NetBackup™ Web UI Administrator's Guide
- Introducing the NetBackup web user interface
- Monitoring NetBackup
- Notifications
- Section I. Managing role-based access control
- About role-based access control in NetBackup
- Configuring RBAC roles
- Configuring RBAC
- Default RBAC roles
- RBAC permissions
- Global > NetBackup management
- Global > Security
- Global > Storage
- Assets
- Manage access
- Section II. Managing security
- Security events and audit logs
- Managing security certificates
- Managing user sessions
- Managing master server security settings
- About trusted primary servers
- Creating and managing API keys for users (Administrators)
- Adding and managing your API key (Users)
- Configuring authentication options
- Managing hosts
- Section III. Managing storage and backups
- Configuring storage
- Managing protection plans
- Managing classic policies
- Usage reporting and capacity licensing
- Configuring storage
- Section IV. Veritas Resiliency Platform
- Section V. Credentials
- Troubleshooting the NetBackup Web UI
Add a credential in NetBackup
You can add any credentials that NetBackup uses to connect to various systems.
To add a credential
- On the left, click Credential management.
- In the Named credentials tab, click Add.
- Add the following properties:
Credential name (for example: sqlserver_cred1)
Tag (for example: sqlserver)
Description (for example: This credential is used to access sqlserver)
- Click Next.
- Select a credential category and the respective credential details that you want to assign to this credential.
External KMS
Select to assign the credential to the external KMS server that you have configured.
Provide the following credential details of the external KMS server that are used to authenticate the communication between the NetBackup primary server and the external KMS server:
Certificate - Specify the certificate file contents.
Private key - Specify the private key file contents.
CA Certificate - Specify the CA certificate file contents.
Passphrase - Enter the passphrase of the private key file.
CRL check level - Select the revocation check level for the external KMS server certificate.
CHAIN - The revocation status of all the certificates from the certificate chain are validated against the CRL.
DISABLE - Revocation check is disabled. The revocation status of the certificate is not validated against the CRL during host communication.
LEAF - The revocation status of the leaf certificate is validated against the CRL.
See the NetBackup Security and Encryption Guide for more information on external KMS configuration.
Microsoft SQL Server
Select to assign the credential to SQL server that you have configured.
Use one of the following options:
Use credentials that are defined locally on the client
Provide Microsoft SQL Server credentials
See the NetBackup Web UI Microsoft SQL Server Administrator's Guide for more information on configuring credentials for SQL Server.
Cloud Instance
Select to assign the credential to cloud instances.
For Linux instances, select the Linux option, and specify the User name. Select Password or SSH Key options as required, specify the password or SSH key.
For Windows instances, select the Windows option, and specify the User name and Password. Optionally, specify the Domain for the instance.
Kubernetes
Select to assign the credential to a Kubernetes cluster.
Provide the following details for the cluster:
Token - Provide the token.
CA Certificate - Provide the CA certificate file contents.
AHV
Select to assign the credential to an AHV cluster.
Provide the following details for the credential:
Username
Password
Domain
NetBackup Callhome Proxy
Select to create the proxy server configuration that both the NetBackup Product Improvement Program and Usage Insights use.
Note:
After you create the credential, you must update the NetBackup configuration with an entry for CALLHOME_PROXY_NAME. Set the CALLHOME_PROXY_NAME to the credential name. From the master server, use the command shown:
echo CALLHOME_PROXY_NAME = CredentialName |bpsetconfig.exe
- Click Next.
- Click Add to assign permissions to a specific role to access this credential.
See Credentials.
- Click Next and follow the prompts to complete the wizard.
- If you configured NetBackup Callhome Proxy credentials, update the NetBackup configuration. Set the CALLHOME_PROXY_NAME to the credential name. From the primary server, use the command shown:
echo CALLHOME_PROXY_NAME = CredentialName |bpsetconfig.exe