CA configuration for Azure Stack
You can sign the Azure Stack workloads with a different ECA than NetBackup. You can also configure in NBCA mode. You can have the following configurations:
NetBackup, CloudPoint configured with ECA-1 and Azure Stack with either ECA-1 or ECA-2.
You need to configure the ECA_TRUST_STORE_PATH parameter in the
/cloudpoint/openv/netbackup/bp.conffile.The trust store file is available in
/cloudpoint/eca/trusted/cacerts.pem.The trust store file is in PEM format.The file contains both NetBackup and Azure Stack appliance public root certificates. Manually append the NetBackup root CA certificates as well as the Azure Stack appliance root public certificates in this file.
NBCA, CloudPoint CA (CPCA) and Azure Stack with ECA: Only the Azure stack appliance public root certificates need to be present in the: /cloudpoint/eca/trusted/cacerts.pem file.
NBUCA, CPCA with ECA backing up Azure Stack cloud.
Use the
/usr/openv/var/global/wmc/cloud/cacert.pemfile available under the data-mover container for peer and host validations.Configure ECA_TRUST_STORE_PATH the CloudPoint server. ECA_TRUST_STORE_PATH should point to a file that contain the NetBackup root CA certificates, so that the
vnetdis able to connect back to NetBackup servers.