Permissions on the NetBackup vSphere Web Client plug-in authentication token file may need to be changed
To allow the NetBackup plug-in to restore VMs, the NetBackup administrator must generate an authentication token on the NetBackup master server. NetBackup creates the token in a compressed file; the file must be sent to the administrator of the vCenter server where the plug-in is installed.
When the virtualization administrator uses the compressed file to authorize the plug-in to restore VMs, the token file is opened and left uncompressed. In either of the following cases, the uncompressed file may not have the same permissions that it had when the NetBackup administrator created the token:
On the Linux vCenter Server Appliance, the umask is set to 0.
VMware vSphere on Windows is installed in a location other than C:\Program Files.
In either case, you may need to adjust the token file's permissions to conform to your NetBackup security settings.
The uncompressed token file is in the following location on the vCenter server:
On a Linux vCenter Server Appliance: /storage/vsphere-client/netbackup
On a Windows vCenter server: C:\ProgramData\VMware\vSphere Web Client\netbackup
See Authorizing the NetBackup plug-in for vSphere Web Client to restore virtual machines.