Netbackup failed to obtain SSO Certificate using VMWare vCloud Suite APIs

Hi 

We have two netbackup appliance 3.1.1, 5240 in two datacenters one virtulized NBU-master with 8.11. Installation is rather straigth. This problem is somehow related to vmware backup. A bit of the setup for that policy: 

letsay one databox called dc007 (the faulty one) and dc008 (the goodone)

  • Policytype: VMware
  • disable client-side deduplication
  • use Accelerator
  • Standard schedule
  • Select automatically through VMware intelligent Policy Query (yee.. short this one)
  • empty box "Enable vCloud Director integration". (we dont use cloud in any circomstans)
  • Advanced settings (the imortant one)
    • virtual machine quisce - enable
    • snapshot retry 2
    • Snapshot creation intervals 10
    • (rest is no or 0 or disabled
  • Transport SAN

Problem 

This policy has stopped work after a reboot on the appliance otherwice all same (what i can remeber).

This works:

  • Query builder with one object in Like "displayname equal <hostname>" when the dc007 is the media server and i run a TEST Query and run the work. 
  • Same query on the other appliance box as "Netbackup host to perform autmatic virtual machine selection

This doesnt work:

  • Multiple lines in the query when dc007 is media server do the work, gives FAILED with the error "2018-nov-07 09:57:30 - Error nbpem (pid=5076) 
    Failed to obtain SSO certificate using VMware vCloud Suite APIs, 
    msg = [com.vmware.vapi.std.errors.Unauthenticated: Unauthenticated 
    (com.vmware.vapi.std.errors.unauthenticated) => {"
    • Change this do the DC008 it goes well or the NBU-Master

What I've done so far

  • Rebooted the master server
  • Rebooted the media server
  • Restarted the service
  • Have an ongoing ticket with Veritas (good fellow) Smiley Wink. (but on the other side of our timezone).. 
  • Rearange and created new policy with simple querys in any form to see if it helps. .same error.. 

Regards Pontus Ankarbåge

 

PoNuts
Tags (2)
1 Solution

Accepted Solutions
Highlighted
Accepted Solution!

Re: Netbackup failed to obtain SSO Certificate using VMWare vCloud Suite APIs

RESOLUTION SUMMARY:  
Referred :https://www.veritas.com/support/en_US/article.100043900

Performed below steps:
On the Master, run services.msc and locate NetBackup Web Management Console service (nbwmc)
Identify the account used to start the nbwmc service
Locate / Acquire the password for this account
Open an Administrator CMD prompt on the Master
Create the following Environment Variable for the CMD window by running: set WEBSVC_PASSWORD=<passwordHere>
Run: ...\NetBackup\bin\admincmd\nbcertconfig -t (use -t -f for NBU 8.1.1 and newer
NOTE: If this fails, it is likely to be due to an incorrect password.
To verify the password is correct, use the following command to spawn a new CMD window running as the account in question: runas /user:<user> cmd.exe
Example local account : runas /user:nbwebsvc cmd.exe
Example domain account: runas /user:COMPANY\nbwebsvc cmd.exe
If the new CMD window opens successfully, it means the credentials were correct - the new window can simply be closed
If the new CMD window fails to open, examine the on-screen language to identify why
CD into ...\NetBackup\wmc\bin\install
Run: configureCerts.bat
Restart the nbwmc service
Run: nbcertcmd -getCACertificate
Run: nbcertcmd -getCertificate –force

REFERENCE:
Please refer to the Customer Portal for related articles attached to your case.

// Pontus Ankarbåge

PoNuts

View solution in original post

3 Replies

Re: Netbackup failed to obtain SSO Certificate using VMWare vCloud Suite APIs

Same credentials for both dc007 and dc008 in Credentials in the Admin Console?

Re: Netbackup failed to obtain SSO Certificate using VMWare vCloud Suite APIs

Hi ponuts1,

I have exact same issue.. Running 8.1.2 and all media servers are allowed to backup VMs.

Did you find a resolution for this issue?

Best regards

Popp

Highlighted
Accepted Solution!

Re: Netbackup failed to obtain SSO Certificate using VMWare vCloud Suite APIs

RESOLUTION SUMMARY:  
Referred :https://www.veritas.com/support/en_US/article.100043900

Performed below steps:
On the Master, run services.msc and locate NetBackup Web Management Console service (nbwmc)
Identify the account used to start the nbwmc service
Locate / Acquire the password for this account
Open an Administrator CMD prompt on the Master
Create the following Environment Variable for the CMD window by running: set WEBSVC_PASSWORD=<passwordHere>
Run: ...\NetBackup\bin\admincmd\nbcertconfig -t (use -t -f for NBU 8.1.1 and newer
NOTE: If this fails, it is likely to be due to an incorrect password.
To verify the password is correct, use the following command to spawn a new CMD window running as the account in question: runas /user:<user> cmd.exe
Example local account : runas /user:nbwebsvc cmd.exe
Example domain account: runas /user:COMPANY\nbwebsvc cmd.exe
If the new CMD window opens successfully, it means the credentials were correct - the new window can simply be closed
If the new CMD window fails to open, examine the on-screen language to identify why
CD into ...\NetBackup\wmc\bin\install
Run: configureCerts.bat
Restart the nbwmc service
Run: nbcertcmd -getCACertificate
Run: nbcertcmd -getCertificate –force

REFERENCE:
Please refer to the Customer Portal for related articles attached to your case.

// Pontus Ankarbåge

PoNuts

View solution in original post