NetWorker: Data Domain device creation fails with "'DDBOOST_USER' does not have sufficient access rights."

Summary: Data Domain device creation fails with "Unable to connect to 'DD_HOSTNAME' because user 'DDBOOST_USER' does not have sufficient access rights."

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

  • You are attempting to create a new Data Domain (DD) device in NetWorker, and it is failing with the following error after entering the ddboost user credentials:  "Unable to connect to 'DD_HOSTNAME' because user 'DDBOOST_USER' does not have sufficient access rights."
  • Other devices configured through the same Data Domain are observing no backup, clone, or restore failures.

Cause

This issue can appear if Secure Multi-Tenancy is configured and you are attempting to configure a device outside of the secure tenant.
 
NetWorker supports DD Boost devices in secure multi-tenancy (SMT) storage on Data Domain systems. SMT enables service providers to isolate tenant users on a Data Domain system. A global storage administrator assigns or creates a tenant unit (TU) for each tenant user. Tenant users, like backup admins, must use a DD Boost username and password to create secure storage units for DD Boost device data storage.

Resolution

Update the ddboost user's password from the DD management user interface.

DD Access Management Change Password

After changing the ddboost users credentials in Data Domain, you must also update the NetWorker devices to use the new password.

NetWorker device properties password field

Additional Information

Check the ddfs.info log in to the DD for any account-related errors while attempting to create the device:

log watch debug/ddfs.info

Or:
NetWorker: How To Collect ddfs.info log from Data Domain

10/16 08:13:58.083 (tid 0x7fd3e02fa7b0): nfsproc3_ostmntsec_3_svc: connection failed permission (corrupted credentials) from host NW_SERVER_ADDRESS - ost_decrypt_mnt_sec_request(): failed to finalize plain text (101077092, error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt)
10/16 08:14:01.817 (tid 0x7fd3e02fa7b0): WARNING: Failed to verify the password for user ddboost.  Error is 7:Authentication failure

This error can persist even after password value is updated for the account. It will also likely result in errors when attempting to create the device even if it is the correct account for the storage-unit. A ticket with Data Domain support is required.

Affected Products

NetWorker

Products

NetWorker Family
Article Properties
Article Number: 000058908
Article Type: Solution
Last Modified: 24 Jun 2025
Version:  4
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.