Veritas NetBackup™

Plug-in for VMware vSphere

Web Client Guide

Release 8.1.1
Veritas NetBackup™ Plug-in for VMware vSphere
Web Client Guide
Last updated: 2018-02-16

Document version:NetBackup 8.1.1

Legal Notice
Copyright © 2018 Veritas Technologies LLC. All rights reserved.

Veritas, the Veritas Logo, and NetBackup are trademarks or registered trademarks of Veritas
Technologies LLC or its affiliates in the U.S. and other countries. Other names may be
trademarks of their respective owners.

This product may contain third-party software for which Veritas is required to provide attribution
to the third party (“Third-party Programs”). Some of the Third-party Programs are available
under open source or free software licenses. The License Agreement accompanying the
Software does not alter any rights or obligations you may have under those open source or
free software licenses. Refer to the Third-party Legal Notices document accompanying this
Veritas product or available at:

[Link]

The product described in this document is distributed under licenses restricting its use, copying,
distribution, and decompilation/reverse engineering. No part of this document may be
reproduced in any form by any means without prior written authorization of Veritas Technologies
LLC and its licensors, if any.

THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED

CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED
WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR
NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH
DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. VERITAS TECHNOLOGIES LLC
SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN
CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS
DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS
SUBJECT TO CHANGE WITHOUT NOTICE.

The Licensed Software and Documentation are deemed to be commercial computer software
as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19
"Commercial Computer Software - Restricted Rights" and DFARS 227.7202, et seq.
"Commercial Computer Software and Commercial Computer Software Documentation," as
applicable, and any successor regulations, whether delivered by Veritas as on premises or
hosted services. Any use, modification, reproduction release, performance, display or disclosure
of the Licensed Software and Documentation by the U.S. Government shall be solely in
accordance with the terms of this Agreement.

Veritas Technologies LLC

500 E Middlefield Road
Mountain View, CA 94043

[Link]

Technical Support
Technical Support maintains support centers globally. All support services will be delivered
in accordance with your support agreement and the then-current enterprise technical support
policies. For information about our support offerings and how to contact Technical Support,
visit our website:

[Link]

You can manage your Veritas account information at the following URL:

[Link]

If you have questions regarding an existing support agreement, please email the support
agreement administration team for your region as follows:

Worldwide (except Japan) CustomerCare@[Link]

Japan CustomerCare_Japan@[Link]

Documentation
Make sure that you have the current version of the documentation. Each document displays
the date of the last update on page 2. The latest documentation is available on the Veritas
website:

[Link]

Documentation feedback
Your feedback is important to us. Suggest improvements or report errors or omissions to the
documentation. Include the document title, document version, chapter title, and section title
of the text on which you are reporting. Send feedback to:

[Link]@[Link]

You can also see documentation information or ask a question on the Veritas community site:

[Link]

Veritas Services and Operations Readiness Tools (SORT)

Veritas Services and Operations Readiness Tools (SORT) is a website that provides information
and tools to automate and simplify certain time-consuming administrative tasks. Depending
on the product, SORT helps you prepare for installations and upgrades, identify risks in your
datacenters, and improve operational efficiency. To see what services and tools SORT provides
for your product, see the data sheet:

[Link]
 Contents

Chapter 1 Introduction and notes ....................................................... 7

About the NetBackup plug-in for VMware vSphere Web Client ................ 7
Notes on the NetBackup plug-in for vSphere Web Client ........................ 8
How to access the features of the NetBackup plug-in for vSphere Web
Client ..................................................................................... 9
Updates to this guide for NetBackup 8.1.1 ......................................... 10

Chapter 2 Installing the NetBackup plug-in for vSphere Web

Client ............................................................................... 11
Requirements for the NetBackup plug-in for vSphere Web Client ........... 12
Using consistent vCenter naming with the NetBackup plug-in for
vSphere Web Client ................................................................ 13
vCenter privileges for managing NetBackup plug-in installation .............. 14
Notes on using the plug-in in a VMware Platform Services Controller
(PSC) environment ................................................................. 15
Installing the NetBackup plug-in for vSphere Web Client ....................... 16
Upgrading the NetBackup plug-in for vSphere Web Client ..................... 23
Disabling the NetBackup plug-in for vSphere Web Client ...................... 24
Uninstalling the NetBackup plug-in for vSphere Web Client ................... 25
Configuration overview for the NetBackup Recovery and Instant
Recovery Wizards .................................................................. 26
Creating an authentication token for the NetBackup plug-in for
vSphere Web Client .......................................................... 27
Authorizing the NetBackup plug-in to restore virtual machines
..................................................................................... 29
Setting vCenter privileges for recovering virtual machines ............... 31
Adding or deleting an additional host name or IP address for an
authentication token .......................................................... 33
Revoking an authorization token ................................................ 37
Renewing an authorization token ............................................... 37
Listing all current authentication tokens ....................................... 38
Permissions on the NetBackup plug-in authentication token file
may need to be changed ................................................... 39
Port usage for the NetBackup vSphere Web Client Plug-in .............. 39
 Contents 5

Chapter 3 Excluding virtual disks from the backup ..................... 41

About excluding virtual disks from the backup .................................... 41

Setting the exclude disks Custom Attribute ........................................ 41

Chapter 4 Monitoring backup status ................................................ 46

vCenter privileges for backup monitoring ........................................... 46

Veritas NetBackup tab in vSphere Web Client .................................... 47
Summary display .......................................................................... 49
Virtual Machines display ................................................................ 51
Events display ............................................................................. 52
Using the Veritas NetBackup tab for backup reporting ......................... 54
How to respond to backup status ..................................................... 56

Chapter 5 Restoring virtual machines ............................................. 57

Configuring settings for the virtual machine recovery ........................... 57

Notes on the NetBackup recovery wizards ......................................... 59
How to access the NetBackup Recovery Wizards ............................... 60
NetBackup Recovery Wizard screens ............................................... 62
Virtual Machine Selection screen ............................................... 62
Image Selection screen ........................................................... 64
Destination Selection screen ..................................................... 67
Transport Selection screen ....................................................... 69
Disk Provision screen .............................................................. 70
Virtual Machine Options screen ................................................. 72
Network Selection screen ......................................................... 73
Pre-Recovery Check screen ..................................................... 74
NetBackup Instant Recovery Wizard screens ..................................... 76
Selecting virtual machines for instant recovery ............................. 76
Selecting backup images for instant recovery ............................... 78
Selecting the destination for instant recovery ................................ 81
Setting virtual machine options .................................................. 83
Reviewing recovery settings ..................................................... 84
Cleaning the recovery environment and releasing the NetBackup
resources ............................................................................. 86

Chapter 6 Troubleshooting ................................................................. 88

The message NoPermission appears during plug-in installation ............. 89

Reducing the load time for the NetBackup plug-in for vSphere Web
Client ................................................................................... 90
A NetBackup master server is not available in the master server list
when searching for VMs for instant recovery ................................ 90
 Contents 6

The NetBackup plug-in for vSphere Web Client does not find any
backup images in the listed events ............................................ 91
The NetBackup Recovery Wizard for vSphere Web Client does not
find a particular backup image ................................................... 91
Mismatch in vCenter server name (uppercase vs. lowercase letters)
causes the VMware connectivity test to fail .................................. 91
IR operation is not complete due to NFS mount limit exceed ................. 92
Instant recovery-ready backup images are not available for selection
........................................................................................... 92
The vCenter server and NetBackup master server names are not
available for search ................................................................. 93
Preferred IR-destination options are not saved ................................... 94
Virtual machine display name conflicts are not shown before the
pre-recovery check ................................................................. 94
Reasons for failure of pre-recovery checks ........................................ 94
Too much time taken to populate the list of NetBackup master servers
........................................................................................... 95
The NetBackup plug-in is not shown in the vSphere Web Client
interface even after registration ................................................. 95
Correct NetBackup master server does not show up for selection for
a given vCenter server on the IR wizard ..................................... 97
Error stack displayed in the NetBackup plug-in for vSphere Web Client
........................................................................................... 98
Troubleshooting master server communication failures in the plug-in's
Recovery Portal ..................................................................... 98

Appendix A Instant recovery operations .......................................... 101

Instant recovery events for non-available virtual machines .................. 101

Best practices for instant recovery operations ................................... 102

Appendix B Installing the vSphere Web Client plug-in from a

NetBackup media server and plug-in package
host ................................................................................ 103

Installing the plug-in from a NetBackup media server and plug-in

package host (web server) ...................................................... 103
 Chapter 1
Introduction and notes
This chapter includes the following topics:

■ About the NetBackup plug-in for VMware vSphere Web Client

■ Notes on the NetBackup plug-in for vSphere Web Client

■ How to access the features of the NetBackup plug-in for vSphere Web Client

■ Updates to this guide for NetBackup 8.1.1

About the NetBackup plug-in for VMware vSphere

Web Client
With the NetBackup plug-in, you can use vSphere Web Client to monitor the backups
of virtual machines that vCenter servers manage. You can also recover a virtual
machine from a backup.
You can use the plug-in to do the following:
■ View the backup status of virtual machines at various vSphere levels. For
example: Datacenter, resource pool, ESXi host.
■ View messages that are related to backups, such as snapshot deletion failure.
■ Sort and filter the backup information and export the information for analysis.
■ Recover virtual machines. (The recovery feature and the instant recovery feature
are optional and are not required for monitoring virtual machine backups.)
■ Instantly recover and power on a virtual machine.
■ Configure a custom attribute to exclude virtual disks from backups.
 Introduction and notes 8
Notes on the NetBackup plug-in for vSphere Web Client

Figure 1-1
NetBackup master server
and optional media
server
LAN / WAN

vCenter
server

NetBackup backup vCenter server with ESXi

host and optional servers
media server vSphere Web Client
and NetBackup plug-in

Virtual machines
VM VM VM

VM VM VM

Support for ESX and ESXi

NetBackup for VMware supports both ESX and ESXi servers. In this document,
any reference to ESXi also refers to ESX.
Note that VMware no longer supports ESX in the latest versions of vSphere.
For the VMware versions that the NetBackup plug-in supports, see the following
document:
Support for NetBackup in virtual environments

Notes on the NetBackup plug-in for vSphere Web

Client
Note the following about the NetBackup vSphere Web Client plug-in:
■ The best screen resolution for the plug-in is 1280 x 1024 or greater.
■ The plug-in does not support auto-refresh. To refresh the display, click the
vSphere Web Client refresh icon:

■ In vCenter, the default retention period for vCenter events is 180 days. This
value is the recommended setting.
 Introduction and notes 9
How to access the features of the NetBackup plug-in for vSphere Web Client

■ If an ESXi server is removed from vCenter and is later re-added, the events for
the VMs managed by that ESXi are lost. For VM status, the plug-in shows "No
Backup Information." The status changes as new backup events occur for each
VM.
■ See “Notes on the NetBackup recovery wizards” on page 59.
■ The NetBackup master server must be configured with backup policies of type
VMware, with the Post events to vCenter option set to All Events.
The plug-in monitors backups that a NetBackup VMware policy made. The
plug-in does not monitor backups from other policy types.
Note the following exceptions:
■ The plug-in does not monitor backups from a VMware policy that had Use
Replication Director enabled and Application Consistent Snapshot
disabled (under Options).
■ The plug-in does not monitor all the copies that a storage lifecycle policy
(SLP) makes; it monitors the first image only.

■ Search for virtual machines does not support non-ASCII characters. However,
the search results show the VM names that contain non-ASCII characters.
Therefore, you can search for ASCII characters only and still see the VMs that
contain non-ASCII characters in their names.

How to access the features of the NetBackup

plug-in for vSphere Web Client
Table 1-1 describes the location of the NetBackup plug-in features in vSphere Web
Client.

Table 1-1 Accessing basic functions of the NetBackup plug-in for vSphere
Web Client

Feature How to access the NetBackup plug-in

Monitor the status In the vSphere Web Client object navigator, click the Home > Hosts
of virtual machine and Clusters > Monitor > Veritas NetBackup tab.
backups
In the object navigator, select the vSphere object to monitor, such as
vCenter, ESXi server, VM, or other object.

See “Veritas NetBackup tab in vSphere Web Client” on page 47.

 Introduction and notes 10
Updates to this guide for NetBackup 8.1.1

Table 1-1 Accessing basic functions of the NetBackup plug-in for vSphere
Web Client (continued)

Feature How to access the NetBackup plug-in

Configure a In the vSphere Web Client object navigator, click Veritas NetBackup,
Custom Attribute to then click Virtual Disk Exclusion Wizard.
exclude disks from
Note: The disk exclusion wizard is optional. It is not required for
backups
monitoring virtual machine backups.

Restore a virtual In the vSphere Web Client object navigator, click Veritas NetBackup,
machine then click Recovery Wizard.

You can access the Recovery Wizard in several other ways:

See “How to access the NetBackup Recovery Wizards” on page 60.

Note: The recovery wizards are optional. They are not required for
monitoring virtual machine backups.

Restore a virtual In the vSphere Web Client object navigator, click Veritas NetBackup,
machine instantly then click Instant Recovery Wizard.
Note: With this wizard, you can instantly recover the virtual machines
and power them on.

Updates to this guide for NetBackup 8.1.1

This revision contains the following changes:
■ Additional details have been added to the procedures for plug-in installation,
upgrade, and uninstallation.
See “Installing the NetBackup plug-in for vSphere Web Client” on page 16.
See “Upgrading the NetBackup plug-in for vSphere Web Client” on page 23.
See “Uninstalling the NetBackup plug-in for vSphere Web Client” on page 25.
See “The NetBackup plug-in is not shown in the vSphere Web Client interface
even after registration” on page 95.
■ When authorizing the plug-in to restore virtual machines, NetBackup does not
support adding the NetBackup master server by its IP address.
See “ Authorizing the NetBackup plug-in to restore virtual machines” on page 29.
 Chapter 2
Installing the NetBackup
plug-in for vSphere Web
Client
This chapter includes the following topics:

■ Requirements for the NetBackup plug-in for vSphere Web Client

■ Using consistent vCenter naming with the NetBackup plug-in for vSphere Web
Client

■ vCenter privileges for managing NetBackup plug-in installation

■ Notes on using the plug-in in a VMware Platform Services Controller (PSC)

environment

■ Installing the NetBackup plug-in for vSphere Web Client

■ Upgrading the NetBackup plug-in for vSphere Web Client

■ Disabling the NetBackup plug-in for vSphere Web Client

■ Uninstalling the NetBackup plug-in for vSphere Web Client

■ Configuration overview for the NetBackup Recovery and Instant Recovery

Wizards
 Installing the NetBackup plug-in for vSphere Web Client 12
Requirements for the NetBackup plug-in for vSphere Web Client

Requirements for the NetBackup plug-in for

vSphere Web Client
This topic describes the overall requirements for installing and using the plug-in for
vSphere Web Client.

Table 2-1 NetBackup plug-in installation requirements

Requirement Notes

NetBackup master The NetBackup master server must be installed before you can install the plug-in. By default,
server the master server operates as the plug-in package host web server. During plug-in installation,
the vCenter downloads the plug-in installation file from the master server.
Note: Before using the plug-in, make sure NetBackup is configured to back up the virtual
machines. The following for example are required:

■ The VMware backup host (proxy, or access host).

■ The NetBackup credentials for the vCenter server.
Note: Enter the vCenter server name in the same format in which it is registered in DNS
and in the vCenter server (whether short or fully-qualified).

Note: Veritas recommends the use of fully qualified names. The entire name must be
properly formed without empty or null elements. For example, a fully-qualified name must
include the domain name and not end in a period (.).
■ A VMware policy to back up the VMs.
■ In the policy's Advanced Attributes, the Post vCenter events option must be set to All
Events.

See “Installing the NetBackup plug-in for vSphere Web Client” on page 16.

The NetBackup for VMware Administrator's Guide explains how to configure NetBackup for
VMware:

[Link]

vCenter server NetBackup must have credentials for the vCenter server(s) where virtual machines are to be
credentials (user name restored.
and password)
For information on VMware Platform Services Controller (PSC) environments:

See “Notes on using the plug-in in a VMware Platform Services Controller (PSC) environment”
on page 15.
Note: To install the plug-in, the Extension privileges are required on the vCenter.
See “vCenter privileges for managing NetBackup plug-in installation” on page 14.

Consistent vCenter See “Using consistent vCenter naming with the NetBackup plug-in for vSphere Web Client”
naming on page 13.
 Installing the NetBackup plug-in for vSphere Web Client 13
Using consistent vCenter naming with the NetBackup plug-in for vSphere Web Client

Table 2-1 NetBackup plug-in installation requirements (continued)

Requirement Notes

vCenter privileges for To use the plug-in to monitor virtual machine backups, the vCenter Global credentials Manage
backup monitoring custom attributes and Set custom attribute are required.

See “vCenter privileges for backup monitoring” on page 46.

vCenter privileges for To use the plug-in to configure a Custom Attribute to exclude disks from backups, the vCenter
configuring a Custom Global credentials Manage custom attributes and Set custom attribute are required.
Attribute to exclude
See “About excluding virtual disks from the backup” on page 41.
disks from backups

NetBackup Recovery See “Configuration overview for the NetBackup Recovery and Instant Recovery Wizards”
Wizards on page 26.

For a list of NetBackup versions and VMware versions that are supported for the
plug-in, see the following document:
■ Support for NetBackup 7.x and 8.x in virtual environments:
[Link]

Using consistent vCenter naming with the

NetBackup plug-in for vSphere Web Client
The name of the vCenter server must be identical in the following locations:
■ In the vCenter server installation.
■ In the NetBackup credentials.
■ In the NetBackup plug-in installation.
■ In the VimApiUrl name.
See To set the VimApiUrl name
■ In the Runtime name.
See To set the Runtime name

Note: If the vCenter server name is not entered correctly, the plug-in may not be
able to access one or more of the virtual machine images. Renaming the vCenter
server is currently not supported for vCenter version 6.0 or 6.5.
 Installing the NetBackup plug-in for vSphere Web Client 14
vCenter privileges for managing NetBackup plug-in installation

To set the VimApiUrl name

1 In vSphere Web Client, click vCenter Inventory Lists > Resources > vCenter
Servers and select the vCenter server that you want to update.
2 Click Manage > Settings > Advanced Settings.
3 Set the [Link] key to the following:
[Link] hostname of the vCenter machine/sdk

Where hostname is the current host name of the vCenter.

For example: [Link]
To set the Runtime name
◆ Use the following procedure in the VMware vSphere 6.5 documentation:
Configure Runtime Settings for vCenter Server

Note: For vSphere 6.0, the step “Select the Configure tab” should read “Select
the Manage tab.”

vCenter privileges for managing NetBackup

plug-in installation
To install the NetBackup vSphere Web Client plug-in, use the vSphere Web Client
to make sure that the Extension privileges are set in vCenter. The Extension
privileges must be set on each vCenter where the plug-in is to be installed.

Note: The Extension privileges are also required for updating or uninstalling the
plug-in.

For assistance setting privileges, refer to the appropriate VMware vSphere

Documentation Center.
In the vSphere Web Client interface, the Extension privileges may look similar to
the following:
 Installing the NetBackup plug-in for vSphere Web Client 15
Notes on using the plug-in in a VMware Platform Services Controller (PSC) environment

See “The message NoPermission appears during plug-in installation” on page 89.

Notes on using the plug-in in a VMware Platform

Services Controller (PSC) environment
For the vCenter servers that a VMware Platform Services Controller (PSC) manages,
note the following about the NetBackup vSphere Web Client plug-in:
■ The plug-in only needs to be installed on one of the vCenter servers. The installed
plug-in is accessible to all the vCenter servers under the PSC.
■ You must register the NetBackup master server on each vCenter server where
virtual machines are to be restored.
See “ Authorizing the NetBackup plug-in to restore virtual machines” on page 29.
■ Backups of the virtual machines that reside on vCenter servers under the PSC
can be restored to any vCenter under the PSC. Backups of the virtual machines
that reside on vCenter servers outside of the PSC cannot be restored to vCenter
servers under the PSC.
For example: A VM was backed up on vCenter 1. To restore that VM to vCenter
2, both vCenters need to be under the same PSC. In this case, the NetBackup
master server needs credentials at least for vCenter 2.
 Installing the NetBackup plug-in for vSphere Web Client 16
Installing the NetBackup plug-in for vSphere Web Client

Installing the NetBackup plug-in for vSphere Web

Client
This topic describes how to install the NetBackup plug-in for vSphere Web Client
from either of the following:
■ The NetBackup master server
See “To install the NetBackup plug-in for vSphere Web Client from the NetBackup
master server” on page 16.
■ The NetBackup appliance as master server
See “To install the NetBackup plug-in for vSphere Web Client from the NetBackup
appliance as master server” on page 22.
Note: To use a custom web server instead of the NetBackup master server:
See “Installing the plug-in from a NetBackup media server and plug-in package
host (web server)” on page 103.
To install the NetBackup plug-in for vSphere Web Client from the NetBackup
master server
1 On the NetBackup 8.1.1 master server, locate the following command:
Windows: install_path\NetBackup\bin\goodies\vwcp_manage.exe
UNIX, Linux: /usr/openv/netbackup/bin/goodies/vwcp_manage
2 On the master server, start vwcp_manage to begin plug-in installation.
Note the following:
■ vwcp_manage is a Java GUI application. Make sure that your UNIX or Linux
environment supports Java GUI applications.
■ If you run the command with administrator or root privileges, the command
discovers the available vCenters and presents them in a list. Otherwise,
you must provide the vCenter names.
■ The vwcp_manage command detects any existing version of the vSphere
Web Client plug-in and lets you either upgrade it or uninstall it.
See “Uninstalling the NetBackup plug-in for vSphere Web Client”
on page 25.
■ The vwcp_manage command does not uninstall the older NetBackup plug-in
for vCenter (C# plug-in). The older plug-in continues to exist separately
from the new one. You can uninstall the older plug-in as explained in the
NetBackup Plug-in for VMware vCenter Guide for NetBackup 8.0:
[Link]
 Installing the NetBackup plug-in for vSphere Web Client 17
Installing the NetBackup plug-in for vSphere Web Client

Note: Support for the older NetBackup plug-in for vCenter has been
discontinued.

3 Registration begins with the End User License Agreement (click Accept):
 Installing the NetBackup plug-in for vSphere Web Client 18
Installing the NetBackup plug-in for vSphere Web Client

4 On the following dialog, select the vCenter server from the Hostname or IP
Address pull-down list, enter its credentials, then click Validate.

Note: The vCenter credentials require the Extension privileges.

See “vCenter privileges for managing NetBackup plug-in installation”
on page 14.

If the vwcp_manage command was not run with administrator or root privileges,
you must enter the vCenter name (or IP address) manually.

The registration utility determines whether the plug-in is registered on the

vCenter. If the plug-in is not registered, the following dialog appears and shows
the plug-in URL.
 Installing the NetBackup plug-in for vSphere Web Client 19
Installing the NetBackup plug-in for vSphere Web Client

The URL field is pre-populated with the plug-in package URL as hosted on the
master server.
To use a custom web server instead of the master server, select Use alternate
plug-in package location and enter the full URL for the plug-in package.
See “Installing the plug-in from a NetBackup media server and plug-in package
host (web server)” on page 103.
 Installing the NetBackup plug-in for vSphere Web Client 20
Installing the NetBackup plug-in for vSphere Web Client

5 Click Register. A security alert appears:

This security alert shows the identity of the web server that hosts the plug-in
package. By default this web server is the NetBackup master server. The
vCenter later downloads the plug-in from this server (the plug-in package host).
Use this dialog to verify the identity of that server.
 Installing the NetBackup plug-in for vSphere Web Client 21
Installing the NetBackup plug-in for vSphere Web Client

6 To allow the installation to proceed, click Continue.

The following appears:

7 Click Close.
8 Log on to the vSphere Web Client. If you are currently logged on, log out first.
9 To verify that the plug-in installed correctly, go to the vSphere Web Client object
navigator.
For example, under Home > Hosts and Clusters > Monitor, look for the
Veritas NetBackup tab.
See “How to access the features of the NetBackup plug-in for vSphere Web
Client” on page 9.
If the Veritas NetBackup tab does not appear:
See “The NetBackup plug-in is not shown in the vSphere Web Client interface
even after registration” on page 95.
10 To register the plug-in with another vCenter server, repeat this procedure
starting at step 2.

Note: For the vCenter servers that a VMware Platform Services Controller
(PSC) manages, you only need to install the plug-in on one of the vCenter
servers. The plug-in is then accessible to all the vCenters under the PSC.
 Installing the NetBackup plug-in for vSphere Web Client 22
Installing the NetBackup plug-in for vSphere Web Client

To install the NetBackup plug-in for vSphere Web Client from the NetBackup
appliance as master server
1 Log on to the appliance as a NetBackupCLI user and run the vwcp_manage
command to install the plug-in.
The vwcp_manage command is located here:
/usr/openv/netbackup/bin/goodies/vwcp_manage

For example:
vwcp_manage --register –v [Link] –u vCenter_username
–p password

vwcp_manage --register –v [Link] –u vCenter_username

–p password_file

Where password_file is the path to a text file that contains only the password.

Note: As a NetBackupCLI user, you can create text files in your home directory
only: /home/nbusers

For more information on the vwcp_manage command, see the NetBackup

Commands Reference Guide:
[Link]
2 Log on to the vSphere Web Client. If you are currently logged on, log out first.
3 To verify that the plug-in installed correctly, go to the vSphere Web Client object
navigator.
For example, under Home > Hosts and Clusters > Monitor, look for the
Veritas NetBackup tab.
See “How to access the features of the NetBackup plug-in for vSphere Web
Client” on page 9.
If the Veritas NetBackup tab does not appear:
See “The NetBackup plug-in is not shown in the vSphere Web Client interface
even after registration” on page 95.
4 To register the plug-in with another vCenter server, repeat this procedure.
 Installing the NetBackup plug-in for vSphere Web Client 23
Upgrading the NetBackup plug-in for vSphere Web Client

Upgrading the NetBackup plug-in for vSphere

Web Client
You can upgrade the NetBackup vSphere Web Client plug-in from an earlier version.

Note: To upgrade the plug-in, the vCenter credentials require the Extension
privileges.
See “vCenter privileges for managing NetBackup plug-in installation” on page 14.

To upgrade the NetBackup plug-in from an earlier version

1 On the master server, run the vwcp_manage command:
Windows: install_path\NetBackup\bin\goodies\vwcp_manage.exe
UNIX, Linux: /usr/openv/netbackup/bin/goodies/vwcp_manage
The vwcp_manage command detects any existing version of the vSphere Web
Client plug-in.
2 On the End User License Agreement dialog, click Accept.
3 On the VMware vCenter Server Details dialog, select the vCenter from the
pull-down list and enter the vCenter credentials. Click Validate.
On the Plug-in package location dialog:
The URL field is pre-populated with the plug-in package URL as hosted on the
master server.
To use a custom web server instead of the master server, select Use alternate
plug-in package location and enter the full URL for the plug-in package.
See “Installing the plug-in from a NetBackup media server and plug-in package
host (web server)” on page 103.
4 On the Unregister or Upgrade dialog, click Upgrade and confirm it.
5 On the Finish dialog, click Close.
 Installing the NetBackup plug-in for vSphere Web Client 24
Disabling the NetBackup plug-in for vSphere Web Client

6 Log on to the vSphere Web Client. If you are currently logged on, log out first.
7 To verify that the plug-in upgraded correctly, go to the vSphere Web Client
object navigator.
For example, under Home > Hosts and Clusters > Monitor, look for the
Veritas NetBackup tab.
If the Veritas NetBackup tab does not appear:
See “The NetBackup plug-in is not shown in the vSphere Web Client interface
even after registration” on page 95.

Disabling the NetBackup plug-in for vSphere Web

Client
You can disable the NetBackup plug-in without uninstalling it.
To disable the NetBackup plug-in for vSphere Web Client
1 Log on to the vSphere Web Client console with the Single Sign On administrator
user name.
The default user name is [Link]\administrator.
For the password, contact the vSphere administrator.
2 Click Administration and then click Solutions > Client Plug-Ins.
The installed plug-ins appear as shown in the following image.

3 Right-click on the NetBackup plug-in and disable it.

 Installing the NetBackup plug-in for vSphere Web Client 25
Uninstalling the NetBackup plug-in for vSphere Web Client

Uninstalling the NetBackup plug-in for vSphere

Web Client
You can unregister and uninstall the NetBackup vSphere Web Client plug-in.

Note: To unregister and uninstall the plug-in, the vCenter credentials require the
Extension privileges.
See “vCenter privileges for managing NetBackup plug-in installation” on page 14.

To unregister and uninstall the NetBackup plug-in by means of the NetBackup

master server
1 On the NetBackup master server, run the vwcp_manage command:
Windows: install_path\NetBackup\bin\goodies\vwcp_manage.exe
UNIX, Linux: /usr/openv/netbackup/bin/goodies/vwcp_manage
2 On the End User License Agreement screen, click Accept.
3 On the VMware vCenter Server Details dialog, select the vCenter from the
pull-down list and enter the vCenter credentials. Click Validate.
4 On the Unregister dialog, click Unregister and confirm it.
5 On the Finish dialog, click Close.
6 Log on to the vSphere Web Client. If you are currently logged on, log out first.
 Installing the NetBackup plug-in for vSphere Web Client 26
Configuration overview for the NetBackup Recovery and Instant Recovery Wizards

To unregister and uninstall the NetBackup plug-in for vSphere Web Client by
means of the NetBackup appliance as master server
1 Log on to the appliance as a NetBackupCLI user and run the vwcp_manage
command to uninstall the plug-in.
The vwcp_manage command is located here:
/usr/openv/netbackup/bin/goodies/vwcp_manage

For example:
vwcp_manage --unregister –v [Link] –u
vCenter_username –p password

vwcp_manage --unregister –v [Link] –u

vCenter_username –p password_file

Where password_file is the path to a text file that contains only the password.

Note: As a NetBackupCLI user, you can create text files in your home directory
only: /home/nbusers

For more information on the vwcp_manage command, see the NetBackup

Commands Reference Guide:
[Link] m/docs/000003214
2 Log on to the vSphere Web Client. If you are currently logged on, log out first.

Configuration overview for the NetBackup

Recovery and Instant Recovery Wizards
Note: The NetBackup Recovery and Instant Recovery Wizards are optional features
of the NetBackup plug-in for vSphere Web Client. The wizards provide a means of
recovering virtual machines. They are not required for monitoring virtual machine
backups.

To use the NetBackup Recovery and Instant Recovery Wizards to restore virtual
machines, configure the following:
 Installing the NetBackup plug-in for vSphere Web Client 27
Configuration overview for the NetBackup Recovery and Instant Recovery Wizards

Table 2-2 Configuring the NetBackup Recovery Wizard

Step Description Reference topic

1 Create an authentication See “Creating an authentication token for the

token file.* NetBackup plug-in for vSphere Web Client”
on page 27.

2 Authorize the plug-in to See “ Authorizing the NetBackup plug-in to restore

restore virtual machines. virtual machines” on page 29.

3 Set the required vCenter See “Setting vCenter privileges for recovering virtual
privileges. machines” on page 31.

*For certain networks, it may be necessary to associate an authentication token

with more than one host name or IP address.
See “Adding or deleting an additional host name or IP address for an authentication
token” on page 33.

Creating an authentication token for the NetBackup plug-in for

vSphere Web Client
To allow the plug-in to restore VMs, you must generate an authentication token on
the NetBackup master server (or on the NetBackup appliance as master server).
When an authentication token is created on a master server and deployed on the
vCenter with the plug-in, it allows that vCenter to restore any VMware backup from
that master server.
 Installing the NetBackup plug-in for vSphere Web Client 28
Configuration overview for the NetBackup Recovery and Instant Recovery Wizards

To create an authentication token on the NetBackup master server

1 Enter the following on the master server:
Windows
install_path\NetBackup\wmc\bin\install\[Link]
-create clientName

UNIX, Linux
/usr/openv/wmc/bin/install/manageClientCerts -create clientName

Where clientName is the DNS name of the vCenter where the plug-in is
installed.
The manageClientCerts command returns the location of a compressed file
that contains the authentication token.
Additional information is available on manageClientCerts:
See “Adding or deleting an additional host name or IP address for an
authentication token” on page 33.
2 Provide the compressed file to the vCenter administrator.

Caution: Be sure to share or send the compressed file in a secure manner.

With the master server token, the plug-in can be authorized to restore virtual
machines.
See “ Authorizing the NetBackup plug-in to restore virtual machines”
on page 29.
See “Troubleshooting master server communication failures in the plug-in's
Recovery Portal” on page 98.
 Installing the NetBackup plug-in for vSphere Web Client 29
Configuration overview for the NetBackup Recovery and Instant Recovery Wizards

To create an authentication token (certificate) on the NetBackup appliance

as master server
1 To generate the token, see the "Manage > Certificates" topic in the NetBackup
Appliance Administrator's Guide, available from this location:
[Link]
See “Adding or deleting an additional host name or IP address for an
authentication token” on page 33.
2 Provide the compressed token file to the vCenter administrator.

Caution: Be sure to share or send the compressed file in a secure manner.

With the master server token, the plug-in can be authorized to restore virtual
machines.
See “ Authorizing the NetBackup plug-in to restore virtual machines”
on page 29.
See “Troubleshooting master server communication failures in the plug-in's
Recovery Portal” on page 98.

Authorizing the NetBackup plug-in to restore virtual machines

The NetBackup master server initiates and controls the backup of virtual machines.
To use the plug-in to restore virtual machines, you must obtain an authentication
token from the NetBackup administrator. You can then authorize the plug-in to
restore the virtual machines that were backed up by that master server.
To authorize the plug-in to restore virtual machines
1 Ask the NetBackup administrator to provide an authentication token file.
See “Creating an authentication token for the NetBackup plug-in for vSphere
Web Client” on page 27.
2 Copy the authentication token file to the computer or laptop where the vSphere
Web Client is launched.
Make a note of the location.
3 In the top level of the vSphere Web Client object navigator, click Veritas
NetBackup.
 Installing the NetBackup plug-in for vSphere Web Client 30
Configuration overview for the NetBackup Recovery and Instant Recovery Wizards

4 Click Register Master Servers.

5 Enter the following to specify a NetBackup master server and its authentication
token.
 Installing the NetBackup plug-in for vSphere Web Client 31
Configuration overview for the NetBackup Recovery and Instant Recovery Wizards

Add NetBackup ■ NetBackup Master Server

Master Server Enter the fully qualified domain name of the master server.
Note: NetBackup does not support adding the server by its
IP address.
■ Port for NetBackup Web Services
If the NetBackup administrator has not changed the port, accept
the default (8443). Otherwise, ask the administrator for the
correct port number.
■ Upload Authentication Token
Click Browse to select the authentication token file that the
NetBackup administrator provided.
Click Add Server. The server is added to the list of master
servers that the plug-in can communicate with.

6 Add other master servers and their authentication tokens as needed.

7 To be able to restore to an alternate vCenter server, log on to that vCenter
server and register the master server.
See “Notes on using the plug-in in a VMware Platform Services Controller
(PSC) environment” on page 15.
8 You can also remove a master server from the list of servers, or validate the
connection from the plug-in to a master server.

Validate/Remove After the master server is added to the list, you can validate the
NetBackup connection. Type or select the master server and click Validate.
Master Server
Click Remove to remove the server from the list. The plug-in is
no longer able to monitor or restore the backups that the master
server performed.

Setting vCenter privileges for recovering virtual machines

Use the following procedure to set the user privileges in vCenter for the NetBackup
Recovery Wizard. Set the privileges on each vCenter where virtual machines may
need to be restored.
If the user account to access the plug-in cannot be assigned administrator privileges,
you must set the following permissions at the vCenter level.
To set vCenter privileges for recovering virtual machines
1 In vSphere Web Client, click Home > Roles.
2 Under Roles, click Administrator.
 Installing the NetBackup plug-in for vSphere Web Client 32
Configuration overview for the NetBackup Recovery and Instant Recovery Wizards

3 Click Privileges.
4 Drill into Global and make sure Log Event is selected.
 Installing the NetBackup plug-in for vSphere Web Client 33
Configuration overview for the NetBackup Recovery and Instant Recovery Wizards

5 Drill into NetBackup Recovery and make sure the following are selected:
Add or Remove NetBackup Servers
Virtual Machine Recovery

6 Set the privileges on each vCenter where virtual machines may need to be
restored.

Caution: The NetBackup Virtual Machine Recovery privilege grants global recovery
authorization. It allows users with that role to recover any virtual machine that resides
on that vCenter. Use caution when granting this privilege to users.

Adding or deleting an additional host name or IP address for an

authentication token
The manageClientCerts command generates an authentication token for a specific
vCenter. The token gives the vCenter access to the NetBackup master server where
the token was generated. The token works if the vCenter's host name or DNS name
is identical to the name that was entered on the manageClientCerts command.
For some environments, it may be necessary to allow the token to work with
additional host names or IP addresses. An example is a multi-homed vCenter on
multiple networks. Another example is a vCenter that uses Network Address
Translation (NAT). In these cases, the request for access to the NetBackup master
 Installing the NetBackup plug-in for vSphere Web Client 34
Configuration overview for the NetBackup Recovery and Instant Recovery Wizards

may come from a host name or IP address that was not specified when the token
was generated.
To allow access to NetBackup from such environments, you can use the
manageClientCerts command to do the following:

■ Add another host name (or IP address) of the vCenter server for the existing
token. The added host name or IP address is referred to as an alias. You can
add multiple aliases for a token.
IPv4 and IPv6 addresses are supported.
■ Delete a host name or IP address from a token.
■ Allow the token to be used on any vCenter server.
■ List existing aliases for a token.
The manageClientCerts command is in the following location:
Windows
install_path\NetBackup\wmc\bin\install\[Link]

UNIX, Linux
/usr/openv/wmc/bin/install/manageClientCerts

Table 2-3 Add a host name or IP address for an existing authentication

token

Task Enter the following on the NetBackup master server:

Add a host manageClientCerts -addAlias host_name_used_to_generate_token -HOST

name additional_host_name_for_token

Where host_name_used_to_generate_token is the host name that was specified when the token
was generated, and additional_host_name_for_token is the additional host name of the vCenter
server.

For example:

manageClientCerts -addAlias vCenter1 -HOST [Link]

Command output:

Successful -addAlias, for client: vCenter1, type: HOST,

alias: [Link]

In this example, the added host name is [Link].

Note: You can add multiple host names for a token. Add one host name for each instance of
manageClientCerts.
 Installing the NetBackup plug-in for vSphere Web Client 35
Configuration overview for the NetBackup Recovery and Instant Recovery Wizards

Table 2-3 Add a host name or IP address for an existing authentication

token (continued)

Task Enter the following on the NetBackup master server:

Add an IP manageClientCerts -addAlias host_name_used_to_generate_token -IP

address or IP_address_for_token | IP_address_with_netmask_for_token
range of IP
Where host_name_used_to_generate_token is the host name that was specified when the token
addresses
was generated. The IP address to add can be a single address (IP_address_for_token) or a range
of addresses (IP_address_with_netmask_for_token).

For example:

To add a single IP address:

manageClientCerts -addAlias vCenter1 -IP [Link]

To add a range of IP addresses using a netmask:

manageClientCerts -addAlias vCenter1 -IP [Link]/29

In this example, [Link]/29 allows 6 hosts with IP addresses from [Link] to [Link]
to use the same token.
Note: For a range of IP addresses, manageClientCerts supports IP net masking, sometimes
called Classless Inter-Domain Routing notation (CIDR).

Note: You can add multiple IP addresses for a token. If not adding a range of addresses, add one
IP address for each instance of manageClientCerts.

Note: IPv4 and IPv6 addresses are supported.

Allow the manageClientCerts -addAlias host_name_used_to_generate_token -ANY

token to
Where host_name_used_to_generate_token is the host name that was specified when the token
operate with
was generated. -ANY allows any host or any IP address to communicate with the NetBackup server
any host
by means of this token.

Caution: Use the -ANY option with care. Allowing any host to use the token may introduce a security
risk.

Table 2-4 Remove a host name or IP address from an existing

authentication token

Task Enter the following on the NetBackup master server:

Delete a host manageClientCerts -deleteAlias host_name_used_to_generate_token -HOST

name host_name_to_delete

Where host_name_used_to_generate_token is the host name that was specified when the token
was generated, and host_name_to_delete is the name to be removed.
 Installing the NetBackup plug-in for vSphere Web Client 36
Configuration overview for the NetBackup Recovery and Instant Recovery Wizards

Table 2-4 Remove a host name or IP address from an existing

authentication token (continued)

Task Enter the following on the NetBackup master server:

Delete an IP manageClientCerts -deleteAlias host_name_used_to_generate_token -IP

address IP_address_to_delete

Where host_name_used_to_generate_token is the host name that was specified when the token
was generated, and IP_address_to_delete is the IP address to be removed.

Delete the manageClientCerts -deleteAlias host_name_used_to_generate_token -ANY

-ANY option
Where host_name_used_to_generate_token is the host name that was specified when the token
was generated. The -ANY option is removed from the token. If particular aliases (host names or IP
addresses) had been added for the token, those aliases remain in force.

Table 2-5 List the host names or IP addresses (aliases) that have been
defined for a token

Task Enter the following on the NetBackup master server:

List host manageClientCerts -listAliases host_name_used_to_generate_token

names or IP
Where host_name_used_to_generate_token is the host name that was specified when the token
addresses
was generated.
(aliases)
For example:

manageClientCerts -listAliases vCenter1

Command output:

Aliases for vCenter1:

HOST = [Link]

In this example, the alias is [Link]. If the token was set with the -ANY option (to
accept connections from any host or any IP address), the -listAliases output is the following:

Aliases for vCenter1:

HOST = *

Further assistance is available:

See “Troubleshooting master server communication failures in the plug-in's Recovery
Portal” on page 98.
 Installing the NetBackup plug-in for vSphere Web Client 37
Configuration overview for the NetBackup Recovery and Instant Recovery Wizards

Revoking an authorization token

You can revoke an authentication token on a master server to prevent the plug-in
from performing restores from that master server.
To revoke the authentication token
◆ Enter the following on the master server:
Windows
install_path\NetBackup\wmc\bin\install\[Link]
-delete clientName

UNIX, Linux
/usr/openv/wmc/bin/install/manageClientCerts -delete clientName

Where clientName is the DNS name of the vCenter in which the plug-in is
installed.
The -delete option removes the authentication token and its compressed file
from the master server. The plug-in is no longer authorized to restore virtual
machines from the backups that this master server made.

Renewing an authorization token

You can renew an authentication token that has expired, as follows.

Note: Authentication tokens expire after one year.

 Installing the NetBackup plug-in for vSphere Web Client 38
Configuration overview for the NetBackup Recovery and Instant Recovery Wizards

To renew an authentication token

1 Enter the following on the master server:
Windows
install_path\NetBackup\wmc\bin\install\[Link]
-renew clientName

UNIX, Linux
/usr/openv/wmc/bin/install/manageClientCerts -renew clientName

Where clientName is the DNS name of the vCenter where the plug-in is
installed.
The -renew option deletes the token and creates a new one. Any aliases that
existed for the token are retained.
See “Listing all current authentication tokens” on page 38.
See “Adding or deleting an additional host name or IP address for an
authentication token” on page 33.
2 Use the plug-in's Register Master Servers option to re-register the master
server using the renewed authentication token.
See “ Authorizing the NetBackup plug-in to restore virtual machines”
on page 29.

Listing all current authentication tokens

You can list all the current authentication tokens that were generated on the current
master server.
To list all current authentication tokens
◆ Enter the following on the master server:
Windows
install_path\NetBackup\wmc\bin\install\[Link] -list

UNIX, Linux
/usr/openv/wmc/bin/install/manageClientCerts -list

Sample output:

Client Expiry Date

vCenter-server-1 Thu Feb 06 16:16:51 GMT+05:30 2014

vCenter-server-2 Fri Feb 07 11:22:53 GMT+05:30 2014
 Installing the NetBackup plug-in for vSphere Web Client 39
Configuration overview for the NetBackup Recovery and Instant Recovery Wizards

The command lists the vCenter servers for which the tokens were created as
well as their expiration dates. It can help diagnose communication problems
between the vCenter and the master server when a token has expired.
■ For well-formatted output, set the command prompt or shell screen size to
more than 100 units.
■ Server names that are longer than 40 characters are truncated. Characters
beyond the first 40 are replaced with “...”.

Permissions on the NetBackup plug-in authentication token file may

need to be changed
To allow the NetBackup plug-in to restore VMs, the NetBackup administrator must
generate an authentication token on the NetBackup master server. NetBackup
creates the token in a compressed file; the file must be sent to the administrator of
the vCenter server where the plug-in is installed.
When the virtualization administrator uses the compressed file to authorize the
plug-in to restore VMs, the token file is opened and left uncompressed. In either of
the following cases, the uncompressed file may not have the same permissions
that it had when the NetBackup administrator created the token:
■ On the Linux vCenter Server Appliance, the umask is set to 0.
■ VMware vSphere on Windows is installed in a location other than C:\Program
Files.
In either case, you may need to adjust the token file's permissions to conform to
your NetBackup security settings.
The uncompressed token file is in the following location on the vCenter server:
On a Linux vCenter Server Appliance: /storage/vsphere-client/netbackup
On a Windows vCenter server: C:\ProgramData\VMware\vSphere Web
Client\netbackup

Port usage for the NetBackup vSphere Web Client Plug-in

Table 2-6 shows the standard ports to be used in a NetBackup vSphere Web Client
Plug-in environment.

Table 2-6 Ports used in NetBackup and the vSphere Web Client Plug-in
environment

Source Port number Destination

Browser 9443 vSphere Web Client

 Installing the NetBackup plug-in for vSphere Web Client 40
Configuration overview for the NetBackup Recovery and Instant Recovery Wizards

Table 2-6 Ports used in NetBackup and the vSphere Web Client Plug-in
environment (continued)

Source Port number Destination

For VM recovery: vCenter RESTful interface at port Master server

server (or vSphere Web 8443 (https) or as configured
Client server if deployed on the master server
independently)

Master server 443 vCenter server

Backup host 443 vCenter server

Backup host 902 (for nbd or nbdssl) ESXi

 Chapter 3
Excluding virtual disks
from the backup
This chapter includes the following topics:

■ About excluding virtual disks from the backup

■ Setting the exclude disks Custom Attribute

About excluding virtual disks from the backup

NetBackup provides several methods to exclude virtual machine disks from backups.
One method lets you exclude the virtual disks that are defined in a virtual machine’s
Custom Attribute. NetBackup then excludes those disks if you specify the Custom
Attribute name in the backup policy.
Veritas provides a Virtual Disk Exclusion Wizard in the NetBackup plug-in for
VMware vSphere Web Client. You can use the wizard to configure and apply a
Custom Attribute to a virtual machine or multiple virtual machines.
To use the plug-in to configure a Custom Attribute to exclude disks from backups,
the vCenter Global credentials Manage custom attributes and Set custom
attribute are required.
See “Setting the exclude disks Custom Attribute” on page 41.

Setting the exclude disks Custom Attribute

Use the Virtual Disk Exclusion Wizard to create a VMware Custom Attribute of
the virtual disks to exclude from backups. The NetBackup plug-in for VMware
vSphere Web Client includes the wizard.
 Excluding virtual disks from the backup 42
Setting the exclude disks Custom Attribute

You can select up to and including 50 virtual machines to which you can apply a
Custom Attribute.
See “About excluding virtual disks from the backup” on page 41.
To set the exclude disks Custom Attribute
1 In the top level of the vSphere Web Client object navigator, click Veritas
NetBackup.
2 Click Virtual Disk Exclusion Wizard.
 Excluding virtual disks from the backup 43
Setting the exclude disks Custom Attribute

3 On the Virtual Machine Selection screen, select the virtual machine or virtual
machines to which you want to apply the Custom Attribute, as follows:

a. In the vCenter Server drop-down list, select the vCenter Server that hosts the
wanted virtual machines.

By default, the wizard selects the server that you selected in the vSphere Web
Client.

b. In the Custom Attribute field, enter the name for the attribute.

By default, Veritas suggests NB_DISK_EXCLUDE_LIST for the name.

c. In the Search field, enter a value to search for. The wizard displays the VMs that
match that value.

d. In the Search Results list, select the VMs to which you want to add the Custom
Attribute and then click Add Virtual Machines. You can change the Search
Results order by clicking on the column headers.

The counter in the Virtual Machines Added block at the top of the screen shows
how many VMs that you added. View Details also appears in the block after you
add virtual machines.

To remove VMs, click View Details, click the X next to each VM that you want to
remove, then click Close.

e. To continue to the next wizard screen, click Next.

 Excluding virtual disks from the backup 44
Setting the exclude disks Custom Attribute

4 On the Select Virtual Disks to Exclude screen, select the virtual disk or virtual
disks to which you want to apply the Custom Attribute, as follows:

a. Select a virtual machine in the list of virtual machines.

You can remove VMs by clicking the X next to each VM that you want to remove.

b. In the Available Disks list, select the disk or disks to add to the Custom Attribute.
You can select all disks in the list by selecting the check box in the Exclude disk
column header. If a disk is excluded already, a warning icon appears in the
Exclude disk column.

You can change the Search Results order by clicking on the column headers.

c. Repeat steps a and b for each virtual machine.

d. When you finish selecting disks, click Next to continue to the next wizard screen.
 Excluding virtual disks from the backup 45
Setting the exclude disks Custom Attribute

5 On the Review Selections screen, review and set the Custom Attribute, as
follows:

a. Review the selections for the disks to exclude.

b. Click Set Exclusions to add the Custom Attribute to all of the selected VMs. The
list box shows the results of the operation.

Click Show More Details to see more.

c. Click Finish.
 Chapter 4
Monitoring backup status
This chapter includes the following topics:

■ vCenter privileges for backup monitoring

■ Veritas NetBackup tab in vSphere Web Client

■ Summary display

■ Virtual Machines display

■ Events display

■ Using the Veritas NetBackup tab for backup reporting

■ How to respond to backup status

vCenter privileges for backup monitoring

Before you can use the NetBackup plug-in for vSphere Web Client to monitor virtual
machine backups, you must set vCenter privileges. Use the vSphere Web Client
to make sure that the following Global privileges are set in vCenter: Manage custom
attributes and Set custom attribute.
If the user account to access the plug-in cannot be assigned administrator privileges,
you must set these permissions at the vCenter level. For assistance setting
privileges, refer to the appropriate VMware vSphere Documentation Center.
In the vSphere Web Client interface, the Global privileges may look similar to the
following:
 Monitoring backup status 47
Veritas NetBackup tab in vSphere Web Client

Veritas NetBackup tab in vSphere Web Client

The NetBackup plug-in for vSphere Web Client displays backup information on the
Veritas NetBackup tab.
In the vSphere Web Client, click Hosts and Clusters > Monitor. Then select a
vSphere object and click Veritas NetBackup.
 Monitoring backup status 48
Veritas NetBackup tab in vSphere Web Client

Figure 4-1 Summary, Virtual Machines, and Events displays (NetBackup

plug-in for vSphere Web Client)

Note: Select an object, such as a vCenter, folder, datacenter, or ESXi host. The
information that appears in the Veritas NetBackup tab applies to the VMs within
the object that you select.

Table 4-1 describes the displays that appear on the Veritas NetBackup tab.

Table 4-1 Summary, Virtual Machines, and Events displays (NetBackup

plug-in for vSphere Web Client)

Display Information shown

Summary A summary and graphical view of backup success and backup events
for a specified time period. Can show the current backup status for a
selected VM.

See “Summary display” on page 49.

 Monitoring backup status 49
Summary display

Table 4-1 Summary, Virtual Machines, and Events displays (NetBackup

plug-in for vSphere Web Client) (continued)

Display Information shown

Virtual Machines Tabular view of backup information for a group of VMs.

Note: This display is available when you click on a vSphere object that
is higher than the level of a VM.

You can filter the information with a range of criteria. Includes an option
for customized sorting in multiple columns.

See “Virtual Machines display” on page 51.

Backup Events More detailed tabular view of backup information based on events. Can
show backup events for a VM or its parent object.

You can filter the information with a range of criteria. Includes an option
for customized sorting in multiple columns.

See “Events display” on page 52.

Summary display
The Summary display summarizes backup status, backup events, and backup age
for the VMs in the vSphere object that you select. If you select an individual VM,
the Summary display shows backup status and events for that VM.
Figure 4-2 shows an example of the Summary display for multiple VMs.
 Monitoring backup status 50
Summary display

Figure 4-2 Summary display with backup data for multiple VMs

The Summary display presents the following backup information.

Table 4-2 NetBackup Summary display for vSphere Web Client

Panel Description

Virtual Machine(s) Shows the current backup status for a particular VM or for all the VMs that belong to the selected
vSphere object.

If the vSphere object is higher than the level of a VM, the backup status appears in a color-coded
pie chart.
Note: If the panel applies to more than one VM: click on the linked values (such as for Backup
Successful or Total) to see the details in the Virtual Machines display.

Virtual Machines Shows the backup age of the VMs in a bar chart. This panel is available only for a vSphere object
By Backup Age that is higher than the level of a VM.
 Monitoring backup status 51
Virtual Machines display

Table 4-2 NetBackup Summary display for vSphere Web Client (continued)

Panel Description

Backup Events Lists the total number of backup events and a breakdown of the events by Backup Successful,
Backup Failed, and Snapshot Delete Failed.
Note: Click on the linked values for Backup Successful, Backup Failed, Snapshot Delete
Failed, or Total to see the details in the Events display.

Includes a color-coded bar chart that represents the type and number of backup events that
occurred within a specified period. Each bar represents the events that occurred on a particular
day.
You can configure the chart as follows:

■ Select the types of events that appear in the chart by clicking on the color-coded check boxes.
■ Select a different time period from View events from the last.

Virtual Machines display

The Virtual Machines display is available when you click on a vSphere object that
is higher than the level of a VM. For each VM it lists the following: the VM name,
the host or cluster, backup status, last successful backup, backup age, backup
policy, master server, and the number of consecutive failures.
The following is an example of the Virtual Machines display.

Figure 4-3 Virtual Machines display

Table 4-3 describes the options for using the Virtual Machines display.
 Monitoring backup status 52
Events display

Table 4-3 Display options in the NetBackup Virtual Machines display for
vSphere Web Client

Option Description

Click in a column header to list the column entries in ascending or

descending order.

You can also adjust the width of each column.

Click and hold a column header to drag the column to the left or right
in the display.

Right-click on a row to exclude or include a VM in the display, or to

recover a VM.

Exclude: Marks a selected VM so that its backup status and other

information are not displayed.

Include: Reverses the Exclude option: Adds a VM's backup status

and other information to the display.

Recover: Brings up the Recovery Wizard, to recover the VM.

Click the drop-down icon in the lower right, to export or copy the
rows to a file. To export or copy information on a particular VM, first
click on the row of the VM.

To save the information to an HTML or comma-separated text (CSV)

file, click Export.

To save to the Clipboard, click Copy.

Events display
The Events display shows backup information based on events, such as backup
successful, backup failed, and snapshot delete failed. It can show backup events
for a single VM or for all VMs in the selected object.
The following is an example of the Events display.
 Monitoring backup status 53
Events display

Figure 4-4 Events display

Table 4-4 Events display

Option Description

Click in a column header to list the column entries in

ascending or descending order.

You can also adjust the width of each column.

Click and hold a column header to drag the column to

the left or right in the display.

Backup Successful For the selected vSphere object, shows only the VMs
that were successfully backed up.

Backup Failed For the selected vSphere object, shows only the VMs
that were not successfully backed up.

Snapshot Delete Failed For the selected vSphere object, shows only the VMs
for which NetBackup failed to delete the snapshot after
the backup completed.
Note: After it creates a snapshot, NetBackup deletes
the snapshot when the backup completes. If NetBackup
fails to delete snapshots, the performance of the VM
may eventually decline. In that case, you may need to
delete the snapshots manually.

Recover To recover a VM, right-click on its row and click

Recover.

The Recovery Wizard appears.

 Monitoring backup status 54
Using the Veritas NetBackup tab for backup reporting

Table 4-4 Events display (continued)

Option Description

Click the drop-down icon in the lower right, to export

or copy the rows to a file. To export or copy information
on a particular VM, first click on the row of the VM.

To save the information to an HTML or

comma-separated text (CSV) file, click Export.

To save to the Clipboard, click Copy.

Using the Veritas NetBackup tab for backup

reporting
The following procedures explain how to find VM backup status in the Hosts and
Clusters > Monitor > Veritas NetBackup tab.
The information that appears in the Veritas NetBackup tab applies only to the
vSphere object that you select.
To find backup status for a single VM
1 Select the VM in vSphere Web Client.
2 On the Monitor tab, click Veritas NetBackup.
3 Use the Summary or Events displays to see the backup status.
 Monitoring backup status 55
Using the Veritas NetBackup tab for backup reporting

To find backup status for multiple VMs

1 Select the appropriate object in vSphere Web Client (such as datacenter or
ESXi host).
2 On the Monitor tab, click Veritas NetBackup.
The Summary display shows the backup success rate for the VMs overall.
See “Summary display” on page 49.
3 For the backup status of particular VMs, click Virtual Machines and find the
VMs in the Name column. Or click Events to list all the backup attempts.
You can click on a column header to reorder the entries in that column, or to
move or widen the column.
You can use Filter to limit the type of information that appears.
Under Events, click Backup Successful, Backup Failed, or Snapshot Delete
Failed to filter the events by backup status.
See “Virtual Machines display” on page 51.
See “Events display” on page 52.
To determine which VMs are not backed up
1 Select the appropriate object in vSphere Web Client (such as datacenter or
ESXi host).
2 On the Monitor tab, click Veritas NetBackup.
3 Click Events, then click Backup Failed.
4 To save the report, click on the save-file icon in the lower right and select an
output type.
To determine the age of existing backups
1 Select the appropriate object in vSphere Web Client (such as datacenter or
ESXi host).
2 On the Monitor tab, click Veritas NetBackup.
3 Click Summary.
Virtual Machines By Backup Age shows the age of the backups (up to one
day, 7 days, 30 days, and so forth).
4 For information on backup age per VM, click Virtual Machines and look at the
Backup Age (days) column.
5 To save the report, click on the save-file icon in the lower right and select an
output type.
 Monitoring backup status 56
How to respond to backup status

How to respond to backup status

For the backup status that is reported in the NetBackup plug-in for vSphere Web
Client, try the following suggested actions. You may need to confer with the
NetBackup administrator.

Table 4-5 Tips for responding to backup status in the NetBackup plug-in
for vSphere Web Client

Status Action

Backup failures ■ Look at the number of consecutive failures on the Virtual Machines
display.
■ If too many failures have occurred, export the display results (use
the save-file icon in the lower right). Send the file to the NetBackup
administrator.

No backup ■ The VM may not be included in a NetBackup policy, or the Post

information events to vCenter policy option may not be correctly configured.
Contact the NetBackup administrator.
■ The VM may be intentionally excluded from scheduled backups
(contact the NetBackup administrator). In that case, you can
right-click on the VM's row in the Virtual Machines display and click
Exclude. The Exclude option removes the VM's status from the
display.
■ The ESXi server may have been removed from the vCenter server.
See “Notes on the NetBackup plug-in for vSphere Web Client”
on page 8.

Snapshot delete NetBackup attempts to delete old snapshots at the start of each backup.
failed If snapshots are not deleted, you can manually delete them in vSphere
Web Client.
 Chapter 5
Restoring virtual machines
This chapter includes the following topics:

■ Configuring settings for the virtual machine recovery

■ Notes on the NetBackup recovery wizards

■ How to access the NetBackup Recovery Wizards

■ NetBackup Recovery Wizard screens

■ NetBackup Instant Recovery Wizard screens

■ Cleaning the recovery environment and releasing the NetBackup resources

Configuring settings for the virtual machine

recovery
Use the Settings option to configure the settings for virtual machine recovery.
 Restoring virtual machines 58
Configuring settings for the virtual machine recovery

To configure the settings for the NetBackup plug-in for vSphere Web Client
1 In the top level of the vSphere Web Client object navigator, click Veritas
NetBackup.
2 Click Settings.

3 In the Settings dialog, enter the settings as described in Table 5-1.

 Restoring virtual machines 59
Notes on the NetBackup recovery wizards

4 For each Preferred Instant Recovery Destination setting, click Change or

Select.
5 Click Save to save the settings.
The Preferred Instant Recovery Destination settings are populated during
the IR wizard screen Destination Selection when you select the Reset to
Preferred Destination option.

Table 5-1 Fields in the Settings dialog for recovery

Settings Description

Maximum Retention Period for Backup Events Set the retention period of the vCenter event viz. recovered
virtual machines.

Maximum number of instant recovery of VM(s) active Enter the maximum number of IR jobs that can be run
at one time per master server simultaneously for a single NetBackup master server.

Preferred Instant Recovery Destination Select the destination settings for instant recovery.

vCenter Server The destination vCenter server.

Data center/ESX Server The data center or the ESX server that is registered with
the vCenter server. Click Select (or Change) for a pop-up
in which to locate the data center or server.

Resource Pool or vApp The virtual machine pool or the vApp to be used for the
recovery.

Temporary Datastore or Datastore Cluster The temporary datastore to be used during the recovery
process.

Clear Preferred Destination Settings Click to remove the current settings.

Notes on the NetBackup recovery wizards

Use the Veritas NetBackup Recovery Wizard to restore a virtual machine from its
NetBackup image. You can restore the virtual machine to its original location or to
a different location.
Use the Veritas NetBackup Instant Recovery Wizard to instantly restore virtual
machine backup images. With instant recovery, you can immediately restore a
virtual machine into your production environment. Instant virtual machine recovery
helps improve recovery time objectives (RTO) and minimizes disruption and
downtime of the production VMs.
Note the following about the NetBackup plug-in's recovery wizards:
 Restoring virtual machines 60
How to access the NetBackup Recovery Wizards

■ For the pre-requisites for using the recovery wizards:

See “Configuration overview for the NetBackup Recovery and Instant Recovery
Wizards” on page 26.
■ The recovery wizards are an optional feature of the plug-in. They are not required
for monitoring virtual machine backups.
■ The NetBackup Recovery Wizard is for recovery of an entire virtual machine,
not for recovery of individual files. To recover individual files from the virtual
machine backup, use the NetBackup Backup, Archive, and Restore interface.
Or use the plug-in's Instant Recovery Wizard to boot the virtual machine
instantly and access the files.
See also: "About restore of individual files" and "Restoring individual files" in the
NetBackup for VMware Administrator's Guide.
■ The recovery wizards do not support recovery of vCloud Director backup images.
To recover virtual machines into vCloud Director, use the NetBackup Backup,
Archive, and Restore interface.
See the "Use NetBackup for vCloud Director" chapter in the NetBackup for
VMware Administrator's Guide.
■ You can also perform VM recovery and instant recovery using the nbrestorevm
command. For more information, refer to the NetBackup for VMware
Administrator's Guide and the NetBackup Commands Reference Guide.

How to access the NetBackup Recovery Wizards

In vSphere Web Client, you can launch the NetBackup Recovery Wizards as shown
in Table 5-2.
 Restoring virtual machines 61
How to access the NetBackup Recovery Wizards

Table 5-2 How to start the NetBackup Recovery Wizards in vSphere Web
Client

Action Description

In the vSphere Web Client object

navigator, click Veritas NetBackup,
then click Recovery Wizard or Instant
Recovery Wizard.

In Hosts and Clusters, click the

Monitor tab.

In the Veritas NetBackup tab, click

Virtual Machines or Events, right-click
on a successful backup for the virtual
machine, and click Recover.
 Restoring virtual machines 62
NetBackup Recovery Wizard screens

Table 5-2 How to start the NetBackup Recovery Wizards in vSphere Web
Client (continued)

Action Description

In the Virtual Machines pane (or in the

left pane), right-click on the VM to
restore and click Veritas NetBackup
> Recovery Wizard.

NetBackup Recovery Wizard screens

Use the following screens to restore a virtual machine with the VMware vSphere
Web Client interface.

Virtual Machine Selection screen

Select the virtual machine to restore.
 Restoring virtual machines 63
NetBackup Recovery Wizard screens

Figure 5-1 Virtual Machine Selection screen in the NetBackup Recovery

Wizard for vSphere Web Client

Table 5-3 Fields in the Virtual Machine Selection screen

Field Description

Select the vCenter Shows the vCenter server where the plug-in is installed.
Server
Note: Use the drop-down list to select the vCenter server where the VM resided when it
was backed up.

Note: If the plug-in is not authorized to restore VMs, this field is empty.

See “ Authorizing the NetBackup plug-in to restore virtual machines” on page 29.

Select NetBackup Use the drop-down list to select the master server that made the backup.
Master Server
If the master server does not have any VM backups, the error message no entity was
found EC:227 appears.

If the master server is not in the drop-down, you must register the master server with the
vCenter.

See “ Authorizing the NetBackup plug-in to restore virtual machines” on page 29.
 Restoring virtual machines 64
NetBackup Recovery Wizard screens

Table 5-3 Fields in the Virtual Machine Selection screen (continued)

Field Description

Enter Display Name Enter the name (or portion of the name) of the virtual machine that you want to restore, and
or UUID or DNS Name click Search.
or Host Name
Note: This field is case-sensitive.

Search Results The results of the search appear in this list.

Click the virtual machine to restore and then click Next.

The NetBackup master server identifies each VM in the backup policy as a "client." In the
search results, the NetBackup Client Name column displays that name.

Image Selection screen

Select the backup image from which to restore the virtual machine.

Figure 5-2 Image Selection screen in the NetBackup Recovery Wizard for
vSphere Web Client
 Restoring virtual machines 65
NetBackup Recovery Wizard screens

Table 5-4 Fields in the Image Selection screen

Field Description

Select Backup Image to view Use the drop-down to select the backup, as follows:
details
■ Latest Backup
Selects the latest available backup image.
■ Manually Specify
Click this option to select a different backup image. The Browse Backups
option appears. Click that option and enter a date range within which to search
for images. For more information, see Table 5-5.

Details for Backup Image Lists the information about the VM backup image.

Virtual Machine Attributes Lists the attributes of the virtual machine at the time it was backed up.

VMDKs Lists the vmdk file(s) of the selected VM.

Next Click Next for the next recovery screen.

 Restoring virtual machines 66
NetBackup Recovery Wizard screens

Figure 5-3 Manual Backup Selection screen in the NetBackup Recovery

Wizard for vSphere Web Client
 Restoring virtual machines 67
NetBackup Recovery Wizard screens

Table 5-5 Fields in the Manual Backup Selection screen

Field Description

Search backup images between To search for backup images, click in the left calendar to select the start time. Click
start and end time in the right calendar to select the end time. You can use the Hour, Minutes,
Seconds fields to set more precise times.

Then click Search Images. Click on an image. Further information about the image
appears under Virtual Machine Attributes and VMDKs.

Images Lists the images that fall within the search dates.

Virtual Machine Attributes For the selected image, lists the attributes of the virtual machine at the time it was
backed up.

Selected Backup Click to select the image.

Destination Selection screen

Specify the destination for the restored virtual machine.
The default values are from the original location of the virtual machine.
 Restoring virtual machines 68
NetBackup Recovery Wizard screens

Figure 5-4 Destination Selection screen in the NetBackup Recovery Wizard

for vSphere Web Client

Table 5-6 Fields in the Destination Selection screen

Field Description

vCenter Server The vCenter server for the restored virtual machine. Use the drop-down to select the vCenter
server.

ESX The ESXi server for the restored virtual machine.

Click Change to browse for an ESX server.

DataCenter The datacenter for the restored virtual machine.

Folder The folder for the restored virtual machine.

Click Change to browse for a folder.

Resource The resource pool for the restored virtual machine.

Pool/vApp
Click Change to browse for a resource pool or vApp.
 Restoring virtual machines 69
NetBackup Recovery Wizard screens

Table 5-6 Fields in the Destination Selection screen (continued)

Field Description

Datastore/Datastore The datastore or datastore cluster for the restored virtual machine.
Cluster
Click Change to browse for a datastore or datastore cluster.

Display Name The display name for the restored virtual machine. You can enter the name.

Revert to Original Selects the original location (vCenter and ESXi server, datacenter, folder, resource pool, vApp,
location datastore, or cluster) as the restore location. This setting is the default.

Next Click Next for the next recovery screen.

Transport Selection screen

Select the recovery host and data transport mode(s) for the virtual machine restore.

Figure 5-5 Transport Selection screen in the NetBackup Recovery Wizard

for vSphere Web Client
 Restoring virtual machines 70
NetBackup Recovery Wizard screens

Table 5-7 Fields in the Transport Selection screen

Field Description

NetBackup recovery The host that performs the recovery. The default is the host that performed the backup (the
host backup host).

In most cases, use the host that performed the backup. Selecting a different host as the
recovery host can result in a slow restore or a failed restore, depending on the transport
mode.
For example, the restore may fail if you select the SAN transport mode in the following case:

■ The host that performed the backup used a SAN connection to access the datastore.
■ The host you select as recovery host does not have SAN access to the datastore.

Transport Modes Determines how NetBackup sends the restore data from the recovery host to the VMware
datastore. The appropriate option depends in part on the type of network that connects the
VMware datastore to the recovery host.

Click the check boxes to select or unselect transport modes. For the restore, NetBackup
tries the selected modes in the order listed. To change the order, click on a transport mode
and click Move Up or Move Down.

san For unencrypted transfer over Fibre Channel (SAN) or iSCSI.

nbd For unencrypted transfer over a local network with the Network Block Device (NBD) driver
protocol. This mode of transfer is usually slower than Fibre Channel.

nbdssl For encrypted transfer (SSL) over a local network with the Network Block Device (NBD)
driver protocol. This mode of transfer is usually slower than Fibre Channel.

hotadd Requires that the recovery host is in a virtual machine.

For instructions on this transport mode and on installing the recovery host in a virtual machine,
refer to your VMware documentation.

Disk Provision screen

Select the provisioning (format) for the restored virtual disks.
 Restoring virtual machines 71
NetBackup Recovery Wizard screens

Figure 5-6 Disk Provision screen in the NetBackup Recovery Wizard for
vSphere Web Client

Table 5-8 Fields in the Disk Provision screen

Field Description

Original Provision Restores the virtual machine's virtual disks with their original provisioning.

Thick Provision Configures the restored virtual disks in the thick format. The virtual disk space is allocated when
Lazy Zeroed the disk is created. This option restores the populated blocks, but initializes vacant blocks with
zeros later, on demand.

Thick Provision Configures the restored virtual disks in the thick format. Restores the populated blocks and
Eager Zeroed immediately initializes vacant blocks with zeros (eagerly zeroed). Creation of the virtual disks
may take more time with this option. However, if the restore occurs over a SAN, the eagerly
zeroed feature may speed up the restore by reducing network communication with the vCenter
server.

Thin Provision Configures the restored virtual disks in the thin format. Restores the populated blocks but does
not initialize vacant blocks or commit them.
 Restoring virtual machines 72
NetBackup Recovery Wizard screens

Virtual Machine Options screen

Click the check boxes to select the recovery options for the virtual machine.

Figure 5-7 Virtual Machine Options screen in the NetBackup Recovery

Wizard for vSphere Web Client

Table 5-9 Fields in the Virtual Machine Options screen

Field Description

Restore BIOS UUID Retains the UUID of the original virtual machine (note that the UUID is a globally unique
xxx instead of identifier). The virtual machine is restored with the same UUID that it had before the restore.
creating a new UUID Note the following:

■ If a virtual machine with the same display name but with a different UUID exists at the
target restore location, the restore fails. You must either delete the existing virtual machine
and run the restore, or keep the existing virtual machine and abandon the restore.
■ If you do not want to keep the existing virtual machine, you can do one of the following:
Remove the existing virtual machine, or log into the ESXi server and remove the directory
where the virtual machine resides.
 Restoring virtual machines 73
NetBackup Recovery Wizard screens

Table 5-9 Fields in the Virtual Machine Options screen (continued)

Field Description

Restore Instance Retains the Instance UUID of the original virtual machine (note that the Instance UUID is a
UUID xxx instead of vCenter specific unique identifier of a virtual machine). The virtual machine is restored with
creating a new UUID the same Instance UUID that it had when it was backed up.

If the restore of the virtual machine is to a standalone ESXi host, this option is disabled.

If a virtual machine with the same Instance UUID exists at the target restore location, a
message appears that the UUID is used already. In this case, the original instance UUID is
not restored and a new UUID is assigned for the virtual machine.

Overwrite existing If a virtual machine with the same display name exists at the destination, that virtual machine
virtual machine must be deleted before the restore begins. Otherwise, the restore fails. Select this option to
have the virtual machine deleted.

Remove backing If a virtual machine had an ISO file that was mounted on a CD when the virtual machine was
information for backed up, note: The ISO file must be available on the target ESX server when you restore
devices like the virtual machine. If the ISO file is not available on the ESX server, the restore fails.
DVD/CD-ROM drives,
This option restores the virtual machine without restoring an ISO file that was mounted when
serial or parallel ports
the virtual machine was backed up.

Remove tag When this option is selected, NetBackup does not restore tag associations when it restores
associations the virtual machine. If this option is not selected, NetBackup attempts to restore all tag
associations from the backup.

If NetBackup cannot restore one or more of the tag associations, the restore exits with a
NetBackup status code 1.

Power on virtual The recovered virtual machine is automatically turned on when the recovery is complete.
machine after
recovery

Retain original This option restores the virtual machine with its original hardware version (such as 4). It
hardware version retains the original version even if the target ESXi server by default uses a later hardware
version (such as 7 or 8).

If this option is disabled, the restored virtual machine is converted to the default hardware
version that the ESXi server uses.

Network Selection screen

Click the check boxes to select the networks for the recovered virtual machine.
 Restoring virtual machines 74
NetBackup Recovery Wizard screens

Figure 5-8 Network Selection screen in the NetBackup Recovery Wizard for
vSphere Web Client

Table 5-10 Fields in the Network Selection screen

Field Description

Select All Selects or unselects all the networks that are available. If a network is selected, the restored virtual
machine is automatically connected to that network.

VM Network You can select individual networks for the restored virtual machine.

Pre-Recovery Check screen

Preview the recovery details, run a pre-recovery check, and start the recovery.
 Restoring virtual machines 75
NetBackup Recovery Wizard screens

Figure 5-9 Pre-Recovery Check screen in the NetBackup Recovery Wizard

for vSphere Web Client

Table 5-11 Fields in the Pre-Recovery Check screen

Field Description

Recovery Settings Lists the settings that are used for the recovery.

Run Pre-Recovery Verifies the credentials and appropriate paths and connectivity, determines whether the
Check datastore or datastore cluster has available space, and reviews other requirements.

Pre-Recovery Check Lists the results of the pre-recovery check.

Results
You can proceed with the restore even if the check fails.

Note: A mismatch in the vCenter server name in NetBackup (uppercase vs. lowercase letters)
may cause the "VMware connectivity test" to fail.

See “Mismatch in vCenter server name (uppercase vs. lowercase letters) causes the VMware
connectivity test to fail” on page 91.

Finish Starts the recovery of the virtual machine.

 Restoring virtual machines 76
NetBackup Instant Recovery Wizard screens

NetBackup Instant Recovery Wizard screens

The NetBackup Instant Recovery (IR) Wizard provides an option to recover and
power on the virtual machines instantly. The administrator can use the IR wizard
to simultaneously restore multiple virtual machines, instantly.
To access the Instant Recovery Wizard in the vSphere Web Client interface, navigate
to Home > Veritas NetBackup > Instant Recovery Wizard.

The Instant Recovery Wizard includes five steps:

■ Selecting virtual machines
■ Selecting the backup image (on VM)
■ Selecting the target destination for instant recovery
■ Selecting virtual machine options
■ Performing a pre-recovery check and initiating the IR operation

Selecting virtual machines for instant recovery

Perform the search operation on this screen to get a list of virtual machines that
have IR-compatible backup images.
The first screen of the Instant Recovery Wizard displays 0 Virtual Machines Added.
You must start the wizard operations by searching for and adding the virtual
machines.
See “Instant recovery-ready backup images are not available for selection”
on page 92.
 Restoring virtual machines 77
NetBackup Instant Recovery Wizard screens

Table 5-12 Fields in the Virtual Machine Selection screen

Operations Description

vCenter Server Shows the vCenter server where the plug-in is installed.
Note: Use the drop-down list to select the vCenter server where the VM resided when
it was backed up.

Note: If the plug-in is not authorized to restore VMs, this field is empty.

See “ Authorizing the NetBackup plug-in to restore virtual machines” on page 29.

NetBackup Master Server Use the drop-down list to select the master server that made the backup.

In certain cases, the master server may not appear in the drop-down list:

See “A NetBackup master server is not available in the master server list when
searching for VMs for instant recovery” on page 90.
Note: This drop-down only lists the master servers that are registered with the vCenter
server selected in the vCenter drop-down. If the master server is not listed after adding
it again, make sure that it is not listed in the top error message. Contact the NetBackup
administrator to register the vCenter to the NetBackup master server.

Type display name, UUID, For the virtual machine to restore, enter the full or partial text of the following: VM
DNS, host name display name, instance ID, DNS name, or host name. Then click Search.

Enter an asterisk * to search the complete list.

Note: This field is case-sensitive.

Note: Once the vCenter server and the NetBackup master server are selected
(after you select the virtual machines), the pairing of the two servers is locked. If a
server selection is changed, the earlier operations do not remain valid. You can
reset the search parameters at any time.

The results of the search appear in this list. Select the virtual machines and add
them to restore and then click Next.
 Restoring virtual machines 78
NetBackup Instant Recovery Wizard screens

Note: Selecting the NetBackup master server and vCenter server is mandatory.
Select multiple virtual machines with Ctrl+Click or select a range of virtual machines
with Shift+Click.

Table 5-13 Additional fields in the Virtual Machine Selection screen

Operations Description

Search Results Select the virtual machines for which you want to select backup images for instant
recovery.

Add Virtual Machines Click to add the selected virtual machines.

After you select and add the virtual machines, the Virtual Machines Added bar shows
the total number of virtual machines that are selected and added. The maximum
number of virtual machines that you can add can be set in the Settings option on the
Veritas NetBackup landing page.

See “Configuring settings for the virtual machine recovery ” on page 57.
Note: The maximum number of instant recovery jobs includes active instant recoveries
plus the number of virtual machines being added for the recovery operations.

View Details Click to see a pop-up screen with the list of selected virtual machines in a tabular form
with more details. The added virtual machines can be deleted from this screen, if
necessary.

Reset Search parameters You can reset the search parameters to cancel earlier selections.

Click Next to select the backup images for instant recovery.

Selecting backup images for instant recovery

On the Image Selection screen, in the upper pane, you can view the instant recovery
(IR) ready backup images. The screen only lists the images that are IR-ready and
that are not more than 7 days old.

The following table describes the fields on the Image Selection screen.
 Restoring virtual machines 79
NetBackup Instant Recovery Wizard screens

Table 5-14 Fields in the Image Selection screen

Field Description

Display Name Name of the virtual machine that was selected and added in the previous screen.

Date and Time of Backup Date and timestamp of the IR-ready backup image.

Age Age of the backup image in days or hours.

vCenter Server Name of the vCenter server.

Policy Name Name of the NetBackup backup policy.

If the IR-ready image is not available in the last 7 days, or you want to change the
displayed backup image for the VM: Click on the Change option to search for a
different backup image. You can search for the backup images that were made in
the last 7 days, etc., by selecting a specific date range. For the Select Date Range
option, click Search Images in the pop-up to view the results. For other options,
select the image from the displayed results to view the image details. The following
screen shows a list of IR ready images that were backed up during the last 30 days.
Click Select Image to proceed.

The Image Selection screen at the lower pane shows the backup image details
and attributes of the virtual machine that is selected in the upper plane.
 Restoring virtual machines 80
NetBackup Instant Recovery Wizard screens

Table 5-15 Fields in the backup image selection screen

Field Description

Backup Image details The name of the NetBackup master server and the storage type used.
Note: The time that is required to restore the image may depend on the storage type.
This dependency is especially likely for a recovery that uses an AdvancedDisk storage
type or a deduplication storage type.

The backup ID and the type of the backup schedule are also listed in the image details.

Virtual Machine Attributes The attributes of the virtual machine at the time it was backed up.

Display Name The display name of the specified VM.

Host name The host name of the VM.

ESX server The ESX server name.

vCenter server The vCenter server name.

 Restoring virtual machines 81
NetBackup Instant Recovery Wizard screens

Table 5-15 Fields in the backup image selection screen (continued)

Field Description

BIOS UUID The ID assigned to the virtual machine when the virtual machine is created. This ID
may or may not be unique, depending on whether the virtual machine has been
duplicated. This option is included for compatibility with the policies that use the older
VM UUID identifier.

Instance UUID The globally unique ID assigned to the virtual machine when the virtual machine is
created. This ID uniquely identifies the virtual machine within a vCenter server. Even
if the virtual machine has been duplicated (such as within a vCloud), only the original
virtual machine retains this instance ID. (The virtual machine duplicates are assigned
different instance UUIDs.)

Data center Displays the name of the data center.

Virtual Machine Version Displays the original hardware version of the VM.

VMDKs Displays the vmdk files of the selected virtual machine.

Click Next to proceed to the Destination Selection screen. Click Back to revisit
the earlier screen in case you need to make changes.

Note: To proceed to the destination selection, you need to select at least one
IR-ready image.

Selecting the destination for instant recovery

Specify the destination parameters for restoring all the selected virtual machine
images.

Note: If you have specified the preferred destination settings in the Settings option,
those settings are populated on the destination screen. The following topic explains
how to set preferred destination parameters:
See “Configuring settings for the virtual machine recovery ” on page 57..
 Restoring virtual machines 82
NetBackup Instant Recovery Wizard screens

Table 5-16 Fields in the Destination Selection screen

Field Description

vCenter Server Use the drop-down to select the vCenter server. It lists only those vCenter servers
that are associated with the master server that was selected in the first screen of
the wizard.

Data center/ESX Server The ESX server for the virtual machine to be restored.

Click Select or Change to browse for a data center or an ESX server.

Note: Only ESX servers at version 5.0 or later are supported for instant recovery.

Resource Pool/vApp The resource pool for the virtual machine.

Click Change to browse for a resource pool or vApp. This parameter is optional.

Temporary Datastore/Datastore The temporary datastore is used to store all the write requests in the recovered
Cluster virtual machine.

Click Change to browse for a datastore or datastore cluster.

Note: While selecting a temporary datastore, do not select any inactive or
read-only datastores as it can cause instant recovery failure.

Reset to Preferred Destination Click the option to reset all the parameters for destination selection to the preferred
parameters that are specified in the Settings. The following topic explains how
to set preferred destination parameters:

See “Configuring settings for the virtual machine recovery ” on page 57.
 Restoring virtual machines 83
NetBackup Instant Recovery Wizard screens

Table 5-16 Fields in the Destination Selection screen (continued)

Field Description

Save as Preferred Destination Check this box to set the currently filled-in parameters as the preferred destination
parameters to be used in future instant recovery operations. Selecting the check
box saves the parameters in the Settings option.

Change NetBackup Alternate Check the box to set the NetBackup client or media server as the alternate host
Recovery Host for the instant recovery. In case the primary host is not available, the alternate
host is used to complete the recovery operation. This setting is optional.

Click Next to set the virtual machine options.

Setting virtual machine options

Use this screen to set the post-recovery options for the selected virtual machines.

Figure 5-10 Virtual Machine Options for Instant Recovery

Table 5-17 Fields in the Virtual Machine Options screen

Field Description

Display Name A list of all the selected VMs is displayed. A conflict of display name is highlighted in case
the display name that has been provided already exists on the destination. Look for the
following symbol.

For more information about the hosts with name conflicts, click View Details in the
message bar at the top of the screen. Information about all conflicts appears in the
resulting pop-up box.
Note: In case of duplicate display name, change the highlighted display name to proceed.
 Restoring virtual machines 84
NetBackup Instant Recovery Wizard screens

Table 5-17 Fields in the Virtual Machine Options screen (continued)

Field Description

Retain networks Retains the existing network settings of all the selected VMs after the recovery.
Note: You can select individual VMs to retain the networks after the recovery is complete
and to power on the VM.

Power on Powers on all the selected VMs after the recovery.

Note: You can select individual VMs to be powered on.

Retain tag associations When this option is selected, NetBackup restores tag associations when it restores the
virtual machine. If NetBackup cannot restore one or more of the tag associations, the
restore exits with NetBackup status code 1.

If this option is not selected, NetBackup does not restore any tag associations from the
backup.

Retain hardware version When this option is selected, NetBackup restores the virtual machine with its original
hardware version (such as 4). It retains the original version even if the target ESXi server
by default uses a later hardware version (such as 7 or 8).

If this option is not selected, the restored virtual machine is converted to the default
hardware version that the ESXi server uses.

Add common suffix to all You can add a common suffix to the display names of all the selected VMs. For example,
display names if you add Network1 to the display name VM_Storage_1 and click Add, the display
name changes to Network1_VM_Storage_1.

Reviewing recovery settings

Preview the recovery details, run a pre-recovery check, and start the recovery.
 Restoring virtual machines 85
NetBackup Instant Recovery Wizard screens

Figure 5-11 Review settings and pre-recovery check screen

Table 5-18 Fields in the pre-recovery check screen

Field Description

Virtual machines and Lists the virtual machine names along with the selected backup images for the instant recovery.
images selected

Recovery Destination Details of the destination that is selected in the Destination Selection screen.

Run Pre-Recovery Verifies the credentials and appropriate paths and connectivity, determines whether the
Check datastore or datastore cluster has available space, and reviews other requirements.

Pre-recovery check is mandatory for the first time to check all the requirements and is also
recommended for each recovery operation.

Pre-Recovery Check Lists the results of the pre-recovery check.

Results
You can proceed with the instant recovery even if the check fails.

Finish Concludes the wizard operations and starts the instant recovery of the virtual machine(s).

When you click Finish, the instant recovery operation starts. You can view the
Instant Recovery Cleanup Page for the recovery progress. You can initiate a new
IR operation by using the IR wizard again.
The pop-up window shows the status of the instant recovery operation.
 Restoring virtual machines 86
Cleaning the recovery environment and releasing the NetBackup resources

Cleaning the recovery environment and releasing

the NetBackup resources
Use this screen to complete the instant recovery process by cleaning the recovery
setup and releasing the NetBackup resources. The instant recovery workflow is
completed only when the recovery is completed and the NetBackup resources are
released.

Use the following utilities to complete the instant recovery functional workflow.

Table 5-19 Fields in the Instant Recovery Cleanup screen

Field Description

Reactivate Use this option when the connection to the virtual machine was interrupted. The interruption
may occur due to a network disconnect between the NetBackup media and the ESX server.
This option reactivates a restored virtual machine by remounting the NetBackup datastore. It
also registers the restored virtual machines on the ESX host.

Deactivate Use this option when you are done with the restore and do not intend to retain the restored
virtual machine. This action removes the virtual machine from the ESX host. If no other virtual
machine uses the NetBackup datastore, this option removes that datastore and releases its
resources on the NetBackup media server.
 Restoring virtual machines 87
Cleaning the recovery environment and releasing the NetBackup resources

Table 5-19 Fields in the Instant Recovery Cleanup screen (continued)

Field Description

Initiate Instant Use this option to complete the instant recovery operation after you have performed the Storage
Recovery Done vMotion of the virtual machines to a different datastore. This option completes the virtual machine
instant recovery operation after the vMotion migration of the virtual machine is completed.
When the datastore is removed, its resources are released on the NetBackup media server.
 Chapter 6
Troubleshooting
This chapter includes the following topics:

■ The message NoPermission appears during plug-in installation

■ Reducing the load time for the NetBackup plug-in for vSphere Web Client

■ A NetBackup master server is not available in the master server list when
searching for VMs for instant recovery

■ The NetBackup plug-in for vSphere Web Client does not find any backup images
in the listed events

■ The NetBackup Recovery Wizard for vSphere Web Client does not find a
particular backup image

■ Mismatch in vCenter server name (uppercase vs. lowercase letters) causes the
VMware connectivity test to fail

■ IR operation is not complete due to NFS mount limit exceed

■ Instant recovery-ready backup images are not available for selection

■ The vCenter server and NetBackup master server names are not available for
search

■ Preferred IR-destination options are not saved

■ Virtual machine display name conflicts are not shown before the pre-recovery
check

■ Reasons for failure of pre-recovery checks

■ Too much time taken to populate the list of NetBackup master servers

■ The NetBackup plug-in is not shown in the vSphere Web Client interface even
after registration
 Troubleshooting 89
The message NoPermission appears during plug-in installation

■ Correct NetBackup master server does not show up for selection for a given
vCenter server on the IR wizard

■ Error stack displayed in the NetBackup plug-in for vSphere Web Client

■ Troubleshooting master server communication failures in the plug-in's Recovery

Portal

The message NoPermission appears during plug-in

installation
To install, uninstall, or upgrade the NetBackup Web Client plug-in, the vCenter
credentials require the Extension privileges. If your credentials do not have those
privileges, the following message appears:

When you have set the Extension privileges for the credentials, click OK on the
message and then click Register.
For instructions on setting the Extension privileges:
See “vCenter privileges for managing NetBackup plug-in installation” on page 14.
 Troubleshooting 90
Reducing the load time for the NetBackup plug-in for vSphere Web Client

Reducing the load time for the NetBackup plug-in

for vSphere Web Client
If the NetBackup plug-in for vSphere Web Client takes a long time to load, many
backups may have occurred in your environment. By default, the plug-in retrieves
backup events for the last 365 days.
To reduce the load time for the NetBackup vSphere Web Client plug-in
1 In the top level of the vSphere Web Client object navigator, click Veritas
NetBackup.
2 Click Settings.
3 In the Settings dialog, enter a smaller value for Maximum Retention Period
for Backup Events.
For example, enter 7.
This change limits the number of backup events that the plug-in retrieves. As
a result, it reduces the plug-in's initial load time.
By default, the plug-in retrieves backup events for the last 365 days.

A NetBackup master server is not available in the

master server list when searching for VMs for
instant recovery
On the Virtual Machine Selection screen of the vSphere Web Client plug-in, the
master server does not appear in the NetBackup Master Server drop-down list.
The master server may not be in the drop-down list for any of the following reasons:
■ The NetBackup master server is not registered with the NetBackup vSphere
Plug-in.
■ The selected vCenter server is not added in the NetBackup master server.
■ Invalid token (certificate).
■ Unable to connect to the NetBackup master server.
■ A mismatch of the vCenter Server name as registered with the NetBackup
master server and as registered with the vSphere Web Client. The vCenter
server names should be the same (host name or FQDN or IP).
■ The NetBackup Web Management Console service is down in the NetBackup
master server.
 Troubleshooting 91
The NetBackup plug-in for vSphere Web Client does not find any backup images in the listed events

The NetBackup plug-in for vSphere Web Client

does not find any backup images in the listed
events
To allow the plug-in to monitor backups, the NetBackup master server's VMware
policies must have Post events to vCenter set to All Events.
The Post events to vCenter option is available from the Advanced option of the
NetBackup policy's VMware tab.
See “Requirements for the NetBackup plug-in for vSphere Web Client” on page 12.

The NetBackup Recovery Wizard for vSphere Web

Client does not find a particular backup image
The NetBackup Recovery Wizard may not find the backup image for a particular
VM if the VM display name contains special characters.
To locate the backup image and start the recovery
1 In the top level of the vSphere Web Client object navigator, click Veritas
NetBackup > Recovery Wizard.
2 In the wizard's Virtual Machine Selection screen, enter the VM name (full or
partial), and click Search.
The VM should appear in the search results.
3 Click Next and continue with the Recovery Wizard.

Mismatch in vCenter server name (uppercase vs.

lowercase letters) causes the VMware connectivity
test to fail
The Pre-Recovery Check screen of the NetBackup Recovery Wizards runs a
number of checks on the vSphere environment that you selected for the restore.
The "VMware connectivity test" fails if the case of the vCenter name in NetBackup
credentials differs from the case of the vCenter name in vSphere. For example: the
name that was entered for NetBackup credentials is uppercase, but the name in
vSphere is lowercase.
 Troubleshooting 92
IR operation is not complete due to NFS mount limit exceed

Note: When the "VMware connectivity test" fails because of a vCenter name
mismatch regarding its case, the failure can be ignored. Click Finish and the VM
recovery should succeed.

To prevent the "VMware connectivity test" from failing, delete the NetBackup
credential for the vCenter and re-enter the credential with the correct case. For
instructions on how to add credentials, see "Adding NetBackup credentials for
VMware" in the NetBackup for VMware Administrator's Guide. Alternatively, you
can edit the name of the vCenter server in vSphere Web Client to match with the
credentials entered in the NetBackup master server.
See “Pre-Recovery Check screen” on page 74.

IR operation is not complete due to NFS mount

limit exceed
An instant recovery (IR) operation creates at least one NFS mount. If the number
of NFS mounts exceeds the default limit, the next IR operation cannot succeed.
Make sure mount points are available for IR, or clean the mount points before the
next IR operation.

Instant recovery-ready backup images are not

available for selection
If no backup images appear on the Images Available for Instant Recovery (IR)
screen, the images may not be available on the master server for the selected
period.
Note the following about instant recovery of VMware virtual machines:
■ Supports the following storage unit types (disk only):
BasicDisk, AdvancedDisk, Media Server Deduplication Pool (MSDP).

Note: Snapshot-only backups are not supported.

■ Does not support a virtual machine that had disks that were excluded from the
backup. The policy Virtual disk selection option must be set to include all disks.
■ Does not support a virtual machine that has a disk in raw device mapping mode
(RDM) or that has a disk in Persistent mode.
 Troubleshooting 93
The vCenter server and NetBackup master server names are not available for search

■ Supports the following policy schedule types: Full backups, and the incremental
backups that include the Use Accelerator option with a disk-based storage unit.
Incremental backups without the Use Accelerator policy option are not
supported.
■ Does not support virtual machine templates.
Contact a NetBackup administrator to check the backup details.

The vCenter server and NetBackup master server

names are not available for search
On the Virtual Machine Selection screen, during the vCenter and the NetBackup
master server selection, the drop-down list may not display any items.
Make sure that the following are configured:
■ The NetBackup vSphere Web Client plug-in is registered with the vCenter server.
■ The NetBackup authentication token for the client (vCenter) was generated and
imported in the vSphere plug-in.

Note: The authentication token must be generated with the correct DNS name
of the vCenter where the plug-in is installed (or a correct token alias was added).
See “Creating an authentication token for the NetBackup plug-in for vSphere
Web Client” on page 27.
See “Adding or deleting an additional host name or IP address for an
authentication token” on page 33.

■ The NetBackup Web Services are enabled in the NetBackup master server.
Web services are automatically enabled when the NetBackup master server
(8.0 or later) is installed. See the following tech note for the web server tasks
that are required before installation of the master server:
[Link]
■ The following services are up in the NetBackup master server:
■ NetBackup Service Layer
■ NetBackup Web Management Console

■ The vCenter server is registered with the NetBackup master server.

 Troubleshooting 94
Preferred IR-destination options are not saved

Preferred IR-destination options are not saved

In some cases, the preferred destination options on the Settings tab are not applied
when you select the options. The vCenter server may not be available, or another
Administrative account changed the saved settings. Take appropriate action to
resolve these issues.

Virtual machine display name conflicts are not

shown before the pre-recovery check
During IR operation, the conflicts in the virtual machine display name are not shown
in the wizard screen. These conflicts are later populated in the pre-recovery check
failure. The conflict in the display name is shown only when it is present in the same
VM folder. The conflict across the ESX server is only captured during the
pre-recovery check.

Reasons for failure of pre-recovery checks

The following are the reasons for failures in the pre-recovery checks during the
instant recovery operation:
■ vSphere server credentials changed.
■ Incorrect data center path or folder path.
■ Non-ASCII characters are used in the specified parameters.
See “NetBackup character restrictions for the Primary VM identifier” in the
NetBackup for VMware Administrator's Guide available through the following
URL:
[Link]
■ Virtual machine display name conflict.
The virtual machine name already exists on the ESX server.
■ Connectivity and space availability.
Indicates issues that are related to connectivity to various recovery artifacts and
the available storage space for recovery.
■ VMware connectivity-related issue.
■ The NFS volume mount limit was exceeded on the ESX host.
The NFS volume mount limit (eight mounts) was exceeded.
■ Backup image not available.
The selected backup image is not available for recovery.
 Troubleshooting 95
Too much time taken to populate the list of NetBackup master servers

The pre-recovery check is a one-time action for the instant recovery wizard operation.
Even after failure checks are displayed in the pre-recovery check list, you can
perform IR operations.

Too much time taken to populate the list of

NetBackup master servers
If it takes too long to display the NetBackup master server list, validate the master
server using the Register Master Servers option on the plug-in's Veritas
NetBackup page. If the validation reveals an error, contact the NetBackup
administrator and check the vSphere Web Client Virgo logs at the following location:
■ Linux:
/storage/log/vmware/vsphere-client/logs/vsphere_client_virgo.log

■ Windows: C:\Programdata\VMware\vSphere Web

Client\serviceability\logs\vsphere_client_virgo.log

The NetBackup plug-in is not shown in the

vSphere Web Client interface even after
registration
This issue may occur for either of the following reasons:

Table 6-1 Reasons for the NetBackup plug-in not appearing in the vSphere
Web Client

Reason Description and recommended action

The NetBackup plug-in does not Messages similar to the following may appear in the vsphere_client_virgo
support the vCenter version. .log file:

[Link]: Received fatal alert:

handshake_failure

For a list of supported vCenter versions for the plug-in for vSphere Web Client, see
the following document:

Support for NetBackup 7.x and 8.x in virtual environments:

[Link]
 Troubleshooting 96
The NetBackup plug-in is not shown in the vSphere Web Client interface even after registration

Table 6-1 Reasons for the NetBackup plug-in not appearing in the vSphere
Web Client (continued)

Reason Description and recommended action

■ You have not used the In this case, the default vCenter configuration does not allow the plug-in to be
default URL for the plug-in downloaded and deployed. Messages similar to the following may appear in the
ZIP-file download (securely VMware vsphere_client_virgo.log file:
hosted by the NetBackup
master server). The plugin package download was blocked because the URL
is not secure. To allow http URLs add allowHttp=true to
■ Instead, your plug-in
[Link]
download URL uses the
HTTP protocol ([Link]
See the procedure To allow installation of the plug-in over an HTTP URL.
rather than the secure
HTTPS protocol ([Link]

A previous instance of the Do the following:

NetBackup plug-in did not
1 On the vCenter server, stop the vSphere Web Client service:
properly clean up after
uninstallation. To use the command line, the name of the service is vsphere-client.

To use the vSphere Web Client interface, the name of the service is VMware
vSphere Web Client.

For assistance with the command line or vSphere Web Client, see the VMware
article "How to stop, start, or restart vCenter Server 6.x services (2109881)":

[Link]

2 Remove references to the plug-in, as follows:

a. On a vCenter appliance, remove the directories or files that the following find
command returns:

# find / -iname "*netbackup*"

b. On a Windows vCenter, remove the directories or files that the following dir
commands return:

dir "%programdata%\*netbackup*" /s /a /b

dir "%programfiles%\*netbackup*" /s /a /b

Note: For a VMware Platform Services Controller (PSC) environment with

multiple vCenters, you need only uninstall the plug-in on the vCenter where the
plug-in was installed. However, you should remove references to the plug-in
from all of the vCenters that are managed by the PSC.

3 On the vCenter server, start the vSphere Web Client service.

 Troubleshooting 97
Correct NetBackup master server does not show up for selection for a given vCenter server on the IR wizard

To allow installation of the plug-in over an HTTP URL

1 Add the following directive to the vCenter's [Link] file:
allowHttp=true

The [Link] file may be located in the following directory:

Windows: C:\ProgramData\VMware\vSphere Web Client\
Linux:
■ In vCenter 5.5.x: /var/lib/vmware/vsphere-client/
■ In vCenter 6.0 and 6.5: /etc/vmware/vsphere-client/

2 Restart the vSphere Web Client service.

The following VMware articles contain further information on starting the
vSphere Web Client service:
vCenter 5.x: [Link]
vCenter 6.0 and 6.5: [Link]
3 Log on again to the vSphere Web Client.
When you log on, the plug-in is then installed.
See “Installing the NetBackup plug-in for vSphere Web Client” on page 16.

Correct NetBackup master server does not show

up for selection for a given vCenter server on the
IR wizard
The vCenter server host name (the FQDN or the short name) should be the same
at the following locations:
■ The name that is registered with the NetBackup master server.
■ The name that is registered with the vSphere Web Client.
■ The name that is registered with the plug-in during the plug-in installation.
 Troubleshooting 98
Error stack displayed in the NetBackup plug-in for vSphere Web Client

Error stack displayed in the NetBackup plug-in

for vSphere Web Client
In the NetBackup plug-in for VMware vSphere Web Client, an error stack may be
displayed in the Instant Recovery wizard. This behavior is observed especially when
you upgrade the plug-in.
To troubleshoot the issue, clear the browser cache and close the browser. Open
the browser and logon to VMware vSphere Web Client again.

Troubleshooting master server communication

failures in the plug-in's Recovery Portal
To recover VMs, the plug-in must have a registered NetBackup master server with
a valid and correct authentication token. The NetBackup administrator generates
the authentication token on a specific NetBackup master server for a specific client
(such as a vCenter server). The token gives the vCenter access to the NetBackup
master server where the token was generated. (Note: you can validate authentication
tokens for currently registered master servers by means of the Register Master
Servers option in the plug-in's Recovery Portal.)
If the TCP/IP address or host name of the vCenter does not exactly match the
information in the authentication token, the following operations fail: the Register
Master Servers operation, and VM recovery. For VM recovery, the error message
you receive depends on where in the plug-in interface you launched the restore
attempt. Among the errors you can receive are:
Failed to get master server version. then
[Link]

No mapping found between vCenter(s) and Master Server(s) Master Server

"master_server_name" [Link]

Failed to communicate with NetBackup master server master_server_name

on port 8443 with the supplied authentication token. Please verify
that NetBackup master server name, port and authentication token are
valid.

To correctly determine the problem and the corrective action, you must review the
VxUL log file. On the master server, issue the command shown:
vxlogview -i nbwebservice -p nb –L -E
 Troubleshooting 99
Troubleshooting master server communication failures in the plug-in's Recovery Portal

Error example 1
The log file includes messages similar to the following:

02/17/2017 10:03:37.831 [Error] Remote host name does not match the
name in the certificate, remote name:[Link], name from
certificate:vcenter02

In the log snip shown, the name in the token is vcenter02 and the required name
is [Link].
Veritas recommends that you revoke the existing token, generate a new token with
the required name, and use the new token on the vCenter. If you cannot do that,
add the vCenter's fully qualified domain name as an alias for the existing token, as
follows:
manageClientCerts -addAlias vcenter02 -HOST [Link]

As an alternative, you can use the -ANY option:

manageClientCerts -addAlias vcenter02 -ANY

-ANY allows any host or any IP address to communicate with the NetBackup server
by means of this token.

Caution: The -ANY option is not a secure method for restores. Please see the
NetBackup Commands Reference Guide for more information on the
manageClientCerts command.

Error example 2
The log file includes messages similar to the following:

02/17/2017 16:18:13.951 [Error] Remote host name does not match the
name in the certificate, remote name:[Link], name from
certificate:vcenter02

In the log snip shown, the name in the token is vcenter02 and the required name
is [Link].
Veritas recommends that you revoke the existing token, generate a new token with
the required name, and use the new token on the vCenter. If you cannot do that,
add the vCenter's TCP/IP address as an alias for the existing token, as follows:
manageClientCerts -addAlias vcenter02 -IP [Link]

As an alternative, you can use the -ANY option:

manageClientCerts -addAlias vcenter02 -ANY
 Troubleshooting 100
Troubleshooting master server communication failures in the plug-in's Recovery Portal

-ANY allows any host or any IP address to communicate with the NetBackup server
by means of this token.

Caution: The -ANY option is not a secure method for restores.

Additional information is available:

See “Adding or deleting an additional host name or IP address for an authentication
token” on page 33.
See the manageClientCerts command in the NetBackup Commands Reference
Guide.
 Appendix A
Instant recovery
operations
This appendix includes the following topics:

■ Instant recovery events for non-available virtual machines

■ Best practices for instant recovery operations

Instant recovery events for non-available virtual

machines
For instant recovery operations (activate, deactivate, reactivate), NetBackup posts
success or failure events to the vCenter server. These events are posted for the
virtual machine during its restore.
For the activate and reactivate operations, the virtual machine already exists in
vCenter. Therefore, when you select that virtual machine and navigate to the Monitor
> Events tab, you see the NetBackup events for these operations.
For the deactivate operation, the virtual machine is unregistered and deleted from
vCenter server. That virtual machine is no longer visible in vSphere Web Client. To
see its NetBackup events, select the ESX server or top-level vCenter object in
vSphere Web Client and navigate to Monitor > Events. Usually only the event
description appears in the Events tab. In rare cases, the event ID may appear
instead of the event description.
The following are the IR event IDs and descriptions.

Event ID Description

IR Activate Operation Events

 Instant recovery operations 102
Best practices for instant recovery operations

[Link] NetBackup instant recovery Activate operation

is successful.

[Link] NetBackup instant recovery Activate operation

is failed.

IR Deactivate Operation Events

[Link] NetBackup instant recovery Deactivate operation

is successful.

[Link] NetBackup instant recovery Deactivate operation

is failed.

IR Reactivate Operation Events

[Link] NetBackup instant recovery Reactivate operation

is successful.

[Link] NetBackup instant recovery Reactivate operation

is failed.

Best practices for instant recovery operations

The following best practices are advised during the Instant Recovery Wizard
operations.
■ Instant recovery can be simultaneously performed for about ten virtual machines
for a single NetBackup master server. However, for performance reasons, it is
recommended to limit the operation to 2 to 3 virtual machines if the NetBackup
storage type is PureDisk. Consult your backup administrator for more details.
■ If an instant recovery operation (activate/reactivate/deactivate/done) fails, check
the NetBackup event logs using the vSphere Web Client interface (Veritas
NetBackup > Events), for more details.
■ Remove from the plug-in any NetBackup master servers in an unused,
unreachable, or shutdown state.
■ On the Instant Recovery Wizard screens, wait for the ongoing IR operation to
complete. While the cursor indicates a busy state, do not click on other options.
 Appendix B
Installing the vSphere Web
Client plug-in from a
NetBackup media server
and plug-in package host
This appendix includes the following topics:

■ Installing the plug-in from a NetBackup media server and plug-in package host
(web server)

Installing the plug-in from a NetBackup media

server and plug-in package host (web server)
This topic describes how to install the NetBackup plug-in for vSphere Web Client
from a NetBackup media server.
By default, the vSphere Web Client plug-in is installed over an https connection by
means of the NetBackup master server. If the master server does not have a network
connection to the vCenter server, you can install the plug-in from a NetBackup
media server and your own plug-in package host.
Table B-1 is a brief list of the installation requirements, followed by the installation
procedure.
 Installing the vSphere Web Client plug-in from a NetBackup media server and plug-in package host 104
Installing the plug-in from a NetBackup media server and plug-in package host (web server)

Table B-1 Requirements for installing the vSphere Web Client plug-in from
a NetBackup media server

Requirement Description

Plug-in package host The plug-in package host must be a web server. It must be accessible as follows:
(web server)
■ The vCenter server where you want to install the plug-in must have network access to this
package host.
■ The NetBackup media server where you run the plug-in installation must have network
access to this package host.

Note: You must supply the URL of the plug-in package host during plug-in installation.

Plug-in installation The plug-in installation media is a zip file ([Link]) that needs to be
media hosted on a web server. This file contains the plug-in software that the VMware vCenter
downloads for plug-in deployment.
Note: Do not rename the [Link] file.

NetBackup media The media server from which you install the plug-in must have network access to the plug-in
server package host web server and to the vCenter server.

Additional To configure the vCenter to allow an http URL, add allowHttp=true to the vCenter's
configuration if the [Link] file. Use the procedure in the following topic:
URL for the plug-in
See “The NetBackup plug-in is not shown in the vSphere Web Client interface even after
package host uses
registration” on page 95.
HTTP instead of
HTTPS.
Installing the vSphere Web Client plug-in from a NetBackup media server and plug-in package host 105
Installing the plug-in from a NetBackup media server and plug-in package host (web server)

To install the vSphere Web Client plug-in from a NetBackup media server
1 Download the [Link] file from the NetBackup master
server and copy it to the appropriate folder on the plug-in package host (web
server). The vCenter later downloads the file from the web server.
You can download the file from the master server by means of a browser:

[Link]
/[Link]

Note: This example uses a port number of 8443. However, the port number
on the master server may be different.

2 A security pop-up may ask you to verify or confirm the master server's certificate
for the download. To proceed with the download, you must verify the certificate
by confirming the security exception.
If the certificate has already been trusted or added as an exception, the security
pop-up does not appear.
3 From the media server that has network access to the vCenter and to the
plug-in package host, start the vwcp_manage command:
Windows: install_path\NetBackup\bin\goodies\vwcp_manage.exe
UNIX, Linux: /usr/openv/netbackup/bin/goodies/vwcp_manage

Note: If you run vwcp_manage with administrator or root privileges, the command
discovers the available vCenters and presents them in a list (in a following
step). Otherwise, you must provide the vCenter name or IP address.
Installing the vSphere Web Client plug-in from a NetBackup media server and plug-in package host 106
Installing the plug-in from a NetBackup media server and plug-in package host (web server)

4 Registration begins with the End User License Agreement (click Accept):
Installing the vSphere Web Client plug-in from a NetBackup media server and plug-in package host 107
Installing the plug-in from a NetBackup media server and plug-in package host (web server)

5 On the following dialog, use the pull-down list to select the vCenter server and
enter the credentials, then click Validate.
If the vwcp_manage command was not run with administrator or root privileges,
you must manually enter the vCenter name or IP address.

The registration utility connects to the vCenter server and determines whether
the plug-in is registered. If the plug-in is not registered, the Plug-in package
location dialog appears.
Installing the vSphere Web Client plug-in from a NetBackup media server and plug-in package host 108
Installing the plug-in from a NetBackup media server and plug-in package host (web server)

6 Select Use alternate plug-in package location and enter the full URL of the
plug-in package host where the [Link] file is hosted.
This host is the web server where the plug-in zip file was copied in step 1. You
can test the URL by downloading the plug-in zip file using a web browser.

Note: The URL field is not pre-populated with the plug-in package host URL.
You must enter the URL.

7 Click Register.
■ If the URL entered in step 6 uses the secure https protocol, a security alert
appears:
Installing the vSphere Web Client plug-in from a NetBackup media server and plug-in package host 109
Installing the plug-in from a NetBackup media server and plug-in package host (web server)

This security alert shows the identity of the web server that hosts the plug-in
package. The vCenter later downloads the plug-in from this server. Use
this dialog to verify the identity of the plug-in package web server.
To allow the installation to proceed, click Continue.
■ If the URL entered in step 6 uses http instead of https, you are prompted
to configure the vCenter to allow an http URL:

To configure the vCenter to allow an http URL, use the procedure in the
following topic:
See “The NetBackup plug-in is not shown in the vSphere Web Client
interface even after registration” on page 95.
When you have completed the procedure to allow installation of the plug-in
over HTTP, click OK on the Warning.
Installing the vSphere Web Client plug-in from a NetBackup media server and plug-in package host 110
Installing the plug-in from a NetBackup media server and plug-in package host (web server)

Note: If the vCenter's [Link] file already includes

allowHttp=true, you can skip the HTTP procedure (click OK on the
Warning).

8 The following appears:

9 Click Close.
10 To verify that the plug-in installed correctly, go to the vSphere Web Client object
navigator.
For example, under Home > Hosts and Clusters > Monitor, look for the
Veritas NetBackup tab.
See “How to access the features of the NetBackup plug-in for vSphere Web
Client” on page 9.
If the Veritas NetBackup tab does not appear:
See “The NetBackup plug-in is not shown in the vSphere Web Client interface
even after registration” on page 95.
11 To register the plug-in with another vCenter, repeat this procedure starting at
step 3.