Veritas NetBackup™ Add-in for Microsoft SCVMM Console Guide

Last Published:
Product(s): NetBackup (8.3.0.1, 8.3, 8.2)
  1. Introduction and notes
    1.  
      About the NetBackup Add-in for System Center Virtual Machine Manager (SCVMM)
    2.  
      Notes on the NetBackup Add-in for SCVMM
    3.  
      Updates to this guide for NetBackup 8.2
  2. Installing the NetBackup Add-in for SCVMM
    1.  
      Requirements for the NetBackup Add-in for SCVMM
    2.  
      Installing the NetBackup Add-in for SCVMM
    3.  
      Installation message: Add-in cannot be installed
    4.  
      Installation message regarding localized environments
    5.  
      Configuring the add-in for an external certificate
    6.  
      Reconfiguring the add-in for a NetBackup CA-signed certificate
    7.  
      Uninstalling the NetBackup Add-in for SCVMM
    8. Configuring the NetBackup Recovery Wizard
      1.  
        Creating an authentication token for the NetBackup add-in for SCVMM
      2.  
        Authorizing the NetBackup add-in to restore virtual machines
      3.  
        Adding or deleting an additional host name or IP address for an authentication token
      4.  
        Revoking an authorization token
      5.  
        Renewing an authorization token
      6.  
        Listing all current authorization tokens
  3. Recovering virtual machines
    1.  
      Notes on restoring Hyper-V virtual machines with the Recovery Wizard
    2.  
      Accessing the Recovery Wizard
    3. Restore Virtual Machine Wizard screens
      1.  
        Virtual Machine Selection screen
      2.  
        Backup Image Selection screen
      3.  
        Select Another Image screen
      4.  
        Restore Options screen
      5.  
        Review Settings screen
    4.  
      Checking the status of a recovery job
  4. Troubleshooting
    1.  
      About logging for the NetBackup Add-in for SCVMM
    2.  
      Viewing log messages for the NetBackup Add-in for SCVMM
    3.  
      Changing the logging level for the NetBackup Add-in for SCVMM
    4.  
      The pre-recovery checks in the Recovery Wizard of the NetBackup Add-in for SCVMM return out-of-date information about the VM
    5.  
      Next button in the NetBackup Add-in Recovery Wizard is enabled even though required input has not been entered
    6.  
      The NetBackup Add-in Recovery Wizard does not prompt to overwrite the VM, and the recovery fails
    7.  
      Troubleshooting master server communication failures in the NetBackup Add-in for SCVMM

Configuring the add-in for an external certificate

The add-in communicates with the NetBackup master server securely by means of certificate-based authentication. By default, the master server uses NetBackup CA-signed certificates. As an alternative, the master server can be configured to use an externally issued certificate. In that case, use the following procedure to configure the add-in for the external certificate.

Configure the add-in for an external certificate

  1. Enter the following command on the master server:

    Windows

    install_path\NetBackup\wmc\bin\install\configureCertsForPlugins.bat
-registerExternalCert -certPath "path_to_external_certificate_file"
-privateKeyPath "path_to_certificate_key_file"
-trustStorePath "path_to_ca_certificate_file"

    UNIX, Linux

    /usr/openv/wmc/bin/install/configureCertsForPlugins
-registerExternalCert -certPath "path_to_external_certificate_file"
-privateKeyPath "path_to_certificate_key_file"
-trustStorePath "path_to_ca_certificate_file"

    For example:

    configureCertsForPlugins.bat -registerExternalCert -certPath "c:\server.pem" -privateKeyPath "c:\key.pem" -trustStorePath "c:\intermediateOrRootCA.pem"

    This command configures the add-in to use the external certificate by importing the certificate into the keystore on the master server. The command options are as follows:

    • -certPath: Specifies the path to the certificate for the web server. This file should have a single certificate in PEM format.

    • -privateKeyPath: Specifies the path to the private key for the web server certificate.

    • -trustStorePath: Specifies the path to the certificate of the intermediate or root certification authority that has issued the web server certificate. This file should have a single certificate in PEM format. The subject of this certificate should match the issuer of the web server certificate.

      For further information on external certificates, see the NetBackup Security and Encryption Guide.

  2. Restart the NetBackup Web Management Console service on the master server.

    In the Activity Monitor of the NetBackup Administration Console: Click the Daemons tab, right-click the service, and click Stop Daemon. When the service has stopped, click Start Daemon.

  3. Renew the authentication token on the master server:

    See Renewing an authorization token.

    Note:

    Perform this step for each add-in that needs to communicate with the master server.

  4. On the add-in, remove the existing master server and then add the master server that now has the renewed token:

    See Authorizing the NetBackup add-in to restore virtual machines.