CA configuration for Azure Stack
You can sign the Azure Stack workloads with a different ECA than NetBackup. You can also configure in NBCA mode. You can have the following configurations:
NetBackup configured with NBCA, NetBackup Snapshot Manager configured with FlexsnapCA and Azure Stack configured with ECA:
You need to configure the ECA_TRUST_STORE_PATH parameter in the
/cloudpoint/openv/netbackup/bp.conffile.The trust store file is available in
/cloudpoint/eca/trusted/cacerts.pem.The trust store file is in PEM format.Only the Azure stack appliance public root certificates must be present in the
/cloudpoint/eca/trusted/cacerts.pemfile. Manually append the Azure Stack appliance root public certificates in this file.
NetBackup, NetBackup Snapshot Manager configured with ECA-1 and Azure Stack is also configured with ECA-1:
No manual step required since NetBackup Snapshot Manager registration with NetBackup will take care of adding ECA_TRUST_STORE_PATH in
/cloudpoint/openv/netbackup/bp.conffile.Required CA certificates are already present in
/cloudpoint/eca/trusted/cacerts.pemfile.
NetBackup, NetBackup Snapshot Manager configured with ECA-1 and Azure Stack is configured with ECA-2:
Required NetBackup CA certificates are already present in
/cloudpoint/eca/trusted/cacerts.pemfile.Manually append the Azure Stack appliance root public certificates in the same file.
The file must now contain NetBackup and Azure Stack appliance public root certificates.
Azure Stack is configured with well known public CA:
No manual steps are required at NetBackup Snapshot Manager end.