Forum Discussion

ponuts1's avatar
ponuts1
Level 2
6 years ago

Netbackup failed to obtain SSO Certificate using VMWare vCloud Suite APIs

Hi 

We have two netbackup appliance 3.1.1, 5240 in two datacenters one virtulized NBU-master with 8.11. Installation is rather straigth. This problem is somehow related to vmware backup. A bit of the setup for that policy: 

letsay one databox called dc007 (the faulty one) and dc008 (the goodone)

  • Policytype: VMware
  • disable client-side deduplication
  • use Accelerator
  • Standard schedule
  • Select automatically through VMware intelligent Policy Query (yee.. short this one)
  • empty box "Enable vCloud Director integration". (we dont use cloud in any circomstans)
  • Advanced settings (the imortant one)
    • virtual machine quisce - enable
    • snapshot retry 2
    • Snapshot creation intervals 10
    • (rest is no or 0 or disabled
  • Transport SAN

Problem 

This policy has stopped work after a reboot on the appliance otherwice all same (what i can remeber).

This works:

  • Query builder with one object in Like "displayname equal <hostname>" when the dc007 is the media server and i run a TEST Query and run the work. 
  • Same query on the other appliance box as "Netbackup host to perform autmatic virtual machine selection

This doesnt work:

  • Multiple lines in the query when dc007 is media server do the work, gives FAILED with the error "2018-nov-07 09:57:30 - Error nbpem (pid=5076) 
    Failed to obtain SSO certificate using VMware vCloud Suite APIs, 
    msg = [com.vmware.vapi.std.errors.Unauthenticated: Unauthenticated 
    (com.vmware.vapi.std.errors.unauthenticated) => {"
    • Change this do the DC008 it goes well or the NBU-Master

What I've done so far

  • Rebooted the master server
  • Rebooted the media server
  • Restarted the service
  • Have an ongoing ticket with Veritas (good fellow) ;). (but on the other side of our timezone).. 
  • Rearange and created new policy with simple querys in any form to see if it helps. .same error.. 

Regards Pontus Ankarbåge

 

8
appliance
NetBackup
VMware
windows server 2012
  • ponuts1's avatar
    ponuts1
    6 years ago

    RESOLUTION SUMMARY:  
    Referred :https://www.veritas.com/support/en_US/article.100043900

    Performed below steps:
    On the Master, run services.msc and locate NetBackup Web Management Console service (nbwmc)
    Identify the account used to start the nbwmc service
    Locate / Acquire the password for this account
    Open an Administrator CMD prompt on the Master
    Create the following Environment Variable for the CMD window by running: set WEBSVC_PASSWORD=<passwordHere>
    Run: ...\NetBackup\bin\admincmd\nbcertconfig -t (use -t -f for NBU 8.1.1 and newer
    NOTE: If this fails, it is likely to be due to an incorrect password.
    To verify the password is correct, use the following command to spawn a new CMD window running as the account in question: runas /user:<user> cmd.exe
    Example local account : runas /user:nbwebsvc cmd.exe
    Example domain account: runas /user:COMPANY\nbwebsvc cmd.exe
    If the new CMD window opens successfully, it means the credentials were correct - the new window can simply be closed
    If the new CMD window fails to open, examine the on-screen language to identify why
    CD into ...\NetBackup\wmc\bin\install
    Run: configureCerts.bat
    Restart the nbwmc service
    Run: nbcertcmd -getCACertificate
    Run: nbcertcmd -getCertificate –force

    REFERENCE:
    Please refer to the Customer Portal for related articles attached to your case.

    // Pontus Ankarbåge

  • Popp's avatar
    Popp
    Level 1
    6 years ago

    Hi ponuts1,

    I have exact same issue.. Running 8.1.2 and all media servers are allowed to backup VMs.

    Did you find a resolution for this issue?

    Best regards

    Popp

    • ponuts1's avatar
      ponuts1
      Level 2
      6 years ago

      RESOLUTION SUMMARY:  
      Referred :https://www.veritas.com/support/en_US/article.100043900

      Performed below steps:
      On the Master, run services.msc and locate NetBackup Web Management Console service (nbwmc)
      Identify the account used to start the nbwmc service
      Locate / Acquire the password for this account
      Open an Administrator CMD prompt on the Master
      Create the following Environment Variable for the CMD window by running: set WEBSVC_PASSWORD=<passwordHere>
      Run: ...\NetBackup\bin\admincmd\nbcertconfig -t (use -t -f for NBU 8.1.1 and newer
      NOTE: If this fails, it is likely to be due to an incorrect password.
      To verify the password is correct, use the following command to spawn a new CMD window running as the account in question: runas /user:<user> cmd.exe
      Example local account : runas /user:nbwebsvc cmd.exe
      Example domain account: runas /user:COMPANY\nbwebsvc cmd.exe
      If the new CMD window opens successfully, it means the credentials were correct - the new window can simply be closed
      If the new CMD window fails to open, examine the on-screen language to identify why
      CD into ...\NetBackup\wmc\bin\install
      Run: configureCerts.bat
      Restart the nbwmc service
      Run: nbcertcmd -getCACertificate
      Run: nbcertcmd -getCertificate –force

      REFERENCE:
      Please refer to the Customer Portal for related articles attached to your case.

      // Pontus Ankarbåge

  • Krutons's avatar
    Krutons
    Moderator
    6 years ago

    Same credentials for both dc007 and dc008 in Credentials in the Admin Console?