NetBackup™ Snapshot Manager Install and Upgrade Guide
- Introduction
- Section I. NetBackup Snapshot Manager installation and configuration
- Preparing for NetBackup Snapshot Manager installation
- Meeting system requirements
- NetBackup Snapshot Manager host sizing recommendations
- NetBackup Snapshot Manager extension sizing recommendations
- Creating an instance or preparing the host to install NetBackup Snapshot Manager
- Installing container platform (Docker, Podman)
- Creating and mounting a volume to store NetBackup Snapshot Manager data
- Verifying that specific ports are open on the instance or physical host
- Preparing NetBackup Snapshot Manager for backup from snapshot jobs
- Deploying NetBackup Snapshot Manager using container images
- Deploying NetBackup Snapshot Manager extensions
- Before you begin installing NetBackup Snapshot Manager extensions
- Downloading the NetBackup Snapshot Manager extension
- Installing the NetBackup Snapshot Manager extension on a VM
- Installing the NetBackup Snapshot Manager extension on a managed Kubernetes cluster (AKS) in Azure
- Installing the NetBackup Snapshot Manager extension on a managed Kubernetes cluster (EKS) in AWS
- Installing the NetBackup Snapshot Manager extension on a managed Kubernetes cluster (GKE) in GCP
- Install extension using the Kustomize and CR YAMLs
- Managing the extensions
- NetBackup Snapshot Manager cloud providers
- Configuration for protecting assets on cloud hosts/VM
- Deciding which feature (on-host agent or agentless) of NetBackup Snapshot Manager is to be used for protecting the assets
- Protecting assets with NetBackup Snapshot Manager's on-host agent feature
- Installing and configuring NetBackup Snapshot Manager agent
- Configuring the NetBackup Snapshot Manager application plug-in
- Configuring an application plug-in
- Microsoft SQL plug-in
- Oracle plug-in
- Protecting assets with NetBackup Snapshot Manager's agentless feature
- Snapshot Manager catalog backup and recovery
- NetBackup Snapshot Manager assets protection
- Volume Encryption in NetBackup Snapshot Manager
- NetBackup Snapshot Manager security
- Preparing for NetBackup Snapshot Manager installation
- Section II. NetBackup Snapshot Manager maintenance
- NetBackup Snapshot Manager logging
- Upgrading NetBackup Snapshot Manager
- About NetBackup Snapshot Manager upgrades
- Supported upgrade path
- Upgrade scenarios
- Preparing to upgrade NetBackup Snapshot Manager
- Upgrading NetBackup Snapshot Manager
- Upgrading NetBackup Snapshot Manager using patch or hotfix
- Applying operating system patches on NetBackup Snapshot Manager host
- Migrating and upgrading NetBackup Snapshot Manager
- GCP configuration for migration from zone to region
- Post-upgrade tasks
- Post-migration tasks
- Uninstalling NetBackup Snapshot Manager
- Preparing to uninstall NetBackup Snapshot Manager
- Backing up NetBackup Snapshot Manager
- Unconfiguring NetBackup Snapshot Manager plug-ins
- Unconfiguring NetBackup Snapshot Manager agents
- Removing the NetBackup Snapshot Manager agents
- Removing NetBackup Snapshot Manager from a standalone Docker host environment
- Removing NetBackup Snapshot Manager extensions - VM-based or managed Kubernetes cluster-based
- Restoring NetBackup Snapshot Manager
- Troubleshooting NetBackup Snapshot Manager
- Troubleshooting NetBackup Snapshot Manager
- SQL snapshot or restore and granular restore operations fail if the Windows instance loses connectivity with the NetBackup Snapshot Manager host
- Disk-level snapshot restore fails if the original disk is detached from the instance
- Discovery is not working even after assigning system managed identity to the control node pool
- Performance issue with GCP backup from snapshot
- Post migration on host agents fail with an error message
- File restore job fails with an error message
- Acknowledgment not received for datamover
- Upgrade of extension on AWS (EKS) fails when upgrading through script
- Backup and restore jobs fail with timeout error
- GCP restore with encryption key failed with an error message
- Amazon Redshift databases not available after discovery
- Shared VPC subnet not visible
- Failure of encryption key listing during VM restore
- Container manager may not spawn the ephemeral registration container timely
- GCP restore from VM fails to obtain firewall rules
- Parameterised VM restore fails to retrieve encryption keys
Google Cloud Platform permissions required by NetBackup Snapshot Manager
Assign the following permissions to the service account that NetBackup Snapshot Manager uses to access assets in the Google Cloud Platform (GCP):
Note:
In the following table the permissions marked with an are mandatory.
Table: NetBackup Snapshot Manager feature Vs permissions for GCP cloud provider
Feature | Task/Operation | Required permission | |
|---|---|---|---|
VM based | |||
VM protection | Backup, Restore, Indexing + GRT | To fetch the specified disk type | compute.diskTypes.get |
To create a persistent disk in the specified project | compute.disks.create | ||
To delete the specified persistent disk | compute.disks.delete | ||
Used when attaching a disk to an instance | compute.disks.use | ||
To attach an existing disk resource to an instance | compute.instances.attachDisk | ||
Detach a disk from an instance | compute.instances.detachDisk | ||
Snapshot/ (Cross-Project/Region)Restore | To create a snapshot in the specified project | compute.snapshots.create | |
To delete the specified snapshot resource | compute.snapshots.delete | ||
Restore/Backup/Snapshot/Indexing + GRT | To set the labels on a disk | compute.disks.setLabels | |
To return the specified snapshot resource | compute.snapshots.get | ||
To retrieve the specified zone-specific operations resource | compute.zoneOperations.get | ||
Snapshot, (Cross-Project/Cross-Region) Restore | To create a snapshot of a specified persistent disk | compute.disks.createSnapshot | |
Snapshot/Backup/Restore | To retrieve the specified operations resource | compute.globalOperations.get | |
Core, Restore | Return the specified subnetwork | compute.subnetworks.get | |
Cross-Project restore, BFS | To create disk from a snapshot in same of different project | compute.snapshots.useReadOnly | |
Discovery of shared VPC | To return the specified project resource | compute.projects.get | |
Snapshot | To set the labels on a snapshot | compute.snapshots.setLabels | |
Plugin configuration | To retrieve the project identified by the specified name | resourcemanager.projects.get | |
To return the specified region resource | compute.regions.get | ||
Calculate CP capability, Restore | To return the specified machine type | compute.machineTypes.get | |
To retrieve a list of machine types available to the specified project | compute.machineTypes.list | ||
Discovery | To fetch the specified persistent disk | compute.disks.get | |
To retrieve a list of persistent disks contained within the specified zone | compute.disks.list | ||
To fetch the specified instance resource | compute.instances.get | ||
To retrieve the list of instances contained within the specified zone | compute.instances.list | ||
To list Google Compute Engine snapshots | compute.snapshots.list | ||
To retrieve a list of subnetworks available to the specified project | compute.subnetworks.list | ||
Restore | To create an instance resource in the specified project | compute.instances.create | |
To delete the specified instance resource | compute.instances.delete | ||
To set metadata for the specified instance | compute.instances.setMetadata | ||
To set the service account on the instance | compute.instances.setServiceAccount | ||
To set labels on an instance | compute.instances.setLabels | ||
To set network tags for the specified instance | compute.instances.setTags | ||
To start an compute engine instance | compute.instances.start | ||
To stop a running instance, shutting it down cleanly | compute.instances.stop | ||
To return the specified network | compute.networks.get | ||
To retrieve the list of networks available to the specified project | compute.networks.list | ||
To create a resource using a subnet | compute.subnetworks.use | ||
To create a resource using an external IP | compute.subnetworks.useExternalIp | ||
To attach service accounts to resources | iam.serviceAccounts.actAs | ||
To fetch the effective firewall on a given network | compute.networks.getEffectiveFirewalls | ||
To return the specified firewall | compute.firewalls.get | ||
Restore of CMK encrypted disks | Restore | To get metadata for a given CryptoKey and its primary CryptoKeyVersion | cloudkms.cryptoKeys.get |
To get metadata for a given CryptoKeyVersion | cloudkms.cryptoKeyVersions.get | ||
To list CryptoKeys | cloudkms.cryptoKeys.list | ||
To list KeyRings | cloudkms.keyRings.list | ||
To decrypt data while reading encrypted disks | cloudkms.cryptoKeyVersions.useToDecrypt | ||
To encrypt data on restored disks | cloudkms.cryptoKeyVersions.useToEncrypt | ||
To get information about a location | cloudkms.locations.get | ||
To list information about the supported locations for this service | cloudkms.locations.list | ||
Cross-Project restore | To encrypt/decrypt data in other project | Cloud KMS CryptoKey Encrypter/Decrypter | |
SQL database protection | List cloud SQL instances in a given project | cloudsql.instances.list | |
To get the list of databases | cloudsql.databases.list | ||
To get the database details | cloudsql.databases.get | ||
To export data from database for backup | cloudsql.instances.export | ||
To get the details of instance | cloudsql.instances.get | ||
To import the backed up files into database | cloudsql.instances.import | ||
To get the list of instances | cloudsql.instances.list | ||
To create bucket | storage.buckets.create | ||
To get bucket | storage.buckets.get | ||
To get permissions on buckets for required service account | storage.buckets.getIamPolicy | ||
To set permissions on buckets for required service account | storage.buckets.setIamPolicy | ||
To save backup files to bucket | storage.objects.create | ||
To cleanup backup files from bucket | storage.objects.delete | ||
To get backup file details from bucket | storage.objects.get | ||
To get list of files from bucket | storage.objects.list | ||
Kuberenetes cluster based | |||
Kubernetes extension /Auto-scaling | To get information of the cluster | container.clusters.get | |
To get details Get details about the managed instance group | compute.instanceGroupManagers.get | ||
Kubernetes extension /Auto-scaling | To update managed instance group | compute.instanceGroupManagers.update | |
Kubernetes extension /Auto-scaling | To update node pool of the cluster | container.clusters.update | |
To manage the operations done on GKE cluster | container.operations.get | ||