NetBackup IT Analytics Data Collector Installation and Configuration Guide for Veritas NetBackup

To recover a keystore file:

1. Login to the data collector system and navigate to its installation path: /Aptare/mbs/conf.
2. Identify these files inside /Aptare/mbs/conf:

   • aptare_message_relay_certificate.pem

   • aptare_message_relay_keystore.ks

   • aptare_message_relay_keystore.properties

3. Stop the Aptare Agent service on the data collector system.

   On a Windows system, you can stop the service from the Services Console, whereas you can use ./aptareagent stop command on Unix.

4. Delete these files from /Aptare/mbs/conf.

   • aptare_message_relay_certificate.pem

   • aptare_message_relay_keystore.ks

   • aptare_message_relay_keystore.properties

5. Login to the NetBackup IT Analytics Portal to generate a new keystore file.

   Since the certificate was changed, the portal will display a notification which states:

   Data Collector SSL certificate has not been downloaded 
   for collector(s): <data_collector_name>.

6. Go to Admin > Data Collection > Collector Administration and click the collector name to view its policies.
7. Double-click the collector to invoke the Edit Collector window.
8. Copy the Passcode value and save it for later use.
9. Click Generate Key and download the key file.
10. Copy the key file to /Aptare/mbs/conf folder on the data collector system. Ensure the file name is same as that of the data collector on the portal.
11. On the data collector system, open the collector.properties file from /Aptare/mbs/conf and replace the COLLECTOR_PASSWORD value with the Passcode value copied from the Edit Collector window.
12. Save the collector.properties file and start the Aptare Agent service.

    After the service starts:

    • A new aptare.ks is generated inside /Aptare/mbs/conf which consumes the new key file.

    • . The aptare_message_relay_certificate.pem, aptare_message_relay_keystore.ks, and aptare_message_relay_keystore.properties files are generated later shortly.

    • Since the certificate was changed, the portal will display a notification which states:

      Data Collector SSL certificate has not been downloaded 
      for collector(s): <data_collector_name>.

13. On the NetBackup IT Analytics Portal, go to Admin > Data Collection > Collector Administration and click the collector name to view its policies.
14. Double-click the policy name for which SSL certificate needs to be downloaded. The policy configuration window is displayed.
15. Click Download SSL Certificate. The certificate is downloaded to your system.
16. Copy the certificate to the data sender trust store.