Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section I. Identity and access management
  4. NetBackup Access Control Security (NBAC)
  5. Configuring NetBackup Access Control (NBAC)
  6. Configuring NetBackup Access Control (NBAC) on standalone primary servers
NetBackup™ Security and Encryption Guide

Configuring NetBackup Access Control (NBAC) on standalone primary servers

The following procedures describe how to configure NetBackup Access Control (NBAC) on the primary servers that are installed on a single computer. A primary server requires an authentication server and authorization server.

The following table describes the host names for the NBAC configuration examples.

Table: Example host names

Host name

Windows

UNIX

Primary servers

win_primary

unix_primary

Media servers

win_media

unix_media

Clients

win_client

unix_client

The following procedure describes how to configure NBAC on standalone primary servers.

Note:

Use -setupmaster and set USE_VXSS = AUTOMATIC on the primary server. If USE_VXSS = REQUIRED is set on the primary server and an attempt is made to configure NBAC on media server, the following error can occur: NetBackup primary server is configured in REQUIRED Mode. Please change the mode to AUTOMATIC to complete configuration of the media server.

Configuring NBAC on standalone primary servers

  1. Complete all of the NetBackup primary server installations or upgrades.
  2. Run the bpnbaz -setupmaster command.

    Enter y. The system begins to gather configuration information. Then, the system begins to set up the authorization information.

  3. Restart the NetBackup services on this computer after the bpnbaz -setupmaster command completes successfully.
  4. Proceed to set up the media servers.

More Information

Configuring NetBackup Access Control (NBAC) on media servers

Feedback

Was this page helpful?
Previous

NBAC configuration overview

Next

Installing the NetBackup primary server highly available on a cluster

Feedback

Was this page helpful?