Enabling SSL Communications between a Media Server and a Remote Agent for Windows Servers

Method 1: Single Remote Server - Push Install

1. Push install the Remote Agent for Windows Servers to a remote machine.
2. After install, the remote machine may require a reboot.
3. Open the Backup Exec Windows Servers Admin Console.
4. Go to the Job Setup tab.
5. Open a new Backup Selection List.
6. Go to Favorite Resources > Windows Systems and confirm the remote machine is listed.
7. If the machine is listed, attempt to expand the server.
8. A prompt will be received if the machine is not trusted. The option to trust the machine will be made available at this time.

Method 2: Single Remote Server - Local Install

1. Perform a Local Install of the Remote Agent for Windows Servers to a remote machine. (www.symantec.com/docs/TECH128757)
2. After install, reboot may be required.
3. Go back to the Media Server.
4. Open the Backup Exec Windows Servers Admin Console.
5. Go to the Job Setup tab.
6. Open a new Backup Selection List.
7. Go to Domains > Microsoft Windows Network > DomainName in the selection list.
8. Locate the remote machine node.
9. Right click on the machine name and select Establish Trust Relationship.
    

Troubleshooting

How to determine if the SSL certificate is installed correctly:

• BE 2010 R3 Remote agent advertisement appears under Favorites.

Note: BE 2010 R2 and below agents will still appear under Favorite Resources. BE 2010 R3 agents will only appear if they’re trusted.

• Browsing to remote agent does not prompt to establish trust.
• Use Backup Exec 2010 Remote Agent Utility > Security tab at Remote Agent machine to view installed certificates.

Note: Backup Exec 2010 Remote Agent Utility can be found under the Symantec Backup Exec program group.

If the remote machine is not listed under favorite resources:

1. Open a new Backup Selection List.
2. Go to Domains > Microsoft Windows Network > DomainName in the selection list.
3. Locate the remote machine node.
4. Right click on the machine name and select Establish Trust Relationship.

If the remote machine is not listed under favorite resources or as a domain machine, it can be added as a user defined selection. After that, the Establish Trust Relationship option can be used.

These trusts are established on a per Media Server basis. Each additional Media Server that has not trusted the remote machine will need to do so individually.