NetBackup™ Self Service Configuration Guide

Last Published:
Product(s): NetBackup & Alta Data Protection (10.2)
  1. Configuring a Self Service solution
    1.  
      About configuring a Self Service solution
    2.  
      Self Service scheduled backup
    3.  
      Configuration checklist
  2. Configuring a NetBackup primary server
    1.  
      About configuring the NetBackup primary server
    2.  
      Enabling communication with a Windows NetBackup primary server
    3.  
      Enabling communication with a UNIX NetBackup primary server
    4.  
      Enabling communication with a NetBackup appliance
    5.  
      Enabling communication with a NetBackup primary server using the REST API
    6.  
      Creating NetBackup Template Policies
  3. Configuring Self Service
    1.  
      About Self Service configuration
    2.  
      Configuring backup servers
    3.  
      Configuring protection
    4.  
      Configuring storage
    5.  
      Configuring the Backup Now form
    6.  
      Configuring tenants
    7.  
      Access rights
    8.  
      Registering computers
    9. Configuring the home page
      1.  
        Home page integration settings
  4. Customizing Self Service
    1.  
      Language settings
    2.  
      Creating or customizing a request form
    3.  
      Themes
    4.  
      Notices
  5. User authentication methods
    1.  
      About user authentication methods
    2.  
      Forms based authentication
    3.  
      Windows Authentication
    4.  
      Active Directory Import
    5.  
      Configuring Self Service to use Federated Single Sign-On
  6. Troubleshooting
    1.  
      About troubleshooting
    2.  
      Where to find troubleshooting information
    3.  
      Impersonation of a tenant user
    4.  
      Issues with Remote PowerShell to Windows primary servers
    5.  
      Issues with HTTPS configuration
  7. Appendix A. NetBackup policy types
    1.  
      List of NetBackup policy types
  8. Appendix B. Dashboard traffic light status and usage
    1.  
      About dashboard traffic light status and usage
    2.  
      Assets with a protection type
    3.  
      Assets without a Protection Type
    4.  
      Usage and Charging
    5.  
      Tenant Quota Enforcement
  9. Appendix C. Synchronizing data from NetBackup
    1.  
      About synchronizing data from NetBackup
  10. Appendix D. NetBackup Self Service data caching process
    1.  
      About NetBackup Self Service data caching process
    2.  
      NetBackup Data Synchronization
    3.  
      Backup Now
    4.  
      Protect
    5.  
      Unprotect
  11. Appendix E. Integration settings
    1.  
      About integration settings
    2.  
      NetBackup Adapter
    3.  
      NetBackup Adapter Usage
    4.  
      NetBackup Adapter Access Rights
    5.  
      Action Request Types
    6.  
      vCloud Director import
  12. Appendix F. REST API
    1.  
      About the REST API
  13. Appendix G. Glossary
    1.  
      Glossary

Enabling communication with a UNIX NetBackup primary server

NetBackup Self Service uses Secure Shell (SSH) to communicate with a UNIX NetBackup primary server. The configuration of SSH is outside the scope of this guide. NetBackup Self Service, however, requires the credentials to communicate with the SSH server on the primary server.

  • By default SSH uses Port 22.

    To specify a different port, set the server name to server_name:port_number. For example, MyServer:23.

  • The user account that NetBackup Self Service uses to logon to SSH on the primary server needs sudo configuration:

    • The user account should not use requiretty.

    • The user account should not require a sudo password.

    • With sudo, the user account should run all commands in /usr/openv/netbackup/bin and /usr/openv/netbackup/bin/admincmd.

User authentication modes that are supported include:

  • Password

    NetBackup Self Service passes the user name and password at logon.

  • Public key

    The public key of the user is stored in the authorized_keys for the user on the primary server. The private key of the user is stored in OpenSSH format in the NetBackup Self Service portal.

  • Keyboard-interactive

    NetBackup Self Service sends the password for the user to a keyboard-interactive ssh session. The password is sent in response to a configurable password prompt. The default password prompt is Password:.

To configure NetBackup Self Service and the NetBackup primary server for public key authentication

  1. Create a Public Private key pair using a key generator like PuTTYgen.
  2. Log on to the primary server as the required primary server user
  3. Add the public key to the user's authorized_keys file in the primary server's operating system format.
  4. Convert the Private key into OpenSSH format encrypted with a passphrase
    -----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,997295A8E365412F

SIKdyjX4UoDm03kprqfkCGQYc/thmNIlWYztEomjyRaMyEYlh0ZIC9Kx7XnMNnSk
...
MUxIcZW8d8fF3P4s+OLidxG03H6C/AsGLzJtpecjPQA=
-----END RSA PRIVATE KEY-----
  5. When you create the backup server in NetBackup Self Service:

    • Choose Public Key for the Authentication.

    • Enter the user account to connect to the primary server in User Account.

    • Paste the encrypted OpenSSH format private key in OpenSSH Private Key.

    • Enter the passphrase in Password and Confirm Password.

More information about testing the connection once you have created your first backup server is available.

See Configuring backup servers.