Veritas Flex Appliance Getting Started and Administration Guide

Last Published:
Product(s): Appliances (2.1.1, 2.1)
Platform: Flex Appliance OS
  1. Product overview
    1.  
      Introduction to Veritas Flex Appliance
    2.  
      Flex Appliance terminology
    3.  
      About the Flex Appliance documentation
  2. Release notes
    1.  
      Flex Appliance 2.1 new features, enhancements, and changes
    2.  
      Flex Appliance 2.1.1 new features, enhancements, and changes
    3.  
      Supported upgrade paths to this release
    4.  
      Operational notes
    5.  
      Flex Appliance 2.1 release content
    6.  
      Flex Appliance 2.1.1 release content
  3. Getting started
    1.  
      Initial configuration guidelines and checklist
    2.  
      Performing the initial configuration
    3.  
      Adding a node
    4.  
      Accessing and using the Flex Appliance Shell
    5.  
      Accessing and using the Flex Appliance Console
    6.  
      Managing the appliance from the Appliance Management Console
    7.  
      Setting the date and time for appliance nodes
    8.  
      Common tasks in Flex Appliance
  4. Managing network settings
    1.  
      Creating a network bond
    2.  
      Deleting a network bond
    3.  
      Configuring a network interface
    4. Managing the appliance Fibre Channel ports
      1.  
        Viewing the devices that are connected to the Fibre Channel ports
    5.  
      Changing DNS or Hosts file settings
  5. Managing users
    1.  
      Overview of the Flex Appliance default users
    2.  
      Changing the password policy
    3. Managing Flex Appliance Console users and tenants
      1.  
        Adding a tenant
      2.  
        Editing a tenant
      3.  
        Removing a tenant
      4.  
        Adding a local user to the Flex Appliance Console
      5.  
        Connecting a remote user domain to the Flex Appliance Console
      6.  
        Importing a remote user or user group to the Flex Appliance Console
      7.  
        Editing a remote user domain in the Flex Appliance Console
      8.  
        Changing a user password in the Flex Appliance Console
      9.  
        Expiring user passwords in the Flex Appliance Console
      10.  
        Removing users from the Flex Appliance Console
      11.  
        Managing user authentication with smart cards or digital certificates
    4.  
      Changing the hostadmin user password in the Flex Appliance Shell
    5.  
      Changing the sysadmin user password in the Veritas Remote Management Interface
  6. Using Flex Appliance
    1. Managing the repository
      1.  
        Adding files to the repository
      2.  
        Removing the current appliance upgrade or update package from the repository
    2.  
      Creating application instances
    3.  
      Managing application instances from Flex Appliance and NetBackup
    4. Managing application instances from Flex Appliance
      1.  
        Resizing instance storage
      2.  
        Editing instance network settings
      3.  
        Assigning Fibre Channel ports to an instance
      4.  
        Unassigning Fibre Channel ports from an instance
      5. Managing application add-ons on instances
        1.  
          Installing application add-ons
        2.  
          Uninstalling application add-ons
        3.  
          Changing the application add-on installation order
      6.  
        Viewing instance performance metrics
      7.  
        Clearing a configuration error status on an application instance
    5. Upgrading application instances
      1.  
        Warnings and considerations for instance rollbacks
    6.  
      Updating an application instance to a newer revision
    7. About Flex Appliance upgrades and updates
      1.  
        Upgrading Flex Appliance
      2.  
        Updating Flex Appliance
      3.  
        Updating the firmware
  7. Appliance security
    1.  
      Security overview
    2. About lockdown mode
      1.  
        Changing the lockdown mode
    3.  
      Using a sign-in banner
    4.  
      Using an external certificate
  8. Monitoring the appliance
    1.  
      Registering an appliance
    2. Configuring alerts
      1. About AutoSupport and Call Home
        1.  
          Configuring Call Home
      2.  
        Configuring email alerts
      3.  
        Configuring SNMP alerts
      4.  
        Setting the threshold values for disk usage alerts
    3. Viewing the hardware status
      1.  
        Viewing node information
      2.  
        Viewing Primary Storage Shelf information on a Veritas 53xx Appliance
      3.  
        Viewing Expansion Storage Shelf information on a Veritas 53xx Appliance
      4.  
        Viewing Storage Shelf information on a Veritas 5250 Appliance
    4.  
      Viewing hardware faults
    5.  
      Viewing system data
    6.  
      Forwarding logs
    7.  
      Providing access for external monitoring
    8.  
      Revoking access for external monitoring
  9. Reconfiguring the appliance
    1.  
      Performing a factory reset
    2.  
      Performing a reimage
    3.  
      Recovering storage data after a factory reset or a reimage
    4.  
      Performing a storage reset
    5.  
      Removing a node
    6.  
      Viewing or resetting the storage shelf order on a Veritas 5250 Appliance
  10. Troubleshooting guidelines
    1.  
      General troubleshooting steps
    2.  
      Generating a One-Time Password and unlocking access in lockdown mode
    3.  
      Gathering logs

Using an external certificate

By default, the appliance uses a Flex Appliance self-signed certificate for host communication. You can configure the appliance to use an external certificate instead.

Importing an external certificate

To use an external certificate, you must have the following:

  • Host certificate: An X.509 certificate for the appliance, in PEM format. This certificate is different from the certificate for your NetBackup primary and media servers.

  • Private key: The RSA private key of the host certificate.

  • Passphrase: The passphrase of the private key if the key is encrypted.

To prevent errors while importing certificates, ensure that the external certificate files meet the following requirements.

  • All certificate files must have a suffix of .pem or .cer and include -----BEGIN CERTIFICATE----- at the beginning of the certificate.

  • All certificate files must contain the Flex Appliance Console FQDN in the common name or the subject alternative name (SAN) field of the certificate.

  • The subject name and common name fields must not be left empty.

  • Only ASCII 7 characters can be used in the subject and SAN fields of the certificate.

  • The private key must be in the PKCS#8 PEM format, and it must begin with a header line of -----BEGIN ENCRYPTED PRIVATE KEY-----, -----BEGIN PRIVATE KEY-----, or -----BEGIN RSA PRIVATE KEY-----.

  • Flex Appliance's web service uses the PKCS#12 standard and requires certificate files to be in the X.509 (.pem) format. If you obtained the certificate and private key in any other format you must first convert them to the X.509 (.pem) format.

To import an external certificate

  1. Sign in to the Flex Appliance Console as the default admin user and click the gear icon in the upper-right corner of the page, then click External certificate.
  2. Upload the required files and click Next.
  3. Confirm the details and click Import.
Removing an external certificate

Use the following procedure to remove an external certificate that you imported. Note that if you remove an external certificate, the appliance reverts to use the default Flex Appliance self-signed certificate for host communication.

To remove an external certificate

  1. Sign in to the Flex Appliance Console as the default admin user and click the gear icon in the upper-right corner of the page, then click External certificate.
  2. Click Remove.