Veritas NetBackup™ Virtual Appliance Getting Started Guide

To perform the initial configuration on a NetBackup Virtual Appliance with the combined primary and media server role

1. After you have deployed a new virtual appliance, log on to the NetBackup Virtual Appliance Shell Menu.

   The logon is admin, and the default password is P@ssw0rd.

2. Use the following command to start the initial configuration:

   Main > Appliance > Configure

   A message about the Virtual Appliance Configuration Wizard appears.

3. The wizard prompts you to change the default passwords.

   Change each user account password as prompted.

   Review the following password policy before setting a new password:

   • Passwords must contain at least eight characters.

   • Passwords must contain at least one lowercase letter (a-z) and one number (0-9).

   • Dictionary words are considered weak passwords and are not accepted.

   • The last seven passwords cannot be reused and the new password cannot be similar to previous passwords.

   Note:

   If you enter five consecutive invalid passwords for any user account, the appliance aborts the initial configuration process automatically. You must start the initial configuration process again.

   Note:

   If you enable the STIG feature after completing the initial configuration, you may be prompted to change the new passwords you entered here to meet the requirements of the STIG password policy.

4. The wizard takes you to the network configuration.

   Specify the following:

   • Hostname

     Enter a short host name or a fully qualified domain name (FQDN) for this appliance. As a best practice, Veritas recommends that you use FQDN.

     Caution:

     After the initial deployment has completed successfully, the only way to change the host name is to redeploy the appliance.

     Note:

     If you plan to configure Active Directory (AD) authentication on this appliance, the host name must be 15 characters or less. Otherwise, AD configuration can fail.

   • DNS domain name

     Enter a DNS domain name for this appliance.

   • IPv4 address

     Enter the IPv4 address to be used for this appliance.

   • Netmask

     Enter the netmask that corresponds to the IP address.

   • Gateway IP address

     Enter the IPv4 address of the gateway (network point) that acts as an entrance to another network.

   • DNS server 1 IP address

     Enter the IPv4 address of the primary DNS server for this appliance.

   • DNS server 2 IP address(Optional)

     Enter the IPv4 address of the secondary DNS server for this appliance.

   When you are prompted with the following message, choose whether you want to add the host name and IP address to the HOSTS file.

   The host name must be resolvable with a DNS or a HOSTS file for the initial configuration to be successful. Do you want to write the host name resolution information to the HOSTS file? [yes, no](no)

   Note:

   The host name must be resolvable with a DNS server or a HOSTS file for the initial configuration to be successful. If DNS is not available, you can add the host name and IP address to the HOSTS file.

5. After the network configuration is completed, the wizard takes you to the next step for the Veritas Usage Insights customer registration key. You cannot complete the configuration until you provide the registration key. To obtain a key, follow the onscreen prompts.
6. Use the following command to verify that the automatic configuration completed successfully:

   Main > Appliance > Status

   The command output should contain a message similar to the following:

   Appliance Version is 4.1.
   
   Appliance is configured as primary appliance.
   

   If the output does not show that the appliance is configured as a primary appliance, you need to redeploy the appliance or perform other troubleshooting steps to fix the issue before you proceed to the next step. See Troubleshooting NetBackup Virtual Appliance initial deployment issues.

7. Use the following command to change the nbasecadmin account password from the known default password (P@ssw0rd):

   Main > Settings > Password nbasecadmin

   Note:

   You cannot access the NetBackup web UI until you have changed the nbasecadmin user password.

8. Use the following command to set the time zone:

   Main > Network > TimeZone Set

   Select the appropriate time zone from the displayed list.

9. Use the following command to add a Network Time Protocol (NTP) server:

   Main > Network > NTPServer Add <Server>

   Where <Server> is the name of the NTPServer.

10. Add a permanent license key before the evaluation key expires with the following command:

    Main > Manage > License > Add

    You can locate your permanent license key from the Veritas Entitlement Management System (VEMS). To access VEMS, click Licensing on the Veritas Support website.

    Warning:

    If the correct license key is not installed, the appliance services stop functioning after the evaluation key expires. Make sure that the NetBackup license you add includes support for NetBackup Virtual Appliance.

    See Managing license keys on the NetBackup Virtual Appliance.

11. (Optional)

    If you want to configure an IPv6 address for the appliance, run the following command:

    Main > Network > IPv6 <IPAddress> <Prefix> InterfaceName

    Where <IPAddress> is the IPv6 address and <Prefix> is the prefix length.

12. (Optional)

    If you want to an IPv6 DNS server on the appliance, run the following command:

    Main > Network > DNS Add NameServer <IPAddress>

    Where <IPAddress> is the IPv6 address of the additional DNS server. Only global-scope and unique-local IPv6 addresses are allowed.

13. (Optional)

    If you want to use an external Certificate Authority (CA) for communication between the appliance and your other NetBackup hosts, run the following command:

    Main > Settings > NetBackup CertificateUsage Enable ECA

14. (Optional)

    If you plan to use this primary server with a media server in a NAT network, perform the following tasks:

    • Enable the NetBackup DNAT feature on this primary server as follows:

      Main > Settings > NetBackup DNAT Enable

    • Add the name of the media server to the NetBackup Servers list on this primary server as follows:

      Main > Settings > NetBackup NATServers Add

15. Log on to the appliance from the NetBackup Administration Console and create a NetBackup catalog backup policy.

    By default, the primary server appliance does not contain a NetBack catalog backup policy. To protect the NetBackup catalog, configure a catalog backup before using NetBackup for regular client backups.

    You can create a backup policy that uses a Storage Lifecycle Policy (SLP) to protect the NetBackup catalog. Use the SLP to back up the data to AdvancedDisk and then duplicate it to MSDP. You are then able to use Auto Image Replication to save your catalog backup off site. Veritas recommends that you use this replication-based strategy for disaster recovery (DR).

    Note:

    You must set a encryption passphrase for the disaster recovery package for the catalog to be successful. Catalog backups continue to fail until the passphrase is set.

    For more information about the security requirements for disaster recovery , see the NetBackup Security and Encryption Guide.