Veritas NetBackup™ Appliance Release Notes

Last Published:
Product(s): Appliances (4.1)
Platform: NetBackup Appliance OS

New features, enhancements, and changes for NetBackup Appliance 4.1

The following list describes the new features, enhancements, and changes in the NetBackup appliance 4.1 release:

  • Direct upgrade paths for 4.1

    The following describes the supported direct upgrade paths for version 4.1:

    • 5240, 5330, or 5340 appliances with versions 3.1.1, 3.1.2, 3.2, 3.3.0.1, and 4.0

    • 5250 appliances with versions 3.2, 3.3.0.1, and 4.0

    • 5350 appliances with version 4.0

    For complete details about upgrades to version 4.1, see the NetBackup Appliance Upgrade Guide.

  • Fibre Channel HBA vendors

    Veritas, at its discretion, may add or substitute Fibre Channel HBA cards from other vendors as an alternative to those that are shipped with all currently available NetBackup Appliance models. Any Fibre Channel HBA alternative or substitution does not change or impact appliance Fibre Channel configuration.

  • Terminology changes for NetBackup Appliance

    Starting with this release, the NetBackup Appliance interfaces and documentation are changing the following terms:

    • "primary server" replaces master server

    • "allowed list" replaces whitelist/white list

    • "blocked list" replaces blacklist/black list

    Most of these changes have been implemented, however, it is possible that the previous terms may still appear in some messages, interface screen captures, and line art or graphic images. Any remaining updates will be addressed in the next software release.

    Note:

    Some system messages may contain the word "slave". These occurrences are not in the NetBackup Appliance code, but reside in third party packages/ applications that are included with the product. For example, Linux and Samba. These occurrences are minimal and appear mostly in system messages, along with the option or variable name used in the Main > Network > LinkAggregation command. Those vendors are responsible for making the necessary changes in their packages/applications. Veritas does not currently have a time line from its third party vendors with regard to terminology changes.

  • Expanded Fibre Transport configuration flexibility for supported legacy appliance models

    Starting with this release, you can configure any available HBA Fibre Channel (FC) ports for FTMS (Target), MSDP (Target), or Initiator. This change removes the previous limitation for SAN Client configuration only on HBA cards in slots 5 and 6. The only exceptions for these changes apply to the HBA cards in slots 1 and 4 on NetBackup 5330 and 5340 appliances. Factory default configurations for all appliances remain unchanged. However, methods for Fibre Transport and Fibre Channel configuration from the web console and the appliance shell menu have changed. For more details, see the following documents:

    NetBackup Appliance Administrator's Guide

    NetBackup Appliance Fibre Channel Guide

    NetBackup Appliance Commands Reference Guide

  • RBAC default privileges change for NetBackup CLI users

    Starting with this release, NetBackup CLI users are no longer granted any NetBackup RBAC privileges by default. This includes new 4.1 or later appliance deployments or appliance upgrades to version 4.1 or later with existing NetBackup CLI users. If any of these users require access to the NetBackup Web UI or REST APIs, you must manually grant them the appropriate NetBackup RBAC privileges. For complete details, see the NetBackup Web UI Administrator's Guide.

  • New command options to manage NFS, NMB, SMB services

    Starting with this release, new Main > Support > Service command options let you fully manage the NFS, NMB, and SMB services on the appliance. The new options are [Service Disable], [Service Enable], and [Service Show]. For complete details, see the NetBackup Appliance Commands Reference Guide.

  • CIFS and NFS share folder location changes for Log Forwarding and OpenStorage plugins

    Starting with this release, the folder locations for Log Forwarding and OpenStorage plugins have changed as follows:

    • Log Forwarding/CIFS - from \server_name\logforwarding to \server_name\general_share

    • Log Forwarding/NFS - from server_name:/inst/logforwarding to server_name:/inst/share

    • OpenStorage/CIFS - from \\server_name\incoming_plugins to \\server_name\general_share

    • OpenStorage/NFS - from server_name:/inst/plugin/incoming to server_name:/inst/share

  • Beacon Start command options replace Beacon Duration command options

    Starting with this release, the Main > Monitor > Beacon Duration command options have been replaced with the following:

    • Main > Monitor > Beacon Start Enclosure

    • Main > Monitor > Beacon Start HDD

    • Main > Monitor > Beacon Start WWID

    The default time for each option has also changed from 10 minutes to 5 minutes. All other option parameters remain the same. For complete details, see the NetBackup Appliance Commands Reference Guide.

  • Location change for CleanMonInvData command

    Starting with this release, the CleanMonInvData command has been moved from the Main > Support > InfraServices view to the Main > Support > Cleanup view. This change places the command with all other cleanup related commands.

  • New DataCollect v2 commands

    Starting with this release, the following commands have been added to the Main > Support > DataCollect view:

    • DataCollect v2 Advanced: Use to gather appliance datacollect logs that include detailed logs for a higher level of debugging.

    • DataCollect v2 Advanced Cleanstart: Use to delete all previous appliance datacollect logs and gather a new advanced datacollect log.

    • DataCollect v2 Upload <absolute_file_path>: Use to upload a specified datacollect log file to the Veritas server.

    The existing DataCollect v2 Upload command has been modified to always upload the latest datacollect log to the Veritas server.

    For complete details, see the NetBackup Appliance Commands Reference Guide.

  • FIPS validation for Java-based services

    Starting with this release, the FIPS 140-2 standard is enabled by default for all Java-based services. The FIPS validation is achieved by using SafeLogic's CryptoComply modules.

    For complete details, see the NetBackup Appliance Security Guide.

  • STIG lists available on Veritas Support site

    Starting with this release, the STIG rule lists have been removed from the NetBackup Appliance Security Guide. All STIG rule lists are now available in separate documents on the Veritas Support site. Two checklists are currently available, one for the OS and one for Application Security STIG. For instructions about how to obtain these documents, go to the Latest releases page on the Veritas Download Center, navigate to NetBackup Appliance OS and click Learn more.

  • New RBAC requirements for enabling KMS encryption

    Starting with this release, the NetBackupCLI user used to enable KMS encryption must be assigned the Default Security Administrator role.

    For complete details on enabling KMS encryption, see the NetBackup Appliance Security Guide.

  • New commands to manage locked accounts on the appliance

    Starting with this release, new Settings > Security > Authentication > AccountStatus commands view lets you view and reinstate locked accounts. The new command-line options are ListLockedAccounts and UnlockAccounts. For complete details, see the NetBackup Appliance Commands Reference Guide.

  • New commands to register an external certificate authority (ECA) on the appliance.

    Starting with this release, new Settings > Security > Certificate commands view lets you manage external certificates on an appliance. The AddCACertificate command-line option is newly added and the Import command-line option is modified to register and enable the ECA on NetBackup and NetBackup Appliance layers. For complete details, see the NetBackup Appliance Commands Reference Guide.

  • New commands to create or view a Certificate Signing Request (CSR)

    Starting with this release, new Settings > Security > Certificate > CertificateSigningRequest commands view lets you generate or view a CSR. The new command-line options are Create and Show. For complete details, see the NetBackup Appliance Commands Reference Guide.