NetBackup™ Security and Encryption Guide

To add new credentials

1. On the left, click Detection and reporting > Malware detection.
2. On the right, click Malware detection settings > Malware scanner host pools.
3. Select the desired scan host pool. Then click Actions > Manage hosts.
4. Select the desired host. Then click Actions > Manage credentials.
5. Select Add a new credential and click Next.
6. Add the details such as the Credential name, Tag, and Description.
7. On the Host credentials tab, add the Host username, Host password, SSH port, RSA key, and Share type.

   • To validate the SSH connection between the MSDP media server and the host, run the following command:

     ssh username@remote_host_name

   • To verify the RSA key for a remote scan host, run the following command:

     ssh-keyscan scan_host_name 2>/dev/null | grep ssh-rsa

   • To obtain the RSA key for the scan host, use the following command. Use the command from any Linux host with SSH connectivity to the scan host (this host can be the scan host itself):

     ssh-keyscan scan_host_name 2>/dev/null | grep ssh-rsa | awk '{print $3}' | base64 -d | sha256sum

     For example, the output is 33f697637ab3f0911c1d462d4bde8be3eec61a33403e8f6a88daecb415a31eef - where the RSA key is 33f697637ab3f0911c1d462d4bde8be3eec61a33403e8f6a88daecb415a31eef

     Note:

     Ensure that you remove the - character from the RSA key when you copy.

     The following host key algorithms are used to connect to scan host in the given order:

     rsa-sha2-512, rsa-sha2-256, ssh-rsa

8. For SMB share type, enter the following additional details:

   • Active directory domain: A domain to which the storage server is connected (used to authenticate mounts on scan host).

   • Active directory group: A group name in an Active Directory domain.

   • Active directory user: A user that is added in the selected Active Directory group.

   • Password

9. Click Save.

To add existing credentials

1. On the left, click Detection and reporting > Malware detection.
2. On the right, click Malware detection settings > Malware scanner host pools.
3. Select the desired scan host pool. Then click Actions > Manage hosts.
4. Select the desired host and click Actions > Manage credentials.
5. Select Select existing credential.
6. Select the desired credential and click Select.

To validate the scan host credentials

1. After you provide the credentials for the scan host on the Add malware scanner host page, search for and select the media server.

   Note:

   Only SSH credentials are validated by connecting to scan host from the selected media server. The media server must be a Linux media server with NetBackup version 10.3 or later.

2. Click Validate credential.
3. After the credentials are successfully validated, click Save.