Recovering the NetBackup catalog when NetBackup Access Control is configured

If you have configured NetBackup Access Control (NBAC), the online, hot catalog backup automatically backs up your authentication information and authorization configuration information.

Both the Operate and Configure permission sets are required on the catalog object to successfully back up and recover NBAC authentication and authorization data.

Separate recovery procedures exist based on operating system, as follows:

UNIX: Table: To recover the NetBackup catalog on UNIX when NetBackup Access Control is configured
Windows: Table: To recover the NetBackup catalog on Windows when NetBackup Access Control is configured

Table: To recover the NetBackup catalog on UNIX when NetBackup Access Control is configured

Step	Task	Procedure
Step 1	If recovering to a primary server on which NBAC is configured and operational, disable NBAC (that is, set it to PROHIBITED mode).	See the NetBackup Security and Encryption Guide: https://support.cohesity.com/s/article/article-100040135
Step 2	Recover the NetBackup catalog from the online catalog backup using the Catalog Recovery Wizard or the bprecover command.	See About recovering the entire NetBackup catalog.
Step 3	Configure NetBackup to use NBAC by setting it to AUTOMATIC or REQUIRED as per the security level desired.	See the NetBackup Security and Encryption Guide: https://support.cohesity.com/s/article/article-100040135
Step 4	Restart NetBackup.	/usr/openv/netbackup/bin/bp.kill_all /usr/openv/netbackup/bin/bp.start_all

Table: To recover the NetBackup catalog on Windows when NetBackup Access Control is configured

Step	Task	Procedure
Step 1	If recovering to a primary server on which NBAC is configured and operational, disable NBAC (that is, set it to PROHIBITED mode).	See the NetBackup Security and Encryption Guide: https://support.cohesity.com/s/article/article-100040135
Step 2	Stop the NetBackup services.	install_path\NetBackup\bin\bpdown.exe
Step 3	In Windows, change the startup type of the NetBackup Authentication Service and NetBackup Authorization Service to Disabled.	Instructions for configuring Microsoft Windows are beyond the scope of the NetBackup documentation. Refer to the appropriate Microsoft documentation.
Step 4	Start the NetBackup services.	install_path\NetBackup\bin\bpup.exe
Step 5	Recover the NetBackup catalog from the online catalog backup using the bprecover command. The NetBackup Authentication Service and NetBackup Authorization Service should be in the Disabled mode.	See About recovering the entire NetBackup catalog.
Step 6	In Windows, change the startup type of the NetBackup Authentication Service and NetBackup Authorization Service to Automatic.	Instructions for configuring Microsoft Windows are beyond the scope of the NetBackup documentation. Refer to the appropriate Microsoft documentation.
Step 7	Configure NetBackup to use NBAC.	The procedure depends on the environment, as follows: For a NetBackup primary server in a Windows Server Failover Clustering environment, run the following command on the NetBackup primary server on the active node: bpnbaz -setupmaster This command provisions the Windows registry on all nodes with the required entries for NBAC. For recovery to a new installation, run the following command on the NetBackup primary server: bpnbaz -setupmaster For recovery in an existing environment, set NBAC to AUTOMATIC or REQUIRED as per the security level desired. See the NetBackup Security and Encryption Guide: https://support.cohesity.com/s/article/article-100040135
Step 8	Restart NetBackup.	install_path\NetBackup\bin\bpdown.exe install_path\NetBackup\bin\bpup.exe

More Information

Options to recover the NetBackup catalog

Recovering the NetBackup catalog when NetBackup Access Control is configured

Feedback

Feedback