NetBackup™ Web UI Administrator's Guide
- Section I. About NetBackup
- Section II. Monitoring and notifications
- Monitoring NetBackup activity
- Activity monitor
- Job monitoring
- Troubleshooting the viewing and managing of jobs
- Device monitor
- Notifications
- Registering the data collector
- Monitoring NetBackup activity
- Section III. Configuring hosts
- Managing host properties
- Busy file settings properties
- Client attributes properties
- Client settings properties for UNIX clients
- Client settings properties for Windows clients
- Data Classification properties
- Default job priorities properties
- Encryption properties
- Exchange properties
- Exclude list properties
- Fibre transport properties
- General server properties
- Global attributes properties
- Logging properties
- Media properties
- Network settings properties
- Port ranges properties
- Preferred network properties
- Resilient network properties
- Restore failover properties
- Retention periods properties
- Scalable Storage properties
- Servers properties
- SharePoint properties
- SLP settings properties
- Managing credentials for workloads and systems that NetBackup accesses
- Managing deployment
- Managing host properties
- Section IV. Configuring storage
- Overview of storage options
- Configuring disk storage
- Integrating MSDP Cloud and CMS
- About configuring disk pool storage
- About the MSDP object store
- Managing media servers
- Configuring storage units
- Configuring robots and tape drives
- About configuring robots and tapes drives in NetBackup
- Managing robots
- Managing tape drives
- Configuring tape media
- About adding volumes
- Managing volumes
- About recycling a volume
- About injecting and ejecting volumes
- Managing volume pools
- Managing volume groups
- Inventorying robots
- About showing a robot's contents
- Staging backups
- Troubleshooting storage configuration
- Section V. Configuring backups
- Overview of backups in the NetBackup web UI
- Managing classic policies
- Managing protection plans
- Protecting the NetBackup catalog
- Catalog backups
- Managing backup images
- Pausing data protection activity
- Section VI. Managing security
- Security events and audit logs
- Managing security certificates
- Managing host mappings
- Minimizing security configuration risk
- Configuring multi-person authorization
- Managing user sessions
- Configuring multifactor authentication
- Managing the global security settings for the primary server
- About trusted primary servers
- Using access keys, API keys, and access codes
- Configuring authentication options
- Managing role-based access control
- Disabling access to NetBackup interfaces for OS Administrators
- Section VII. Detection and reporting
- Detecting anomalies
- About backup anomaly detection
- Malware scanning
- Usage reporting and capacity licensing
- Reports
- Detecting anomalies
- Section VIII. NetBackup workloads and NetBackup Flex Scale
- Section IX. Administering NetBackup
- Management topics
- Managing client backups and restores
- About client-redirected restores
- Section X. Disaster recovery and troubleshooting
- Section XI. Other topics
- Additional NetBackup catalog information
- Parts of the NetBackup catalog
- Archiving the catalog and restoring from the catalog archive
- Estimating catalog space requirements
- About the file hash search in NetBackup
- About the NetBackup database
- About the NetBackup database installation
- Post-installation tasks
- Using the NetBackup Database Administration utility on Windows
- Using the NetBackup Database Administration utility on UNIX
- Additional NetBackup catalog information
Configure an external certificate for the NetBackup web server
By default, NetBackup uses the security certificates that the NetBackup CA has issued. If you have a certificate that an external CA has issued, you can configure the NetBackup web server to use it for secure communication.
Note:
Windows certificate store is not supported as certificate source for the NetBackup web server.
The API that you can use to configure the external certificate for the NetBackup web server: POST security/web-certificates/{certificate_id}.
If external certificate for the web server is configured using the API, the configuration process is audited.
To configure an external certificate for the web server
- Ensure that you have valid certificate, private key of the certificate, and trusted CA bundle.
- Ensure that the NetBackup Web Management Console service is up and running.
- Run the following command:
configureWebServerCerts -addExternalCert -nbHost -certPath certificate path -privateKeyPath private key path -trustStorePath CA bundle path [-passphrasePath passphrase file path]
The configureWebServerCerts command does not support use of Windows certificate store paths.
Refer to the NetBackup Commands Reference Guide for more details on the command-line options.
In a clustered setup, to avoid a failover run the following command on the active node:
install_path/netbackup/bin/bpclusterutil -freeze
If the FIPS mode is enabled on the primary server, you can use only the PEM-formatted files for the configureWebServerCerts command.
- Restart the NetBackup Web Management Console service to reflect the changes.
On UNIX, run the following commands:
install_path/netbackup/bin/nbwmc -terminate
install_path/netbackup/bin/nbwmc start
On Windows, use the Services application in the Windows Control Panel.
Location of the commands:
Windows
install_path\NetBackup\wmc\bin\install\
UNIX
install_path/wmc/bin/install
In a clustered setup, unfreeze the cluster using the following command on the active node:
install_path/netbackup/bin/bpclusterutil -unfreeze
- Restart the NetBackup Messaging Queue Broker (nbmqbroker) service as follows:
On Windows:
Go to the Services application in the Windows Control Panel and manually restart the NetBackup Messaging Queue Broker service.
On UNIX:
Run the following command:
nbmqbroker stop; nbmqbroker start
- Verify that you can access the NetBackup web user interface using a browser, without a certificate warning message.