NbServerMigrator Update: Rename operation, when ECA is configured on BYO (Windows/Linux)

Description

Rename steps to perform when ECA is configured on the NetBackup primary server:
 

Rename operation (for ECA + NBCA):

1.  For Windows, run the following:
   If using command prompt, then please run:
                set WEBSVC_PASSWORD=<nbwebsvc password>
   where: nbwebsvc password is the password for the nbwebsvc user.
   Note: This is not needed for Linux and Flex Appliance.
    
2. Run the rename by using the following command on the NetBackup primary server from the nbserverupdate path:
   nbserver_update -operation rename -current_name <current_name> -new_name <new_name>
   
   Note: Once the NBServerMigrator Update performs its operation, a message is displayed. It also displays the Action Required tasks in case the operation is partially completed due to some errors.
3. For BYO, post rename operation, update the OS name on the server, confirm that the correct name has been updated, and take a reboot.
   Example: a) To update the OS hostname on a RHEL server, hostnamectl set-hostname <new_name>.
                  b) To update the OS hostname on a SUSE server, hostnamectl set-hostname <new_name> --transient.
                  c) To update the OS hostname on a Windows server, Settings > System > About > Rename this PC >"Enter the new_name" and select next.
   Note: This is not required for Flex Appliance.
    
4. Update the network configuration so that both the current name and the new name are resolved on the primary server as well as on the media and client servers. After this, clear the cache on the media and the client servers using the command: bpclntcmd -clear_host_cache
    
5. Run following commands
   a) <Install_path>/wmc/bin/install/configureWebServerCerts -removeExternalCert -all -force
   Note: if the above commands fails, please follow the technote: https://isearch.veritas.com/internal-search/en_US/article.100071793.html
   b) <Install_path>/netbackup/bin/nbwmc -stop
   c) <Install_path>/netbackup/bin/nbwmc -start
   d) <Install_path>/netbackup/bin/nbcertcmd  -removeEnrollment
    
6. Reconfigure ECA with a new certificate for the new_name with following steps.
   a) Remove/rename old eca folder
   b) Copy eca certificates with new name in eca folder
       example:  /usr/eca
   c) Set the appropriate ownership to the eca folder
       example:  
       For Linux: chown nbsvc:bin -R /usr/eca   where nbsvc is service user
       For Windows: nbserviceusercmd.exe -addAcl C:\certs -reason grant_access_for_eca
   d) Run the following commands
       i)/usr/openv/wmc/bin/install/configureWebServerCerts -addExternalCert -all -certPath /usr/eca/cert_chain.pem -privateKeyPath /usr/eca/private/key.pem -trustStorePath /usr/eca/trusted/cacerts.pem
       ii) /usr/openv/netbackup/bin/nbwmc stop
       iii) /usr/openv/netbackup/bin/nbwmc start
       iv) /usr/openv/netbackup/bin/nbcertcmd -enrollCertificate -updateconf -trustStorePath /usr/eca/trusted/cacerts.pem -certpath /usr/eca/cert_chain.pem -privatekeypath /usr/eca/private/key.pem
   e) Run the following to check the status of eca
       /usr/openv/netbackup/bin/nbcertcmd -getSecConfig -caUsage
7. Pull new certificates on ECA deployed  clients/media
       /usr/openv/netbackup/bin/nbcertcmd -getCACertificate -server <new_name>
       /usr/openv/netbackup/bin/nbcertcmd -getCertificate  -force -server <new_name>
       /usr/openv/netbackup/bin/nbcertcmd -getCrl -server <new_name>
    
8. Run post rename report on the NetBackup primary server:
   a) Validate that both the current name and the new name are pingable from the primary server.
   b) For Windows server, set the password for nbwebsvc user:
       If using command prompt, then please run:
           set WEBSVC_PASSWORD=<nbwebsvc password>
       For Linux proceed with step: 8 c.
   c) Run the following command on the NetBackup primary server:
       nbserver_update -operation rename  -post_report
    
9. The post rename report post_rename_report.html will be present in the <install_apth>/nbsm/nbserverupdate/report folder. Open it in a browser and analyze the report.
    
10. Take a restart of NetBackup services on the primary server

Rename operation (for pure ECA):

1.  For Windows, run the following:
   If using the command prompt, then please run:
                set WEBSVC_PASSWORD=<nbwebsvc password>
   where: nbwebsvc password is the password for the nbwebsvc user.
   Note: This is not needed for Linux and Flex Appliance.
    
2. Enable NBCA on the primary server by using the command:
   /usr/openv/wmc/bin/install/configureWebServerCerts -addNBCert
    
3. Run the rename by using the following command on the NetBackup primary server from the nbserverupdate path:
   nbserver_update -operation rename -current_name <current_name> -new_name <new_name>
   
   Note: Once the NBServerMigrator Update performs its operation, a message is displayed. It also displays the Action Required tasks in case the operation is partially completed due to some errors.
    
4. For BYO, post rename operation, update the OS name on the server, confirm that the correct name has been updated and take a reboot.
   Example: a) To update the OS hostname on a RHEL server, hostnamectl set-hostname <new_name>.
                  b) To update the OS hostname on a SUSE server, hostnamectl set-hostname <new_name> --transient.
                  c) To update the OS hostname on a Windows server, Settings > System > About > Rename this PC >"Enter the new_name" and select next.
   Note: This is not required for Flex Appliance.
    
5. Update the network configuration so that both the current name and the new name are resolved on the primary server as well as on the media and client servers. After this, clear the cache on the media and the client servers using the command: bpclntcmd -clear_host_cache
    
6. Run following commands
   a) <Install_path>/wmc/bin/install/configureWebServerCerts -removeExternalCert -all -force
   Note: if the above commands fails, please follow the technote: https://isearch.veritas.com/internal-search/en_US/article.100071793.html
   b) <Install_path>/netbackup/bin/nbwmc -stop
   c) <Install_path>/netbackup/bin/nbwmc -start
   d) <Install_path>/netbackup/bin/nbcertcmd  -removeEnrollment
    
7. Reconfigure ECA with a new certificate for the new_name with the following steps.
   a) Remove/rename old eca folder
   b) Copy eca certificates with new name in eca folder
       example:  /usr/eca
   c) Set the appropriate ownership to the eca folder
       example:
       For Linux: chown nbsvc:bin -R /usr/eca   where nbsvc is service user
       For Windows: nbserviceusercmd.exe -addAcl C:\certs -reason grant_access_for_eca
   d) Run the following commands
       I) /usr/openv/wmc/bin/install/configureWebServerCerts -addExternalCert -all -certPath /usr/eca/cert_chain.pem -privateKeyPath /usr/eca/private/key.pem -trustStorePath /usr/eca/trusted/cacerts.pem
       ii) /usr/openv/netbackup/bin/nbwmc stop
       iii) /usr/openv/netbackup/bin/nbwmc start
       iv) Run the following commands on the primary server:
           nbcertcmd -getCACertificate
           nbcertcmd -getCertificate -force
           Note: If a reissue token is requested, then follow: https://www.veritas.com/support/en_US/article.100044149
       iv) /usr/openv/netbackup/bin/nbcertcmd -enrollCertificate
   e) Run the following to check the status of eca
       /usr/openv/netbackup/bin/nbcertcmd -getSecConfig -caUsage
8. Pull new certificates on ECA deployed  clients/media
       /usr/openv/netbackup/bin/nbcertcmd -getCACertificate -server <new_name>
       /usr/openv/netbackup/bin/nbcertcmd -getCertificate  -force -server <new_name>
       /usr/openv/netbackup/bin/nbcertcmd -getCrl -server <new_name>
    
9. Run post rename report on the NetBackup primary server:
   a) Validate that both the current name and the new name are pingable from the primary server.
   b) For Windows server, set the password for nbwebsvc user:
              If using command prompt, then please run:
                set WEBSVC_PASSWORD=<nbwebsvc password>
              For Linux and Flex Appliance, proceed with step: 9 c.
   c) Run the following command on the NetBackup primary server:
       nbserver_update -operation rename  -post_report
    
10. The post rename report post_rename_report.html will be present in the <install_apth>/nbsm/nbserverupdate/report folder. Open it in a browser and analyze the report.
     
11. Disable NBCA on the primary server using the command:
    configureWebServerCerts -removeNBCert
    (use -force if the command requests it)
     
12. Take a restart of NetBackup services on the primary server
     
13. If required, delete the NBCA certificates from the media/client servers.

Note: This technote includes the "Modify the host name of the primary server" and "Post rename tasks" topics of the NBServerMigrator Update: Rename operation administrator guide.