Difference between revisions of "Manage Hosts"

From Tranzman Documentation
Jump to: navigation, search
 
(15 intermediate revisions by 2 users not shown)
Line 8: Line 8:
  
 
NetBackup uses security certificates to authenticate NetBackup hosts. The security certificates conform to the X.509 Public Key Infrastructure (PKI) standard. A master server acts as the Certificate Authority (CA) and issues digital certificates to hosts.
 
NetBackup uses security certificates to authenticate NetBackup hosts. The security certificates conform to the X.509 Public Key Infrastructure (PKI) standard. A master server acts as the Certificate Authority (CA) and issues digital certificates to hosts.
NetBackup 8.1 and later hosts can communicate with each other only in a securemode. NetBackup 8.1 hosts must have a <b>Certificate Authority (CA) certificate</b> and a <b>host ID-based certificate</b> for successful communication.For more details please refer to the NetBackup Security and Encryption guide.
+
NetBackup 8.1 and later hosts can communicate with each other only in a securemode. NetBackup 8.1 hosts and later must have a <b>Certificate Authority (CA) certificate</b> and a <b>host ID-based certificate</b> for successful communication.For more details please refer to the NetBackup Security and Encryption guide.
  
  
So for migrations between NetBackup 8.1 and later , <b>CA Certificate</b> and <b>host ID certificates</b> need to be deployed to all the NBU hosts from the destination master server.
+
So for catalog migrations between NetBackup 8.1 and later , <b>CA Certificate</b> and <b>host ID certificates</b> need to be deployed to all the NBU hosts from the destination master server.
Tranzman has a brilliant feature which does these deployments named <b>Host Management</b>.
+
Tranzman has a brilliant feature named <b>Host Management</b> which does these deployments.Additionaly it also helps you to check the NBU connectivity within hosts so before switching to destination master server
 +
in production any connectivity issue could be highlighted and fixed.
  
You can access the Host Management from Tranzman UI under <b>Actions->Host Management</b>. Host Management is a vast thing in itself so to understand it better you do need to have some basic information information on how certificates actually work in NetBackup.
+
You can access the Host Management from Tranzman UI under <b>Actions->Host Management</b>.Certificates is a vast thing in itself so to understand it better you do need to have some basic information information on how certificates actually work in NetBackup.
  
  
Line 29: Line 30:
  
 
===Step 2===  
 
===Step 2===  
Select all the eligible NBU hosts then <b> Actions -> Run origin connectivity test</b>  as shown in the below screenshot(Figure2) and hit  [[File:Commit.JPG | border|100x100px]]
+
Select all the eligible NBU hosts then <b> Actions -> Run origin connectivity test</b>  as shown in the below screenshot(Figure2) and hit  [[File:Commit.JPG | border|100x100px]].
 
You would see couple of jobs being triggered named <b>CheckConn</b> under <b>Views->Activity Monitor</b>. Wait for them to complete and the respective columns on the Host Management page should get populated with
 
You would see couple of jobs being triggered named <b>CheckConn</b> under <b>Views->Activity Monitor</b>. Wait for them to complete and the respective columns on the Host Management page should get populated with
 
[[File:GreenTick.JPG | border|20x15px]] rather than [[File:RedTick.JPG | border|20x20px]].
 
[[File:GreenTick.JPG | border|20x15px]] rather than [[File:RedTick.JPG | border|20x20px]].
Line 39: Line 40:
  
 
===Step 3===
 
===Step 3===
A successfull connectivity test from origin should move the media servers to the Media Server Management tab(as shown in Figure 3) and only backup clients should be seen under Client Management(Figure 4).
+
A successful connectivity test from origin should move the media servers to the Media Server Management tab(as shown in Figure 3) and only backup clients should be seen under Client Management(Figure 4).
 +
As it can be seen most of the columns are populated in Figure 4 , please refer to the below table to check what the respective column means in host management. Any unexpected [[File:RedTick.JPG | border|20x20px]] in any column should be fixed before proceeding to next steps.
  
Below table explains the Host Management columns.
 
  
 
{|class="wikitable" style="border:5px double maroon" font-family:Arial, Helvetica, sans-serif !important align=center cellpadding=40px width=30%;;"
 
{|class="wikitable" style="border:5px double maroon" font-family:Arial, Helvetica, sans-serif !important align=center cellpadding=40px width=30%;;"
Line 103: Line 104:
  
 
{|style="padding: 5px; width: 85%;"
 
{|style="padding: 5px; width: 85%;"
| style="width: 1%;"|[[File:Note.png|30px]]|| style="padding: 10px; width: 85%;"|'''Note:'''  Do not select <b>Update accelerator track-log destination</b>,<b>Remove origin from host properites</b>,<b>Make destination the master in host properties<> unless you are certain to use to the NBU host with destination master server.  
+
| style="width: 1%;"|[[File:Note.png|30px]]|| style="padding: 10px; width: 85%;"|'''Note:'''  Do not select <b>Update accelerator track-log destination</b>, <b>Remove origin from host properites</b>,<b>Make destination the master in host properties</b> unless you are certain to use the NBU host with destination master server.
 +
Before running <b>Push destination certificate</b> ,reset the Netbackup security level for certificate deployment to Medium.
 
|  
 
|  
 
|}
 
|}
Line 124: Line 126:
 
| It adds the CA Certificate and host ID certificate from the destination master server to the selected NBU hosts.
 
| It adds the CA Certificate and host ID certificate from the destination master server to the selected NBU hosts.
 
|-
 
|-
| style="font-size:15px; font-family:Arial, Helvetica, sans-serif !important;;" | Run destination certificate
+
| style="font-size:15px; font-family:Arial, Helvetica, sans-serif !important;;" | Run destination connectivity
 
| Runs a connectivity test for all the NBU hosts the destination master server
 
| Runs a connectivity test for all the NBU hosts the destination master server
 
|-
 
|-
Line 133: Line 135:
 
| In case when there are both origin and destination master server name in bp.conf(*nix) or registry(Windows) selecting and running this option will promote the destination master server name over origin.
 
| In case when there are both origin and destination master server name in bp.conf(*nix) or registry(Windows) selecting and running this option will promote the destination master server name over origin.
 
|}
 
|}
 +
 +
Follow the above steps for any Action to be performed in Host Management and fix any unexpected [[File:RedTick.JPG | border|20x20px]].
 +
 +
{|style="padding: 5px; width: 85%;"
 +
| style="width: 1%;"|[[File:Note.png|30px]]|| style="padding: 10px; width: 85%;"|'''Note:'''  Connecitivity test in Actions always take precedence before any other Action, be it from the origin or destination master server.
 +
|
 +
|}
 +
 +
 +
 +
[[Finalize|Jump to Finalize]]
 +
 +
[[Monitoring |Return to Progress]]

Latest revision as of 12:52, 2 September 2020

Note.png Note: This section is Applicable to migrations which involves NetBackup versions 8.1 and later.

Headline

NetBackup uses security certificates to authenticate NetBackup hosts. The security certificates conform to the X.509 Public Key Infrastructure (PKI) standard. A master server acts as the Certificate Authority (CA) and issues digital certificates to hosts. NetBackup 8.1 and later hosts can communicate with each other only in a securemode. NetBackup 8.1 hosts and later must have a Certificate Authority (CA) certificate and a host ID-based certificate for successful communication.For more details please refer to the NetBackup Security and Encryption guide.


So for catalog migrations between NetBackup 8.1 and later , CA Certificate and host ID certificates need to be deployed to all the NBU hosts from the destination master server. Tranzman has a brilliant feature named Host Management which does these deployments.Additionaly it also helps you to check the NBU connectivity within hosts so before switching to destination master server in production any connectivity issue could be highlighted and fixed.

You can access the Host Management from Tranzman UI under Actions->Host Management.Certificates is a vast thing in itself so to understand it better you do need to have some basic information information on how certificates actually work in NetBackup.


Follow the below steps to deploy the certificates from the destination master server to the NBU hosts :-

Step 1

Click on Actions->Host Management.Now as we are already in the data transfer stage all the NBU hosts should be discovered and should be displayed on the Host Management Page under Client Mangement. e.g. Figure 1 shows all the NBU hosts including media servers.


HostManagement1.JPG Figure1


Step 2

Select all the eligible NBU hosts then Actions -> Run origin connectivity test as shown in the below screenshot(Figure2) and hit Commit.JPG. You would see couple of jobs being triggered named CheckConn under Views->Activity Monitor. Wait for them to complete and the respective columns on the Host Management page should get populated with GreenTick.JPG rather than RedTick.JPG.


HostMgmtConnectivityTest.JPG Figure2


Step 3

A successful connectivity test from origin should move the media servers to the Media Server Management tab(as shown in Figure 3) and only backup clients should be seen under Client Management(Figure 4). As it can be seen most of the columns are populated in Figure 4 , please refer to the below table to check what the respective column means in host management. Any unexpected RedTick.JPG in any column should be fixed before proceeding to next steps.


Name Name of the NBU host
Actions Selected actions for the NBU host
Version Version of NetBackup
Active State of Host (Active only if backup has ran in last 7 days)
Host props NBU Host properties
Master Current Master Server for NBU host
Accelerator Accelerator Enabled/Disabled
Last scan Time since last host management scan has been done
bpcd test
config test NBU bpgetconfig test
1556 port pbx port
13724 port vnetd port
13782 port bpcd port


HostMgmtConnectivityTestOriginResultMedia.JPG Figure3


HostMgmtConnectivityTestOriginResultClient.JPG Figure4


Step 4

Now as shown in Figure 2 there are different actions which can be performed on NBU hosts. Below table shows all the Actions that can be performed on the NBU hosts.


Note.png Note: Do not select Update accelerator track-log destination, Remove origin from host properites,Make destination the master in host properties unless you are certain to use the NBU host with destination master server.

Before running Push destination certificate ,reset the Netbackup security level for certificate deployment to Medium.

Action Description
Run origin connectivity test Runs a connectivity test for all the NBU hosts from the origin master server
Add destination to host properties Add the destination master server name to bp.conf (*nix )or registry(Windows) on selected NBU hosts.
Update accelerator track-log destination Updates the accelerator by forcing the new master server name in the track logs.
Push destination certificate It adds the CA Certificate and host ID certificate from the destination master server to the selected NBU hosts.
Run destination connectivity Runs a connectivity test for all the NBU hosts the destination master server
Remove origin from host properites Deletes the master server name from bp.conf (*nix) or registry(Windows) on selected NBU hosts
Make destination the master in host properties In case when there are both origin and destination master server name in bp.conf(*nix) or registry(Windows) selecting and running this option will promote the destination master server name over origin.

Follow the above steps for any Action to be performed in Host Management and fix any unexpected RedTick.JPG.

Note.png Note: Connecitivity test in Actions always take precedence before any other Action, be it from the origin or destination master server.


Jump to Finalize

Return to Progress