Disable FIPS mode for NetBackup Authentication broker (nbatd)
Carry out the following steps to disable FIPS mode for nbatd that runs on NetBackup primary server host.
To disable FIPS mode for nbatd
- Open the following directory on the primary server.
On UNIX:
/usr/openv/netbackup/sec/at/bin/
On Windows:
install_path\NetBackup\sec\at\bin\
- Run the following command:
On UNIX:
run vssregctl -s -f /usr/openv/var/global/vxss/eab/data/root/.VRTSat/profile/VRTSatlocal.conf -b "Security\Authentication\Client" -k FipsMode -t int -v 0
On Windows
run vssregctl -s -f "install_path\NetBackup\var\global\vxss\eab\data\systemprofile\VRTSatlocal.conf" -b "Security\Authentication\Client" -k FipsMode -t int -v 0
Suppose the install_path is "C:\Program Files\VERITAS", run the following command on Windows:
vssregctl -s -f "C:\Program Files\VERITAS\NetBackup\var\global\vxss\eab\data\systemprofile\VRTSatlocal.conf" -b "Security\Authentication\Client" -k FipsMode -t int -v 0
- Restart the NetBackup services.
To verify if FIPS mode is disabled for the nbatd service
- Go to the nbatd logs at:
UNIX:
/usr/openv/logs/nbatd/
Windows:
install_path\NetBackup\logs\nbatd\
- Check if the log file has the following log line:
Broker Not In FIPS mode