Configuring FortKnox Google for NetBackup using the CLI
Use the following procedure to configure FortKnox Google for NetBackup using the CLI.
Table: Steps for configuring FortKnox Google with the CLI
Steps | Task | Instructions |
|---|---|---|
Step 1 | Retrieve credentials. | Retrieve FortKnox credentials from your Cohesity NetBackup account manager. |
Step 2 | Add credentials using the option. | Log into NetBackup web UI and perform the following:
|
Step 3 | Create an MSDP storage server. | |
Step 4 | Create a cloud instance alias. | Use the following examples depending on your environment:
The cloud alias name is <storage server>_<lsu name>, and is used to create a bucket. |
Step 6 | Create a configuration file, then run nbdevconfig command. | Configuration file content for adding a new cloud LSU (configuration setting and description):
Note: All encrypted LSUs in one storage server must use the same After you create the configuration file, run the nbdevconfig command: /usr/openv/netbackup/bin/admincmd/nbdevconfig -setconfig -storage_server <storage server> -stype PureDisk -configlist <configuration file path> Note: The parameter <storage server> must be the same as the parameter <storage server> in Step 4. |
Step 7 | Create disk pool. | Create disk pool by running the nbdevconfig command. The following are examples of using the nbdevconfig command: Example 1: /usr/openv/netbackup/bin/admincmd/nbdevconfig -previewdv -storage_servers <storage server name> -stype PureDisk | grep <LSU name> > /tmp/dvlist Example 2: /usr/openv/netbackup/bin/admincmd/nbdevconfig -createdp -dp <disk pool name> -stype PureDisk -dvlist /tmp/dvlist -storage_servers <storage server name> Note: You can also create the disk pool from the NetBackup web UI. |
Step 8 | Create storage unit. | Create storage unit by using bpstuadd command. The following are examples of using the bpstuadd command: /usr/openv/netbackup/bin/admincmd/bpstuadd -label <storage unit name> -odo 0 -dt 6 -dp <disk pool name> -nodevhost Note: You can also create the storage server from the NetBackup web UI. |
Note:
Use the web UI and update the refresh token within Credential management.
To use this utility, you must create a credential name using the NetBackup web UI and also create a cloud alias using the csconfig command similar to the following example:
/usr/openv/netbackup/bin/admincmd/csconfig cldinstance -as -in FortKnox-Google -sts <storage_server_name> -stype PureDisk -lsu_name test101 Successfully added storage server(s): <storage_server_name>_test101
Added the --enable_oauth option to use for FortKnox Google. Additionally, if the -enable_oauth option is used you must export the following environment variables:
MSDPC_MASTER_SERVER - This option is name of the NetBackup primary server.
Example output
export MSDPC_PROVIDER=vgoogle export MSDPC_REGION="US-EAST1" export MSDPC_ENDPOINT="storage.googleapis.com" export MSDPC_MASTER_SERVER=<primary server> export MSDPC_ALIAS=<storage_server_name>_test101 export MSDPC_CMS_CRED_NAME=<cms_cred_name> /usr/openv/pdde/pdcr/bin/msdpcldutil create -b rv-worm1 -v dv-worm --mode GOVERNANCE --min 1D --max 3D --live 2023-03-31 --enable_oauth
If a cred file is used for the msdpcldutil command, do not add any quotes to the values.