Search <book_title>...

NetBackup™ Deduplication Guide

Last Published: 2022-03-28

Product(s): NetBackup (10.0)

Enabling NetBackup clustered primary server inter-node authentication

NetBackup requires inter-node authentication among the primary servers in a cluster. For authentication, you must provision an authentication certificate on all of the nodes of the cluster. The certificates are used to establish SSL connections between the NetBackup hosts. The inter-node authentication allows the following NetBackup functionality:

NetBackup Administration Console

The NetBackup Administration Console in primary server clusters requires the NetBackup authentication certificates for correct functionality.

Targeted A.I.R. (Auto Image Replication)

Auto Image Replication in which a primary server is in a cluster requires inter-node authentication among the hosts in that cluster. The NetBackup authentication certificates provide the means to establish the proper trust relationships.

Provision the certificates on the cluster hosts before you add the trusted primary server. This requirement applies regardless of whether the clustered primaryed server is the source of the replication operation or the target.

See About trusted primary servers for Auto Image Replication.

To enable clustered primary server inter-node authentication

On the active node of the NetBackup primary server cluster, run the following NetBackup command:

Windows: install_path\NetBackup\bin\admincmd\bpnbaz -setupat
UNIX: /usr/openv/netbackup/bin/admincmd/bpnbaz -setupat

NetBackup creates the certificates on every node in the primary server cluster.

The following is example output:

# bpnbaz -setupat
You will have to restart Netbackup services on this machine after 
the command completes successfully.
Do you want to continue(y/n)y
Gathering configuration information.
Please be patient as we wait for 10 sec for the security services 
to start their operation.
Generating identity for host 'bit1.remote.example.com'
Setting up security on target host: bit1.remote.example.com
nbatd is successfully configured on Netbackup Primary Server.
Operation completed successfully.