Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Web UI VMware Administrator's Guide
  3. Instant access
  4. Instant access Build Your Own (BYO)
  5. Prerequisites of Instant Access Build Your Own (BYO)
NetBackup™ Web UI VMware Administrator's Guide

Prerequisites of Instant Access Build Your Own (BYO)

Prerequisites (fresh install and upgrade):
  • The BYO storage server with Red Hat Enterprise Linux 7.6 and 7.7, same as the NetBackup Appliance operating system version.

  • The BYO storage server with docker installed.

    • The docker version must be same as the one in the corresponding official RHEL version release. You need to install it from the corresponding RHEL yum source (RHEL extra).

    • The docker application is included in the environment path.

  • The BYO storage server with NFS service installed.

  • The BYO storage server with NGINX version installed.

    • The NGINX version must be same as the one in the corresponding official RHEL version release. You need to install it from the corresponding RHEL yum source (epel).

    • Before you start the storage configuration, ensure that the new BYO nginx configuration entry: /etc/nginx/conf.d/byo.conf is included as part of the HTTP section of the original: /etc/nginx/nginx.conf file.

    • Ensure that the policycoreutils and policycoreutils-python packages are installed from the same RHEL yum source (RHEL server) and then run the following commands:

      • semanage port -a -t http_port_t -p tcp 10087

      • setsebool -P httpd_can_network_connect 1

    • Ensure that the /mnt folder on the storage server is not mounted by any mount points directly. Mount points should be mounted to its subfolders.

    • Enable the logrotate permission in selinux using the following command:

      semanage permissive -a logrotate_t

Feedback

Was this page helpful?
Previous

Instant access Build Your Own (BYO)

Next

Hardware configuration requirement of Instant Access Build Your Own (BYO)

Feedback

Was this page helpful?