How to enable the Auto Image Replication (A.I.R.) import confirmation feature after upgrading A.I.R configured master servers in NetBackup 8.1

Problem

Description
NetBackup version 8.1 introduces a new feature related to targeted A.I.R. operations known as Import Confirmation.  When using targeted A.I.R., Storage Lifecycle (SLP) processing of each replicated image will be paused in the source domain until a message has been received from the target domain confirming that the image has been successfully imported.  This ensures source domain images will remain in place at least until those images have been safely imported in the target domain.

A.I.R. operations require that a trust relationship be established prior to configuring and operating SLPs that perform targeted replication.   Configuration of A.I.R and setup of the trust relationship is detailed in the NetBackup Administration Guide, Volume I.

In NetBackup 8.1, this includes import confirmation messages sent from the target domain to the source domain.  Security changes in 8.1 require that this trust relationship be re-established before import confirmation can proceed.  Import confirmation operations are not enabled by default in NetBackup 8.1, regardless of whether the system is upgraded from a prior NetBackup release or an initial install is performed.

Solution

How to Enable Import Confirmation

After NetBackup version 8.1 has been installed and is operational on both the source and target domains, perform the following steps to enable import confirmation.  If multiple source and target domains are involved, these steps should be performed on the master server in each domain.

1.  Establish the trust relationship between masters.
 
If NetBackup 8.1 is running as the result of an initial install or no trust relationship existed in prior releases because targeted A.I.R. was not used, establish the new trust relationship as part of the normal targeted A.I.R. configuration steps.  See the “Adding a Trusted Master Server” section in the NetBackup Administrator's Guide, Volume I for more information.  Steps 2, 3, and 4 below should be executed before configuring SLPs that perform targeted A.I.R. operations.
 
If NetBackup 8.1 has been upgraded from a prior release and the trust relationship has been established as part of a prior A.I.R. configuration, the trust relationship must be re-established. 

There are three different options available to re-establish trust.  One of these options must be run on each master server involved with A.I.R. operations.
 
On Unix systems, the nbseccmd program is located in /usr/openv/netbackup/bin/admincmd/nbseccmd.  On Windows systems, it is located in install_path\NetBackup\bin\admincmd\nbseccmd.
 
Option 1:
Run the following command if you are using user credentials.  You will be prompted to provide the password:
nbseccmd -setuptrustedmaster -update -masterserver < master_server_name>
         -remotemasterserver < remote_master_server> -domainname < domain_name>
         -username < username> -fpfile < filename>
 
Option 2:
Run the following command if you are using an authorization token.  You will be prompted to provide the token:
nbseccmd -setuptrustedmaster -update -masterserver < master_server_name>
         -remotemasterserver < remote_master_server> -domainname < domain_name>
         -fpfile < filename>
 
Option 3:
Run the command if you are using the answer file:
nbseccmd -setuptrustedmaster -update -info <answer_file>
 
 
For more information about the command, see the NetBackup Command Reference Guide.
 
 

2.  Disable SLP operations by terminating the SLP manager service.
Run the following command on each master server involved in A.I.R. operations.  nbstserv should be terminated on all master servers before proceeding to step 3.

When NetBackup is operating in a cluster system, terminating a service like nbstserv must be done with care.  See the appropriate cluster management documentation to determine the correct process for your cluster software.

On Unix systems, the nbstserv program is located at /usr/openv/netbackup/bin/nbstserv.  On Windows systems, it is located at install_path\NetBackup\bin\nbstserv.
 
nbstserv -terminate
 

3. Enable import confirmation.
Run the following command on each master server involved in A.I.R.   Once the value has been set on a given master server, step 4 can be processed for that master server independently from other master servers.

On Unix systems, the bpsetconfig program is located at /usr/openv/netbackup/bin/admincmd/bpsetconfig.  On Windows systems, it is located at install_path\NetBackup\bin\admincmd\bpsetconfig.
 
bpsetconfig
bpsetconfig>SLP.ENABLE_IMPORT_CONFIRMATION = 1
bpsetconfig><end-file marker - Unix: Ctrl+D Enter, Windows: Ctrl+Z Enter>

Note that this step does not result in any type of email notification from NetBackup, this procedure is only turning on the feature to monitor import activity.

4.  Re-enable SLP operations by restarting the SLP manager service.
Run the following command on each master server involved in A.I.R.

nbstserv

Note that nbstserv can be terminated while the rest of NetBackup services remain running.  SLP operations will not be processed during this period but will resume when nbstserv is restarted.