Data Domain: Enable DD Boost OST Token-Based Authentication

Summary: Token-based authentication in DD Boost OST Plug-in 8.4 provides a more reliable authentication method and helps avoid intermittent credential decryption issues seen with earlier authentication handling in some NetBackup 10.x environments. It also improves credential security by eliminating dependence on encrypted password decryption workflows. ...

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Intermittent authentication-related failures may occur when using traditional credential authentication with DD Boost OST Plug-in versions 7.8 through 8.3 in NetBackup 10.x environments.
Backup replication jobs may report credential or authentication errors even though DD Boost replication completes successfully.
Organizations may want to proactively implement a more secure and resilient authentication method for DD Boost operations.

Cause

Earlier authentication methods rely on secure credential handling and credential decryption processes that can intermittently fail under certain conditions.
DD Boost OST Plug-in 8.4 introduces token-based authentication as an alternative authentication mechanism.

Resolution

Data Domain - Enabling Token-Based Authentication introduced in DD Boost OST Plugin 8.4

Token-based authentication is controlled through a configuration file on the host system. The system reads this file at runtime to determine whether to enable token-based authentication or fall back to the standard authentication mode.

Configuration File Location 

The configuration file must be present on the system where the OST plugin is installed.

Linux: /DD_OST/dd_ost_plugin.conf 
Windows: C:\DD_OST\dd_ost_plugin.conf

Configuration File Content

To enable token-based authentication, the file should contain:

token_auth=true

  
To disable token-based authentication and use the default authentication method, the file should contain:

  

  
token_auth=false 

  

  
 

  

   NOTE: 
   
    
    
  • Ensure that the DD_OST directory and the dd_ost_plugin.conf file have READ permission for all the users to avoid any access related issues. 
    • 
    
  • The key and value are case-sensitive. Use only token_auth=true or token_auth=false
    • 
    
  • The configuration file must exist at the exact path specified above depending on the platform. 
    • 
    
  • Token-based authentication in the OST plugin is currently supported when the ddboost option global-authentication-mode is set to none
    • 
    
  • If the file is missing, unreadable, or the value is not set correctly, the system will default to standard authentication.
    • 
   

  


                    
Additional Information

        
Why Use Token Authentication

  
Reduces dependency on credential decryption mechanisms that may intermittently fail.
   

   Provides a more secure authentication model.
   

   Helps improve authentication reliability for DD Boost operations.
   

   Simplifies authentication management through a dedicated configuration setting.
   

   

  
Data Domain: NetBackup 10.x AIR Failures with DD Boost plug-in




        

        
        
Affected Products

        Data Domain







                        

                            

    

        

            

                
                    
 Article Properties

                
            

            

                

                        
Article Number: 000496641

                

                
                

                        
Article Type: Solution

                

                

                        
Last Modified: 10 Aug 2026


                

                    

                            
Version:  1

                    


            


        

    

    

        

            

                
                    
Find answers to your questions from other Dell users

                
            

            

                

                    
                



            


        

    

    

        

            

                
                    
Support Services

                
            

            

                

                    Check if your device is covered by Support Services.