Re: [Veritas-bu] MSEO
Hello, It does not matter. MSEO is a different program than netbackup and does not follow the netbackup versioning. Be careful because, as Dave said, your backup will be slower almost x2 and if you use MSEO compression, another x2. (depending of the CPU of the media server) Note that, you will lose the hardware tape compression and your will need x2 tapes. Also do not use client compression. stefanos -Original Message- From: veritas-bu-boun...@mailman.eng.auburn.edu [mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of Heathe Yeakley Sent: Thursday, September 30, 2010 7:59 PM To: NetBackup Mailing List Subject: Re: [Veritas-bu] MSEO Unfortunately, this particular NBU environment is running LTO2 drives. I'm sure we'll upgrade the library eventually. I didn't know KMS was free. I'll keep this in mind for future installations. One follow up question. The environment in which I'm setting up MSEO is currently running 6.5. I plan on upgrading it to 7.0 in the next 6 months. Which would be better: 1) Upgrade to 7.0 first, then install and configure MSEO 2) Go ahead and install MSEO and get it running. In a few months, upgrade to NBU 7 and deal with any MSEO upgrade issues at that point. -HKY On Thu, Sep 30, 2010 at 11:09 AM, wrote: > My little pearl- if your tape drives are capable of hardware encryption ( most are) use kms instead. > If you have the same manual as I have it is chapter 6. > > 1) free - no license required > 2) easy set up > 3) overhead is on the tape drives and not on the client or media server > 4) drawback is you can only have 2 encrypted pools on 6.5 but can have 20 on 7.0 > > > -Original Message- > From: veritas-bu-boun...@mailman.eng.auburn.edu [mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of Dave > Sent: Thursday, September 30, 2010 11:05 AM > To: 'Heathe Yeakley'; 'NetBackup Mailing List' > Subject: Re: [Veritas-bu] MSEO > > My only tip is to make sure your media server can handle the CPU cycles > needed for MSEO. It can be a resource hog. > > Setup is actually very easy. > > Have fun > > -Original Message- > From: veritas-bu-boun...@mailman.eng.auburn.edu > [mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of Heathe > Yeakley > Sent: Thursday, September 30, 2010 8:36 AM > To: NetBackup Mailing List > Subject: [Veritas-bu] MSEO > > I have a small NBU 6.5 environment where we are currently using a > Decru encryption appliance to secure our backups. We want to get away > from the Decru and have chosen to install and setup NetBackup Media > Server Encryption Option. I've downloaded the software and manuals, > which I'm sitting down to read. Any tips, tricks or pearls of wisdom > from those of you out there already running it? > > Thanks. > > - HKY > ___ > Veritas-bu maillist - veritas...@mailman.eng.auburn.edu > http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu > > > ___ > Veritas-bu maillist - veritas...@mailman.eng.auburn.edu > http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu > > > ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] MSEO
Unfortunately, this particular NBU environment is running LTO2 drives. I'm sure we'll upgrade the library eventually. I didn't know KMS was free. I'll keep this in mind for future installations. One follow up question. The environment in which I'm setting up MSEO is currently running 6.5. I plan on upgrading it to 7.0 in the next 6 months. Which would be better: 1) Upgrade to 7.0 first, then install and configure MSEO 2) Go ahead and install MSEO and get it running. In a few months, upgrade to NBU 7 and deal with any MSEO upgrade issues at that point. -HKY On Thu, Sep 30, 2010 at 11:09 AM, wrote: > My little pearl- if your tape drives are capable of hardware encryption ( > most are) use kms instead. > If you have the same manual as I have it is chapter 6. > > 1) free - no license required > 2) easy set up > 3) overhead is on the tape drives and not on the client or media server > 4) drawback is you can only have 2 encrypted pools on 6.5 but can have 20 on > 7.0 > > > -Original Message- > From: veritas-bu-boun...@mailman.eng.auburn.edu > [mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of Dave > Sent: Thursday, September 30, 2010 11:05 AM > To: 'Heathe Yeakley'; 'NetBackup Mailing List' > Subject: Re: [Veritas-bu] MSEO > > My only tip is to make sure your media server can handle the CPU cycles > needed for MSEO. It can be a resource hog. > > Setup is actually very easy. > > Have fun > > -Original Message- > From: veritas-bu-boun...@mailman.eng.auburn.edu > [mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of Heathe > Yeakley > Sent: Thursday, September 30, 2010 8:36 AM > To: NetBackup Mailing List > Subject: [Veritas-bu] MSEO > > I have a small NBU 6.5 environment where we are currently using a > Decru encryption appliance to secure our backups. We want to get away > from the Decru and have chosen to install and setup NetBackup Media > Server Encryption Option. I've downloaded the software and manuals, > which I'm sitting down to read. Any tips, tricks or pearls of wisdom > from those of you out there already running it? > > Thanks. > > - HKY > ___ > Veritas-bu maillist - veritas...@mailman.eng.auburn.edu > http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu > > > ___ > Veritas-bu maillist - veritas...@mailman.eng.auburn.edu > http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu > > > ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] MSEO
My little pearl- if your tape drives are capable of hardware encryption ( most are) use kms instead. If you have the same manual as I have it is chapter 6. 1) free - no license required 2) easy set up 3) overhead is on the tape drives and not on the client or media server 4) drawback is you can only have 2 encrypted pools on 6.5 but can have 20 on 7.0 -Original Message- From: veritas-bu-boun...@mailman.eng.auburn.edu [mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of Dave Sent: Thursday, September 30, 2010 11:05 AM To: 'Heathe Yeakley'; 'NetBackup Mailing List' Subject: Re: [Veritas-bu] MSEO My only tip is to make sure your media server can handle the CPU cycles needed for MSEO. It can be a resource hog. Setup is actually very easy. Have fun -Original Message- From: veritas-bu-boun...@mailman.eng.auburn.edu [mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of Heathe Yeakley Sent: Thursday, September 30, 2010 8:36 AM To: NetBackup Mailing List Subject: [Veritas-bu] MSEO I have a small NBU 6.5 environment where we are currently using a Decru encryption appliance to secure our backups. We want to get away from the Decru and have chosen to install and setup NetBackup Media Server Encryption Option. I've downloaded the software and manuals, which I'm sitting down to read. Any tips, tricks or pearls of wisdom from those of you out there already running it? Thanks. - HKY ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] MSEO
My only tip is to make sure your media server can handle the CPU cycles needed for MSEO. It can be a resource hog. Setup is actually very easy. Have fun -Original Message- From: veritas-bu-boun...@mailman.eng.auburn.edu [mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of Heathe Yeakley Sent: Thursday, September 30, 2010 8:36 AM To: NetBackup Mailing List Subject: [Veritas-bu] MSEO I have a small NBU 6.5 environment where we are currently using a Decru encryption appliance to secure our backups. We want to get away from the Decru and have chosen to install and setup NetBackup Media Server Encryption Option. I've downloaded the software and manuals, which I'm sitting down to read. Any tips, tricks or pearls of wisdom from those of you out there already running it? Thanks. - HKY ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] MSEO
I have a small NBU 6.5 environment where we are currently using a Decru encryption appliance to secure our backups. We want to get away from the Decru and have chosen to install and setup NetBackup Media Server Encryption Option. I've downloaded the software and manuals, which I'm sitting down to read. Any tips, tricks or pearls of wisdom from those of you out there already running it? Thanks. - HKY ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] MSEO Audit file anyone
Has anyone got any audit file examples they are using for MSEO? I'm running MSEO 6.1 on Netbackup 6.5.4 Solaris Sparc. Combined Master/Media When i kick off a couple of backups the correct info gets logged in /var/log/mseo.log, yet when the normal scheduled backups run overnight the log doesnt seem to have the correct information in it for every job. It also seems to come up with the same backup id for many jobs. I wondered if anyone had seen this before? Or had a sample audit file. I'm running encrypted and none encrypted backups multiplexed to the same media. Also if people use Audit tags in the keyword section do they nest inside the tags or come afterwards? Cheers ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] MSEO can i have multiple matches in policy
I have MSEO 6.1 installed on a master/media server with netbackup 6.5.4. Things are going ok and i'm creating an mseo policy for my requirements. However i want to do a multiple match in a policy rule but using an OR match. I can't see anywhere in the pdfs how this is done or if it can be. e.g Rule is :- Policies: xx-policy rules rule 1 Effect=permit audit netbackup Action=write Compress=|netbackup.keyword.Compress| KeyGroup=|netbackup.keyword.KeyGroup| KeyType=|netbackup.keyword.KeyType| match Name=netbackup.keyword.KeyType MatchOp=!empty match Name=netbackup.keyword.KeyGroup MatchOp=!empty match Name=netbackup.keyword.Compress MatchOp=!empty rule 2 Effect=permit audit netbackup Action=write Compress=lzolx KeyGroup=x-keygroup KeyType=aes128 match Name=netbackup.policy MatchOp=exactnocase MatchValue=dbbackup rule 3 Effect=permit audit netbackup Action=write Compress=none KeyGroup=x-keygroup KeyType=none rule 4 Effect=permit audit Action=read I want the second rule to match and therefore encrypt if the policy is DBbackup OR arcDBbackup. Anyone any ideas? I'm assuming if i add another match like the one in rule2 it will expect BOTH to be present. Is this right? Cheers ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] MSEO queries for new Solaris install
Guys i'm upgrading existing backup infrastructure by introducing a new server and upgrading NBU to 6.5.4 on Solaris. I've then got to install and configure MSEO 6.1 so we can encrypt some database backups. I've been reading through all the pdf's and its just a bit of a minefield. Is there any simplistic steps anywhere anyone has done to install? I'm hoping i don't need to change much from defaults, but all documentation points towards security server, pem server, pem client etc. I've basically got one master/media server combined where i need to install this on. I can't see mentioned anywhere in the docs how it is done on a single machine. I have seen standalone config mentioned for the pem and security server though. Anyway can someone explain or help me understand the following :- 1. From what i gather there is a master access file with a clear text password in it. I'm not entirely sure what this is for, but i'd assume its critical to be not put on a none encrypted backup anywhere? 2. RSA keys are used to encrypt and decrypt the AES keys which are dynamically created to encrypt data blocks. Is this right? We have the requirement to restore a backup taken at one site on another site, so i was hoping to create a separate key for each site and then import the production key into the DR site MSEO system so that tapes written on production could be read and restored. Is this understanding correct? I don't want to overwrite the existing default keys each time but am not sure if the default key will be used to write backups. 3. I have multiple backup jobs writing to the same tape pools and not all these jobs need encrypting. From what i see the encryption is done by adding tags into the keyword section of the policy. Do i need to put these keywords in ALL policies but simply omit the KeyType bit but leave in Compress=xxx if i want other policies to compress but not encrypt? Or do i leave the keyword section blank. If i leave blank does compression still work as i gather the /dev/rmt/0cbn links are changed by the MSEO virtual device paths. 4. Are there a list of these variables for netbackup.keyword anywhere? From what i gather the default xml file produced contains attributes that will have the netbackup.keyword. in them. The word 'netbackup.keyword' is not then referenced elsew section. This confuses me a little as i seehere and only the bit is referenced in the policy keyword other built in variables in the docs e.g netbackup.policy netbackup.pool, but don't then know how to reference them or if i need to. Has anyone a basic example they could post me at all of configuration? Sorry this is long, i'm just venting because its all a bit mental and as always deadlines mean it needs doing asap. Any pointers would be great. Cheers ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] MSEO and normal backups to same media
Also note that with MSEO you do not have tape compression. One of our customers (bank) goes from 6 hours full backup to 18. You must have a very powerful system to run MSEO _ From: veritas-bu-boun...@mailman.eng.auburn.edu [mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of Bill Roth Sent: Thursday, June 18, 2009 8:29 PM To: veritas-bu@mailman.eng.auburn.edu Subject: Re: [Veritas-bu] MSEO and normal backups to same media Dave, In addition to the comments Mr. Brown has been kind enough to provide, I'd like add a note about multiplexing. See page 84 of the MSEO Admin Guide. The note is applicable to multiplexing encrypted and non-encrypted backups together. Thanks, Bill On Thu, Jun 18, 2009 at 6:31 AM, wrote: I'm sure it says in the manual that you can mix MSEO and non-MSEO on a single tape. You may think that is going to create a problem as you'll have to treat all your media as if it contains encrypted data. I know the idea of encryption is so you don't lose data when you lose media, but it's nice to know which tapes are which. You do have to reduce the SIZE_DATA_BUFFERS to allow for the MSEO headers, so all backups from that Media Server will have slightly short blocks, which will affect the throughput just because less data is written in each block. I don't think we have any comparison figures, as we don't ever send the same data encrypted and non-encrypted. There wasn't a lot of choice! When we get time we are going to look at LTO4 encryption, which I think will be neater. MSEO is quite easy to accidentally turn off without noticing. veritas-bu-boun...@mailman.eng.auburn.edu wrote on 18/06/2009 11:49:24: > Guys I'm running (Or will be after upgrading from 5.0mp7) Netbackup > 6.5.4 Master server with MS Encryption Option installed. > > I know i can set the encryption per policy and we have requirement to > backup 2 machines with encryption and not the rest. > > My question is can encrypted and none encrypted images be written to the > same tape media? > > Currently we mpx multiple servers to say a daily or weekly tape pool to > maximise throughput. > > Cheers > > P.S Does anyone know a rough factor of time added by using MSEO. e.g is > it twice as long .6 times as long? > > > ___ > Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu > http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu > --- This e-mail was sent by GlaxoSmithKline Services Unlimited (registered in England and Wales No. 1047315), which is a member of the GlaxoSmithKline group of companies. The registered address of GlaxoSmithKline Services Unlimited is 980 Great West Road, Brentford, Middlesex TW8 9GS. --- ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] MSEO and normal backups to same media
Dave, In addition to the comments Mr. Brown has been kind enough to provide, I'd like add a note about multiplexing. See page 84 of the MSEO Admin Guide. The note is applicable to multiplexing encrypted and non-encrypted backups together. Thanks, Bill On Thu, Jun 18, 2009 at 6:31 AM, wrote: > I'm sure it says in the manual that you can mix MSEO and non-MSEO on a > single tape. You may think that is going to create a problem as you'll > have to treat all your media as if it contains encrypted data. I know the > idea of encryption is so you don't lose data when you lose media, but it's > nice to know which tapes are which. > > You do have to reduce the SIZE_DATA_BUFFERS to allow for the MSEO headers, > so all backups from that Media Server will have slightly short blocks, > which will affect the throughput just because less data is written in each > block. I don't think we have any comparison figures, as we don't ever > send the same data encrypted and non-encrypted. There wasn't a lot of > choice! > > When we get time we are going to look at LTO4 encryption, which I think > will be neater. MSEO is quite easy to accidentally turn off without > noticing. > > > veritas-bu-boun...@mailman.eng.auburn.edu wrote on 18/06/2009 11:49:24: > > > Guys I'm running (Or will be after upgrading from 5.0mp7) Netbackup > > 6.5.4 Master server with MS Encryption Option installed. > > > > I know i can set the encryption per policy and we have requirement to > > backup 2 machines with encryption and not the rest. > > > > My question is can encrypted and none encrypted images be written to the > > > same tape media? > > > > Currently we mpx multiple servers to say a daily or weekly tape pool to > > maximise throughput. > > > > Cheers > > > > P.S Does anyone know a rough factor of time added by using MSEO. e.g is > > it twice as long .6 times as long? > > > > > > ___ > > Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu > > http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu > > > > > --- > This e-mail was sent by GlaxoSmithKline Services Unlimited > (registered in England and Wales No. 1047315), which is a > member of the GlaxoSmithKline group of companies. The > registered address of GlaxoSmithKline Services Unlimited > is 980 Great West Road, Brentford, Middlesex TW8 9GS. > --- > > ___ > Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu > http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu > ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] MSEO and normal backups to same media
I'm sure it says in the manual that you can mix MSEO and non-MSEO on a single tape. You may think that is going to create a problem as you'll have to treat all your media as if it contains encrypted data. I know the idea of encryption is so you don't lose data when you lose media, but it's nice to know which tapes are which. You do have to reduce the SIZE_DATA_BUFFERS to allow for the MSEO headers, so all backups from that Media Server will have slightly short blocks, which will affect the throughput just because less data is written in each block. I don't think we have any comparison figures, as we don't ever send the same data encrypted and non-encrypted. There wasn't a lot of choice! When we get time we are going to look at LTO4 encryption, which I think will be neater. MSEO is quite easy to accidentally turn off without noticing. veritas-bu-boun...@mailman.eng.auburn.edu wrote on 18/06/2009 11:49:24: > Guys I'm running (Or will be after upgrading from 5.0mp7) Netbackup > 6.5.4 Master server with MS Encryption Option installed. > > I know i can set the encryption per policy and we have requirement to > backup 2 machines with encryption and not the rest. > > My question is can encrypted and none encrypted images be written to the > same tape media? > > Currently we mpx multiple servers to say a daily or weekly tape pool to > maximise throughput. > > Cheers > > P.S Does anyone know a rough factor of time added by using MSEO. e.g is > it twice as long .6 times as long? > > > ___ > Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu > http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu > --- This e-mail was sent by GlaxoSmithKline Services Unlimited (registered in England and Wales No. 1047315), which is a member of the GlaxoSmithKline group of companies. The registered address of GlaxoSmithKline Services Unlimited is 980 Great West Road, Brentford, Middlesex TW8 9GS. --- ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] MSEO and normal backups to same media
Guys I'm running (Or will be after upgrading from 5.0mp7) Netbackup 6.5.4 Master server with MS Encryption Option installed. I know i can set the encryption per policy and we have requirement to backup 2 machines with encryption and not the rest. My question is can encrypted and none encrypted images be written to the same tape media? Currently we mpx multiple servers to say a daily or weekly tape pool to maximise throughput. Cheers P.S Does anyone know a rough factor of time added by using MSEO. e.g is it twice as long .6 times as long? ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] MSEO - How to understand the images are
Hi Bob, Thanks for reply. We have to show them to the Audit team, you know. We can't show the logs, it doesn't make sense them, right. There should be another way; from GUI or by command.. Thanks. Servet -Original Message- From: veritas-bu-boun...@mailman.eng.auburn.edu [mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of bob944 Sent: 21 Nisan 2009 Salı 18:15 To: veritas-bu@mailman.eng.auburn.edu Subject: Re: [Veritas-bu] MSEO - How to understand the images are > We are trying MSEO option. Is anyone know that how we can > undaertand the images are Encrypted by MSEO. > > or > > Is there any commad to list/show images which are backed up > by MSEO? In an evaluation, I customized the audit log (that's in the manual) and then used the audit log information in the Security Server's /var/log/meso.log to produce reporting which included the mediaID, backupID, keygroup and key for this purpose. ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] MSEO - How to understand the images are
Also you can disable the MSEO device driver and try a restore. If the restore fail then you are ok. (Assuming that the same restore is fine with MSEO device driver enabled :-) ) Are you sour you want to use Stefanos -Original Message- From: veritas-bu-boun...@mailman.eng.auburn.edu [mailto:veritas-bu-boun...@mailman.eng.auburn.edu] On Behalf Of bob944 Sent: Tuesday, April 21, 2009 6:15 PM To: veritas-bu@mailman.eng.auburn.edu Subject: Re: [Veritas-bu] MSEO - How to understand the images are > We are trying MSEO option. Is anyone know that how we can > undaertand the images are Encrypted by MSEO. > > or > > Is there any commad to list/show images which are backed up > by MSEO? In an evaluation, I customized the audit log (that's in the manual) and then used the audit log information in the Security Server's /var/log/meso.log to produce reporting which included the mediaID, backupID, keygroup and key for this purpose. ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] MSEO - How to understand the images are
> We are trying MSEO option. Is anyone know that how we can > undaertand the images are Encrypted by MSEO. > > or > > Is there any commad to list/show images which are backed up > by MSEO? In an evaluation, I customized the audit log (that's in the manual) and then used the audit log information in the Security Server's /var/log/meso.log to produce reporting which included the mediaID, backupID, keygroup and key for this purpose. ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] MSEO - How to understand the images are Encrypted ?
Hi All, We are trying MSEO option. Is anyone know that how we can undaertand the images are Encrypted by MSEO. or Is there any commad to list/show images which are backed up by MSEO? Thanks. Regards. Servet +-- |This was sent by servet.i...@gantek.com via Backup Central. |Forward SPAM to ab...@backupcentral.com. +-- ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] MSEO Agent Backup Error
Please Update me, Since i already add my fdqn agent on my server and it not help to solved this problem, any one know how to make MSEO running on same system for Agent and SSL certificate server. I really appreciate all reply, thanks all. regards +-- |This was sent by [EMAIL PROTECTED] via Backup Central. |Forward SPAM to [EMAIL PROTECTED] +-- ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] MSEO Agent Backup Error
Hi, Do you have solution for this problem? can you share it to me, coz i facing in this problem today Regards Yafet +-- |This was sent by [EMAIL PROTECTED] via Backup Central. |Forward SPAM to [EMAIL PROTECTED] +-- ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] MSEO Agent Backup Error
Hi, My Configuration SSL security server and SSL Agent under same system. In my etc/hosts file i have: Short name FDQN Am I must change my etc/file into FDQN short name Can I check with you, Your cgsb_security_server.conf like this: sslport 8084 mylocation FDQN signerport 8085 keysize and your cgsb_agent.conf like: https://localhost:8084 mylocation FDQN signer FDQN:8085 keysize Regards Yafet +-- |This was sent by [EMAIL PROTECTED] via Backup Central. |Forward SPAM to [EMAIL PROTECTED] +-- ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] MSEO Agent Backup Error
yafets wrote: > Hi, > > > Do you have solution for this problem? can you share it to me, coz i facing > in this problem today > > > > Regards > Yafet Hi, 2 Things you need to do after your converted your mseo drives. 1. Add the media server host in the MESO Security Server using its full qualified domain name. 2. Go to the security server host file ensure format entry of the mseo agent are as follows Full Qualified Domain NameShort Qualified Domain Name Regards +-- |This was sent by [EMAIL PROTECTED] via Backup Central. |Forward SPAM to [EMAIL PROTECTED] +-- ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] MSEO Agent Backup Error
Hi Bill, thanks again for the reply. Really appreciate your help as not many administrator doing MSEO for their environment. I do not have access to the server now, so i cant extract the cgsb.log now. I think there are no communication problems between all my MSEO SAN Media Server and Security Server (Master Server). This is because during installation of MSEO at SAN Media Servers, the installation manage to complete with the key display to prompt user to trust it and also the security server pem record also had an entry of the newly installed SAN Media Server, hence i do believe they are communicating without problem. I also did suspect there might be problems with the MSEO Policy, but what i did was purely copy from the default policy and rename it to another name. At the same time, i've delete rule1 and this, the default rule2 bcomes rule1 and rule3 bcome rule2 instead. In my backup policy's keyphase, i've entered KeyGroup=Keys_01; KeyType=aes128; Compress=lzrw3; This keyphase worked for my master server (Windows) which is also the security server as well, but it hit status 84 when i tried to do the exact same thing on my SAN Media Server regardless of OS. +-- |This was sent by [EMAIL PROTECTED] via Backup Central. |Forward SPAM to [EMAIL PROTECTED] +-- ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] MSEO Agent Backup Error
"Number data buffers" probably isn't the issue. "Could not process the request because somthing was missing from server" and "vmtape error1": Each media server configured with MSEO connects to one or more MSEO security servers at backup and restore time. Check the MSEO log on whatever server you have configured as the MSEO security server for the media server with the 84 error. - "Something missing" isn't real specific but /var/log/cgsb.log (on the MSEO Security server) may provide additional detail - You've probably already executed cgconfig server on the failing media server and that it correctly lists one or more MSEO security servers - You've probably already executed cgadmin add host on the MSEO security server Assuming you don't have a communication issue between the media server and security server there may be an issue with the MSEO policy assigned to this host. Are you using the default MSEO policy or have you created an MSEO policy specifically for this media server? 1) What are the log entires in /var/log/cgsb.log on the MSEO security server? 2) What MSEO policy are you using for this host? Thanks, Bill On Wed, Aug 20, 2008 at 1:40 AM, dy018 <[EMAIL PROTECTED]>wrote: > > Hi Bill, > > I've tried reducing the buffer size as what you stated but the problem > still persist, do we need to change the NUMBER_DATA_BUFFERS as well? we are > setting at 256 at the moment. > > Regards > > +-- > |This was sent by [EMAIL PROTECTED] via Backup Central. > |Forward SPAM to [EMAIL PROTECTED] > +-- > > > ___ > Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu > http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu > ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] MSEO Agent Backup Error
Hi Bill, I've tried reducing the buffer size as what you stated but the problem still persist, do we need to change the NUMBER_DATA_BUFFERS as well? we are setting at 256 at the moment. Regards +-- |This was sent by [EMAIL PROTECTED] via Backup Central. |Forward SPAM to [EMAIL PROTECTED] +-- ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] MSEO Agent Backup Error
Thanks Bills for your input, i'll give it a try later, I've also found error from SAN Media Server syslog , "Could not process the request because somthing was missing from server" and vmtape error1 Are you familiar with these errors? Thanks +-- |This was sent by [EMAIL PROTECTED] via Backup Central. |Forward SPAM to [EMAIL PROTECTED] +-- ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
Re: [Veritas-bu] MSEO Agent Backup Error
Status 84 = "The system's device driver returned an I/O error while NetBackup wrote to removable media or a disk file." Be sure you've reduced the NetBackup buffer size by approximately 4KB (so 256K buffers would need to be reduced to 258048). You probably have error messages in /var/log/cgsb.log on the media server where the error occurred. What errors (if any) do you see? Thanks, Bill On Mon, Aug 18, 2008 at 2:43 AM, dy018 <[EMAIL PROTECTED]>wrote: > > Hi all, > > I'm configuring a NBU6.5.2 SAN Media Server (Solaris) using MSEO > configuration for it backup. After confguriing the backup policy with the > keyphase, my backup after running 1mins plus flags out status 84 with device > busy error. There are no other jobs running but i'm not sure how come the > device is flagging out busy. anyone know what could be the problem? > > My mseo is using 6.1...all my mseo device path are using /dev/cgsb > > Regards > > +-- > |This was sent by [EMAIL PROTECTED] via Backup Central. > |Forward SPAM to [EMAIL PROTECTED] > +-- > > > ___ > Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu > http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu > ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
[Veritas-bu] MSEO Agent Backup Error
Hi all, I'm configuring a NBU6.5.2 SAN Media Server (Solaris) using MSEO configuration for it backup. After confguriing the backup policy with the keyphase, my backup after running 1mins plus flags out status 84 with device busy error. There are no other jobs running but i'm not sure how come the device is flagging out busy. anyone know what could be the problem? My mseo is using 6.1...all my mseo device path are using /dev/cgsb Regards +-- |This was sent by [EMAIL PROTECTED] via Backup Central. |Forward SPAM to [EMAIL PROTECTED] +-- ___ Veritas-bu maillist - Veritas-bu@mailman.eng.auburn.edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
