NetBackup81 LiveUpdate Guide
NetBackup81 LiveUpdate Guide
LiveUpdate Guide
Release 8.1
Veritas NetBackup™ LiveUpdate Guide
Last updated: 2018-02-16
Legal Notice
Copyright © 2018 Veritas Technologies LLC. All rights reserved.
Veritas, the Veritas Logo, and NetBackup are trademarks or registered trademarks of Veritas
Technologies LLC or its affiliates in the U.S. and other countries. Other names may be
trademarks of their respective owners.
This product may contain third-party software for which Veritas is required to provide attribution
to the third party (“Third-party Programs”). Some of the Third-party Programs are available
under open source or free software licenses. The License Agreement accompanying the
Software does not alter any rights or obligations you may have under those open source or
free software licenses. Refer to the Third-party Legal Notices document accompanying this
Veritas product or available at:
https://www.veritas.com/about/legal/license-agreements
The product described in this document is distributed under licenses restricting its use, copying,
distribution, and decompilation/reverse engineering. No part of this document may be
reproduced in any form by any means without prior written authorization of Veritas Technologies
LLC and its licensors, if any.
The Licensed Software and Documentation are deemed to be commercial computer software
as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19
"Commercial Computer Software - Restricted Rights" and DFARS 227.7202, et seq.
"Commercial Computer Software and Commercial Computer Software Documentation," as
applicable, and any successor regulations, whether delivered by Veritas as on premises or
hosted services. Any use, modification, reproduction release, performance, display or disclosure
of the Licensed Software and Documentation by the U.S. Government shall be solely in
accordance with the terms of this Agreement.
Technical Support
Technical Support maintains support centers globally. All support services will be delivered
in accordance with your support agreement and the then-current enterprise technical support
policies. For information about our support offerings and how to contact Technical Support,
visit our website:
https://www.veritas.com/support
You can manage your Veritas account information at the following URL:
https://my.veritas.com
If you have questions regarding an existing support agreement, please email the support
agreement administration team for your region as follows:
Japan [email protected]
Documentation
Make sure that you have the current version of the documentation. Each document displays
the date of the last update on page 2. The latest documentation is available on the Veritas
website:
https://sort.veritas.com/documents
Documentation feedback
Your feedback is important to us. Suggest improvements or report errors or omissions to the
documentation. Include the document title, document version, chapter title, and section title
of the text on which you are reporting. Send feedback to:
You can also see documentation information or ask a question on the Veritas community site:
http://www.veritas.com/community/
https://sort.veritas.com/data/support/SORT_Data_Sheet.pdf
Contents
Note: NetBackup LiveUpdate does not support upgrades to major releases and
minor releases for NetBackup servers.
Caution:
The client installations that are initiated from LiveUpdate do not deploy security
certificates. The lack of a certificate causes backups and restores to fail. Manual
steps are required to deploy security certificates. See technote_link for more
information on security certificates.
The LiveUpdate process is managed manually to help you control which computers
are updated and when the updates occur.
The following describes how updates are downloaded and installed:
Introduction 6
About NetBackup LiveUpdate
■ First, you must manually copy the necessary files to your designated NetBackup
LiveUpdate server.
For NetBackup Release Update packages, download the necessary files from
the appropriate Veritas support site. Update packages consist of several
compressed files. You must download the full set.
For major or minor releases starting with NetBackup version 7.1, copy the
contents from the DVD that is included in your media kit.
■ Next, create a LiveUpdate policy and run it on your NetBackup master server.
The policy starts a LiveUpdate session with each client in the policy.
For release updates and hot fixes, you can include NetBackup servers in a
LiveUpdate policy. For upgrades to major or to minor releases, only clients
should be included in a LiveUpdate policy.
■ When you run the LiveUpdate policy, the LiveUpdate agent on each client checks
with the LiveUpdate server for any available updates. The agent then launches
the NetBackup update installation scripts that install the updates silently.
NetBackup LiveUpdate uses the same agent as Veritas LiveUpdate. The difference
is the server where the available product updates reside.
The following describes these differences:
When you install or upgrade to NetBackup 8.1, the following LiveUpdate agent is
installed automatically:
Before you can use NetBackup LiveUpdate, you must set up and configure your
NetBackup LiveUpdate server. This server can be either a web server or a shared
Introduction 7
About NetBackup LiveUpdate
disk. The only requirement is that it must be accessible by all of the NetBackup
hosts that you want to update.
Note: Currently, to use a Windows shared disk you must set up the share as a null
share. For more details, refer to the following tech note at
http://www.veritas.com/docs/TECH55675.
This server is used to download and store NetBackup release update files. The
server is also used to store the client packages that are included with major and
minor releases. From this server, the files are distributed and installed on the
computers in your NetBackup environment.
The following describes the NetBackup LiveUpdate installation capabilities:
Cross-platform installation ■ Windows and UNIX hosts can be updated from a single
LiveUpdate policy.
■ The policy can be created and run from either a Windows
or a UNIX host.
Clustered systems ■ Release updates and hot fixes can be downloaded and
installed on Windows and UNIX clustered systems.
■ Client packages in major and minor releases can be
copied to the NetBackup LiveUpdate server and installed
on clients in Windows and UNIX clusters.
Using LiveUpdate for update installation does not require local administrator
privileges on NetBackup installations, except on Windows clustered systems. You
must, however, have privileges to run NetBackup policies from the NetBackup
master server.
NetBackup LiveUpdate is an additional method to distribute updates quickly and
more conveniently. The current program for customers to obtain updates remains
in place.
NetBackup does not deliver Java JRE for the Linux IBMpSeries platform. For this
platform, the NetBackup installation script attempts to detect an acceptable version
of Java JRE. If an acceptable version is detected, the appropriate links are created.
If an unacceptable version is detected, the script notifies you.
If the script does not detect Java JRE or an acceptable version of it, you must install
Java JRE manually before you install NetBackup. After you have installed Java
JRE 1.4.2 or later, you can install the NetBackup client software.
Some NetBackup LiveUpdate versions are not supported for use with some Linux
IBMpSeries and IBMzSeries systems. The following table describes which
NetBackup LiveUpdate versions can be used on these systems.
IBMpSeries RedHat Yes (see Note 2) Yes (see Note 2) Yes (see Note 2)
■ Note 1
Java JRE is delivered with NetBackup for IBMzSeries systems. Under certain
conditions, the following error and failure may occur when you upgrade
NetBackup clients:
Oct 13, 2010 1:00:37 AM Trying to load jar file from /tmp/
1286949636653/cryptix-jce-provider.jar
Oct 13, 2010 1:00:37 AM IdsEncodingFailed
Oct 13, 2010 1:00:37 AM JLUException
Nested Exception is:
[ java.security.InvalidKeyException ] Illegal key size or
default parameters
■ Note 2
Before you can use NetBackup LiveUpdate on IBMpSeries RedHat version 4,
you must first install IBM JRE version 1.6.
See “About LiveUpdate file share servers and LiveUpdate policies with Windows
and UNIX clients” on page 33.
Internet
2
7
1
NetBackup media server
3
4
6
5 LiveUpdate server
NetBackup clients
Note: All NetBackup communications (from master to media to client, for example)
uses the standard NetBackup ports that are used for backups and restores.
The push and silent installation methods do not install the LiveUpdate
agent as part of the package
The push and silent installation methods do not install the LiveUpdate agent as part
of the package. To install the LiveUpdate agent, Veritas recommends that you copy
Introduction 11
NetBackup LiveUpdate operational notes
the LiveUpdate binaries to the local host and install the LiveUpdate agent manually.
The LiveUpdate binaries are available at the following location:
\\<dvd_root>\Addons\<platform>\LiveUpdate
For more information about how to install LiveUpdate, refer to the NetBackup
LiveUpdate Guide.
Note: If this issue affects a large number of computers, you can use a third-party
application such as Altiris to install the LiveUpdate agent.
Chapter 2
Setting up a LiveUpdate
server
This chapter includes the following topics:
Environments with an existing If you have a local dedicated LiveUpdate server for other
LiveUpdate server Veritas products like Veritas Endpoint Security or Veritas
AntiVirus, be aware of potential conflicts.
To avoid conflicts, take one of the following actions:
Download from Support NetBackup LiveUpdate release update packages are different from
website (release the typical NetBackup release update packages. The LiveUpdate
updates and hot fixes agent can only download and install the packages that are signed
and formatted specifically for LiveUpdate. NetBackup LiveUpdate
package names start with NBLU and they consist of several
compressed files. The files are only available for manual download
from the customer support site.
Setting up a LiveUpdate server 14
Copying NetBackup LiveUpdate formatted packages to your LiveUpdate server
Copy files from DVD Copy the contents of the NetBackup LiveUpdate formatted clients
(major and minor DVD to the desired location on your NetBackup LiveUpdate server.
releases)
For example, you installed LiveUpdate on the master server and two other hosts.
All three of these servers were configured as LiveUpdate servers. When you create
the LiveUpdate policy, you must specify the LiveUpdate Server Location. You
specify any of the three LiveUpdate server names as the LiveUpdate Server
Location. Then you add all the host names of the hosts you want updated by the
LiveUpdate policy. When the policy is run, the specified LiveUpdate Server
Location is assigned to all the hosts in the policy.
Alternatively, you can configure the LiveUpdate Server Location at each individual
host. You must use this configuration method before you run a LiveUpdate policy
on that host.
Use the following guidelines when you create LiveUpdate policies:
Servers that run LiveUpdate Since NetBackup services and daemons are shut down during
policies release update installation, do not add the following servers
to a LiveUpdate policy:
LiveUpdate policies are not a type of backup policy but are a type of NetBackup
generic policy. From the NetBackup Administration Console, LiveUpdate policies
do not appear in the Policies tab. To view and manage LiveUpdate policies, you
must select File > LiveUpdate or click the LiveUpdate icon.
LiveUpdate Server Location ■ Enter the complete path of the LiveUpdate server
location where the updates reside.
The following examples show the format that you
must use to enter the server location:
http://yourWebServer.com/LUServer/
file:/net/yourFileServer/LUServer/
file:\\yourFileServer\LUServer\
Updating servers and clients 18
Creating a LiveUpdate policy
Force all clients in this By default, this option is checked. Veritas recommends
policy to use the same that you create LiveUpdate policies to include all hosts
LiveUpdate server location that use the same LiveUpdate Server Location, and
leave this option checked.
http://www.veritas.com/docs/DOC5332
Note: If a firewall prevents communication between
the master server and the clients, the policy must specify
a media server that can communicate with the clients.
The server that you specify cannot be included in this
policy.
Updating servers and clients 19
Importing clients into LiveUpdate policies
Limit jobs per policy Set this option to the number of LiveUpdate jobs that
you want to run simultaneously, when you run the policy.
Note: You can also redirect the output of bpplclients to a file that can be
used to import clients. The command
/usr/openv/netbackup/bin/admincmd/bpplclients > clients.txt provides
a client list in the correct format.
3 After all clients are added, save and close the file.
4 When you select to import clients from a text file, you are prompted to browse
to the text file location to open it.
If any clients appear as Incomplete or Invalid, the entries for those clients are
not correct. Those clients cannot be imported until the entries in the text file
are corrected.
The following describes the order that updates should take place:
Media servers After all master servers are updated, media servers can
be updated.
Clients After master servers and media servers are updated, you
can update clients.
A known issue exists when the nbliveup command is used on AMD64 systems.
Use the nbliveup command on these systems with one of the following methods:
Method A—Local update You must log on to the computer as the console user
either locally or through a remote desktop session, by
using the following command:
http://support.microsoft.com/kb/278845
Method B—Remote update Initiate the LiveUpdate session from a different NetBackup
master server.
Use the following procedure to update servers. Start with the master servers and
then update any media servers.
To update servers by using NetBackup LiveUpdate
1 Make sure that there is no backup or restore job activity on the master server
where you run the LiveUpdate policy.
2 Update master servers with one of the following methods:
■ nbliveup command (for local updates)
When you use the nbliveup command, enter the complete path of the
LiveUpdate server location where the updates reside.
The following examples show the format that you must use to enter the
server location:
http://yourWebServer.com/LUServer/
file:/net/yourFileServer/LUServer/
file:\\yourFileServer\LUServer\
■ LiveUpdate policy
To run the LiveUpdate policy: ■ From a different server, launch the NetBackup
Administration Console.
■ Click File > LiveUpdate.
■ In the LiveUpdate Policy window, select the
LiveUpdate policy that includes the master server
that you want to update.
■ Click Run LiveUpdate Policy.
■ Check the Activity Monitor to verify that all
LiveUpdate jobs complete.
■ Clustered servers
Updating servers and clients 25
Updating servers by using NetBackup LiveUpdate
On Windows systems: For best practices, update the inactive nodes first
and then update the active node.
■ On each inactive node in the cluster, run the
following command:
NetBackup\bin\nbliveup.exe
liveupdateServerProtocolOverride
<LiveUpdate Server_Location>
■ On the active node, run the following command:
NetBackup\bin\nbliveup.exe
liveupdateServerProtocolOverride
<LiveUpdate_Server_Location>
Updating servers and clients 26
Updating clients by using NetBackup LiveUpdate
3 If you have media servers, repeat the steps in this procedure to update those
servers.
To update clients
1 Make sure that the Windows clients that you plan to update all have the
NetBackup client services running. Windows clients cannot be updated using
a LiveUpdate policy if the NetBackup client services are down.
2 From the master server, launch the NetBackup Administration Console.
3 Click File > LiveUpdate.
4 In the LiveUpdate Policy window, select the LiveUpdate policy that includes
the clients you want to update.
5 Click Run LiveUpdate Policy.
6 Check the Activity Monitor to verify that all LiveUpdate jobs complete.
On all NetBackup servers and clients, the nbliveup log directory is created when
you install NetBackup LiveUpdate.
To enable the liveupdate and the patch logging features, you must first run the
appropriate command or create the appropriate directories. These features must
be enabled before you run any LiveUpdate policies.
The following describes the different methods you can use to enable these features:
Updating servers and clients 28
About LiveUpdate logs
If you do not create these directories, you can only view the additional LiveUpdate
logs from their original locations as follows:
/etc/Product.Catalog.JavaLiveUpdate
LU_Registration.exe -InstallType
Unregister -Product NBU-Java
To enable LiveUpdate on a host after it has been disabled, enter the appropriate
command on the host:
■ About LiveUpdate file share servers and LiveUpdate policies with Windows and
UNIX clients
Note: All servers and clients that were updated using LiveUpdate are already locally
configured. If the existing configuration is still valid, no additional steps are required.
LiveUpdate server configuration is stored in a local file on each host that runs a
LiveUpdate agent.
Windows <INSTALL_DRIVE>\Program
Files\NetBackup\LiveUpdateHost.hst
UNIX /usr/openv/netbackup/nblu.conf
/hosts/0/url=http://yourwebserver/LUServer/7.0.1
Make sure that the syntax matches one of the following examples:
■ <IDrive>\Program Files\NetBackup\Bin\LU_Registration.exe
-OperationType CreateHostFile -Server
http://<webserver>/<LiveUpdatePackageDirectory>/
■ <IDrive>\Program Files\NetBackup\Bin\LU_Registration.exe
-OperationType CreateHostFile -Server
\\<fileshare>\<LiveUpdatePackageDirectory>\
■ This example illustrates if you have mapped the L:\ drive to the network
share that contains LiveUpdate packages:
<IDrive>\Program Files\NetBackup\Bin\LU_Registration.exe
-OperationType CreateHostFile -Server
L:\<LiveUpdatePackageDirectory>\
For file shares, enter the directory path in the same format as you would to execute
a “copy” command from the Windows Run dialog box.
Reference 33
About LiveUpdate file share servers and LiveUpdate policies with Windows and UNIX clients
http: hosts/0/url=http://<webserver>/<LiveUpdatePackageDirectory>/
https: hosts/0/url=https://<webserver>/<LiveUpdatePackageDirectory>/
2 The nblu.conf file is created the first time that you run nbliveup. If nblu.conf
does not yet exist on the system, you must create it by using the following
command:
cp /usr/openv/netbackup/nblu.conf.template
/usr/openv/netbackup/nblu.conf
/net/fileserver/LUServer
\\fileserver\LUServer\7.0.4
If this conversion does not work, Veritas recommends that you create separate
LiveUpdate policies for your Windows and UNIX clients.