Adding NetBackup credentials for VMware

To back up or restore virtual machines, the NetBackup server requires logon credentials to access the VMware ESX servers or the VMware vCenter servers. In the NetBackup Administration Console, do the following.

To add NetBackup credentials

  1. Click Media and Device Management > Credentials > Virtual Machine Servers.

  2. Click Actions > New > New Virtual Machine Server.

  3. On the Add Virtual Machine Server dialog, enter the name of a virtual machine server (vCenter server or ESX server).


    Enter the server name in the same format in which it is registered in DNS and in the VMware server (whether short or fully-qualified).

    NetBackup needs access to this server for either of the following reasons:

    • To browse the server's virtual machines and back them up.

    • To use the server as a target for restoring virtual machines.

      Use the next dialog to identify the type of this server (vCenter, ESX, or ESX for restore only).

  4. In the Credentials pane of the Virtual Machine Server dialog, enter the following:

    Virtual machine server type

    Select the type of VMware server that NetBackup needs to access:

    • VMware VirtualCenter server

      Designates a vCenter (or VirtualCenter) server that manages ESX servers. When you create a policy to back up this server's virtual machines, NetBackup can browse this server and list its virtual machines. If the credentials provide full access privileges to the vCenter server, you can restore virtual machines to this server.

      Note: Do not enter logon credentials for the individual ESX servers that this vCenter server manages. NetBackup needs credentials for the vCenter only.

    • VMware ESX server

      Designates a standalone ESX server that is not managed by a vCenter server. NetBackup will be able to browse the ESX server to present a list of its virtual machines for backup. You can also restore virtual machines to this ESX server. To use the server as a target for restores, enter the credentials that provide full access privileges to the ESX server.

    • VMware restore ESX server

      Designates an ESX server to which NetBackup can restore virtual machines. You must enter the credentials that provide full access privileges to the server.


      NetBackup can access this type of server for restores only, not for backups.


      For restore, VMware vStorage cannot communicate with the ESX servers that are earlier than version 3.5. To restore virtual machines that were backed up with vStorage, the target ESX server must be 3.5 or later or must be managed by a vCenter server 2.5 or later.

      The restore ESX server type has the following advantages:

      • For large environments with hundreds of hosts, NetBackup may not need full access to the vCenter server. With the restore ESX server type, you can give NetBackup full access to a single ESX server that is dedicated to restore.

      • SAN-based restores that go directly to a restore ESX server are faster than restores that go through the vCenter server.

      For further information on this option, refer to the following Symantec tech note:

    User name

    Enter the user name for the virtual machine server. Note that spaces in user names are not allowed.


    Enter the password (and confirm it) for the virtual machine server.

    Validate Credentials

    Select this box to have the credentials verified.

    You can use the For backup host pull-down to select a particular backup host for which to validate the credentials. Note that a backup host appears in the pull-down list if it was added to the master server's Host Properties dialog.

    See Adding the VMware backup host to the NetBackup configuration.

    If For backup host is set to <Any> (the default), NetBackup attempts to validate the credentials using each backup host in turn. NetBackup continues checking only until validation succeeds for a particular backup host or the list of backup hosts is exhausted.

    During validation: An invalid user name or password is deleted if you have entered it for the first time and you do not select a backup host.

    If your VMware backup host is running a version of NetBackup that is earlier than 6.5.4, the credentials cannot be validated. An error message is displayed. You must verify that the credentials you entered are correct for the VMware server. If the credentials are correct, you can ignore the error message.

    Connect using port number

    If the default port number has not been changed on the VMware server, no port specification is required. In that case, make sure that the Connect using port number box is not checked.

    If the VMware server has been configured to use a different port, click the Connect using port number box and specify that port number.

    For VCB, note the following:

    • If you use a version of VCB that is older than 1.1, click the Connect using port number box and specify port 902.

    • If you select port 902 and use an ESX server 3.5 or later, the backup host cannot communicate with the VirtualCenter or ESX servers. The attempt to back up the virtual machines fails. The credentials validation also fails if you selected Validate Credentials.

  5. Click OK.

  6. If your site has multiple standalone ESX servers, use the Virtual Machine Server dialog to enter credentials for each ESX server.