Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  3. NetBackup™ Upgrade Guide
  5. Media server upgrade
  7. Silently upgrading NetBackup media server software on Linux
NetBackup™ Upgrade Guide

Silently upgrading NetBackup media server software on Linux

You can upgrade NetBackup Linux media servers with native installers. You can use either the NetBackup install script or your preferred installer method.

For Linux: rpm, yum, etc.

A successful installation or upgrade is recorded in the /usr/openv/pack/install.history file.

Caution:

You must remove the NetBackup Nutanix plug-in package before you upgrade NetBackup Red Hat and SUSE Linux with the native installers. Both the Nutanix plug-in and NetBackup install the same libraries to the same location, which results in a failure to upgrade. The upgrade fails with an install of package_name conflicts with file from package package_name error message.

Use the command that is shown to uninstall the plug-in before attempting the NetBackup upgrade.

rpm -e VRTSnbntnxahv*

To upgrade the Linux media server binaries using native installers:

  1. Create the NetBackup installation answer file (NBInstallAnswer.conf) in the media server /tmp directory. More information about the answer file and its contents is available.

    See About the NetBackup answer file.

  2. (Conditional) If your environment uses a NetBackup Certificate Authority, and the media server is already configured for NetBackup Certificate Authority, proceed to 4. Otherwise, populate NBInstallAnswer.conf with the following required information:
    CA_CERTIFICATE_FINGERPRINT=fingerprint

    Example (the fingerprint value is wrapped for readability):

    CA_CERTIFICATE_FINGERPRINT=01:23:45:67:89:AB:CD:EF:01:23:45:67:
89:AB:CD:EF:01:23:45:67

    Depending on the security configuration in your NetBackup environment, you may need to add the AUTHORIZATION_TOKEN option to the answer file. Additional information about the AUTHORIZATION_TOKEN option is available.

    See About the NetBackup answer file.

  3. (Conditional) If your environment uses an external certificate authority, and the media server is already configured for external certificate authority, proceed to 4. Otherwise, populate NBInstallAnswer.conf with the following required information:

    • ECA_CERT_PATH

      Use this field to specify the path and the file name of the external certificate file. This field is required to set up an external certificate from a file.

    • ECA_TRUST_STORE_PATH

      Use this field to specify the path and the file name of the file representing the trust store location. This field is required to set up an external certificate from a file.

    • ECA_PRIVATE_KEY_PATH

      Use this field to specify the path and the file name of the file representing the private key. This field is required to set up an external certificate from a file.

    • ECA_KEY_PASSPHRASEFILE

      Use this field to specify the path and the file name of the file that contains the passphrase to access the keystore. This field is optional and applies only when setting up an external certificate from a file.

    • ECA_CRL_CHECK_LEVEL

      Use this field to specify the CRL mode. This field is required. Supported values are:

      • USE_CDP: Use the CRL defined in the certificate.

      • USE_PATH: Use the CRL at the path that is specified in ECA_CRL_PATH.

      • DISABLED: Do not use a CRL.

    • ECA_CRL_PATH

      Use this field to specify the path to the CRL associated with the external CA certificate. This field is required only when ECA_CRL_CHECK_LEVEL is set to USE_PATH. If not applicable, leave this field empty.

  4. Additionally, you can add the optional parameters that are shown to the NBInstallAnswer.conf file.

    • Additional SERVER entries

    More information about each option is available.

    See About the NetBackup answer file.

  5. Download the server package that matches your server platform to a system with sufficient space. Then extract the required server package.

    Extract the contents of the server package file. Example:

    • For Linux Red Hat:

      tar -xzvf NetBackup_11.2_LinuxR_x86_64.tar.gz

    • For Linux SuSE:

      tar -xzvf NetBackup_11.2_LinuxS_x86_64.tar.gz

  6. Change to the directory for your desired operating system and copy packages to the media server.

    Operating system directory:

    • For Linux Red Hat:

      NetBackup_11.2_LinuxR_x86_64/linuxR_x86/anb

    • For Linux SuSE:

      NetBackup_11.2_LinuxS_x86_64/linuxS_x86/anb

    Copy server files to the computer to be installed.

    Note:

    The upgrade of the Java BAR GUI and the JRE is optional. If you do not want them upgraded, omit the copy and the install of the VRTSnbjava and VRTSnbjre packages.

    Remove the old Java BAR GUI and JRE packages if you decide not to upgrade them.

    See Add or remove Java components after upgrade.

    Note:

    The installation of the NetBackup DIrectIO package is optional. If you do not want it installed, omit the copy and the install of the VRTSnbdirectio package.

    • VRTSnbcfg.rpm

    • VRTSnbclibs.rpm

    • VRTSnbclt.rpm

    • VRTSnbjava.rpm

    • VRTSnbjre.rpm

    • VRTSnbpck.rpm

    • VRTSnbslibs.rpm

    • VRTSnbdirectio.rpm

    • VRTSnetbp.rpm

    • VRTSpbx.rpm

    • VRTSpddea.rpm

    • VRTSpddes.rpm

    • VRTSpddeu.rpm

  7. Install the Cohesity precheck package.

    Linux: rpm - U VRTSnbpck.rpm

  8. (Conditional) If you are upgrading from pre-NetBackup 8.0, remove the old SYMC* packages. The example that is shown indicates the commands that are used to remove the SYMC RPM packages. This process preserves your NetBackup configuration. 
    rpm -e SYMCnbjava
rpm -e SYMCpddea
rpm -e SYMCnbclt
rpm -e SYMCnbjre
rpm -e SYMCpddes
rpm -e SYMCnetbp
  9. Install the files in the order that is shown with the commands shown:

    Note:

    The upgrade of the Java BAR GUI and the JRE is optional. If you do not want them upgraded, omit the copy and the install of the VRTSnbjava and VRTSnbjre packages.

    Remove the old Java BAR GUI and JRE packages if you decide not to upgrade them.

    See Add or remove Java components after upgrade.

    RedHat Linux

    rpm -U VRTSpbx.rpm
rpm -U VRTSnbclt.rpm
rpm -U VRTSnbclibs.rpm
rpm -U VRTSnbjre.rpm
rpm -U VRTSnbjava.rpm
rpm -U VRTSpddes.rpm
rpm -U VRTSpddeu.rpm
rpm -U VRTSpddea.rpm
rpm -U VRTSnbcfg.rpm
rpm -U VRTSnetbp.rpm
rpm -U VRTSnbslibs.rpm

    Note:

    The VRTSpddei package is no longer delivered in NetBackup 11.2. Remove this rpm and install libguestfs.rpm and python3-libguestfs.rpm if you want to continue to use Instant Access or malware scans of VM images.

    SuSE Linux

    rpm -U VRTSpbx.rpm
rpm -U VRTSnbclt.rpm
rpm -U VRTSnbclibs.rpm
rpm -U VRTSnbjre.rpm
rpm -U VRTSnbjava.rpm
rpm -U VRTSpddeu.rpm
rpm -U VRTSpddea.rpm
rpm -U VRTSpddes.rpm
rpm -U VRTSnbcfg.rpm
rpm -U VRTSnetbp.rpm
rpm -U VRTSnbslibs.rpm
  10. You can remove the old versions of the Java BAR GUI and the JRE if you no longer plan to use them.

    • Linux:

      rpm -e VRTSnbjava.rpm

      rpm -e VRTSnbjre.rpm

  11. You can remove the old versions of the NetBackup DirectIO package if you no longer plan to use it.

    rpm -e VRTSnbdirectio.rpm

Feedback

Was this page helpful?
Previous

Upgrading NetBackup media servers to NetBackup 11.2

Next

Client upgrade

Feedback

Was this page helpful?