Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Cloud Administrator's Guide
  3. Configuring cloud storage in NetBackup
  4. About the NetBackup CloudStore Service Container
  5. NetBackup cloudstore.conf configuration file
NetBackup™ Cloud Administrator's Guide

NetBackup cloudstore.conf configuration file

Table: cloudstore.conf configuration file parameters and descriptions describes the cloudstore.conf configuration file parameters.

The cloudstore.conf file is available on the primary server and all the media servers that are installed on the platforms that NetBackup cloud supports.

Note:

Before you modify any of the parameters in the cloudstore.conf file, you must stop the nbcssc service (on media server versions 7.7.x to 8.1.2 only) and the nbwmc service (on primary server). Once you modify the parameters, restart these services for the changes to take effect.

The cloudstore.conf file resides in the following directories:

  • UNIX: /usr/openv/var/global/cloud

    On media server versions 7.7.x to 8.1.2, the path is:

    /usr/openv/netbackup/db/cloud

  • Windows: install_path\NetBackup\var\global\cloud

    On media server versions 7.7.x to 8.1.2, the path is:

    install_path\Veritas\NetBackup\db\cloud

Table: cloudstore.conf configuration file parameters and descriptions

Parameter

Description

CSSC_VERSION

It is not recommended to modify this value.

Specifies the version of cloudstore.conf file. The default value is 2.

CSSC_PLUGIN_PATH

It is not recommended to modify this value.

Specifies the path where NetBackup cloud storage plug-ins are installed. The default path is as follows:

On Windows: install_path\Veritas\NetBackup\bin\ost-plugins

On UNIX: /usr/openv/lib/ost-plugins

CSSC_PORT

This setting is applicable to media server versions 7.7.x to 8.1.2 only.

Specifies the port number for the CloudStore Service Container (nbcssc). Specify the value as 5637.

This port is used to provide back-level media server support for the older media servers that are configured for cloud storage. Ensure that the older media servers use this port. Communication with the primary server fails if the older media servers use a different port.

CSSC_LOG_DIR

Specifies the directory path where csconfig, nbcldutil, and cloud plug-ins generate log files.

The default path is as follows:

On Windows: install_path\Veritas\NetBackup\logs\nbcssc

On UNIX: /usr/openv/netbackup/logs/nbcssc

Note:

For media server versions 7.7.x to 8.1.2, the nbcssc service uses this path for log files.

CSSC_LOG_FILE

This setting is applicable only up to NetBackup release 8.1.2.

Specifies the file name that the nbcssc service uses to write its logs. The default value is empty, which means that the NetBackup logging mechanism determines the log file name.

CSCONFIG_LOG_FILE

Specifies the file name that the csconfig utility uses to write its logs. The default value is empty, which means that the NetBackup logging mechanism determines the log file name.

CSSC_IS_SECURE

Specifies if the nbcssc service runs in secure (value 64) or non-secure mode (value 0). The default value is 64.

CSSC_CIPHER_LIST

Specifies the cipher list that NetBackup uses for the following purposes:

  • The cloud primary host's cipher is used for communication with the cloud service provider.

  • The media server cipher is used for communicating with the cloud primary host's nbwmc service and with the cloud service provider.

It is recommended that you do not modify this value. Depending on the purpose for customizing the cipher list, you must modify the cipher list in the cloudstore.conf on the primary server and the media servers.

Note:

If the cipher list is invalid, the customized cipher list is replaced by the default cipher list.

The default value is AES:!aNULL:@STRENGTH.

CSSC_LOG_LEVEL

Specifies the log level for csconfig and nbcldutil CLI utility logging. Value 0 indicates that the logging is disabled and a non-zero value indicates that the logging is enabled.

The default value is 0.

CSSC_MASTER_PORT

This setting is applicable for media server versions 7.7.x to 8.1.2 only. It is not applicable for NetBackup primary and media server versions 8.2 and later.

This parameter value must be set to 5637.

This port is used to provide back-level support for the older media servers that are configured for cloud storage. Ensure that the older media servers use this port. Communication with the primary server fails if the older media servers use a different port.

CSSC_MASTER_NAME

Specifies the NetBackup primary server name. This entry indicates that the nbwmc service runs on this host. It processes all cloud provider-specific requests based on the CloudProvider.xml and CloudInstance.xml files.

CSSC_ALLOW_LEGACY_AUTH

Specifies if the primary server can communicate with the legacy media servers that are configured for cloud storage. Only media server versions 7.7.x to 8.1.2 are supported.

The value 1 (default value) indicates that the communication is enabled while the value 0 means that the communication is disabled.

Use this parameter with the Enable insecure communication with 8.0 and earlier hosts option available in the NetBackup web UI (Settings > Global security > Secure communication).

The GUI option lets you enable or disable primary server communication with all back-level legacy media servers. It works as an all or none kind of a setting and is not specific to cloud storage media servers. This parameter provides that additional level of control for the cloud. You can use this setting to enable or disable primary server communication with back-level cloud storage media servers explicitly.

For example, if the GUI option is enabled (default value) and this parameter value is set to 0, the NetBackup primary server continues to work with supported back-level media servers as other storage servers. However, any legacy cloud storage media servers that use the older method of communication using hard-coded credentials are blocked altogether, thus increasing the security of your NetBackup environment.

Note:

This parameter value has no effect if the GUI option is disabled. If you modify this parameter value, you must restart the NetBackup Web Management Console (nbwmc) service for the changes to take effect.

Feedback

Was this page helpful?
Previous

NetBackup CloudStore Service Container security modes

Next

Deploying host name-based certificates

Feedback

Was this page helpful?