention
        1. About protecting data in Amazon Glacier
          1.  
            About backing up data to Amazon Glacier
          2.  
            About restoring data from Amazon Glacier
        2. About protecting data in Amazon Glacier vault
          1.  
            About backing up data to Amazon Glacier vault
          2.  
            About restoring data from Amazon Glacier vault
      11. Protecting data using Amazon's cloud tiering
        1.  
          About backing up data using LIFECYCLE storage class
        2.  
          About restoring data from LIFECYCLE storage class
      12.  
        About NetBackup character restrictions for Amazon S3 cloud connector
    3. About Microsoft Azure cloud storage API type
      1.  
        Microsoft Azure cloud storage vendors certified for NetBackup
      2.  
        Microsoft Azure storage type requirements
      3.  
        Microsoft Azure cloud storage provider options
      4.  
        Microsoft Azure advanced server configuration options
    4. About OpenStack Swift cloud storage API type
      1.  
        OpenStack Swift cloud storage vendors certified for NetBackup
      2.  
        OpenStack Swift storage type requirements
      3.  
        OpenStack Swift cloud storage provider options
      4.  
        OpenStack Swift storage region options
      5.  
        OpenStack Swift add cloud storage configuration options
      6.  
        OpenStack Swift proxy settings
  3. Configuring cloud storage in NetBackup
    1.  
      Before you begin to configure cloud storage in NetBackup
    2.  
      Configuring cloud storage in NetBackup
    3.  
      Cloud installation requirements
    4. Scalable Storage properties
      1.  
        Configuring advanced bandwidth throttling settings
      2.  
        Advanced bandwidth throttling settings
    5. Cloud Storage properties
      1.  
        Adding a cloud storage instance
      2.  
        Changing cloud storage host properties
      3.  
        Deleting a cloud storage host instance
    6. About the NetBackup CloudStore Service Container
      1.  
        NetBackup CloudStore Service Container security certificates
      2.  
        NetBackup CloudStore Service Container security modes
      3.  
        NetBackup cloudstore.conf configuration file
    7.  
      Deploying host name-based certificates
    8.  
      Deploying host ID-based certificates
    9.  
      About data compression for cloud backups
    10.  
      About data encryption for cloud storage
    11.  
      About key management for encryption of NetBackup cloud storage
    12.  
      About cloud storage servers
    13.  
      About object size for cloud storage
    14. About the NetBackup media servers for cloud storage
      1.  
        Using media server as NetBackup Cloud master host
    15. Configuring a storage server for cloud storage
      1.  
        KMS database encryption settings
      2.  
        Assigning a storage class to Amazon cloud storage
    16.  
      Changing cloud storage server properties
    17. NetBackup cloud storage server properties
      1.  
        NetBackup cloud storage server bandwidth throttling properties
      2.  
        NetBackup cloud storage server connection properties
      3.  
        NetBackup CloudCatalyst storage server properties
      4.  
        NetBackup cloud storage server encryption properties
    18.  
      About cloud storage disk pools
    19.  
      Configuring a disk pool for cloud storage
    20.  
      Saving a record of the KMS key names for NetBackup cloud storage encryption
    21.  
      Adding backup media servers to your cloud environment
    22. Configuring a storage unit for cloud storage
      1.  
        Cloud storage unit properties
      2.  
        Configure a favorable client-to-server ratio
      3.  
        Control backup traffic to the media servers
    23.  
      About NetBackup Accelerator and NetBackup Optimized Synthetic backups
    24.  
      Enabling NetBackup Accelerator with cloud storage
    25.  
      Enabling optimized synthetic backups with cloud storage
    26.  
      Creating a backup policy
    27. Changing cloud storage disk pool properties
      1.  
        Cloud storage disk pool properties
    28.  
      Managing Certification Authorities (CA) for NetBackup Cloud
  4. Monitoring and Reporting
    1.  
      About monitoring and reporting for cloud backups
    2.  
      Viewing cloud storage job details
    3.  
      Viewing the compression ratio
    4.  
      Viewing NetBackup cloud storage disk reports
    5.  
      Displaying KMS key information for cloud storage encryption
  5. Operational notes
    1.  
      NetBackup bpstsinfo command operational notes
    2.  
      Unable to configure additional media servers
    3.  
      Cloud configuration may fail if NetBackup Access Control is enabled
    4.  
      Deleting cloud storage server artifacts
  6. Troubleshooting
    1. About unified logging
      1.  
        About using the vxlogview command to view unified logs
      2.  
        Examples of using vxlogview to view unified logs
    2. About legacy logging
      1.  
        Creating NetBackup log file directories for cloud storage
    3.  
      NetBackup cloud storage log files
    4.  
      Enable libcurl logging
    5.  
      NetBackup Administration Console fails to open
    6. Troubleshooting cloud storage configuration issues
      1.  
        NetBackup Scalable Storage host properties unavailable
      2.  
        Connection to the NetBackup CloudStore Service Container fails
      3.  
        Cannot create a cloud storage disk pool
      4.  
        Cannot create a cloud storage
      5.  
        Data transfer to cloud storage server fails in the SSL mode
      6.  
        Amazon GovCloud cloud storage configuration fails in non-SSL mode
      7.  
        Data restore from the Google Nearline storage class may fail
      8.  
        Backups may fail for cloud storage configurations with Frankfurt region
      9.  
        Backups may fail for cloud storage configurations with the cloud compression option
      10.  
        Fetching storage regions fails with authentication version V2
    7. Troubleshooting cloud storage operational issues
      1.  
        Cloud storage backups fail
      2.  
        Stopping and starting the NetBackup CloudStore Service Container
      3.  
        A restart of the nbcssc (on legacy media servers), nbwmc, and nbsl processes reverts all cloudstore.conf settings
      4.  
        NetBackup CloudStore Service Container startup and shutdown troubleshooting
      5.  
        bptm process takes time to terminate after cancelling GLACIER restore job
      6.  
        Handling image cleanup failures for Amazon Glacier vault
      7.  
        Cleaning up orphaned archives manually
      8.  
        Restoring from Amazon Glacier vault spans more than 24 hours for single fragment
      9.  
        Restoring from GLACIER_VAULT takes more than 24 hours for Oracle databases
      10.  
        Troubleshooting failures due to missing Amazon IAM permissions
      11.  
        Restore job fails if the restore job start time overlaps with the backup job end time

NetBackup cloudstore.conf configuration file

Table: cloudstore.conf configuration file parameters and descriptions describes the cloudstore.conf configuration file parameters.

The cloudstore.conf file is available on the master server and all the media servers that are installed on the platforms that NetBackup cloud supports.

Note:

Before you modify any of the parameters in the cloudstore.conf file, you must stop the nbcssc service (on media server versions 7.7.x to 8.1.2 only) and the nbwmc service (on master server). Once you modify the parameters, restart these services for the changes to take effect.

The cloudstore.conf file resides in the following directories:

  • UNIX: /usr/openv/var/global/wmc/cloud

    On media server versions 7.7.x to 8.1.2, the path is /usr/openv/netbackup/db/cloud.

  • Windows: install_path\Veritas\NetBackup\var\global\wmc\cloud

    On media server versions 7.7.x to 8.1.2, the path is install_path\Veritas\NetBackup\db\cloud.

Table: cloudstore.conf configuration file parameters and descriptions

Parameter

Description

CSSC_VERSION

Veritas recommends that you do not modify this value.

Specifies the version of cloudstore.conf file. The default value is 2.

CSSC_PLUGIN_PATH

Veritas recommends that you do not modify this value.

Specifies the path where NetBackup cloud storage plug-ins are installed. The default path is as follows:

On Windows: install_path\Veritas\NetBackup\bin\ost-plugins

On UNIX: /usr/openv/lib/ost-plugins

CSSC_PORT

This is applicable to media server versions 7.7.x to 8.1.2 only.

Specifies the port number for the CloudStore Service Container (nbcssc). Specify the value as 5637.

This port is used to provide back-level media server support for the older media servers that are configured for cloud storage. Ensure that the older media servers use this port. Communication with the master server fails if the older media servers use a different port.

CSSC_LOG_DIR

Specifies the directory path where csconfig, nbcldutil, and cloud plugins generate log files.

The default path is as follows:

On Windows: install_path\Veritas\NetBackup\logs\nbcssc

On UNIX: /usr/openv/netbackup/logs/nbcssc

Note:

For media server versions 7.7.x to 8.1.2, the nbcssc service uses this path for log files.

CSSC_LOG_FILE

This is applicable only up to NetBackup release 8.1.2.

Specifies the file name that the nbcssc service uses to write its logs. The default value is empty, which means that the NetBackup logging mechanism determines the log file name.

CSCONFIG_LOG_FILE

Specifies the file name that the csconfig utility uses to write its logs. The default value is empty, which means that the NetBackup logging mechanism determines the log file name.

CSSC_IS_SECURE

Specifies if the nbcssc service runs in secure (value 64) or non-secure mode (value 0). The default value is 64.

CSSC_CIPHER_LIST

Specifies the cipher list that NetBackup uses for the following purpose:

  • The cloud master host's cipher is used for communication with the cloud service provider.

  • The media server cipher is used for communicating with the cloud master host's nbwmc service and with the cloud service provider.

Veritas recommends that you do not modify this value. However, if you want to customize the cipher list, depending on the purpose, you must modify the cipher list in the cloudstore.conf on the master server and the media servers.

Note:

If the cipher list is invalid, the customized cipher list is replaced by the default cipher list.

The default value is AES:!aNULL:@STRENGTH.

CSSC_LOG_LEVEL

Specifies the log level for csconfig and nbcldutil CLI utility logging. Value 0 indicates that the logging is disabled and non-zero value indicates that the logging is enabled.

The default value is 0.

CSSC_MASTER_PORT

This is applicable for media server versions 7.7.x to 8.1.2 only. It is not applicable for NetBackup master and media server versions 8.2 and later.

This parameter value must be set to 5637.

This port is used to provide back-level media server support for older media servers that are configured for cloud storage. Ensure that the older media servers use this port. Communication with the master server fails if the older media servers use a different port.

CSSC_MASTER_NAME

Specifies the NetBackup master server name. This entry indicates that the nbwmc service runs on this host. It processes all cloud provider-specific requests based on the CloudProvider.xml and CloudInstance.xml files that reside at the following location:

  • On Windows:

    install_path\NetBackup\var\global\wmc\cloud

    On media server versions 7.7.x to 8.1.2, the path is install_path\NetBackup\db\cloud.

  • On UNIX:

    /usr/openv/var/global/wmc/cloud

    On media server versions 7.7.x to 8.1.2, the path is /usr/openv/netbackup/db/cloud.

CSSC_LEGACY_AUTH_ENABLED

Specifies if the nbcssc service has the legacy authentication enabled (value 1) or disabled (0). The default value is 0.

Note:

Starting from NetBackup 8.1, the CSSC_LEGACY_AUTH_ENABLED option is deprecated. To communicate with legacy media servers, use the Enable insecure communication with 8.0 and earlier hosts option on the NetBackup master server. The option is available in the NetBackup Administration Console on the Security Management > Global Security Settings > Secure Communication tab.

CSSC_ALLOW_LEGACY_AUTH

Specifies if the master server can communicate with legacy media servers that are configured for cloud storage. Only media server versions 7.7.x to 8.1.2 are supported.

The value 1 (default value) indicates that the communication is enabled while the value 0 means that the communication is disabled.

Use this parameter in conjunction with the Enable insecure communication with 8.0 and earlier hosts option available in the NetBackup Administration Console GUI (Security Management > Global Security Settings > Security Communication tab).

The GUI option allows you to enable or disable master server communication with all back-level legacy media servers. It works as an all or none kind of a setting and is not specific to cloud storage media servers. This parameter provides that additional level of control for the cloud. You can use this setting to enable or disable master server communication with back-level cloud storage media servers explicitly.

For example, if the GUI option is enabled (default value) and this parameter value is set to 0, the NetBackup master server continues to work with supported back-level media servers as other storage servers. However, legacy cloud storage media servers that use the older method of communication using hardcoded credentials are blocked altogether, thus increasing the security of your NetBackup environment.

Note:

This parameter value has no effect if the GUI option is disabled. If you modify this parameter value, you must restart the NetBackup Web Management Console (nbwmc) service for the changes to take effect.