Performing local, remote, or clustered server installation on Windows systems
Use the following procedure to perform a local, a remote, or a clustered install of NetBackup on a Windows computer.
NetBackup uses the Local Service account for starting most of the primary server services during an install. You can change this account to use the Local System account or an administrator account during a custom installation. Follow the steps for a custom installation to make this change.
You can use the nbserviceusercmd command to change the service user on media servers after the installation completes. Refer to the NetBackup Commands Reference Guide for more information about the nbserviceusercmd command. For more details about the service user account, refer to https://support.cohesity.com/s/article/article-100053035.
To install NetBackup 11.2 server software on a local, remote, or clustered Windows server
- Log on to the system. Be sure to log on with administrator privileges.
For local installations, log on to the system where you want to install NetBackup.
For remote installations, log on to a system with network access to all of the hosts where you want to install NetBackup.
For cluster installations, log on to the active node (the node with the shared disk).
- Navigate to the directory where the images reside and run Browser.exe to start the NetBackup Installation Wizard .
- On the initial browser screen (Home), click Install/Upgrade.
- On the Install/Upgrade screen, click NetBackup Server Software Install/Upgrade.
- If you are prompted about the absence of required Visual C++ run-time libraries, review the information and respond accordingly. More information is available.
See Windows compiler and security requirements for NetBackup 11.2 and later installation.
- On the Welcome screen, review the content and click Next.
- (Conditional) If you previously installed NetBackup 11.2 on this host, you see the Program Maintenance dialog.
Select Modify to change installation settings for the local host, or to use the local host as a platform to perform push installation to remote hosts.
Select Repair to restore NetBackup 11.2 to its original state on the local host.
Select Remove to remove NetBackup 11.2 from the local host.
- On the License Agreement screen, do the following and click Next:
I agree to and accept the terms of the license agreement.
You must select this item to install the software.
- On the NetBackup Server Install/Upgrade Type screen, provide the following information:
Where to install
For a local installation, select Install to this computer only.
For a remote installation, select Install or upgrade one or more computers on your network.
For a cluster installation, select Install a clustered Primary Server.
This option is available only if the installation process determines that your system is configured for a Windows Server Failover Cluster (WSFC) or VCS clustered environment.
Typical
Select this option to install NetBackup with the default settings.
Note:
The Typical installation does not install JRE on Windows media servers. You must select Custom if you want JRE installed on Windows media servers.
Custom
Select this option to install NetBackup with the settings that you want.
Click Next.
- On the NetBackup Server Role and Licenses screen, provide the following information:
Licenses
You can download your license from Cohesity Entitlement management system or use an evaluation license. More information is available: https://support.cohesity.com/s/article/article-100058779.
License files are not required for media server installations.
For remote and cluster installations:
Note:
The license that you enter here gets pushed to the other nodes. For clustered primary server, the licenses are stored in the shared drive that is accessible only to the active node. As such, license doesn't gets pushed to the inactive nodes. Your license may enable add-on products. If you push NetBackup to nodes that have an add-on product already installed, your license works for the add-on product(s).
During this installation process, the following occurs to verify that you have proper credentials to perform remote installations:
When you select a clustered system for installation, NetBackup determines if you have proper administrator credentials on all nodes in the cluster. If you do not have the proper credentials, the system is not added to the list.
NetBackup Primary Server
Select the radio button and then Next to install primary server software.
If you have downloaded license files, browse and add those license files. If you select Next without adding any license files, NetBackup uses an evaluation license.
NetBackup Media Server
Select the radio button and then Next to install media server software.
Disaster Recovery Primary Server
Select this radio button and then Next to perform a disaster recovery of your primary server. The disaster recovery process requires additional steps and information that is not covered in this manual. More information is available.
- Enable or disable FIPS mode in NetBackup on the FIPS Compliance in NetBackup screen. By default FIPS mode is disabled.
By enabling FIPS, the NetBackup installer and any further operations run in FIPS mode. Please check requisite before you enable FIPS mode in your NetBackup Domain.
The NetBackup installation and all further options on remote hosts run in FIPS-compliant mode if you enable FIPS mode during remote installation.
Enabling FIPS mode during clustered server installation enables FIPS mode on the nodes which are added on the NetBackup Remote Hosts screen. When you add new nodes to an existing cluster group using the Windows Installer, make sure that the FIPS mode configuration value matches the other nodes in the cluster group.
For more information about FIPS, see the NetBackup Encryption and Security Guide.
Click Next.
- (Conditional) This step applies only to the local installations that are Custom. For Typical installations, skip to the next step.
This step describes how to select and configure the Application Folder, NetBackup Port Numbers, and the NetBackup Services.
Application Folder
On this screen, you can select where the NetBackup files are installed.
Application Folder
By default, NetBackup files are installed to the following location:
C:\Program Files\Cohesity NetBackupTo change the folder destination where NetBackup is installed:
Click Change.
Browse to the preferred location and designate a new or an existing folder.
Click Next.
Additional information about installation folder restrictions is available.
Click Next.
IT Analytics Data Collector
(Conditional) This option only applies to primary servers.
When prompted about installation of the IT Analytics Data Collector, determine if you want it installed and proceed accordingly. If you opt to not install it and determine you need it later, you can install the IT Analytics Data Collector after the NetBackup installation finishes. More information about the IT Analytics Data Collector and how to manually install it after completing the NetBackup installation is available:
See About the IT Analytics Data Collector.
See Manually install or uninstall IT Analytics Data Collector binaries.
NetBackup DirectIO Options
The options that are provided are:
Include NetBackup DirectIO: Install the NetBackup DirectIO package to the specified computer.
Exclude NetBackup DirectIO: Exclude the NetBackup DirectIO package from the specified computer.
Any preexisting versions of NetBackup DirectIO are removed.
Match Existing Configuration (remote installs only): Preserve the current state of the NetBackup DirectIO package. If the NetBackup DirectIO package is present, it is upgraded. If it is not present, it is not upgraded. If you specify this option on an initial installation, the plug-in is not installed.
NetBackup Port Numbers
On this screen, you can change port numbers, if it is necessary in your configuration.
You may need to change a port number if you encounter conflicts when NetBackup and another industry product try to share the same port. Another example is if a port conflict occurs with a firewall, which may cause security issues.
To change a port number, select the port number that you want to replace and type the new number.
Click Next.
NetBackup Services
On this screen, provide the following startup account and startup type information for NetBackup services:
Privileged Account Details
Specify either Local System account or Custom account.
By default, the Local System account is selected, so that NetBackup uses the built-in system account. When this option is selected, the fields below it are disabled.
To specify a different account:
Select Custom account.
Enter the account information in the following fields:
Domain
Username
Password
Account Details
(Conditional) For primary servers only.
Specify either Same as the Privileged Account specified above or Local Service account.
For more information for the non-privileged service user account, refer to: https://support.cohesity.com/s/article/article-100048220
Service Options
This option determines whether NetBackup services start automatically if you need to restart the NetBackup host. The default is Automatic.
To start NetBackup services manually after a restart, select Manual.
Start job-related NetBackup services after completion
By default, job-related services are set to start automatically after the installation has completed.
To prevent job-related services from starting automatically, click on the box to clear the check mark.
Safe Abort Option
This option determines how the installation proceeds if a restart is required as part of the installation.
If you select this option and the installation process determines that a restart is required, the installation stops. The system is then rolled back to its original state.
If you do not select this option, the installation proceeds even if the installation process determines that a restart is required.
Click Next.
- On the NetBackup Web Services screen, specify the account type and the account details.
What types of acccounts should we use?
Select either Local or Domain (Active Directory).
Select Local if you want to associate the web server with a user and a group account that exist on the local host.
Select Domain (Active Directory) if you want to associate the web server with a user and a group account that exist on a trusted Windows domain.
What are the existing account details
Specify the information as shown:
Domain - If you chose the Domain (Active Directory) account type, specify the name of the domain to which the user and the group accounts belong.
Group - Specify the name of the group account to associate with the web server.
User - Specify the name of the user account to associate with the web server. For security reasons, do not specify a user account that has administrative privileges on the host.
Password - Specify the password of the user account in the User field.
Note:
After installation, you cannot change the user account for the NetBackup web server. Do not delete this account, as you cannot reconfigure the account for the web server after installation.
More information is available.
See Installation requirements for Windows and Windows clusters.
- On the NetBackup System Names screen, provide the following information:
Primary Server Name
(Conditional) For local primary server installations, enter the name of the local computer. For a cluster installation, enter the cluster virtual server name.
For media server installations, you must change the name to the primary server name to which the media server is configured.
Additional Servers
Enter the names of any additional NetBackup primary servers and media servers that you want to communicate with this server. Include the names of computers where you plan to install NetBackup later.
To enter more than one name, separate each name with a comma or press Enter after each name.
Media Server Name
This field appears only for local NetBackup Enterprise media server installations.
When you install media server software, this field defaults to the local server name.
Click Next.
- After you provide the required computer names, the installer determines your security configuration.
If the installer finds your environment uses an external certificate authority, you are presented with the External Certificate screen. Proceed to step 16.
If the installer finds your environment uses NetBackup Certificate Authority, you are presented with the NetBackup Certificate screen. Proceed to step17 .
- On the External Certificate screen, select one of the three radio buttons based on how you want to configure the external certificate authority (ECA). Depending on which one you select, you must complete different information:
Use Windows certificate store
You must enter the certificate location as Certificate Store Name\Issuer Distinguished Name\Subject Distinguished Name.
Note:
You can use the $hostname variable for any of the names in the certificate store specification. The $hostname variable evaluates at run time to the name of the local host. This option provides flexibility when you push NetBackup software to a large number of clients.
Alternatively, you can specify a comma-separated list of Windows certificate locations. For example, you can specify: MyCertStore\IssuerName1\SubjectName, MyCertStore\IssuerName2\SubjectName2, MyCertStore4\IssuerName1\SubjectName5
Then select the Certificate Revocation List (CRL) option from the radio buttons shown:
Use the CRL defined in the certificate. No additional information is required.
Use the CRL at the following path: You are prompted to provide a path to the CRL.
Do not use a CRL.
Use certificate from a file
After you select this option, specify the following:
Certificate file: This field requires you to provide the path to the certificate file and the certificate file name.
Trust store location: This field requires you to provide the path to the trust store and the trust store file name.
Private key path: This field requires you to provide the path to the private key file and the private key file name.
Passphrase file: This field requires you to provide the path of the passphrase file and the passphrase file name. This field is optional.
CRL option: Specify the correct CRL option for your environment:
Use the CRL defined in the certificate. No additional information is required.
Use the CRL at the following path: You are prompted to provide a path to the CRL.
Do not use a CRL.
Proceed without security
You receive a warning message listing potential issues. Depending on the state of the current security configuration, NetBackup may be unable to perform backups or restores until an external CA certificate has been configured.
Click Next to continue. Go to step 21 in this procedure.
- After you confirm you want to continue, the installer fetches the certificate authority certificate details. You have the option to click Cancel to halt this action. Be aware if you click Cancel, this action requires you to rerun the installation or continue with the installation without the required security components. If these security components are absent, backups and restores fail.
- Enter the Certificate Authority Fingerprint as prompted.
After you confirm the fingerprint information, the installer stores the certificate authority certificate details. You have the option to click Cancel to halt this action. Be aware if you click Cancel, this action requires you to rerun the installation or continue with the installation without the required security components. If these security components are absent, backups and restores fail.
- After the Certificate Authority certificate is stored, the installer fetches the host certificate. You have the option to click Cancel to halt this action. Be aware if you click Cancel, this action requires you to rerun the installation or continue with the installation without the required security components. If these security components are absent, backups and restores fail.
- (Conditional) If prompted by the Security Token screen, enter the security token.
If you were issued a security token, enter it below.
The token format is 16 upper case letters. Alternatively, you can also select the Proceed without providing a security token option. When the option is selected, this warning is shown:
In some environments, failure to provide a security token can result in failed backups. Contact your backup administrator if you have questions.
After you enter a security token, you have the option to click Cancel to halt the deployment of the host certificate. Be aware if you click Cancel, this action requires you to rerun the installation or continue with the installation without the required security components. If these security components are absent, backups and restores fail.
- After you enter all the security information, you are prompted with the certificate status screen. If the screen indicates there are no issues, click Next to continue. If the screen Security Certificate Status indicates there are issues, click Back to reenter the required security information.
If this install is a push install or if you selected Proceed without security, this dialog is skipped.
- (Conditional) For remote installations only:
On the NetBackup Remote Hosts screen, specify the hosts where you want NetBackup installed.
Windows Destination Systems
Right-click Windows Destination Computers and select from the drop-down menu, or use the following methods:
Browse
Click here to search the network for the hosts where you want to install NetBackup.
On the Available Systems dialog box, select the computer to add and click Next.
On the Remote Computer Login Credentials dialog box, enter the User Name and the Password of the account to be used to perform the installation on the remote computers.
If you plan to install to multiple remote computers, click the box next to Remember User Name and Password. Selecting this option prevents the need to enter this information for each remote computer.
Click OK.
On the Remote Destination Folder dialog box, verify or change the Destination Folder where NetBackup is installed.
The default location is
C:\Program Files\Cohesity NetBackup.If you plan to install to multiple remote computers and you want to use the same location, click the box next to Use this folder for subsequent systems. Selecting this option prevents the need to enter the location for each remote computer.
Import
Click here to import a text file that contains a list of host names. When you create the text file, the host names must be defined in the following format:
Domain\ComputerNameAdd
Click here to add a host manually.
On the Manual Remote Computer Selection dialog box appears, enter the Domain and the Computer Name, then click OK.
On the Remote Computer Login Credentials dialog box, enter the User Name and the Password of the account to be used to perform the installation on the remote computers.
If you plan to add and install to multiple remote computers, click the box next to Remember User Name and Password. Selecting this option prevents the need to enter this information for each remote computer.
Click OK.
On the Remote Destination Folder dialog box, verify or change the Destination Folder where NetBackup is installed.
The default location is
C:\Program Files\Cohesity NetBackup.If you plan to install to multiple remote computers and you want to use the same location, click the box next to Use this folder for subsequent systems. Selecting this option prevents the need to enter the location for each remote computer.
Click OK.
Remove
To remove a host from the Destination Systems list, select the host and click here.
Change
Click here to change the destination for NetBackup file installation on the selected remote host.
Click Next.
- (Conditional) For cluster installations only:
On the NetBackup Remote Hosts screen, specify the remote system information for installation on those computers.
On the initial screen, right-click Browse.
On the Available Systems dialog box, select the computer that you want to add. Control-click to select multiple computers.
Click Next.
On the Remote Computer Login Credentials dialog box, enter the user name, password, and domain that NetBackup is to use on the remote system(s).
If you intend to add more remote computers, click the check box next to Remember user name and password.
When you provide credentials, you select cluster nodes and add them to the Windows Destination Systems list. These are the nodes on which you remotely install NetBackup. Make sure that you select your local host when you select systems to install.
Each time you choose a system, NetBackup performs system checks. For example, it verifies the system for a server installation that matches the type that you selected, as follows:
NetBackup not installed
Considers the remote to be verified.
NetBackup already installed
Compares the installation type on that system to the installation type that you request.
Invalid combination
Notifies you of the problem and disallows the choice.
Remote system not a supported platform or level
Notifies you of the problem and disallows the choice.
The installation procedure also verifies that you have proper administrator credentials on the remote system. If you do not have administrator credentials, the Enter Network Password screen appears, and prompts you to enter the administrator's user name and password.
Click OK and continue selecting destination systems.
This process repeats for each node that you select. You can elect to retain the user name and password. In that case, you are prompted only when the user name or password is not valid.
Note the following about the push-install process in a clustered environment:
You can install NetBackup on any number of nodes. However, the clustering service sets the limit for the number of nodes in a cluster, not NetBackup.
Language packages and other NetBackup add-on products cannot be installed with the push method. Add-on products must be installed on each individual node in the cluster group. For instructions on how to install these products, refer to the NetBackup documentation that supports each product.
NetBackup pushes to the other nodes only the licenses you enter at the beginning of the installation. Your licenses may enable add-on products. If you push NetBackup to nodes that have an add-on product already installed, your license works for that product.
Click Next.
- (Conditional) For cluster installations only:
On the Cluster Settings screen, you provide the virtual and the physical network information.
Note:
You can add only one virtual IP address during installation. If your virtual name can resolve into more than one IP address, you can add multiple IP addresses after the installation using the bpclusterutil -addIP option. More information about the bpclusterutil command is available.
For new installations, the following configuration settings that you enter apply to all nodes:
Create a new Cluster Group
For new cluster installations, select this option.
IPv4 Clusters
The default cluster setting is IPv4.
Enter the following addresses:
Virtual IPv4 Address
The IP address to which the virtual server name should resolve.
For new cluster installations, you must enter the address manually.
IPv4 Subnet Mask
Identifies a subnetwork so that IP addresses can be shared on a local area network. This number correlates directly to the virtual IP address of the cluster.
IPv6 Clusters
To enable IPv6 clusters, select this option.
Enter the following IP address:
Virtual IPv6 Address
The IPv6 address must be entered in CIDR format.
NB Cluster Group Name
The name that is used to identify a NetBackup service group or resource group. The resources in any resource group are related and interdependent.
Virtual Host Name
The name by which NetBackup is known in the cluster.
When you install the client software, this host name must be added to the Additional Servers field on the NetBackup System Names screen.
The server uses this name when it communicates with the client nodes.
Path to Shared Data
A directory on one of the shared disks in the cluster where NetBackup stores configuration information. If the letter for the disk (or drive) does not appear in the pull-down list, enter only the letter.
Public Network
For NetBackup clustered environments, select a public network that is assigned to the node of the cluster.
Warning:
You must not select a private network that is assigned to this cluster.
Cluster Configuration
After you set all of the parameters, click this icon to configure the cluster for use with NetBackup. The Next icon is not available until after successful cluster configuration.
The text box provides the following information about the configuration:
Identifies any existing clusters or NetBackup cluster groups.
Indicates a successful configuration.
Identifies any problems or errors that occurred during the configuration (configuration failure).
Note:
If you click Cancel after a successful cluster configuration for new installations, a pop-up message appears. The message asks if you are sure that you want to proceed with the cancelation. To cancel the installation and remove the new cluster group, click Yes. To continue with the installation and retain the new cluster group, click No and then click Next.
If the cluster configuration fails, see the NetBackup Clustered Primary Server Administrator's Guide for information about how to resolve the problem.
When the successful cluster configuration message appears, click Next.
- On the Ready to Install the Program screen, review the Install Summary that shows your selections from the previous steps.
Note:
Review the summary screen for any warning messages. You can prevent installation and upgrade issues if you resolve any problems before you continue the installation.
Then select one of the following options:
Click Install to start the installation.
Click Back to view the previous screens and make any changes, then return to this screen and click Install.
Click Cancel to cancel the installation.
After you click Install, the installation process begins and a screen appears that shows you the installation progress. This process may take several minutes.
For remote and cluster installations, up to five installations occur simultaneously. When an installation is completed, another one begins so that a maximum of five installations are in progress.
- On the Install Complete screen, select from the following options:
Please review the log file for details
The installation log files provide detailed installation information and show whether any errors occurred.
Examine the installation log at the following location:
%ALLUSERSPROFILE%\Cohesity\NetBackup\InstallLogs\More information about the
InstallLogsdirectory is available: See About log file directory changes.Note:
When you perform a remote or a cluster installation to multiple computers, this option only lets you view the log for the local computer. Each computer that you selected for installation contains its own installation log file. To view the log file of a remote computer, open a Windows Explorer window and enter \\<COMPUTERNAME>. Then navigate to the
%ALLUSERSPROFILE%\Cohesity\ NetBackup\InstallLogs\directory.Search the installation log for the following error indications:
Strings that include
Return Value 3.Important log messages that are color coded as follows:
Yellow = warning.
Red = error.
Finish
Select one of the following to complete the installation:
If you are done installing software on all servers, click the box next to Launch NetBackup Web UI now and click Finish.
The NetBackup Web UI starts a Configuration Wizard so that you can configure your NetBackup environment.
If you have more server software to install, click Finish.
You can move on to the next computer and install the necessary server software.
- (Conditional) On a clustered NetBackup primary server, you must copy the Certificate Authority certificate and the host certificate to the inactive node. More information is available:
See Generate a certificate on the inactive nodes of a clustered primary server.
If you performed a disaster recovery of the primary server, you must first generate the token and then copy it to each of the inactive nodes. More information about how to handle disaster recoveries is available.
- (Conditional) If you plan to configure customized settings for your Tomcat web server, determine if those settings can persist across upgrades. More information is available:
- Repeat the steps in this procedure for any other servers.
- After all server software is installed, you are ready to install client software.
See About NetBackup client installation.
See Post-installation tasks for NetBackup cluster environments.