04-21-2020 10:53 AM - edited 04-21-2020 10:56 AM
My native language is Spanish, sorry for my English translation.
I am having trouble getting clients to connect to my master server after upgrading from version 7.6.1 to 7.7 and finally to 8.2.
I know the problem is with certificates.
Where can I start looking for solutions?
Since the Clients with previous versions work correctly.
The current security level is Medium.
The Master Server is Windows.
Clients are Windows too.
Thank you very much for the help.
This message shows me when installing client 8.2 locally in the client:
#The setup wizard could not determine the security certificate mode of master server [master_server].
#The command executed was: ["C:\Users\ADMIN\AppData\Local\Temp\nbcertcmdtool.exe" -getSecConfig -caUsage -#server master_server -installDir "C:\Program Files\Veritas\NetBackup" -atLibPath #"C:\Users\ADMINI~1.SIM\AppData\Local\Temp" -debugFile #"C:\ProgramData\Veritas\NetBackup\InstallLogs\ExternalCertificateOp.20200421.165124.log"].
#Command status: [8500].
#Command output:
#The external CA usage information could not be retrieved.
#EXIT STATUS 8500: Connection with the web service was not established.
04-21-2020 11:13 AM
When you upgraded your master, did you setup the webservice account?
04-21-2020 11:20 AM
Hola ;)
Login to your master and execute the following from CMD - admin command prompt - if this is Linux - from its shell:
nbcertcmd -createToken -name new_clients -maxusues number_of_clients
most likely you will have to loning to NBU using bpnbat - the previous commnad will tell you how to do it - cant recall from the top of my head.
Copy this token to your clipboard - we will use it later on.
Than login to upgraded client and execute as follow:
nbcertcmd -listCACertdetails
If nothing was returned or there is other cert on master (to check on master you can run the same command)
nbcertcmd -getCACertificate
to get CA certifiate, than get certificate for this client by ecxecuting
nbcertcmd -getCertificate -token paste_your_clipboard_here -force
That should have helped....
You can reference to this
https://www.veritas.com/support/en_US/article.100039650
https://www.veritas.com/support/en_US/article.100045941
https://www.veritas.com/content/support/ja_JP/article.100034092
04-21-2020 02:14 PM
Yes, create a domain account, with Log on as a service.
04-24-2020 09:19 AM
@quebek ,
What is the account that will be used when using the bpnbat command?
I have searched and I have not found if it is my account, the account used in the Client or another.
# C:\Program Files\Veritas\NetBackup\bin>bpnbat.exe -WhoAmI
# Failed to get logged in user details, either credentials are expired or not available.
04-26-2020 11:19 AM