Disable FIPS mode for NetBackup Authentication broker (nbatd)
Carry out the following steps to disable the FIPS mode for nbatd that runs on NetBackup master server host.
To disable the FIPS mode for nbatd
- Open the following directory on the master server.
On UNIX:
/usr/openv/netbackup/sec/at/bin/
On Windows:
install_path\NetBackup\sec\at\bin\
- Run the following command:
On UNIX:
run vssregctl -s -f /usr/openv/var/global/vxss/eab/data/root/.VRTSat/profile/VRTSatlocal.conf -b "Security\Authentication\Client" -k FipsMode -t int -v 0
On Windows
run vssregctl -s -f "install_path\NetBackup\var\global\vxss\eab\data\systemprofile\VRTSatlocal.conf" -b "Security\Authentication\Client" -k FipsMode -t int -v 0
Suppose the install_path is "C:\Program Files\VERITAS", run the following command on Windows:
vssregctl -s -f "C:\Program Files\VERITAS\NetBackup\var\global\vxss\eab\data\systemprofile\VRTSatlocal.conf" -b "Security\Authentication\Client" -k FipsMode -t int -v 0
- Restart the NetBackup services.
To verify if the FIPS mode is disabled for the nbatd service
- Go to the nbatd logs at:
UNIX:
/usr/openv/logs/nbatd/
Windows:
install_path\NetBackup\logs\nbatd\
- Check if the log file has the following log line:
Broker Not In FIPS mode