Unable to install NetBackup client software on a RHEL platform with server side FIPS enabled.

Problem

Server side FIPS enabled systems experience client software installation failures. This behavior has been observed in NetBackup versions 8.2 through 9.1.

Error Message

[root@master]# more install_VRTSnbpck.rpm_trace.1262542
Installing VRTSnbpck ...
Verifying packages...
Preparing packages...
            package VRTSnbpck-9.0.0.0-1607546564.x86_64 does not verify: no digest
  

Cause

When FIPS is enabled on RHEL systems, the digest verification process will cause the client software installation to fail.

Solution

Disable digest verification of packages before installing NetBackup. This can be done by executing the following command:

echo "%_pkgverify_level none" > /etc/rpm/macros.verify

The default value of the flag is “digest” on RHEL 8. After the above command is executed, it should change to “none”.

To see the current value of the flag, execute:

rpm --eval "%{_pkgverify_level}"

Once NetBackup is installed, the /etc/rpm/macros.verify file can be deleted.
Removing the  /etc/rpm/macros.verify file should change the setting back to the default of “digest”.

Note: This workaround does not require reboots and does not require FIPS mode to be disabled on the OS.

A fix for this issue has been included in NetBackup 10.1.1 and up.