NetBackup IT Analytics Foundation License Inclusions and Implementation Guide

Last Published:
Product(s): NetBackup IT Analytics (11.6)
  1. Section I. Foundation License - Inclusion and Installation
    1. Foundation license overview, inclusion, and installation
      1.  
        Overview
      2.  
        Supported third-party and open source products
      3.  
        Install a license
      4. Get the NetBackup IT Analytics license key file
        1.  
          Install a license on Microsoft Windows Portal platform
        2.  
          Install a license on Linux Portal platform
  2. Section II. Install NetBackup IT Analytics Portal for Foundation License
    1. Install NetBackup IT Analytics on a Windows server
      1.  
        Introduction
      2.  
        Multi-language support and locale considerations (Windows)
      3.  
        Task 1: Portal and database deployment strategies (Windows)
      4.  
        Task 2: Pre-installation configuration (Windows)
      5. Task 3: Installing Oracle application binaries (Windows)
        1.  
          Troubleshoot the Oracle installation
      6.  
        Task 4: Installing Portal application binaries (Windows)
      7.  
        Task 5: Request the license key file (Windows)
      8.  
        Task 6: Log into the Portal (Windows)
      9.  
        Task 7: Install the license key file (Windows)
      10.  
        Task 8: Performing a cold backup (Windows)
      11.  
        Uninstall the NetBackup IT Analytics Portal
    2. Install NetBackup IT Analytics on a Linux server
      1.  
        Introduction
      2.  
        Multi-language support and locale considerations (Linux)
      3. Installer-based deployment
        1.  
          Task 1: Portal and database deployment strategies (Linux)
        2.  
          Task 2: Pre-installation configuration (Linux)
        3.  
          Task 3: Install Oracle database application binaries (Linux)
        4.  
          Task 4: Install the Portal application binaries (Linux)
        5.  
          Task 5: Installing the database schema (Linux)
        6.  
          Task 6: Start the Portal services (Linux)
        7.  
          Task 7: Request the license key file (Linux)
        8.  
          Task 8: Log into the Portal
        9.  
          Task 9: Install the license key file (Linux)
        10.  
          Task 10: Performing a cold backup of the database (Linux)
        11.  
          Recommended database backup process
      4.  
        Uninstall the NetBackup IT Analytics Portal
  3. Section III. Data Collector Policy Configuration and Reports
    1. Configure Cohesity NetBackup appliance
      1.  
        Overview
      2.  
        Prerequisites for adding Data Collectors (Veritas NetBackup appliance)
      3.  
        Installation Overview (Veritas NetBackup Appliance)
      4.  
        Adding a Veritas NetBackup Appliance Data Collector policy
    2. Configure Cohesity Flex Appliance
      1.  
        Pre-Installation setup for Cohesity Flex Appliance
      2.  
        Prerequisites for adding Data Collectors (Cohesity Flex Appliance)
      3.  
        Installation overview (Cohesity Flex Appliance)
      4.  
        Add a Cohesity Flex Appliance policy
      5.  
        Troubleshoot Cohesity Flex Appliance policy configuration
    3. Configure NetBackup Data Collector policy
      1.  
        Introduction
      2.  
        General prerequisites for adding Data Collectors (Cohesity NetBackup)
      3.  
        Add a Veritas NetBackup Data Collector policy
    4. Configure Cohesity Backup Exec
      1.  
        Introduction
      2.  
        Architecture overview (Veritas Backup Exec)
      3.  
        Backup Exec terminology
      4.  
        Prerequisites for adding data collectors (Veritas Backup Exec)
      5.  
        Upgrade troubleshooting: Microsoft SQL Server and Java 10
      6.  
        Installation overview (Veritas Backup Exec)
      7.  
        Enable TCP/IP for the SQL server
      8.  
        Configure a Windows user
      9.  
        Add Veritas Backup Exec servers
      10.  
        Importing Backup Exec Server information
      11.  
        Add a Veritas Backup Exec Data Collector policy
    5. Configure Cohesity DataProtect
      1.  
        Introduction
      2.  
        Prerequisites for adding Data Collectors (Cohesity DataProtect)
      3.  
        Installation overview (Cohesity DataProtect)
      4.  
        Add a Cohesity DataProtect Data Collector policy
    6. Appendix A. Foundation License OOTB Reports
      1.  
        NetBackup IT Analytics reports and alerts supported in Foundation license

Upgrade troubleshooting: Microsoft SQL Server and Java 10

With release version 10.3 introducing support for Java 10, older versions of MS SQL Server may encounter compatibility issues. The following section covers potential workarounds. Collection occurs from the Microsoft SQL Server database used by the system the data collector is collecting from. The version of Java used by NetBackup IT Analytics version 10.3 disables some insecure TLS algorithms by default. If collection fails with the following error in the collector logs, the version of MS SQL Server may be incompatible and not allow collection using the TLS algorithms enabled by default with Java 10.

Failed to establish JDBC connection to: jdbc:jtds:sqlserver://...
java.sql.SQLException: Network error IOException: null
at net.sourceforge.jtds.jdbc.JtdsConnection.<init>(JtdsConnection.java:437)

Upgrade MS SQL Server to the latest version to enable secure collection. Your MS SQL Server version may not be supported for NetBackup IT Analytics version 10.3. If upgrade is not possible, a workaround can be attempted to restore compatibility. If the following steps do not resolve the issue, your version of MS SQL Server is not supported.

Use the following steps to modify the enabled algorithms to allow communication with the data collector:

  1. Edit <collector install dir>/jre/conf/security/java.security.

  2. Search for jdk.tls.disabledAlgorithms.

  3. Copy the existing lines and comment (to have a backup for easy restore).

    #jdk.tls.disabledAlgorithms=TLSv3, RC4, MD5withRSA, DH keySize < 1024, \
#    EC keySize < 224, DES40_CBC, RC4_40, 3DES_EDE_CBC
jdk.tls.disabledAlgorithms=TLSv3, RC4, MD5withRSA, DH keySize < 1024, \
EC keySize < 224, DES40_CBC, RC4_40, 3DES_EDE_CBC

  4. Remove 3DES_EDE_CBC.

    #jdk.tls.disabledAlgorithms=TLSv3, RC4, MD5withRSA, DH keySize < 1024, \
#    EC keySize < 224, DES40_CBC, RC4_40, 3DES_EDE_CBC
jdk.tls.disabledAlgorithms=TLSv3, RC4, MD5withRSA, DH keySize < 1024, \
EC keySize < 224, DES40_CBC, RC4_40

  5. Save the file.

  6. Run checkinstall and verify collection succeeds.

    If checkinstall does not succeed, each of the following algorithms can be individually re-enabled in an attempt to restore compatibility.

  7. If checkinstall does not succeed, restore, remove RC4_40, save, re-run checkinstall. 

    #jdk.tls.disabledAlgorithms=TLSv3, RC4, MD5withRSA, DH keySize < 1024, \
#    EC keySize < 224, DES40_CBC, RC4_40, 3DES_EDE_CBC
jdk.tls.disabledAlgorithms=TLSv3, RC4, MD5withRSA, DH keySize < 1024, \
EC keySize < 224, DES40_CBC, 3DES_EDE_CBC

  8. If checkinstall does not succeed, restore, remove DES40_CBC, save, re-run checkinstall. 

    #jdk.tls.disabledAlgorithms=TLSv3, RC4, MD5withRSA, DH keySize < 1024, \
#    EC keySize < 224, DES40_CBC, RC4_40, 3DES_EDE_CBC
jdk.tls.disabledAlgorithms=TLSv3, RC4, MD5withRSA, DH keySize < 1024, \
EC keySize < 224, RC4_40, 3DES_EDE_CBC

  9. If checkinstall does not succeed, restore, change the DH keySize as follows, save, re-run checkinstall. 

    #jdk.tls.disabledAlgorithms=TLSv3, RC4, MD5withRSA, DH keySize < 1024, \
#    EC keySize < 224, DES40_CBC, RC4_40, 3DES_EDE_CBC
jdk.tls.disabledAlgorithms=TLSv3, RC4, MD5withRSA, DH keySize < 768, \
EC keySize < 224, DES40_CBC, RC4_40, 3DES_EDE_CBC

  10. After a working configuration is found, restart the collector service.