Forum Discussion

BKPEXEAdmin's avatar
BKPEXEAdmin
Level 3
6 days ago

Backup Host SSL issue in Flex Appliance

Hi Folks,

 

We got a Flex Appliance in which we set up 1 Primary and 1 Media, as want to back up some Nutanix VMs through the Cluster.

We decided to go with the MediaServer instance as our backup host.
The issue is when trying to add the Nutanix Cluster through the NBU Web UI, below the displayed error : 

"Credential validation failed. Provide correct AHV credentials, ensure that the backup host has Linux/Windows OS, verify that the backup host can access the AHV cluster, or the external CA is configured correctly."

After some troubleshooting, we found the "nb_nutanix-ahv.conf" in the Media instance with the parameter "enable_ssl_validations" which is enabled by default. When disabling it, the Cluster is added successfully. Enabling it back, the integration of the Cluster failed again. So, we confirmed that the issue is related to SSL certificate.

We tried to set the SSL communication following the NBU documentation, but it did not work, maybe we missed something (Below doc link) : https://www.veritas.com/support/en_US/doc/150073865-163074231-0/v147708883-163074231

Any idea how to fix this SSL issue with Nutanix ?

Flex v 5.0 and NBU v 10.5.

Regards.

 

Flex
Media
Nutanix
primaryinstance
SSL certificate
WebUI
  • kiyan's avatar
    kiyan
    Level 6
    3 days ago

    Yes it is possible.
    on master and media server, run #nbgetconfig | grep -i ECA
    did you added the certificates on both master and media (access hosts)?
    is the certification you have added is the correct and active certification of Nutanix cluster?
    Please read below links:
    https://www.veritas.com/support/en_US/doc/127664414-152912906-0/v138783801-152912906

    https://www.veritas.com/support/en_US/doc/127664414-152912906-0/v138652426-152912906

    nb_nutanix-ahv.conf is used for netbackup up to version 8.2

    you will need to add certs on both media(access host) and master.

  • kiyan's avatar
    kiyan
    Level 6
    5 days ago

    You will be still able to take backup of Nutanix without SSL.
    in case you faced an error , add NB master and media IPs to NUtanix, whilelist (in cluster >setting>stroage whitelist /whitelist)

    • BKPEXEAdmin's avatar
      BKPEXEAdmin
      Level 3
      4 days ago

      Hi kiyan 

      Thanks for the reply.
      Yes, we know, but we would like to set a secure communication between NBU and Nutanix.

      Is it still possible to use SSL ? 

      Regards.