Veritas Solution Guide for Sheltered Harbor

Last Published:
Product(s): NetBackup & Alta Data Protection (10.5)

Perform data vaulting using non-interactive mode

This section provides you the details on how to perform configuration, backup and restore data vaulting operations using JSON files provided as an input. The Non-interactive mode can be used only for automated daily data vaulting process.

To start the data vaulting operations using JSON files, you need to generate JSON templates that provided as an input. To generate those JSON templates, refer the following instruction:

To perform data vaulting using non-interactive mode

  • Run the following command on the command prompt to generate JSON templates:

    • nbshvault --generate-template -path <path>

    Note:

    You must specify the path where you want to create the JSON file templates and you have the required access to the path.

    NetBackup Sheltered Harbor solution supports data vaulting by generating the following JSON file templates:

    • config.json

    • backup.json

    • restore.json

    Note:

    You must provide the correct JSON formatted file while performing the data vaulting operation. If you are using Windows, you need to specify the double backslash (\\) in the path.

    For example: E:\\SH_Part2\\input_storge

Configuration operation

Configuration operation is performed using config.json. You have to manually run the compliance solution with the configure option. It is a one-time activity. The NetBackup Sheltered Harbor solution runs the daily vaulting process to backup and restore (periodic or on demand) using already configured data.

The compliance solution stores the configuration locally on disk file and uses the same during the backup or restore operations.

Configure the Sheltered Harbor solution using the JSON file as input:

Configure using non-interactive mode

  • Run either of the following commands on the command prompt:

    • nbshvault --configure filename

    • nbshvault --configure filename [--config-dir config-dir-path]

If you have provided the config-dir option during configuration, you should use the config-dir option in the command as well.

Note:

To allow solution to use a well-known CA certificate while communicating with Sheltered Harbor Monitoring log, Use value 'NA" for a key "ca_cert_path" in input configuration JSON file.

On successful execution of the command, the Sheltered Harbor solution is configured.

The following example shows the configure operation: 

nbshvault --configure /root/config.json 
Configuration is saved successfully.
The requested operation was successfully complete
Register Institution

After configuration with the Sheltered Harbor solution, you must register the institution with the Sheltered Harbor monitoring log.

Note:

Ensure that you have configured the Sheltered Harbor solution before you register the institution.

Carry out the following step to perform backup operation to register the institution with the Sheltered Harbor monitoring log

Register using non-interactive mode

  • Run either of the following commands on the command prompt:

    • nbshvault --register -i institution _ID -reg-key registration_key

    • nbshvault - register -i institution ID -reg-key registration key [--config-dir config-dir-path]

If you have provided the config-dir option during configuration, you should use the config-dir option in the command as well.

This command option lets you provide the institution ID and registration key.

Once the command is run successfully, the institution is registered to the Sheltered Harbor monitoring log

The following example shows the register operation:

nbshvault --register -i 021000100 -reg-key d176dab5706b34cb699eadd07f6b77
<Institution ID> is already registered
Backup Operation

A backup operation is performed using the backup.json file. The backup.json file contains the information related to backup such as input storage path, and transfer storage path.

Carry out the following step to perform backup operation

Backup using non-interactive mode

  • Run either of the following commands to backup data to Veritas Alta Recovery Vault:

    • nbshvault -b filename --force | --backup filename --force

    • nbshvault -b | --backup filename [--config-dir config-dir-path] --force

If you have provided the config-dir option during configuration, you should use the config-dir option in the command as well.

Note:

Use --force option along with --backup when provided Backup Json file, to continue taking backup even if attestation for last backup is failed.

Note:

The backup and attest command options cannot run in parallel as they processes same set of files.

On successful execution of the command, the data is backed up on an immutable storage.

The following example shows the backup operation:

nbshvault -b /root/NEW_TEMP/backup.json
Performing license validation.
License validation is successful.
Checking for any latest pending image for attestation
No latest pending image found for attestation.
Started backup operation
Backup operation is successful.
The requested operation was successfully completed
Restore Operation

Restore operation in the NetBackup Sheltered Harbor solution lets you decrypt the restored data files to its original state. The Restore operation cab be done using the following two methods:

  • Archive retrieval

    Archive retrieval retrieves specified archive (encrypted volumes and a secure envelope) to recovery storage using BAR GUI or NetBackup web UI.

  • Data restoration

    Data restoration process decrypts data and validates integrity of restored files. This can be done by restore operation using the non-interactive mode.

A restore operation is performed using restore.json. The restore.json file contains the information related to restore such as recovery storage path, and restored data storage path.

To perform restore operation, you first need to download the data from the BAR GUI and save it to the recovery storage location.

Carry out the following steps to perform restore operation.

Restore using non-interactive mode

  • Run either of the following commands to restore the data:

    • nbshvault -r | --restore filename

    • nbshvault -r | --restore filename [--config-dir config-dir-path]

If you have provided the config-dir option during configuration, you should use the config-dir option in the command as well.

On successful execution of the command, the data is restored to a restored data storage path on your system.

The following example shows the restore operation:

nbshvault -r /root/NEW_TEMP/restore.json 
Restore operation is successful.
The requested operation was successfully completed.
Attestation Operation

The nhshvault--attest command option is used when the data vaulting is completed to Veritas Alta Recovery Vault but failed to send attestation message to Sheltered Harbor monitoring log.

Use the following procedure to perform the attestation operation.

Attestation using non-interactive mode

  • Run either of the following command on the command prompt to send the attestation message to complete the backup operation:

    • nbshvault --attest [-k keyword] | [-i institution ID]

    • nbshvault --attest [-k keyword] | [-i institution ID] [--config-dir config-dir-path]

If you have provided the config-dir option during configuration, you should use the config-dir option in the command as well.

Note:

Run the nbshvault--reportcommand option to get the backup keyword for attestation.

Note:

The backup and attest command options cannot run in parallel as they processes same set of files.

The following examples show how you can perform the attest operation either using backup keyword or institution ID:

Example 1: Use backup keyword 

nbshvault --attest -k keyword  
Checking for any latest pending image for attestation
Attesting pending image for the latest backup process
The requested operation was successfully completed.

Example 2: Use institution ID 

nbshvault --attest -i institution ID
Checking for any latest pending image for attestation
Attesting pending image for the latest backup process
The requested operation was successfully completed