Veritas NetBackup™ Virtual Appliance Documentation

Direct upgrade paths for 5.0

NetBackup Virtual Appliance supports direct upgrades from version 3.2 or later to 5.0.

See About upgrading to NetBackup Virtual Appliance software version 5.0 .

VMware vSphere 7U2 and 7U3 support

VMware vSphere versions 7U2 and 7U3 are now supported for deployment. Version 6.5 is no longer supported.

Virtual machine hardware version 14

The appliance is now based on VMware virtual machine hardware version 14.

Changes to factory reset support

Factory reset is no longer supported on newly deployed appliances or if you have moved the log partition to external storage.

For these scenarios, redeploy the appliance if you do not need to keep the storage. If you need to keep the storage, refer to the following article on the Veritas Support website: https://www.veritas.com/support/en_US/article.100051826

You can also contact Veritas Technical Support and ask your representative to reference article 100051946.

Option to move the log partition to external storage

If you need additional space for the appliance logs, you can now create a log partition and move the current log data to that partition. You can move the NDMP logs, the logs in the /log directory, or both. See Moving the log data.

NIS user support is deprecated

NIS user support, with or without Kerberos authentication, is deprecated and will not be supported in NetBackup Virtual Appliance releases after version 5.0.

Non-privileged user or service user account to run NetBackup services

Starting with this release, most primary server services can be run with a non-privileged user or non-root user, which is highly recommended. The non-privileged user is referred to as service user and is intended to run only NetBackup services.

For more information on the service user account, read the following knowledge base article:

Setting up the NetBackup service user

Changes to NetBackupCLI user privileges

Starting with this release, NetBackupCLI users can only run some commands as a superuser and are required to follow the NetBackup CLI authorization mechanism to authenticate and run such commands.

See About the NetBackupCLI user role.

Enhancements to Call Home configuration

A Call Home test is generated automatically when performing the following tasks:

The Call Home test is intended to recommend users to turn on the Call Home feature and set it up correctly.

If Call Home is disabled, a message appears on the header when the user logs in from the appliance shell menu.

STIG version updated

Starting with this release, the STIG version has been updated as follows:

STIG for Red Hat Enterprise Linux 7 Server - V3R3

Support for MSDP direct cloud tiering

Starting with NetBackup Virtual Appliance release 4.0, the Cloud Catalyst appliance is no longer supported. You are encouraged to move to MSDP direct cloud tiering technology with its improved performance, reliability, usability, and flexibility compared to the earlier Cloud Catalyst product. The following scenarios are supported:

For complete details about MSDP direct cloud tiering, see the Veritas NetBackup Deduplication Guide.

See Migrating from NetBackup Cloud Catalyst Appliance to MSDP direct cloud tiering.

New SMTP alert commands

Starting with this release, the following SMTP commands have been added to the appliance shell menu:

Settings > Alerts > Email SMTP Encryption

Settings > Alerts > Email SMTP ConfigurePort

See Settings > Alerts > Email.

New CIFSShare command

Starting with this release, the following CIFSShare command has been added to the appliance shell menu:

Settings > Security > Authentication > CIFSShare > RestrictAnonymous

The command lets you restrict SAMR access to prevent Microsoft application connections to the CIFS share.

See Main > Settings > Security > Authentication > CIFSShare.

New CA certificate commands

Starting with this release, the following CA certificate commands have been added to the appliance shell menu:

Settings> Security > Certificate> Add CACertificateMSDP

Settings> Security > Certificate> Remove CACertificate

See Main > Settings > Security > Certificate.

New FIPS support

Starting with this release, you can enable the FIPS 140-2 standard for MSDP, NetBackup and VxOS. The NetBackup Cryptographic Module, which is used by MSDP, NetBackup and VxOS, has been FIPS validated. The following commands have been added to the appliance shell menu:

Settings > Security > FIPS Enable MSDP (followed by the maintenance password)

Settings > Security > FIPS Enable NetBackup (followed by the maintenance password)

Settings > Security > FIPS Enable VxOS (followed by the maintenance password)

Settings > Security > FIPS Enable All (followed by the maintenance password)

See FIPS 140-2 conformance for NetBackup Virtual Appliance.

Changes and additions to DataCollect commands

Starting with this release, several updates have been made to the Support > DataCollect menu, along with the addition of the following new command:

Support > DataCollect > sanitization

See Support > DataCollect.

New Security > Sessions commands menu

Starting with this release, you can use the Sessions commands to set and show the maximum number of concurrent sessions for the appliance interfaces.

See Main > Settings > Security > Sessions.

Location change for CleanMonInvData command

Starting with this release, the CleanMonInvData command has been moved from the Main > Support > InfraServices view to the Main > Support > Cleanup view. This change places the command with all other cleanup related commands.

New commands to manage locked accounts on the appliance

Starting with this release, new Settings > Security > Authentication > AccountStatus commands view lets you view and reinstate locked accounts. The new command-line options are ListLockedAccounts and UnlockAccounts. See Settings > Security > Authentication > AccountStatus.

Additional audit log support

Starting with release 4.1, support was added to audit the appliance shell menu access logs. The documentation for the 4.1 release did not include this information. This oversight has been corrected.

See Log Forwarding feature overview.