NetBackup™ Marketplace Deployment on AWS

Last Published:
Product(s): NetBackup & Alta Data Protection (10.2)
  1. NetBackup marketplace deployment on AWS
    1.  
      About Veritas NetBackup Marketplace Deployment on AWS
    2.  
      Before you begin the deployment
    3.  
      Network configuration
  2. Deploying NetBackup on AWS Cloud using the marketplace offer
    1.  
      Deploying NetBackup on AWS Cloud using the marketplace offer
  3. Deployment options (Delivery methods) for NetBackup on AWS cloud
    1.  
      Deployment options (Delivery methods) for NetBackup on AWS cloud
    2.  
      Option 1: Primary server only
    3.  
      Option 2: Media server only
    4.  
      Option 3: Primary and Media servers
    5. Option 4: Snapshot Manager server only
      1. Prerequisites for using the Snapshot Manager template
        1.  
          Configuring AWS permissions for Snapshot Manager
      2.  
        Resources created by the Snapshot Manager template
      3.  
        Snapshot Manager EC2 instance configuration details
      4.  
        Instance failures and Auto Scaling Group behavior
    6.  
      Option 5: Primary, Media, and Snapshot Manager servers
    7.  
      Option 6: Cloud Recovery server only
    8.  
      Option 7: Malware Scanner Only
  4. NetBackup configuration parameters
    1.  
      NetBackup configuration parameters
    2.  
      Instance configuration parameters
    3.  
      VPC and Subnet details for deployment in existing VPC
    4.  
      VPC and Subnet configuration for deployment in new VPC
    5. NetBackup installation parameters for the primary server
      1.  
        IAM role required for the primary server
    6.  
      NetBackup installation parameters for Media server
    7. NetBackup installation parameters for Snapshot Manager Server
      1.  
        IAM role required for Snapshot Manager instance
      2.  
        AWS endpoints used by Snapshot Manager
    8. NetBackup installation parameters for Cloud Recovery Server
      1.  
        IAM role required for Cloud Recovery Server
  5. Encryption enabled NetBackup primary server
    1.  
      Additional steps on CRS if encryption is enabled NetBackup primary server
  6. Accessing the NetBackup servers
    1.  
      How to access the NetBackup servers
  7. Upgrade NetBackup Snapshot Manager from AWS Marketplace
    1.  
      Upgrade NetBackup Snapshot Manager from AWS Marketplace
    2.  
      Perform the following steps to upgrade a Snapshot Manager deployment using a new AWS CloudFormation stack
  8. Troubleshooting section
    1.  
      Troubleshooting
    2.  
      Deployment Logs

Additional steps on CRS if encryption is enabled NetBackup primary server

Below are the additional steps to be done on Cloud Recovery Server, if the encryption is enabled on Netbackup primary server.

When KMS encryption is enabled, you can share the images in S3 bucket to the Cloud Recovery Server host with manual KMS key transfer.

On-premises KMS key changes:

In case of KMS key changes, for the given group for on-premises storage server after the Cloud Recovery Server host is set up, you must export the key file from on-premises KMS server and import that key file on the cloud recovery host.

On-premises NetBackup master server: Exports the key group with a passphrase to a file:

/usr/openv/netbackup/bin/admincmd/nbkmsutil -export -key_groups <key-group-name> -path <key file path>

Cloud Recovery Server host (cloud side):

  1. Copy the exported key to the Cloud Recovery Server host.

  2. Config KMS server:

    /usr/openv/netbackup/bin/nbkms -createemptydb /usr/openv/netbackup/bin/nbkms /usr/openv/netbackup/bin/nbkmscmd -discovernbkms -autodiscover

  3. Import keys to KMS service.

    /usr/openv/netbackup/bin/admincmd/nbkmsutil -import -path <key file path> -preserve_kgname

  4. Once this is done we need to restart the NetBackup.

    Refer below link for more details.