Enabling communication with a NetBackup master server using the REST API
NetBackup Self Service can use the NetBackup REST API for some communication with the master server. Your NetBackup server must be version 8.1.2 or higher.
To enable communication using the REST API
- Log on to NetBackup Self Service as an administrator and navigate to the Backup Servers page. Select the appropriate backup server.
- Fill in the details in the REST API Connection section.
A background task automatically examines the connectivity with the backup server.
- Once the job has completed, click the status icon to open connectivity summary screen
- Review that the REST API has been contacted successfully.
By default NetBackup Self Service uses the same credentials to access the REST API as it uses to access the CLI. If you want to use a different account and RBAC security, the account requires a role with at least View Protection Plans, Manage Protection Plans, View Assets, Manage Assets, Recover/Restore, and View Jobs. It also requires an object group with access to all Assets, and all Protection plans.
Communication with the NetBackup REST API is over HTTPS. HTTPS requires a trust relationship to exist between the client and the server. In this instance the client is the NetBackup Self Service web server or Task engine server, and the server is the NetBackup master server. The trust relationship is established using a certificate.
You have three options for the certificate:
The master server uses a certificate that is issued from a trusted certificate authority.
The NetBackup Self Service web server has the trust of the https connection and no other actions are necessary.
The master server certificate is either from a private certificate authority, or a self-signed certificate. You must install the certificate authority certificate manually in the trusted certificate store of the web server and task engine server. See To install the Certificate Authority certificate from the master server onto the NetBackup Self Service web server or Task Engine server for more information.
Ignore certificate errors.
Go into NetBackup Self Service as an administrator and navigate to the Backup Servers page.
Select the backup server. Click . In the REST API Connection section review , and save changes.
This choice is a good option to use when first setting up the REST API, as it eliminates one source of problems. However, once the REST API connection works, you should only use trusted certificates. Once trusted certificates are established, clear the 'Ignore Certificate Errors' option.
To install the Certificate Authority certificate from the master server onto the NetBackup Self Service web server or Task Engine server
- In NetBackup Self Service:
In the Backup Servers page, select the backup server. Click the status icon, to open the configuration summary screen.
In the REST Connection Status section, click to download the master server's certificate onto your computer.
- In Windows Explorer, on the appropriate NetBackup Self Service server:
Locate the certificate and right-click to open it.
Review the certificate to ensure that it is correct.
Click Install Certificate....
Select the Local Machine store location.
Browse to the certificate store Trusted Root Certification Authorities and select OK.
Select Next.
Select Finish.
- This process installs the master server's Certificate Authority certificate on the NetBackup Self Service server. The server now trusts the master server certificate.
- Return to NetBackup Self Service and in the Backup Servers page, select the backup server. Ensure that the Ignore Certificate Errors option is cleared.
- Run the connectivity check. Verify that you can still connect to the backup server.