Dell Networker Implementation-Ssp
Dell Networker Implementation-Ssp
Glossary .................................................................................................. 51
Product information and documentation is located on the Dell Technologies Support website.
Review the Dell NetWorker Release Notes, Dell NetWorker Performance Optimization
Planning Guide, the Dell NetWorker Installation Guide, and the Dell NetWorker Administration
Guide before installing the NetWorker software.
• The Release Notes documentation contains important configuration tips, installation and
upgrade notes, and the latest software patch information.
• The Dell NetWorker Performance Optimization Planning Guide explains how to size and
optimize the NetWorker software.
• The Dell NetWorker Installation Guide provides step-by-step instructions for installing
NetWorker server, storage node, client, and NMC.
• The Dell NetWorker Administration Guide describes how to configure and maintain
NetWorker.
• If updating NetWorker from a previous release, review Dell NetWorker Updating to
NetWorker 19.6 from a Previous NetWorker Release.
The NetWorker environment can protect an enterprise against data loss, whether the
organization is a small office or a large data center. The NetWorker software is a cross-
platform, client/server application that provides a web-enabled, graphical interface to protect
data and remotely manage all NetWorker Servers.
Several components make up the NetWorker environment and protect against data loss.
When planning for NetWorker installation, determine the location of the key NetWorker
services.
Location of key components includes:
• NetWorker server
• NetWorker Management Console (NMC)1
• NetWorker Web UI (NWUI)
• License management server
• Storage node2
Consider how backup data is sent to the target devices. Backup target access includes:
• Storage nodes
• Client direct3
• Both storage nodes and client direct
Best Practice: The NetWorker Server, NMC, and the EMC Licensing Solution
License server can be co-located on the same host or distributed. The NWUI is
typically installed on the NetWorker server. Determine the location of these
services before sizing the hardware that hosts them.
1 Because NetWorker server can add a significant load to the backup environment, install NMC
on a separate system for larger environments.
2 Some remote sites may require a designated storage node.
3 If using client direct, ensure that backup clients have direct access to the devices.
1. Using the documentation and details from this topic, plan a NetWorker installation for
Widgets Inc..
2. Use all resources available to plan an installation for Widgets Inc.
3. Widgets Inc. has the following requirements and environmental factors for their installation:
a. Widgets Inc. uses Linux hosts in their environment. The operating system is Linux x64.
b. Widgets Inc. plans to use NWUI.
c. Widgets Inc. has a disaster recovery (DR) site.
d. Widgets Inc. current environment has 65 clients.
e. Widgets Inc. does not have Java in their environment.
4. Answer the questions on the following pages to plan an installation for Widgets Inc.
Use the documentation to answer the following questions. Reflect and gather answers before
answering the knowledge checks on the following pages.
2. Where should Widgets Inc. preferably install the NMC server software?
a. On the NetWorker storage node.
b. On a host that is not the NetWorker server.
c. On the NetWorker client.
d. On a host that is the NetWorker server.
3. Widgets Inc. wants to use NWUI. Select the web browsers that they can use to operate
NWUI.
a. Microsoft Internet Explorer 10
b. Mozilla Firefox
c. Opera
d. Google Chrome
e. Vivaldi
NetWorker compatibility information includes specific operating systems, other software, and
hardware configurations that NetWorker supports. NetWorker software can be installed on
Windows, Linux, and UNIX environments.
Before installation, reference the following information at NetWorker E-Lab Navigator to ensure
the compatibility:
4The minimum java requirement is Java 8 Build 211. JRE requirements are not applicable
when you install NetWorker Runtime Environment.
Dell NetWorker Implementation-SSP
There are many components of a NetWorker environment that contribute to the disk space
needs. Consider the following when evaluating disk space:
• NetWorker databases are stored on the server. NetWorker databases should be sized
based on the number of resources that are maintained on the server.
• Determine how many servers are used and where NetWorker software is installed. For
each server, determine:
− The CPU requirement
− The memory requirements for the NetWorker server and NMC
• Client file indexes can occupy a large amount of disk space depending on retention
requirements.
• Other disk space considerations include the software repository for pushing client updates
and the required space for the NetWorker Management Console and its database.
• Dell Technologies recommends storing the NetWorker databases on a different disk
volume from the operating system to optimize performance.
− SAN volumes are an excellent choice because they enable for higher I/O loads and
advanced features like cloning and replication.
• Dell Technologies does not recommend NAS storage for the NetWorker databases.
• Review the network and storage infrastructure information5 before setting performance
expectations for your backup environment.
• Review and set the recovery time objective (RTO) for each client.
• Determine the backup window for each NetWorker client.
• List the amount of data to be backed up for each client during full and incremental backups.
• Determine the data growth rate for each client.
• Consider that some storage replication technologies add significant latency to write access
which slows down storage access.
• Consider the type of snapshot technology that is used determines the read performance.
5 Network and storage infrastructure information include details regarding the NetWorker
server, storage nodes, and clients.
6 Remote procedure call (RPC) communication is request-response communication between
systems. RPC uses the client/server model. A program can operate using RPC to request
service from a program from a system in a different network without having to understand the
details of the other network. RPC is used to call other processes on the remote systems such
as a local system.
Dell NetWorker Implementation-SSP
Windows Client
NAS/NDMP Host
TCP/IP
Tape Library
NetWorker datazone
− NWUI is a web-based management tool that can manage a single NetWorker server.
NWUI also provides reporting and monitoring capabilities.
The NetWorker Authentication Service maintains a local user database to authenticate user
accounts and credentials. The NetWorker Authentication Service is configured to use either a
local user database or an external authority database such as example Lightweight Directory
Access Protocol (LDAP) or Active Directory (AD).
User Authentication
When using an external authentication authority, the NetWorker Authentication Service checks
the external authentication authority to determine which Lightweight Directory Access Protocol
(LDAP) or Active Directory (AD) group the authenticated user belongs.
Once the authentication succeeds, the NetWorker Authentication Service issues a token to the
NMC server or NWUI server. The user can only perform activities for which they have
privileges according to their token information.
NetWorker
Authenticatio
NetWorker
NMC n Database
Console or
Server
NetWorker
Administration
NetWorker
Authentication LDAP/AD
Service
NetWorker
NWUI
Web UI NetWorker
Server
(NWUI) RESTAPI
nsrlogin
Dell NetWorker Implementation-SSP
To resolve this issue, use the nsrlogin command to contact the NetWorker Authentication
Service and authenticate a user. Ensure that the user that the NetWorker Authentication
Service validates has the appropriate User Group privileges to run the CLI commands.
Once the user authentication succeeds, the NetWorker Authentication Service issues a token
to the NetWorker host. Ensure that the user that the NetWorker Authentication Service
validates has the appropriate User Group privileges to run the CLI commands. The user can
then perform CLI operations with token-based authentication until the token expires.
Perform the following steps on a NetWorker Client on which you initiate the CLI commands or
the requesting host:
1. To validate a user and generate a token for the user, use the nsrlogin command:
a. nsrlogin [-s NetWorker_server] [-H authentication_host] [-P
port] [-t tenant] [-d domain] [-p password] [-f] [-u user]
2. At the command prompt, type the NetWorker command.
a. If the validated user does not have the appropriate privileges to run the command, an
error message appears or the command does not return the expected result.
Tip: See the NetWorker Security Configuration Guide for more information
about the nsrlogin syntax.
The NetWorker Authentication Service, NMC, and NWUI require NetWorker Runtime
Environment (NRE) or 64-bit Java 8.
Before beginning the installation of the NetWorker server, NMC server, or NWUI server,
ensure that either NRE or the latest version of the 64-bit Java 8 is installed on the host.
If neither NRE nor Java is installed, installation of the NetWorker Authentication Service, NMC,
and NWUI fails.
Install optional packages after installing required packages. There are several optional
packages:
• Do not disable long name support if the NetWorker software is installed on a File Allocation
Table (FAT) partition.
• Install the latest Microsoft Windows update and critical patches.
• Use lowercase for the NetWorker server name if using a PowerProtect DD appliance with
NetWorker.
− If the NetWorker server name is in both upper and lower case, PowerProtect DD
functions and Dell Cloud Tier operations fail.
• Ensure that sufficient disk space exists on the host to store the compressed NetWorker
software package and the uncompressed files.
− More information about package size is found in the Dell NetWorker Installation Guide.
• If NetWorker Runtime Environment (NRE) is not installed, set the JAVA_HOME
environment variable to the directory for the 64-bit Java Runtime Environment (JRE)
software.
When installing NetWorker, configure the firewall to allow NetWorker software traffic. If the
firewall is not configured properly, scheduled backups may fail.
Open the Task Manager to verify the installation and check if the Networker daemons started.
In the Task Manager Processes tab, confirm that the gstd, httpd, and postgres
processes are running.
• Create a backup of the operating system configuration file and configure the target host to
support NetWorker before installing the NetWorker software.
• Use lowercase for the NetWorker Server name if using a PowerProtect DD appliance with
NetWorker.
− If the NetWorker server name is in both upper and lower case, PowerProtect DD
functions and Dell Cloud Tier operations fail.
• Ensure that sufficient disk space exists on the host to store the compressed NetWorker
software package and the uncompressed files.
− More information about package size and requirements is found in the Dell EMC
NetWorker Installation Guide.
• Install the Java provided in NetWorker Runtime Environment (NRE) or the latest version of
the 64-bit Java 8 on the host.
• NetWorker installation requires some packages that may not be in the default operating
system installation.
Manually download and install the following Linux operating system packages7:
− ksh
− libncursesw.so.5
Download the NetWorker Software package from the Dell Technologies Support website to a
temporary location. Then extract the files.
Install the NetWorker Server software using either the rpm installation application or yum
command.
• The yum command fails and provides a list of missing packages when it cannot install the
required packages.
− Install the required packages manually and then run the yum command again.
• The rpm application provides a list of missing packages and does not install the NetWorker
software when the NetWorker required operating system packages are missing.
− Install the missing packages manually and then run the rpm command again.
Ensure that the nsrexecd daemon is running on the NMC host and the NetWorker daemons
are running on the NetWorker server before starting the NMC configuration script.
The NMC Server configuration requires communication with processes on the NetWorker
server. If the NMC server is not the NetWorker server, ensure that the NMC server and the
NetWorker server can communicate.
• For served licenses on Windows, copy the file to the C:\Program Files\EMC License
Server\elms\licenses folder.
• For served licenses on Linux, copy the file to the /opt/emc/licenses/ directory.
8You can receive the certificate in an email, or you can save the certificate as a PDF. The
product license activation letter contains the license key (permanent enabler codes and auth
codes).
Dell NetWorker Implementation-SSP
Install the required packages in the following order: NetWorker client software, NetWorker
storage node software, NetWorker server software, NetWorker Management Console (NMC),
and NetWorker Management Web UI (NWUI). Install optional packages after the required
packages
NetWorker Server 3
lgtoauth
c
NetWorker Storage Node 2
lgtoser
v
NetWorker Client 1
lgtoadp lgtonode
t
lgtoclnt lgtoxtdclnt lgtobbb
lgtolicm
1. Install lgtoauthc before installing the NetWorker server or NMC software. The NetWorker
Authentication Service, lgtoauthc, is a separate package.
2. The base client package, lgtoclnt, must be installed first. The extended client software
package, lgtoxtdclnt, and the block-based backup software, lgtobbb, may also be
required to be installed on the client.
3. When installing a NetWorker Storage Node, install the NetWorker Client software first.
Include the extended client and then the storage node RPM, lgtonode.
4. The NetWorker Management Console (NMC) requires that at least the NetWorker base
client is installed first. The NMC installation package is lgtonmc.
Pre-Requisites
The NMC server is a web-based Java application that manages NetWorker server operations.
An NMC client is a host that connects to the NMC server through a supported web browser to
display the NMC server UI.
Launch the NetWorker Management Console from a supported web browser, or by using the
NMC Launcher link. NMC Launcher is available once NRE is installed.
When starting the NMC for the first time, the user is prompted for NMC configuration
information. The information includes the name of the Authentication server, the name of the
NetWorker server that is backing up the NMC database, and a list of NetWorker servers that
this NMC manages.
After launching NMC, manage NetWorker servers from the Enterprise window. Links in right
pane direct to NetWorker documentation, Dell EMC Support, the NetWorker Community
Forum, and other NetWorker resources.
To launch NetWorker Administration for a specific NetWorker server, click the name of the
server in left pane. Then click the Launch NetWorker Administration link in the middle pane.
NWUI is compatible with both Windows and Linux hosts. Install NWUI on a either a Linux or
Windows-based host, which can be a Networker server itself or a non-Networker server.
User Authentication
NWUI uses the NetWorker role-based access control configuration to define the access level
available to the user.
The login process uses JSON Web Token (JWT) token-based authentication, which is three-
way communication between AUTHC, NWUI and REST APIs.
NetWorker Server
REST
NWUI REST API NWUI Server API
Tomcat
(Browser)
Configuration, NW
AUTHC
Reports, Job
RESTAPI
Details,
Operations, Tomcat
Monitoring
Authentication
Message Bus
NWUI architecture
When installation completes, open a web browser, and launch NWUI by using the link:
https://<IP_address_or_hostname of NetWorker Server>:9090/nwui.
Launching NWUI
NetWorker backs up data to both local devices on a NetWorker server and remote devices on
a storage node.
A remote storage node is used to offload a lot of the data movement in a backup or a recovery
operation from the NetWorker server when Client Direct is not used. A remote storage node is
a storage node that is not the NetWorker server. The NetWorker server connection and the
remote storage node must be specified.
PowerProtect DD series appliances can be used to perform clone operations. Single save sets
or the entire volume of a PowerProtect DD device may be a source or target of cloning. A
remote storage node can clone data from a PowerProtect DD System to a physical tape library
or to a managed offsite PowerProtect DD that is used for clone-controlled replication (CCR).
Data
Tape Library
PowerProtect DD PowerProtect DD
NetWorker Client
NetWorker environment
9 Clone-controlled replication is not standard directory level replication. Standard directory level
replication is also supported.
10 Clone-controlled replication uses fast copy instead of file copy for replication within the same
PowerProtect DD.
11 This method results in minimal impact on production or primary backup and recovery
operations.
Dell NetWorker Implementation-SSP
The NetWorker client software provides both a base client package12 and an extended client
package. The NetWorker server communicates with the NetWorker client software to support
backup and recovery operations.
NetWorker client installation is supported13 on x64 and x86 Linux, UNIX, and Windows.
Download the NetWorker software from the Dell Technologies Support website NetWorker
page.
12 Install the NetWorker Client software on each host that requires backup and recovery
support.
13 Confirm that NetWorker supports your specific client operating system and hardware
Network Data Management Protocol (NDMP)14 enables NAS devices to mimic NetWorker
clients15 for configuration purposes without installing NetWorker client software.
Client software is not installed for VMware image-based backups. With vProxy, VMware
manages the backup data.
14 NDMP manages the data transfer between the primary NAS device storage and secondary
storage on tape or VTL devices. NDMP also manages the backup through a NetWorker
storage node.
15 Local point-in-time snapshot copies of the NAS data are scheduled. NetWorker can use the
time that is required to clone the data to backup media independently of the typical backup
windows.
Dell NetWorker Implementation-SSP
NetWorker includes a preconfiguration check to run after confirming that the system meets the
requirements. The preconfiguration check runs using the Installation Wizard.
The System Configuration Checker verifies that the setup is configured properly for backup
and recovery operations after you open the wizard. The system notifies of improperly
configured systems. Make changes and run the check again to confirm proper functionality.
The NetWorker extended client package is automatically installed on Windows hosts when
installing the NetWorker server or NetWorker storage node. However, the NetWorker extended
client package is not installed with the NetWorker base client installation.
Install the NetWorker extended client package if you have NetWorker hosts that need
additional feature support.
Client software installation does not automatically register16 the client on the NetWorker server.
By default, the Client Service port is 9001 for NMC server. Ports can be changed from default.
Define the service port on each NetWorker host in the datazone using NMC or the nsrports
command.
Default NetWorker ports are nsrports -s myclient.emc.com, service ports are 7937-
7940, and connection ports are 0-0.
Use nsrrpcinfo to check for blocked ports and properly functioning ports17. The Extended
Client software includes nsrrpcinfo functionality.
17nsrrpcinfo checks for blocked ports by making an RPC call to a NetWorker RPC server and
reporting the findings.
Dell NetWorker Implementation-SSP
Any system in the datazone that has data for backup can be a NetWorker client. NetWorker
clients include the NMC server, NetWorker server, and NetWorker storage node hosts.
Any NetWorker server can backup a NetWorker client independent of the platform that the
client uses because the NetWorker Client software is supported on many operating system
platforms. For example, you can back up a NetWorker client on a UNIX system to a NetWorker
server on a Microsoft Windows system.
Each NetWorker client has its own client file index on the NetWorker server.
For Windows:
• The default client file location is C:\Program Files\EMCNetWorker\nsr.
• The client file index location is C:\Program Files\EMCNetWorker\nsr\index.
For Linux:
• The Client (lgtoclnt) resides on /usr/lib, /usr/sbin, /usr/bin, and /opt/nsr.
• The Client file index resides in /nsr.
The Dell EMC Licensing Solution is a licensing standard that stores all licensing information for
the environment in one license file. NetWorker has extended the license-free trial period18, and
it supports both a served or unserved license.
• A served license requires the Dell EMC Licensing Solution, which consists of a License
Server. Dell EMC Licensing Solution also has a license file that contains either a Capacity
Entitlement or an Update Entitlement and management of the License Server. The IP
address and hostname of the license server is required to complete license activation.
• If using an unserved license, the license file is stored on the NetWorker Server. IP address
and hostname of the NetWorker server is required to complete license activation.
18NetWorker has extended the license-free trial period and does not require a license for 90
days. NetWorker enters into a 90-day evaluation mode, and a 30-day grace period is
automatically activated when the original 90 day trial period ends.
Dell NetWorker Implementation-SSP
License file is generated based on the License file is generated based on the
License Server host NetWorker server host
License file serves multiple NetWorker License file serves a single NetWorker server
servers (even across multiple datazones)
The Dell EMC License Server manages licenses and capacity allocation. The license server
reads a license file that is stored on the server to determine the type of licenses and the
amount of capacity19 purchased.
The amount of capacity that each NetWorker Server uses can be adjusted20 if the sum of all
the NetWorker servers for a license server does not exceed the licensed total capacity.
All datazones can access a single Dell EMC License Server to request capacity.
After installing the Dell EMC License Server, obtain the license file from Dell EMC Licensing
after downloading and installing NetWorker and the Dell EMC License Server software. This
file contains the host and port information for the Dell EMC License Server.
The Dell EMC License Server should use a default or specific TCP/IP port number. For
NetWorker, the default port is 27000. If using a nondefault port, this port number must be
specified in the license file. It is possible to set the Dell EMC License Server to listen to any
available TCP/IP port, most often in the 27000 to 27009 range. At a minimum, keep ports
27000 and 27001 open.
The license file that is received from Dell EMC Licensing indicates the NetWorker features and
capacity that was purchased or the options that are made available for evaluating NetWorker.
The license file also indicates whether the license is served or unserved.
The license file contains one or both of the following types of entitlements:
Store a copy of the file in the Dell EMC License Server Launch the NMC NetWorker
folder. Administration window on the
NetWorker Server, right-click
the server, and then select
Properties from the list.
• On Linux, copy the file to the /opt/emc/licenses/ In the Licensing tab of the
directory. Server Properties window,
browse to and select the
• On Windows, copy the file to the C:\Program
license file to populate the
Files\EMC License Server\elms\licenses
CLP license text field.
folder.
After installing the Dell EMC License Server, the system places a management application on
an accessible NetWorker server for a served license. The Dell EMC License Server
management applications are used to complete the setup and configuration of the Dell EMC
Licensing Solution.
The management application should run constantly to serve licenses to NetWorker. As result,
the application requires a running EMCLM vendor daemon21.
The application automatically manages EMCLM by starting, stopping, and restarting the
daemon as required. The management application also writes to the Dell EMC License
Server's lmgrd.log troubleshooting file to report errors and license-feature activity. The
lmgrd, EMCLM, license, and troubleshooting log file are in the same directory.
21 The daemon delivers license features to NetWorker and tracks counted features.
Dell NetWorker Implementation-SSP
Ensure that NetWorker can reach the host port 9443. The TCP port number for the Secure
Remote Services service by default is port 9443.
The default Telemetry option is MailHome. If ESRS is selected, then reports are sent using
Secure Remote Services.
22 Secure Remote Services was formally EMC Secure Remote Services (ESRS). To enable
Secure Remote Services, you must install the Secure Remote Services appliance from the
Secure Remote Services Virtual Edition Product Page. Next, configure NetWorker to
communicate with the appliance.
23 You receive reports through either Secure Remote Services or MailHome.
Input the email addresses of additional users into the Additional email recipients area to add
additional users to receive reports. If adding multiple recipients, separate each email address
with a space.
1. NetWorker server
a. For Linux-based systems, update the NetWorker Authentication Service as well
2. NMC server
3. All NetWorker storage nodes
4. NetWorker Clients
Ensure compatibility of hardware, software, and operating systems before upgrading. See the
E-Lab Navigator to verify details of the specifics in an environment.
More details are also found in the NetWorker Updating From a Previous Release Guide.
Instructions
Questions
1. Which NetWorker package component should be installed if a Linux client in the datazone
requires cloning and staging functionality?
a. Adapter software
b. Man pages
c. Block-Based-Backup software
d. NetWorker Extended Client
3. Which NetWorker component enables switching the default language from English to
Korean?
a. NetWorker License Manager
b. NetWorker Server
c. NetWorker Message Queue Adapter
d. NetWorker Language Packs
License File
The license file is an encrypted ASCII text file, which prevents tampering with the content or
making changes directly in the file.
NetWorker Client
NetWorker clients are physical or virtual systems that have the NetWorker Client software
installed.
NetWorker Server
The NetWorker server is installed on a host. The NetWorker Server is a group or programs
and processes that perform NetWorker services such as managing backups.
Save Set
A save set is one or more pieces of data that reside on a NetWorker client. That data is
backed-up as a unit to a NetWorker storage node or backup device. A save set can be files,
directories, file systems, or application-generated data.
Staging
Staging is the process of moving backup data from one storage volume to another.
Storage Node
Storage nodes control storage devices. These devices include tape drives, disk devices,
autochangers, and silos. The NetWorker Server is a local storage node.
Volume
A volume is a virtual or physical tape or file system on disk or PowerProtect DD to which
backup data is written.