To install NetBackup 10.4 server software on a local, remote, or clustered Windows server

1. Log on to the system. Be sure to log on with administrator privileges.

   • For local installations, log on to the system where you want to install NetBackup.

   • For remote installations, log on to a system with network access to all of the hosts where you want to install NetBackup.

   • For cluster installations, log on to the active node (the node with the shared disk).

2. Navigate to the directory where the images reside and run Browser.exe to start the NetBackup Installation Wizard .
3. On the initial browser screen (Home), click Installation.
4. On the Installation screen, click NetBackup Server Software Installation.
5. If you are prompted about the absence of required Visual C++ run-time libraries, review the information and respond accordingly. More information is available.

   See Windows compiler and security requirements for NetBackup 10.4 and later installation.

6. On the Welcome screen, review the content and click Next.
7. (Conditional) If you previously installed NetBackup 10.4 on this host, you see the Program Maintenance dialog.

   • Select Modify to change installation settings for the local host, or to use the local host as a platform to perform push installation to remote hosts.

   • Select Repair to restore NetBackup 10.4 to its original state on the local host.

   • Select Remove to remove NetBackup 10.4 from the local host.

8. On the License Agreement screen, do the following and click Next:

   I agree to and accept the terms of the license agreement.

   You must select this item to install the software.

9. On the Veritas NetBackup Installation Type screen, provide the following information:

   Where to install	For a local installation, select Install to this computer only. For a remote installation, select Install to multiple computers on your network. For a cluster installation, select Install a clustered Primary Server. This option is available only if the installation process determines that your system is configured for a Windows Server Failover Cluster (WSFC) or VCS clustered environment.
   Typical	Select this option to install NetBackup with the default settings. Note: The Typical installation does not install the Java GUI or the JRE on Windows media servers. You must select Custom if you want the Java GUI and the JRE installed on Windows media servers.
   Custom	Select this option to install NetBackup with the settings that you want.

   Click Next.

10. On the NetBackup License and Server Type screen, provide the following information:

    Licenses	You can download your license from Veritas Entitlement management system or use an evaluation license. More information is available: https://support.cohesity.com/s/article/article-100058779. License files are not required for media server installations. For remote and cluster installations: Note: The license that you enter here gets pushed to the other nodes. For clustered primary server, the licenses are stored in the shared drive that is accessible only to the active node. As such, license doesn't gets pushed to the inactive nodes. Your license may enable add-on products. If you push NetBackup to nodes that have an add-on product already installed, your license works for the add-on product(s). During this installation process, the following occurs to verify that you have proper credentials to perform remote installations: When you select a clustered system for installation, NetBackup determines if you have proper administrator credentials on all nodes in the cluster. If you do not have the proper credentials, the system is not added to the list.
    NetBackup Primary Server	Select the radio button and then Next to install primary server software. If you have downloaded license files, browse and add those license files. If you select Next without adding any license files, NetBackup uses an evaluation license.
    NetBackup Media Server	Select the radio button and then Next to install media server software.
    Disaster Recovery Primary Server	Select this radio button and then Next to perform a disaster recovery of your primary server. The disaster recovery process requires additional steps and information that is not covered in this manual. More information is available. NetBackup Troubleshooting Guide

11. Enable or disable FIPS mode in NetBackup on the FIPS Compliance in NetBackup screen. By default FIPS mode is disabled.

    By enabling FIPS, the NetBackup installer and any further operations run in FIPS mode. Please check requisite before you enable FIPS mode in your NetBackup Domain.

    The NetBackup installation and all further options on remote hosts run in FIPS-compliant mode if you enable FIPS mode during remote installation.

    Enabling FIPS mode during clustered server installation enables FIPS mode on the nodes which are added on the NetBackup Remote Hosts screen. When you add new nodes to an existing cluster group using the Windows Installer, make sure that the FIPS mode configuration value matches the other nodes in the cluster group.

    For more information about FIPS, see the NetBackup Encryption and Security Guide.

    Click Next.

12. On the NetBackup Web Services screen, specify the account type and the account details.

    What types of acccounts should we use?

    Select either Local or Domain (Active Directory). Select Local if you want to associate the web server with a user and a group account that exist on the local host. Select Domain (Active Directory) if you want to associate the web server with a user and a group account that exist on a trusted Windows domain.

    What are the existing account details

    Specify the information as shown: Domain - If you chose the Domain (Active Directory) account type, specify the name of the domain to which the user and the group accounts belong. Group - Specify the name of the group account to associate with the web server. User - Specify the name of the user account to associate with the web server. For security reasons, do not specify a user account that has administrative privileges on the host. Password - Specify the password of the user account in the User field. Note: After installation, you cannot change the user account for the NetBackup web server. Do not delete this account, as you cannot reconfigure the account for the web server after installation.

    More information is available.

    See Installation requirements for Windows and Windows clusters.

13. (Conditional) This step applies only to the local installations that are Custom. For Typical installations, skip to the next step.

    This step describes how to select and configure the NetBackup Installation Folder, NetBackup Port Numbers, and the NetBackup Services.

    • NetBackup Installation Folder

      On this screen, you can select where the NetBackup files are installed.

      Destination Folder

      By default, NetBackup files are installed to the following location: C:\Program Files\VERITAS To change the folder destination where NetBackup is installed: Click Change. Browse to the preferred location and designate a new or an existing folder. Click Next. Additional information about installation folder restrictions is available. See Restrictions on the NetBackup installation directory.

      Click Next.

    • Java GUI and JRE Options

      The options that are provided are:

      • Include Java GUI and JRE: Install the Java GUI and the JRE to the specified computer.

      • Exclude Java GUI and JRE: Exclude the Java GUI and the JRE from the specified computer.

      • Match Existing Configuration (remote installs only): Preserve the current state of the Java GUI and JRE components. If the Java GUI and JRE are present, they are upgraded. If they are not present, they are not upgraded. If you specify this option on an initial installation, the packages are not installed.

    • NetBackup Port Numbers

      On this screen, you can change port numbers, if it is necessary in your configuration.

      You may need to change a port number if you encounter conflicts when NetBackup and another industry product try to share the same port. Another example is if a port conflict occurs with a firewall, which may cause security issues.

      To change a port number, select the port number that you want to replace and type the new number.

      Click Next.

    • NetBackup Services

      On this screen, provide the following startup account and startup type information for NetBackup services:

      Privileged Account Details	Specify either Local System account or Custom account. By default, the Local System account is selected, so that NetBackup uses the built-in system account. When this option is selected, the fields below it are disabled. To specify a different account: Select Custom account. Enter the account information in the following fields: Domain Username Password
      Non-Privileged Account Details	(Conditional) For primary servers only. Specify either Same as the Privileged Account specified above or Local Service account. For more information for the non-privileged service user account, refer to: https://support.cohesity.com/s/article/article-100048220
      Service Options	This option determines whether NetBackup services start automatically if you need to restart the NetBackup host. The default is Automatic. To start NetBackup services manually after a restart, select Manual.
      Start job-related NetBackup services following installation	By default, job-related services are set to start automatically after the installation has completed. To prevent job-related services from starting automatically, click on the box to clear the check mark.
      Safe Abort Option	This option determines how the installation proceeds if a restart is required as part of the installation. If you select this option and the installation process determines that a restart is required, the installation stops. The system is then rolled back to its original state. If you do not select this option, the installation proceeds even if the installation process determines that a restart is required.

      Click Next.

    • When prompted about installation of the NetBackup IT Analytics Data Collector, determine if you want it installed and proceed accordingly. If you opt to not install it and determine you need it later, you can install the NetBackup IT Analytics Data Collector after the NetBackup installation finishes. More information about the NetBackup IT Analytics Data Collector and how to manually install it after completing the NetBackup installation is available:

      See About the NetBackup IT Analytics Data Collector.

      See Manually install or uninstall NetBackup IT Analytics Data Collector binaries.

14. On the NetBackup System Names screen, provide the following information:

    Primary Server Name	(Conditional) For local primary server installations, enter the name of the local computer. For a cluster installation, enter the cluster virtual server name. For media server installations, you must change the name to the primary server name to which the media server is configured.
    Additional Servers	Enter the names of any additional NetBackup primary servers and media servers that you want to communicate with this server. Include the names of computers where you plan to install NetBackup later. To enter more than one name, separate each name with a comma or press Enter after each name.
    Media Server Name	This field appears only for local NetBackup Enterprise media server installations. When you install media server software, this field defaults to the local server name.

    Click Next.

15. After you provide the required computer names, the installer determines your security configuration.

    • If the installer finds your environment uses an external certificate authority, you are presented with the External Certificate screen. Proceed to step 16.

    • If the installer finds your environment uses NetBackup Certificate Authority, you are presented with the NetBackup Certificate screen. Proceed to step17 .

16. On the External Certificate screen, select one of the three radio buttons based on how you want to configure the external certificate authority (ECA). Depending on which one you select, you must complete different information:

    • Use Windows certificate store

      You must enter the certificate location as Certificate Store Name\Issuer Distinguished Name\Subject Distinguished Name.

      Note:

      You can use the $hostname variable for any of the names in the certificate store specification. The $hostname variable evaluates at run time to the name of the local host. This option provides flexibility when you push NetBackup software to a large number of clients.

      Alternatively, you can specify a comma-separated list of Windows certificate locations. For example, you can specify: MyCertStore\IssuerName1\SubjectName, MyCertStore\IssuerName2\SubjectName2, MyCertStore4\IssuerName1\SubjectName5

      Then select the Certificate Revocation List (CRL) option from the radio buttons shown:

      • Use the CRL defined in the certificate. No additional information is required.

      • Use the CRL at the following path: You are prompted to provide a path to the CRL.

      • Do not use a CRL.

    • Use certificate from a file

      After you select this option, specify the following:

      • Certificate file: This field requires you to provide the path to the certificate file and the certificate file name.

      • Trust store location: This field requires you to provide the path to the trust store and the trust store file name.

      • Private key path: This field requires you to provide the path to the private key file and the private key file name.

      • Passphrase file: This field requires you to provide the path of the passphrase file and the passphrase file name. This field is optional.

      • CRL option: Specify the correct CRL option for your environment:

        • Use the CRL defined in the certificate. No additional information is required.

        • Use the CRL at the following path: You are prompted to provide a path to the CRL.

        • Do not use a CRL.

    • Proceed without security

      You receive a warning message listing potential issues. Depending on the state of the current security configuration, NetBackup may be unable to perform backups or restores until an external CA certificate has been configured.

    Click Next to continue. Go to step 21 in this procedure.

17. After you confirm you want to continue, the installer fetches the certificate authority certificate details. You have the option to click Cancel to halt this action. Be aware if you click Cancel, this action requires you to rerun the installation or continue with the installation without the required security components. If these security components are absent, backups and restores fail.
18. Enter the Certificate Authority Fingerprint as prompted.

    After you confirm the fingerprint information, the installer stores the certificate authority certificate details. You have the option to click Cancel to halt this action. Be aware if you click Cancel, this action requires you to rerun the installation or continue with the installation without the required security components. If these security components are absent, backups and restores fail.

19. After the Certificate Authority certificate is stored, the installer fetches the host certificate. You have the option to click Cancel to halt this action. Be aware if you click Cancel, this action requires you to rerun the installation or continue with the installation without the required security components. If these security components are absent, backups and restores fail.
20. (Conditional) If prompted by the Security Token screen, enter the security token.

    If you were issued a security token, enter it below.

    The token format is 16 upper case letters. Alternatively, you can also select the Proceed without providing a security token option. When the option is selected, this warning is shown:

    In some environments, failure to provide a security token can result in failed backups. Contact your backup administrator if you have questions.

    After you enter a security token, you have the option to click Cancel to halt the deployment of the host certificate. Be aware if you click Cancel, this action requires you to rerun the installation or continue with the installation without the required security components. If these security components are absent, backups and restores fail.

21. After you enter all the security information, you are prompted with the certificate status screen. If the screen indicates there are no issues, click Next to continue. If the screen Security Certificate Status indicates there are issues, click Back to reenter the required security information.

    If this install is a push install or if you selected Proceed without security, this dialog is skipped.

22. (Conditional) For remote installations only:

    On the Veritas NetBackup Remote Hosts screen, specify the hosts where you want NetBackup installed.

    • Windows Destination Systems

      Right-click Windows Destination Computers and select from the drop-down menu, or use the following methods:

      Browse	Click here to search the network for the hosts where you want to install NetBackup. On the Available Systems dialog box, select the computer to add and click Next. On the Remote Computer Login Credentials dialog box, enter the User Name and the Password of the account to be used to perform the installation on the remote computers. If you plan to install to multiple remote computers, click the box next to Remember User Name and Password. Selecting this option prevents the need to enter this information for each remote computer. Click OK. On the Remote Destination Folder dialog box, verify or change the Destination Folder where NetBackup is installed. The default location is C:\Program Files\Veritas. If you plan to install to multiple remote computers and you want to use the same location, click the box next to Use this folder for subsequent systems. Selecting this option prevents the need to enter the location for each remote computer.
      Import	Click here to import a text file that contains a list of host names. When you create the text file, the host names must be defined in the following format: Domain\ComputerName
      Add	Click here to add a host manually. On the Manual Remote Computer Selection dialog box appears, enter the Domain and the Computer Name, then click OK. On the Remote Computer Login Credentials dialog box, enter the User Name and the Password of the account to be used to perform the installation on the remote computers. If you plan to add and install to multiple remote computers, click the box next to Remember User Name and Password. Selecting this option prevents the need to enter this information for each remote computer. Click OK. On the Remote Destination Folder dialog box, verify or change the Destination Folder where NetBackup is installed. The default location is C:\Program Files\Veritas\. If you plan to install to multiple remote computers and you want to use the same location, click the box next to Use this folder for subsequent systems. Selecting this option prevents the need to enter the location for each remote computer. Click OK.
      Remove	To remove a host from the Destination Systems list, select the host and click here.
      Change	Click here to change the destination for NetBackup file installation on the selected remote host.

    • Click Next.

23. (Conditional) For cluster installations only:

    On the NetBackup Remote Hosts screen, specify the remote system information for installation on those computers.

    • On the initial screen, right-click Browse.

    • On the Available Systems dialog box, select the computer that you want to add. Control-click to select multiple computers.

      Click Next.

    • On the Remote Computer Login Credentials dialog box, enter the user name, password, and domain that NetBackup is to use on the remote system(s).

      If you intend to add more remote computers, click the check box next to Remember user name and password.

      When you provide credentials, you select cluster nodes and add them to the Windows Destination Systems list. These are the nodes on which you remotely install NetBackup. Make sure that you select your local host when you select systems to install.

      Each time you choose a system, NetBackup performs system checks. For example, it verifies the system for a server installation that matches the type that you selected, as follows:

      NetBackup not installed	Considers the remote to be verified.
      NetBackup already installed	Compares the installation type on that system to the installation type that you request.
      Invalid combination	Notifies you of the problem and disallows the choice. One example of an invalid combination is to try to install a Remote Administration Console on a remote system that is already a primary server.
      Remote system not a supported platform or level	Notifies you of the problem and disallows the choice.

      The installation procedure also verifies that you have proper administrator credentials on the remote system. If you do not have administrator credentials, the Enter Network Password screen appears, and prompts you to enter the administrator's user name and password.

      Click OK and continue selecting destination systems.

    This process repeats for each node that you select. You can elect to retain the user name and password. In that case, you are prompted only when the user name or password is not valid.

    Note the following about the push-install process in a clustered environment:

    • You can install NetBackup on any number of nodes. However, the clustering service sets the limit for the number of nodes in a cluster, not NetBackup.

    • Language packages and other NetBackup add-on products cannot be installed with the push method. Add-on products must be installed on each individual node in the cluster group. For instructions on how to install these products, refer to the NetBackup documentation that supports each product.

    • NetBackup pushes to the other nodes only the licenses you enter at the beginning of the installation. Your licenses may enable add-on products. If you push NetBackup to nodes that have an add-on product already installed, your license works for that product.

    Click Next.

24. (Conditional) For cluster installations only:

    On the Cluster Settings screen, you provide the virtual and the physical network information.

    Note:

    You can add only one virtual IP address during installation. If your virtual name can resolve into more than one IP address, you can add multiple IP addresses after the installation using the bpclusterutil -addIP option. More information about the bpclusterutil command is available.

    NetBackup Commands Reference Guide

    For new installations, the following configuration settings that you enter apply to all nodes:

    Create a new Cluster Group	For new cluster installations, select this option.
    IPv4 Clusters	The default cluster setting is IPv4. Enter the following addresses: Virtual IPv4 Address The IP address to which the virtual server name should resolve. For new cluster installations, you must enter the address manually. IPv4 Subnet Mask Identifies a subnetwork so that IP addresses can be shared on a local area network. This number correlates directly to the virtual IP address of the cluster.
    IPv6 Clusters	To enable IPv6 clusters, select this option. Enter the following IP address: Virtual IPv6 Address The IPv6 address must be entered in CIDR format.
    NB Cluster Group Name	The name that is used to identify a NetBackup service group or resource group. The resources in any resource group are related and interdependent.
    Virtual Host Name	The name by which NetBackup is known in the cluster. When you install the client software, this host name must be added to the Additional Servers field on the NetBackup System Names screen. The server uses this name when it communicates with the client nodes.
    Path to Shared Data	A directory on one of the shared disks in the cluster where NetBackup stores configuration information. If the letter for the disk (or drive) does not appear in the pull-down list, enter only the letter.
    Public Network	For NetBackup clustered environments, select a public network that is assigned to the node of the cluster. Warning: You must not select a private network that is assigned to this cluster.
    Cluster Configuration	After you set all of the parameters, click this icon to configure the cluster for use with NetBackup. The Next icon is not available until after successful cluster configuration. The text box provides the following information about the configuration: Identifies any existing clusters or NetBackup cluster groups. Indicates a successful configuration. Identifies any problems or errors that occurred during the configuration (configuration failure). Note: If you click Cancel after a successful cluster configuration for new installations, a pop-up message appears. The message asks if you are sure that you want to proceed with the cancelation. To cancel the installation and remove the new cluster group, click Yes. To continue with the installation and retain the new cluster group, click No and then click Next. If the cluster configuration fails, see the NetBackup Clustered Primary Server Administrator's Guide for information about how to resolve the problem.

    When the successful cluster configuration message appears, click Next.

25. On the Ready to Install the Program screen, review the Installation Summary that shows your selections from the previous steps.

    Note:

    Veritas recommends that you review the summary screen for any warning messages. You can prevent installation and upgrade issues if you resolve any problems before you continue the installation.

    Then select one of the following options:

    • Click Install to start the installation.

    • Click Back to view the previous screens and make any changes, then return to this screen and click Install.

    • Click Cancel to cancel the installation.

    After you click Install, the installation process begins and a screen appears that shows you the installation progress. This process may take several minutes.

    For remote and cluster installations, up to five installations occur simultaneously. When an installation is completed, another one begins so that a maximum of five installations are in progress.

26. On the Installation Complete screen, select from the following options:

    View installation log file

    The installation log file provides detailed installation information and shows whether any errors occurred. This log includes information about the optional installation of the Java GUI and the JRE. Examine the installation log at the following location: %ALLUSERSPROFILE%\Veritas\NetBackup\InstallLogs\ Note: When you perform a remote or a cluster installation to multiple computers, this option only lets you view the log for the local computer. Each computer that you selected for installation contains its own installation log file. To view the log file of a remote computer, open a Windows Explorer window and enter \\<COMPUTERNAME>. Search the installation log for the following error indications: Strings that include Return Value 3. Important log messages that are color coded as follows: Yellow = warning. Red = error.

    Finish

    Select one of the following to complete the installation: If you are done installing software on all servers, click the box next to Launch NetBackup Administration Console now and click Finish. The NetBackup Administration Console starts a Configuration Wizard so that you can configure your NetBackup environment. If you have more server software to install, click Finish. You can move on to the next computer and install the necessary server software.

27. (Conditional) On a clustered NetBackup primary server, you must copy the Certificate Authority certificate and the host certificate to the inactive node. More information is available:

    See Generate a certificate on the inactive nodes of a clustered primary server.

    If you performed a disaster recovery of the primary server, you must first generate the token and then copy it to each of the inactive nodes. More information about how to handle disaster recoveries is available.

    NetBackup Troubleshooting Guide

28. (Conditional) If you plan to configure customized settings for your Tomcat web server, determine if those settings can persist across upgrades. More information is available:

    See Persistent Java Virtual Machine options.

29. Repeat the steps in this procedure for any other servers.
30. After all server software is installed, you are ready to install client software.

    See About NetBackup client installation.

    See Post-installation tasks for NetBackup cluster environments.

    See Verifying Windows cluster installations or upgrades.