Veritas NetBackup™ Release Notes
- About NetBackup 8.1.1
- New features, enhancements, and changes
- NetBackup 8.1.1 new features, changes, and enhancements
- Operational notes
- NetBackup installation and upgrade operational notes
- NetBackup administration and general operational notes
- NetBackup administration interface operational notes
- NetBackup Accelerator operational notes
- NetBackup Bare Metal Restore operational notes
- NetBackup database and application agent operational notes
- NetBackup internationalization and localization operational notes
- NetBackup for NDMP operational notes
- NetBackup Snapshot Client operational notes
- NetBackup virtualization operational notes
- NetBackup for VMware operational notes
- NetBackup for VMware operational notes
- Appendix A. About SORT for NetBackup Users
- Appendix B. NetBackup installation requirements
- Appendix C. NetBackup compatibility requirements
- Appendix D. Other NetBackup documentation and related documents
Bare Metal Restore with secure communications support
Bare Metal Restore (BMR) introduces secure communications support in the NetBackup 8.1.1 release on Linux, Windows, and Solaris platforms. NetBackup 8.1.1 does not currently support Bare Metal Restore on AIX and HP-UX platforms.
BMR requires host ID-based certificates in the recovery and discovery environment for a secure communication between the NetBackup client and the master server. Host ID-based certificate is required to fetch the BMR configurations during the restore and discovery operation.
Note:
Review the secure communication compatibility matrix for BMR to learn more about the supported boot server, client, and SRT client versions. See the "Secure communication compatibility matrices for BMR for NetBackup 8.1.1 and later releases" section within the NetBackup Bare Metal Restore Administrator's Guide.
For automated restore operations or Prepare to Restore (PTR) and Prepare to Discover (PTD) enabled operations, NetBackup BMR 8.1.1 introduces new validations and restrictions. For more information about validation checks in Prepare to Restore (PTR) and Prepare to Discover (PTD) operations, see the following sections within the NetBackup Bare Metal Restore Administrator's Guide:
"Preparing a client for restore"
"Discovering a configuration"
Once these validations complete successfully, the selected NetBackup client is marked for automatic recovery or discovery. Automatic recovery means that the autoreissue parameter is enabled for the host. It allows you to deploy a certificate on the host without requiring a reissue token. For more information about Allow Auto Reissue Certificate, see the "Allowing or disallowing automatic certificate reissue" section within the NetBackup Security and Encryption Guide.
After a successful completion of restore, the host ID-based certificate is automatically copied on the client that is restored. The autoreissue parameter which is required for automatic recovery is reset.
Note:
With NetBackup 8.1.1, for a Windows client, after a successful completion of restore during Direct Virtual Machine (VM) conversion (physical to virtual), you must manually deploy the Certificate Authority (CA) certificate and the host ID-based certificate on the client that is restored. To learn more about how to deploy host ID-based certificates manually, see "Deploying when a token is needed" section within the NetBackup Security and Encryption Guide.
In the case of Generic Bare Metal Restore (BMR) Restore and Generic Discovery of Hardware that is supported on Windows platform only, you are required to manually generate a reissue token with which you can fetch host ID-based certificates for a secure communication between the NetBackup client and the master. You must also validate the Certificate Authority (CA) hash certificate. For more information about how to create a reissue token and validate the Certificate Authority (CA) hash certificate, refer to the following sections within the NetBackup Security and Encryption Guide:
"Finding and communicating the fingerprint of a CA certificate section"
"Creating a reissue token"
For more information about Generic Bare Metal Restore (BMR) Restore and Generic Discovery of Hardware, see the NetBackup Bare Metal Restore Administrator's Guide.
For restore of BMR configurations in a BMR Auto Image Replication (AIR) setup, you are required to add a host in the host database of the Disaster Recovery (DR) domain. To learn more about how to add a host in the host database of the DR domain, see "Adding a host in the host database of the DR domain" section within the NetBackup Bare Metal Restore Administrator's Guide.