NetBackup™ Web UI Administrator's Guide
- Section I. About NetBackup
- Introducing NetBackup
- Administering NetBackup licenses
- Registering with Veritas Alta View
- Introducing NetBackup
- Section II. Monitoring and notifications
- Monitoring NetBackup activity
- Activity monitor
- Job monitoring
- Troubleshooting the viewing and managing of jobs
- Device monitor
- Notifications
- Monitoring NetBackup activity
- Section III. Configuring hosts
- Managing host properties
- Managing credentials for workloads and systems that NetBackup accesses
- Add a credential for CyberArk
- Managing deployment
- Section IV. Configuring storage
- Overview of storage options
- Configuring storage units
- Configuring disk storage
- Integrating MSDP Cloud and CMS
- Managing media servers
- Managing tape drives
- Staging backups
- Troubleshooting storage configuration
- Section V. Configuring backups
- Overview of backups in the NetBackup web UI
- Managing protection plans
- Managing classic policies
- Protecting the NetBackup catalog
- Catalog backups
- Managing backup images
- Pausing data protection activity
- Section VI. Managing security
- Security events and audit logs
- Managing security certificates
- Managing host mappings
- Configuring multi-person authorization
- Managing user sessions
- Configuring multi-factor authentication
- Managing the global security settings for the primary server
- About trusted primary servers
- Using access keys, API keys, and access codes
- Configuring authentication options
- Managing role-based access control
- Disabling access to NetBackup interfaces for OS Administrators
- Section VII. Detection and reporting
- Section VIII. NetBackup workloads and NetBackup Flex Scale
- Section IX. Disaster recovery and troubleshooting
- Section X. Other topics
- Additional NetBackup catalog information
- About the NetBackup database
Configure an external certificate for the NetBackup web server
By default, NetBackup uses the security certificates that the NetBackup CA has issued. If you have a certificate that an external CA has issued, you can configure the NetBackup web server to use it for secure communication.
Note:
Windows certificate store is not supported as certificate source for the NetBackup web server.
To configure an external certificate for the web server
- Ensure that you have valid certificate, private key of the certificate, and trusted CA bundle.
- Run the following command:
configureWebServerCerts -addExternalCert -nbHost -certPath certificate path -privateKeyPath private key path -trustStorePath CA bundle path [-passphrasePath passphrase file path]
The configureWebServerCerts command does not support use of Windows certificate store paths.
Refer to the NetBackup Commands Reference Guide for more details on the command-line options.
In a clustered setup, to avoid a failover run the following command on the active node:
install_path/netbackup/bin/bpclusterutil -freeze
- Restart the NetBackup Web Management Console service to reflect the changes.
On UNIX, run the following commands:
install_path/netbackup/bin/nbwmc -terminate
install_path/netbackup/bin/nbwmc start
On Windows, use the Services application in the Windows Control Panel.
Location of the commands:
Windows
install_path\NetBackup\wmc\bin\install\
UNIX
install_path/wmc/bin/install
In a clustered setup, unfreeze the cluster using the following command on the active node:
install_path/netbackup/bin/bpclusterutil -unfreeze
- Restart the NetBackup Messaging Queue Broker (nbmqbroker) service as follows:
On Windows:
Go to the Services application in the Windows Control Panel and manually restart the NetBackup Messaging Queue Broker service.
On UNIX:
Run the following command:
nbmqbroker stop; nbmqbroker start
- Verify that you can access the NetBackup web user interface using a browser, without a certificate warning message.