Enabling NetBackup clustered master server inter-node authentication
NetBackup requires inter-node authentication among the master servers in a cluster. For authentication, you must provision an authentication certificate on all of the nodes of the cluster. The certificates are used to establish SSL connections between the NetBackup hosts. The inter-node authentication allows the following NetBackup functionality:
NetBackup Administration Console | The NetBackup Administration Console in master server clusters requires the NetBackup authentication certificates for correct functionality. |
Targeted A.I.R. (Auto Image Replication) | Auto Image Replication in which a master server is in a cluster requires inter-node authentication among the hosts in that cluster. The NetBackup authentication certificates provide the means to establish the proper trust relationships. Provision the certificates on the cluster hosts before you add the trusted master server. This requirement applies regardless of whether the clustered mastered server is the source of the replication operation or the target. See About trusted master servers for Auto Image Replication. |
To enable clustered master server inter-node authentication
- NetBackup creates the certificates on every node in the master server cluster.
On the active node of the NetBackup master server cluster, run the following NetBackup command:
Windows: install_path\NetBackup\bin\admincmd\bpnbaz -setupat
UNIX: /usr/openv/netbackup/bin/admincmd/bpnbaz -setupat
The following is example output:
# bpnbaz -setupat You will have to restart NetBackup services on this machine after the command completes successfully. Do you want to continue(y/n)y Gathering configuration information. Please be patient as we wait for 10 sec for the security services to start their operation. Generating identity for host 'bit1.remote.example.com' Setting up security on target host: bit1.remote.example.com nbatd is successfully configured on NetBackup Master Server. Operation completed successfully.