Does Netbackup media & master servers contain the credentials of the endpoints that it backup

sunhux
sunhux used Ask the Experts™
on
For some tools, they require to have ssh password in them to be able to login
to the endpoints to extract configuration of the device that it's managing?

Does NB media & master servers require to contain the endpoints credentials for it
to perform backups?

We deem it a risk if media/master servers contain the credentials (domain AD credentials
 or even the local credentials) of the  Win & Unix servers that it's backing up
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
IT Consultant and Infrastructure Architect
Commented:
Netbackup is using it's own crendeltials.
If you select to include the files where ssh credentials are being stored, they are backed up, If not, they are not.

Author

Commented:
in the case of Tripwire, it requires the ssh credentials to be stored in it so that
it could ssh login to network devices to take a config of the devices for
hardening checks.

Though ssh credential is encrypted, it's still deemed insecure as it's stored
in Tripwire Enterprise manager.  So we were told by the security consultant
that for the highly sensitive systems, it has to have its own AD & its own
Tripwire & possibly backup service (if media server contain credentials
that could login to the payment service's servers.
Hanno P.S.IT Consultant and Infrastructure Architect
Commented:
That's why I wrote "files in which credentials are stored".
If you are really concerned, you will have to exclude these from your backup set.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial