Veritas Solution Guide for Sheltered Harbor

Last Published:
Product(s): NetBackup & Alta Data Protection (10.2)

System requirements

Review the following system requirements for the NetBackup Sheltered Harbor solution:

  • NetBackup primary server: Version 10.2

  • NetBackup media server: Version 10.2

  • NetBackup client: Version 10.2

Note:

NetBackup version 10.2 is highly recommended for NetBackup primary, media server, and client roles. Limited NetBackup deployment types for BYO and Flex Appliance are supported using version 10.1

KMS: Use either of the following KMS services:

  • Cloud KMS (CKMS): Azure key vault based external KMS solutions is supported.

  • On-premises KMS (EKMS): See External KMS - Considerations in the Encryption and Security Solutions section for more information.

Note:

NetBackup KMS cannot be used for the Sheltered Harbor solution configuration.

Note:

CRL downloading is not allowed on NetBackup client by default, hence one should enable it by setting ALLOW_SH_EKMS_CRL_DOWNLOAD config flag to 1 to make SSL connection to an external KMS server (default value is 0).

Immutable cloud storage: An immutable cloud storage provider is required to support Sheltered Harbor specific standards. See cloud storage vendor compatibility list with either of these two designations.

  • S3 Object Lock: Yes

  • Object Lock (Immutable storage): Yes

Operating system: For information on the operating system requirements for the NetBackup primary server, media server and client, see Veritas NetBackup Compatibility List.