Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Troubleshooting Guide
  3. Disaster recovery
  4. Options to recover the NetBackup catalog
  5. About recovering the entire NetBackup catalog
  6. Recovering the entire NetBackup catalog using the NetBackup catalog recovery wizard
NetBackup™ Troubleshooting Guide

Recovering the entire NetBackup catalog using the NetBackup catalog recovery wizard

This procedure describes how to recover the entire catalog using the NetBackup catalog recovery wizard.

Note:

Full catalog recovery restores the device and the media configuration information in the catalog backup. If you must configure storage devices during the recovery, Cohesity recommends that you recover only the NetBackup image files.

See About recovering the NetBackup catalog image files.

Warning:

Do not run any client backups before you recover the NetBackup catalog.

To recover the entire catalog by using the NetBackup catalog recovery wizard

  1. Review the prerequisites before starting the catalog recovery.

    See Prerequisites for recovering the NetBackup catalog or NetBackup catalog image files.

  2. If NetBackup is not running, start all of the NetBackup services by entering the following:

    • On UNIX and Linux:

      /usr/openv/netbackup/bin/bp.start_all

    • On Windows:

      install_path\NetBackup\bin\bpup

  3. Sign into the primary server on which you want to recovery the catalog. You must have the Administrator role or similar permissions.
  4. Start the NetBackup web UI.
  5. If the catalog backup and the recovery devices are not available, do the following:
    • Configure the necessary recovery device in NetBackup.

      For tape storage or BasicDisk storage, see the NetBackup Administrator's Guide, Volume I. For disk storage types, see the guide that describes the option. See the following website for NetBackup documentation:

      https://support.cohesity.com/s/article/article-100040135

    • If the catalog backup was written to an immutable (MSDP WORM) storage server, add the storage server back to the primary server's configuration with the nbdevconfig command.

      For more information on recovering the NetBackup catalog from an MSDP pool, see the article.

    • Make the media that contains the catalog backup available to NetBackup: Inventory the robot or the disk pool, add the media for standalone drives, configure the storage server and disk pool, or so on.

      For tape storage or BasicDisk storage, see the NetBackup Administrator's Guide, Volume I. For disk storage types, see the guide that describes the option.

  6. At the top, click Settings > NetBackup catalog recovery.
  7. Specify where the disaster recovery file is stored. You can browse to select the file or enter the full pathname to the disaster recovery file. The disaster recovery file must be available on the local computer from where you opened the web UI.

    In most cases, you specify the most recent disaster recovery information file available. If the most recent catalog backup is an incremental backup, use the disaster recovery file from the incremental backup. (There is no need to first restore the full backup and then follow with the incremental backup.)

    If some form of corruption has occurred, you may want to restore to an earlier state of the catalog.

    Click Next to continue.

  8. NetBackup searches for the media that are required to recover the catalog. It then informs you of the progress and locates the necessary backup ID of the disaster recovery image. If the media is not located, NetBackup indicates which media is needed to update the database.

    If necessary, follow the instructions to insert the media that is indicated and run an inventory to update the NetBackup database. The information that displays depends on whether the recovery is from a full backup or an incremental backup.

    When all the required media sources are found, click Next.

  9. By default, the Recover entire NetBackup catalog option is selected.

    Select a Job priority if wanted and then click Next to initiate the recovery. You can click Cancel to stop the NetBackup catalog recovery process.

  10. NetBackup displays the progress of the recovery of the various catalog components:

    • NBDB database (including the EMM database)

    • BMR database (if applicable)

    • NetBackup policy files

    • Backup image files to their proper image directories

    • Other configuration files

    Your action depends on the outcome of the recovery, as follows:

    Not successful

    Consult the log file messages for an indication of the problem. Click Cancel, fix the problem, and then run the wizard again.

    Successful

    Click Next to continue to the final wizard panel.

  11. After the recovery completes, click Finish.
  12. Important: After successful catalog recovery, you must set the disaster recovery package passphrase. The passphrase is not recovered during the catalog recovery.

    Do one of the following to set the passphrase:

    • At the top, click Settings > Global security. On Disaster recovery tab specify the passphrase.

    • Use the nbseccmd -drpkgpassphrase command to specify the passphrase.

  13. Before you continue, be aware of the following points:

    • If you recovered the catalog from removable media, NetBackup freezes the catalog media.

    • Before you restart NetBackup, freeze the media that contains the backups more recent than the date of the catalog from which you recovered.

    • NetBackup does not run scheduled backup jobs until you stop and then restart NetBackup.

      You can submit backup jobs manually before you stop and restart NetBackup. However, you must freeze the media that contains the backups more recent than the date of the catalog from which you recovered. Otherwise, NetBackup may overwrite that media.

  14. Clean up the allowed list cache on all hosts.
  15. Stop and restart NetBackup services on the primary server and other hosts, as follows:

    • On UNIX and Linux:

      /usr/openv/netbackup/bin/bp.kill_all
      /usr/openv/netbackup/bin/bp.start_all
    • On Windows:

      install_path\NetBackup\bin\bpdown
      install_path\NetBackup\bin\bpup
    If the NetBackup web UI is active on any of the hosts, the command that stops the NetBackup services shuts it down.
  16. After the services are restarted, run one of the following commands:
    • If NetBackup (or host ID-based) certificates are used in your NetBackup domain, do the following:

      On a non-clustered setup:

      UNIX:

      /usr/openv/netbackup/bin/nbcertcmd -renewcertificate

      Windows:

      install_path\netbackup\bin\nbcertcmd -renewcertificate

      On a clustered setup:

      UNIX:

      /usr/openv/netbackup/bin/nbcertcmd -renewcertificate -cluster

      Windows:

      install_path\netbackup\bin\nbcertcmd -renewcertificate -cluster
    • If external CA-signed certificates are used in your NetBackup domain, do the following:

      On a non-clustered setup

      UNIX:

      /usr/openv/netbackup/bin/nbcertcmd -enrollCertificate
      

      Windows:

      install_path\netbackup\bin\nbcertcmd -enrollCertificate
      

      On a clustered setup:

      UNIX:

      /usr/openv/netbackup/bin/nbcertcmd -enrollCertificate -cluster

      Windows:

      install_path\netbackup\bin\nbcertcmd -enrollCertificate -cluster
    • If the command runs successfully, proceed with the next step.

    • If the command fails with the exist status 5988, refer to the following topic:

      See Steps to carry out when you see exit status 5988 during catalog recovery.

      Proceed with the next step.

  17. If the catalog recovery is part of a server recovery procedure, complete the remaining steps in the appropriate recovery procedure.

    Recovery can include the following:

    • Importing the backups from the backup media into the catalog.

    • Write protecting the media.

    • Ejecting the media and setting it aside.

    • Freezing the media.

    Note:

    A catalog recovery changes the configuration of NetBackup back to the point in time of the catalog backup. Any change to the configuration after the point-in-time of the catalog backup (For example: changes to policies, clients, storage units) must be re-applied if those changes are desired. These changes should be re-applied before new backups are taken. If the changes are not applied, they can affect what is protected and how the protection is managed.

    As an example, a storage unit might have been modified to require the use of WORM locking on new images. If WORM locking isn't re-applied, new backups do not have the desired WORM protections.

More Information

Unfreezing the NetBackup online catalog recovery media

Feedback

Was this page helpful?
Previous

About recovering the entire NetBackup catalog

Next

Recovering the entire NetBackup catalog using bprecover -wizard

Feedback

Was this page helpful?