NetBackup™ Web UI Cloud Object Store Administrator's Guide

Last Published:
Product(s): NetBackup & Alta Data Protection (10.4)
  1. Introduction
    1.  
      Overview of NetBackup protection for Cloud object store
    2.  
      Features of NetBackup Cloud object store workload support
  2. Managing Cloud object store assets
    1.  
      Prerequisites for adding Cloud object store accounts
    2.  
      Permissions required for Amazon S3 cloud provider user
    3.  
      Permissions required for Azure
    4.  
      Limitations and considerations
    5. Adding Cloud object store accounts
      1.  
        Creating cross-account access in AWS
      2.  
        Check certificate for revocation
      3.  
        Managing Certification Authorities (CA) for NetBackup Cloud
      4.  
        Adding a new region
    6.  
      Manage Cloud object store accounts
  3. Protecting Cloud object store assets
    1. About accelerator support
      1.  
        How NetBackup accelerator works with Cloud object store
      2.  
        Accelerator notes and requirements
      3.  
        Accelerator force rescan for Cloud object store (schedule attribute)
      4.  
        Accelerator backup and NetBackup catalog
    2.  
      About incremental backup
    3.  
      About policies for Cloud object store assets
    4.  
      Planning for policies
    5.  
      Prerequisites for Cloud object store policies
    6.  
      Creating a backup policy
    7.  
      Setting up attributes
    8.  
      Creating schedule attributes for policies
    9.  
      Configuring the Start window
    10.  
      Configuring the exclude dates
    11.  
      Configuring the include dates
    12.  
      Configuring the Cloud objects tab
    13.  
      Adding conditions
    14.  
      Adding tag conditions
    15.  
      Examples of conditions and tag conditions
    16. Managing Cloud object store policies
      1.  
        Copy a policy
      2.  
        Deactivating or deleting a policy
      3.  
        Manually backup assets
  4. Recovering Cloud object store assets
    1.  
      Prerequisites for recovering Cloud object store objects
    2.  
      Configuring Cloud object retention properties
    3.  
      Recovering Cloud object store assets
  5. Troubleshooting
    1.  
      Recovery for Cloud object store using web UI for the original bucket recovery option starts, but the job fails with error 3601
    2.  
      Recovery Job does not start
    3.  
      Restore fails: "Error bpbrm (PID=3899) client restore EXIT STATUS 40: network connection broken"
    4.  
      Access tier property not restored after overwriting the existing object in the original location
    5.  
      Reduced accelerator optimization in Azure for OR query with multiple tags
    6.  
      Backup failed and shows a certificate error with Amazon S3 bucket names containing dots (.)
    7.  
      Azure backup jobs fail when space is provided in a tag query for either tag key name or value.
    8.  
      The Cloud object store account has encountered an error
    9.  
      The bucket is list empty during policy selection
    10.  
      Creating a second account on Cloudian fails by selecting an existing region
    11.  
      Restore failed with 2825 incomplete restore operation
    12.  
      Bucket listing of a cloud provider fails when adding a bucket in the Cloud objects tab
    13.  
      A.I.R. import image restore fails on the target domain if the Cloud store account is not added to the target domain
    14.  
      Backup for Azure Data Lake fails when a back-level media server is used with backup host or storage server version 10.3
    15.  
      Backup fails partially in Azure Data Lake: "Error nbpem (pid=16018) backup of client
    16.  
      Recovery for Azure Data Lake fails: "This operation is not permitted as the path is too deep"
    17.  
      Empty directories are not backed up in Azure Data Lake
    18.  
      Recovery error: "Invalid alternate directory location. You must specify a string with length less than 1025 valid characters"
    19.  
      Recovery error: "Invalid parameter specified"
    20.  
      Restore fails: "Cannot perform the COSP operation, skipping the object: [/testdata/FxtZMidEdTK]"
    21.  
      Cloud store account creation fails with incorrect credentials
    22.  
      Discovery failures due to improper permissions
    23.  
      Restore failures due to object lock

Limitations and considerations

Consider the following when protecting Cloud object store workloads.

Limitations based on the upgrade scenario
  • If you upgrade to NetBackup version 10.3, from versions 10.1 or 10.2, the following limitations apply.

    • You can create Cloud object store accounts with backup hosts or scale-out servers of version 10.3 or later only. You cannot update an existing Cloud object store account that was created on NetBackup 10.3 or later with backup hosts or scale-out servers older than version 10.3.

    • You can create policies only with backup hosts or scale-out servers of version 10.3 or later. You cannot update an existing policy that is created on NetBackup 10.3 or later with backup hosts or scale-out servers older than version 10.3.

    • The following credential types are supported with backup hosts or scale-out servers older than version 10.3 only: For Azure: Service principal and Managed identity. For AWS: Assume role (EC2).

    • Restores with object lock properties are supported for backup hosts or scale-out servers of version 10.3 or later only.

    • Backup and restore of buckets with default retention enabled are supported with backup hosts or scale-out servers of version 10.3 or later only.

  • For Azure, if you update a policy created with NetBackup version prior to 10.3, with a backup host or scale-out server of version 10.3 or later, the backups fail. As a workaround, update all the buckets to use the new format of the provided generated ID with the existing queries. Note that you must create the associated Cloud object store account in the policy, using NetBackup 10.3 or later, for this workaround to be successful.

  • Discovery is supported for NetBackup version 10.3 or later, deployed on RHEL. If no supported host is available, then discovery does not start for any of the configured Cloud storage accounts. In this case, discovery status is not available, and you cannot see a bucket list during policy creation. Even if you add the buckets manually after discovery fails, your backups may fail. Upgrade at least one supported backup host or scale-out server and create a new policy.

  • If an Azure blob has the Content Encoding property assigned as "gzip" or "x-gzip", NetBackup does not download that blob and backup. The backup job is marked as partially done. You can see the following message in the activity monitor:

    Error bpbrm (pid=XXX) from client XYZ_CLIENT: ERR - File /ABC.zzz shrunk by <size> bytes, padding with zeros.

  • If you update a policy that is created on a NetBackup version prior to 10.3, consider the following after a backup:

    • After backup, you may see two versions of the same buckets, for the old and new formats. If you want to restore old data, select the bucket in the old format. For newer backups, select the ones in the newer format.

    • The subsequent backup after the update is a full backup, irrespective of what is configured in the policy.

  • When you upgrade to 10.3, the first Azure blob accelerated backup takes a backup of all objects in the selection, even if the configured backup is incremental. This full backup is required for the change in metadata properties for the Azure blobs between NetBackup versions 10.2 and 10.3. The subsequent incremental backups back up only the changed objects.

  • If you use a Cloud object store account created in a version older than 10.3, NetBackup discovers the buckets with the old format, where: uniqueName=bucketName.

  • NetBackup does not allow the following combinations as part of a prefix or object query:

    prefix = /
    prefix = /folder1
    prefix = /object1
    prefix = folder1//
    object = /obj1