Netbackup failed to obtain SSO Certificate using VMWare vCloud Suite APIs

[ponuts1]

Hi 

We have two netbackup appliance 3.1.1, 5240 in two datacenters one virtulized NBU-master with 8.11. Installation is rather straigth. This problem is somehow related to vmware backup. A bit of the setup for that policy: 

letsay one databox called dc007 (the faulty one) and dc008 (the goodone)

• Policytype: VMware
• disable client-side deduplication
• use Accelerator
• Standard schedule
• Select automatically through VMware intelligent Policy Query (yee.. short this one)
• empty box "Enable vCloud Director integration". (we dont use cloud in any circomstans)
• Advanced settings (the imortant one)
  • virtual machine quisce - enable
  • snapshot retry 2
  • Snapshot creation intervals 10
  • (rest is no or 0 or disabled
• Transport SAN

Problem 

This policy has stopped work after a reboot on the appliance otherwice all same (what i can remeber).

This works:

• Query builder with one object in Like "displayname equal <hostname>" when the dc007 is the media server and i run a TEST Query and run the work. 
• Same query on the other appliance box as "Netbackup host to perform autmatic virtual machine selection

This doesnt work:

• Multiple lines in the query when dc007 is media server do the work, gives FAILED with the error "2018-nov-07 09:57:30 - Error nbpem (pid=5076) 
  Failed to obtain SSO certificate using VMware vCloud Suite APIs, 
  msg = [com.vmware.vapi.std.errors.Unauthenticated: Unauthenticated 
  (com.vmware.vapi.std.errors.unauthenticated) => {"
  • Change this do the DC008 it goes well or the NBU-Master

What I've done so far

• Rebooted the master server
• Rebooted the media server
• Restarted the service
• Have an ongoing ticket with Veritas (good fellow) ;). (but on the other side of our timezone).. 
• Rearange and created new policy with simple querys in any form to see if it helps. .same error.. 

Regards Pontus Ankarbåge

[Krutons]

Same credentials for both dc007 and dc008 in Credentials in the Admin Console?

[Popp]

Hi ponuts1,

I have exact same issue.. Running 8.1.2 and all media servers are allowed to backup VMs.

Did you find a resolution for this issue?

Best regards

Popp

[ponuts1 · Accepted solution]

RESOLUTION SUMMARY:  
Referred :https://www.veritas.com/support/en_US/article.100043900

Performed below steps:
On the Master, run services.msc and locate NetBackup Web Management Console service (nbwmc)
Identify the account used to start the nbwmc service
Locate / Acquire the password for this account
Open an Administrator CMD prompt on the Master
Create the following Environment Variable for the CMD window by running: set WEBSVC_PASSWORD=<passwordHere>
Run: ...\NetBackup\bin\admincmd\nbcertconfig -t (use -t -f for NBU 8.1.1 and newer
NOTE: If this fails, it is likely to be due to an incorrect password.
To verify the password is correct, use the following command to spawn a new CMD window running as the account in question: runas /user:<user> cmd.exe
Example local account : runas /user:nbwebsvc cmd.exe
Example domain account: runas /user:COMPANY\nbwebsvc cmd.exe
If the new CMD window opens successfully, it means the credentials were correct - the new window can simply be closed
If the new CMD window fails to open, examine the on-screen language to identify why
CD into ...\NetBackup\wmc\bin\install
Run: configureCerts.bat
Restart the nbwmc service
Run: nbcertcmd -getCACertificate
Run: nbcertcmd -getCertificate –force

REFERENCE:
Please refer to the Customer Portal for related articles attached to your case.

// Pontus Ankarbåge