NetWorker: How to recreate the lockbox and reset all NetWorker server resource passwords

The procedure outlined in this article may be required under the following conditions:

• There is no access to the original NetWorker server.
• NetWorker is no longer available in the original system.
• All passwords are lost or unknown.
• The backup administrator is unable to move the lockbox.
• Unable to move the lockbox with nsr_prep_lb.
• The NetWorker server is reporting "Unable to decrypt: BAD_DATA" after a NetWorker server disaster recovery (nsrdr)

All the passwords used by the NetWorker server resources must be reset.

• Password
• Management password
• NAS management password
• NAS file access password
• Authentication Key
• VMWS user password
• EBR Password
• REST Services Password
• vCenter Password
• Privacy Key
• Datazone pass phrase

Procedure:

1. On the NetWorker server, create a file called reset_passwords.txt that includes the following:

update password: ;
y
update management password: ;
y
update NAS management password: ;
y
update NAS file access password: ;
y
update Authentication Key: ;
y
update VMWS user password: ;
y
update EBR Password: ;
y
update REST Services Password: ;
y
update vCenter Password: ;
y
update Privacy Key: ;
y
update datazone pass phrase: ;
y

2. Stop the NetWorker server services:

Linux: systemctl stop networker or nsr_shutdown
Windows: net stop nsrexecd /y
 

3. Validate that all NetWorker (nsr) services have stopped:

Linux: ps -ef | grep nsr
Windows: tasklist | findstr nsr
 

4. Make a copy of the NetWorker server's nsrdb call nsrdb.beforepassclean.
   NOTE: If any issue arise, you can revert to this copy of the nsrdb.

Linux: cp -R /nsr/res/nsrdb /nsr/res/nsrdb.beforepassclean
Windows: Use Windows File Explorer to create a copy of your <Install Drive>:\Program Files\EMC NetWorker\nsr\res\nsrdb
 

5. Use nsradmin to import the reset_passwords.txt into the nsrdb.

Linux: nsradmin -i reset_passwords.txt -d "/nsr/res/nsrdb"
Windows: nsradmin -i reset_passwords.txt -d "<Install Drive>:\Program Files\EMC Networker\nsr\res\nsrdb"

6. Start NetWorker services:

Linux: systemctl start networker
Windows: net start nsrd and if NMC is installed on the same host net start gstd