NetBackup™ Web UI Cloud Administrator's Guide

Last Published:
Product(s): NetBackup (10.2)
  1. Managing and protecting cloud assets
    1.  
      About protecting cloud assets
    2.  
      Limitations and considerations
    3. Configure Snapshot Manager's in NetBackup
      1.  
        Configure a third-party CA certificate
      2.  
        Add a Snapshot Manager
      3. Add a cloud provider for a Snapshot Manager
        1.  
          IAM Role for AWS Configuration
      4.  
        Associate media servers with a Snapshot Manager
      5.  
        Discover assets on Snapshot Manager
      6.  
        Edit a Snapshot Manager
      7.  
        Enable or disable a Snapshot Manager
      8.  
        (Optional) Add the Snapshot Manager extension
    4. Managing intelligent cloud groups
      1.  
        Create an intelligent cloud group
      2.  
        Delete an intelligent cloud group
    5. Protecting cloud assets or intelligent cloud groups
      1.  
        Customize or edit protection for cloud assets or intelligent groups
      2.  
        Remove protection from cloud assets or intelligent groups
    6.  
      Cloud asset cleanup
    7.  
      Cloud asset filtering
    8.  
      AWS and Azure government cloud support
    9. About protecting Microsoft Azure resources using resource groups
      1.  
        Before you begin
      2.  
        Limitations and considerations
      3. About resource group configurations and outcome
        1.  
          Examples of resource group configurations
      4.  
        Troubleshoot resource group permissions
    10. About the NetBackup Accelerator for cloud workloads
      1.  
        How the NetBackup Accelerator works with virtual machines
      2.  
        Accelerator forced rescan for virtual machines (schedule attribute)
      3.  
        Accelerator backups and the NetBackup catalog
      4.  
        Accelerator messages in the backup job details log
    11.  
      Configuring backup schedule for cloud workloads
    12.  
      Backup options for cloud workloads
    13.  
      Snapshot replication
    14.  
      Configure AWS snapshot replication
    15.  
      Using AWS snapshot replication
    16.  
      Support matrix for account replication
    17.  
      Protect applications in-cloud with application consistent snapshots
    18. Protecting PaaS assets
      1.  
        Prerequisites for protecting PaaS assets
      2. Installing the native client utilities
        1.  
          Installing the MySQL client utility
        2.  
          Installing sqlpackage client utility
        3.  
          Installing Postgres client utility
      3.  
        Configuring the storage server for instant access
      4.  
        About incremental backup for PaaS workloads
      5.  
        Limitations and considerations
      6.  
        Discovering PaaS assets
      7.  
        Viewing PaaS assets
      8.  
        Managing PaaS credentials
      9.  
        View the credential name that is applied to a database
      10. Add credentials to a database
        1.  
          Creating an IAM database username
        2.  
          Creating a system or user managed identity username
      11.  
        Add protection to PaaS assets
      12.  
        Perform backup now
  2. Recovering cloud assets
    1.  
      Recovering cloud assets
    2.  
      Perform rollback recovery of cloud assets
    3. Recovering PaaS assets
      1.  
        Recovering non-RDS PaaS assets
      2.  
        Recovering RDS-based PaaS asset
      3.  
        Recovering Azure protected assets
      4.  
        Recovering duplicate images from AdvancedDisk
  3. Performing granular restore
    1.  
      About granular restore
    2.  
      Supported environment list
    3.  
      List of supported file systems
    4.  
      Before you begin
    5.  
      Limitations and considerations
    6.  
      Restoring files and folders from cloud virtual machines
    7.  
      Restoring volumes on cloud virtual machines
    8.  
      Troubleshooting
  4. Troubleshooting protection and recovery of cloud assets
    1.  
      Troubleshoot cloud workload protection issues
    2.  
      Troubleshoot PaaS workload protection and recovery issues

Recovering cloud assets

You can restore AWS, Azure, Azure Stack and GCP VM assets from snapshot copy, replica copy, backup copy, or duplicate copy.

While restoring VMs, NetBackup gives you the option to change certain parameters of the original backup or snapshot copy. Including options like changing the VM display name, changing power options of the VM, removing tag associations during restore, and restoring to an alternate network. You can also restore VMs to an alternate configuration, to a different zone, to a different subscription, and restore VMs or disks to a different resource group.

  • For GCP: Select Firewall rule

  • For Azure: Select Network security group

  • For AWS: Select Security group

About the pre-recovery check for VMs

Pre-recovery check indicates how a restore may fail, before the restore is initiated. The pre-recovery check verifies the following:

  • Usage of supported characters and the length in the display name.

  • Existence of destination network

  • Existence of selected Resource group for VMs and disks

  • Existence of source VM snapshot (applicable for restore from snapshot)

  • Existence of the staging location added in the file /cloudpoint/azurestack.conf (applicable for restore from backup for Azure stack)

  • Existence of a VM with the same display name.

  • Connectivity with the Snapshot Manager and cloud credential validation.

Supported parameters for restoring cloud assets

The following table summarizes the different parameters that you can change while restoring assets for different cloud providers.

Table: Supported parameters for Azure, Azure Stack, GCP, and AWS snapshot and backup copies

       

Parameters

Snapshot copy

 

Backup copy

       

Azure

Azure Stack

GCP and AWS

 

Azure

Azure Stack

GCP and AWS

       

Change VM display name

Y

Y

Y

 

Y

Y

Y

       

Change power state of the VM

Y

Y

Y

 

Y

Y

Y

       

Remove tag associations

Y

Y

Y

 

Y

Y

Y

       

Restore to a different network

Y

Y

Y

 

Y

Y

Y

       

Subscription ID

    

Y

Y

Y

       

Change resource group

Y

Y

  

Y

Y

 
       

Change region of the VM

    

Y

Y

Y

       

Change provider configuration

    

Y

Y

 
       

Change resource group for disks

Y

Y

  

Y

Y

 
       

Zone

Y

 

Y

 

Y

 

Y

       

Security group/Firewall rule/Network security group

Y

Y

Y

 

Y

Y

Y

Recovering virtual machines

To recover a VM

  1. On the left, click Cloud.
  2. Click the Virtual Machines tab.

    All the discovered cloud assets for the respective category are displayed.

  3. Double-click the protected asset that you want recover.
  4. Click the Recovery points tab.

    The available images are listed in rows with the backup timestamp for each image. For AWS workloads you can see replica as well as backup images, if available.

  5. In the Copies column, click the copy that you want to recover. You can see the backup, snapshot, and replica copy, if available. Click Recover. If you don't select a copy to restore, the primary copy is selected.
  6. Click Restore Virtual Machine.
  7. In the Recovery target page, do the following:

    If you restore a backup copy, modify the values of these parameters as required:

    • Configuration: To restore to an alternate configuration, select one from the drop-down.

    • Region: To restore to an alternate region, select one from the drop-down.

    • Subscription: To restore to an alternate subscription, select one from the drop-down. For Azure and Azure Stack only.

    • Resource group: To restore to an alternate resource group, click the search icon, in the Select resource group dialog, select the required resource group. For Azure and Azure Stack only.

    • Display name: To change the display name, enter the new one in the field. The specified display name is validated during the pre-recovery check.

      Note:

      Except in AWS workloads, the following special characters are not allowed in the display name: ` ~ ! @ # $ % ^ & * ( ) = + _ [ ] { } \\ | ; : ' \" , < > / ?."

    If you restore a snapshot copy, specify only the Resource group and the Display name.

  8. Click Next.
  9. In the Recovery options page:
    • If you restore a backup copy, to restore to a different zone, select a Zone. To select a network available in that zone, click the search icon near Network configuration, and select a target network for recovery.

      User can also select Security group / Network security group / Firewall rule for AWS, Azure, and GCP cloud providers respectively.

    • (Only for GCP) If you restore a snapshot copy, to restore to a different region, select a Region. To select a network available in that zone, click the search icon in Network configuration, and select a target network for recovery. The list shows networks available in that zone.

    • If you restore a snapshot copy, to restore to a different zone, select a Zone. To select a network available in that zone, click the search icon in Network configuration, and select a target network for recovery. The list shows networks available in that zone.

      User can also select Security group / Network security group / Firewall rule for AWS, Azure, and GCP cloud providers respectively.

    In the Advanced section:

    • To keep the VM powered on after recovery, select Power on after recovery.

    • To remove the tags associated with the asset at the time of backup or creating snapshot, select Remove tag associations.

      Note:

      If you do not select the Remove tag associations option, any tag value for assets should not have spaces, before and after a comma. After the restoration of an asset, the spaces before and after any comma in the tag values are removed. For example, the value for the tag name:created_on: Fri, 02-Apr-2021 07:54:59 PM , EDT, is converted to: Fri,02-Apr-2021 07:54:59 PM,EDT. You can manually edit the tag values to reinstate the spaces.

      Note:

      Selection of None for zone means VM will not be placed in any zone and selection of None for Network security group/Security group/Firewall rule means that no security rules are applied to the restored VM.

  10. Click Next. The pre-recovery check begins. This stage validates all the recovery parameters and displays errors, if any. You can fix the errors before starting the recovery.
  11. Click Start recovery.

    The Restore activity tab shows the job progress.

For information on the recovery status codes, see the NetBackup administrator or the NetBackup Status Codes Reference Guide, available here:

http://www.veritas.com/docs/000003214

Recovering applications and volumes to its original location

For GCP, when you restore a snapshot that was created before the upgrade, if the source disk is not present, a default restored disk, pd-standard is created.

To recover applications and volumes to the original location

  1. On the left, click Cloud.
  2. Click the Applications or Volumes tab.

    All the discovered cloud assets for the respective category are displayed.

  3. Double-click on the protected asset that you want recover.
  4. Click the Recovery points tab. In the calendar view, click the date on which the backup occurred.

    The available images are listed in rows with the backup timestamp for each image.

  5. On the top right for the preferred recovery point, select Original location.
  6. Click Start recovery.
  7. On the left, click Activity monitor to view the job status.
Recovering applications and volumes to an alternate location

Considerations

  • For encrypted VM restore in AWS to an alternate location, the key-pair names must be same on the source and destination region. If not, create a new key-pair in the destination region that is consistent with the key-pair in the source region.

To recover applications and volumes to alternate location

  1. On the left, click Cloud.
  2. Click the Applications or Volumes tab.

    All the discovered cloud assets for the respective category are displayed.

  3. Double-click on the protected asset that you want recover.
  4. Click the Recovery points tab. In the calendar view, click the date on which the backup occurred.

    The available images are listed in rows with the backup timestamp for each image.

  5. On the top right for the preferred recovery point, select Alternate location.
  6. Select the location where you want to restore the cloud asset.
  7. Click Start recovery.
  8. On the left, click Activity monitor to view the job status.
Recovery scenarios for GCP VMs with read-only volumes

The following table describes how NetBackup handles the restore/recovery of GCP VMs that have read-only volumes.

Table: Recovery scenarios for read-only GCP VMs

Scenario

Handling

Restoring a volume from the snapshot of an attached read-only disk, from the Volumes tab under Cloud workload.

During restore, the disk is attached in the read/write mode to the original or alternate location.

Restoring a VM, with a read-only disk, from a crash-consistent snapshot, from the Virtual machines tab under Cloud workloads.

During restore of such a VM to its original or alternate location, a read-only disk is restored in a read/write mode.

Restoring a VM with a read-only disk, from an app-consistent snapshot, from the Virtual machine tab under Cloud workload.

You can attach a read-only disk to multiple VMs, but NetBackup discovers it under only one VM.

For a Windows VM, the snapshot fails with a VSS error, similar to the following:

Failure: flexsnap.GenericError: Failed to take snapshot (error: Failed to create VSS snapshot of the selected volumes.)"

For a Linux VM, the snapshot may or may not be successful for the VM under which the disk is discovered, but fails for the rest of the VMs due to the missing dependencies. Error example:

linear_flow.Flow: create snapshot (test-win) of host linux-1(len=4)' requires ['snap_google- gcepd-us-west 2-b-7534340043 132122994'] but no other entity produces said requirements\n MissingDependencies

In the above case, if a snapshot is successful for a Linux VM, a read-only disk is restored in a read/write mode.