Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Cohesity Solution Guide for Sheltered Harbor
  3. Prerequisites to configure Sheltered Harbor solutions
  4. Prerequisites to configure NetBackup solution for Sheltered Harbor
  5. Configuration of Isolated Recovery Environment (IRE)
Cohesity Solution Guide for Sheltered Harbor

Configuration of Isolated Recovery Environment (IRE)

To configure the IRE for Sheltered Harbor solution, do the following:

To configuring IRE

  • On UNIX systems, the directory path to the following commands is /usr/openv/netbackup/bin/admincmd

  • On Windows systems, the directory path to following commands is install_path\NetBackup\bin\admincmd

  1. Set SLP lifecycle parameter SLP.ENABLE_IMPORT_CONFIRMATION = 1 in Production and IRE domain. Use the following command:

    # bpsetconfig 

    bpsetconfig> SLP.ENABLE_IMPORT_CONFIRMATION = 1

  2. Add IRE primary server as Trusted Master in production primary. Use the following command:

    # bpsetconfig 

    bpsetconfig> TRUSTED_MASTER = <IRE primary server name>

  3. Update remote primary server version of IRE primary in production domain. Use the following command:

    # nbemmcmd -updatehost -machinename <IRE primary server name> -machinetype remote_primary -netbackupversion <NetBackup version>

  4. Add production primary server as remote primary server in IRE domain. Use the following command:

    # nbemmcmd -addhost -machinename <Production primary server name> -machinetype remote_primary -netbackupversion <NetBackup version> -operatingsystem <OS name>

    • On UNIX systems, the directory path to the following commands is usr/openv/netbackup/bin/

    • On Windows systems, the directory path to the following commands is install_path\NetBackup\bin\

  5. Deploy HostID certificate for IRE primary server from Production Primary server. Use the following command:

    # nbcertcmd -getCACertificate -server <production primary server>

    # nbcertcmd -getCertificate -server <production primary server> -token <token>

    Note:

    If you are using ECA enroll certificate on IRE primary server then, run the following command.

    # nbcertcmd -enrollCertificate -server <production primary server>

Feedback

Was this page helpful?
Previous

Prerequisites to configure NetBackup solution for Sheltered Harbor

Next

Configuration of Flex

Feedback

Was this page helpful?