CA configuration for Azure Stack
You can sign the Azure Stack workloads with a different ECA than NetBackup. You can also configure in NBCA mode. You can have the following configurations:
NetBackup Snapshot Manager and Azure Stack configured with same ECA:
No manual step required since NetBackup Snapshot Manager registration with NetBackup will take care of adding ECA_TRUST_STORE_PATH in
/cloudpoint/openv/netbackup/bp.conffile.Required CA certificates are already present in
/cloudpoint/eca/trusted/cacerts.pemfile.
NetBackup Snapshot Manager and Azure Stack configured with different ECA:
Update Snapshot Manager using the following command:
# flexsnap_configure truststore --addtrust <azure_stack_root_ca>
Verify Snapshot Manager trust store using the following command:
# flexsnap_configure truststore
Remove CA from Snapshot Manager trust store using the following command:
flexsnap_configure truststore --rmtrust <azure_stack_root_ca>
Azure Stack is configured with well known public CA:
No manual steps are required at NetBackup Snapshot Manager end.