Backup Exec cannot connect to the Remote Agent because a trust relationship was not established between the Remote Agent and the Media Server.

Problem

Backup Exec 2010 R3 job fails with the error: 0xe0009b86 - Backup Exec cannot connect to the remote agent because a trust relationship was not established between the remote agent and the media server. 

Error

0xe0009b86 / V-79-57344-39814 - Backup Exec cannot connect to the remote agent because a trust relationship was not established between the remote agent and the media server.  To establish a trust relationship, add the remote agent to the Favorite Resources in the backup selections tree.

 

Environment

Backup Exec 2010 R3 & Backup Exec 2012.

Cause

Backup Exec 2010 R3 and above now uses stronger network security protocols to secure communication between media servers and Remote Agents, reducing the possibility that backup or restore operations can be compromised.

When connecting to a remote computer from the media server, a trust relationship must be established between the media server and the remote computer.  In certain situations the trust must be established manually.

Examples:

1. If the Backup Exec 2010 R3 or above Remote agent for Windows (RAWS) is installed manually, the Trust must be established before selecting the remote computer for backup or an existing selection list / job can run.
2. An alternate or new media server is attempting to backup a remote computer where no trust is established.
3. A trust relationship for a remote Linux or UNIX computer must be established first before a backup. 

Note: This error also occurs if Backup Exec Server is trying to backup another media server with same version of RAWS. Ensure that BE is not installed on the target remote server. 

Solution

The trust relationship between the media server and a remote computer can be established manually in a number of ways:

A. Add the remote computer to Favorite Resources

1. Browse to the remote computer in backup selections from the Active Directory Domains orMicrosoft Windows Network domain

2. Browse to the remote computer after adding it to User‐defined Selections

3. Use the Remote Agent Utility on the remote computer to configure publishing option.

B. Manually establishing a trust relationship with a remote computer by adding to Favorite Resources:

1. On the navigation bar, click the arrow next to Backup.

2. Click New Backup Job.

3. On the View by Resource tab, right-click Favorite Resources and choose Add Windows System.

4. Enter the remote computer name in the System Name field.

5. Choose the option to Add a system that already has the Remote Agent installed.

6. Choose or create a Logon Account with appropriate credentials for the remote computer, then clickOK.

7. Click Yes at the prompt to establish the trust relationship.

8. Click OK at the message indicating the system was added successfully.

C. Manually establishing a trust relationship with one or more remote computers by browsing to the domain:

1. On the navigation bar, click the arrow next to Backup.

2. Click New Backup Job.

3. On the View by Resource tab, expand Domains.

4. Do one of the following:

• To select the remote computer from an Active Directory domain, expand Active Directory Domains, and then expand the Active Directory domain where the remote computer resides.
• To select the remote computer from a Microsoft Windows Network domain, expand Microsoft Windows Network, and then expand the domain where the remote computer resides.

5. Do one of the following:

To establish the trust relationship with a single remote computer:
a. Select or expand the remote computer.
b. Click Yes at the prompt to establish the trust relationship.

To establish a trust relationship with more than one remote computer in the same domain:
a. In the results pane on the right, click on the first remote computer to highlight it, but do not select the checkbox.
b. Use the or keys while you click on other remote computers that you want to select.
c. Right‐click the selected computers, and then click Establish trust relationship.

D. Manually establishing a trust relationship with one or more remote computers by adding to User-defined Selections:

1. On the navigation bar, click the arrow net to Backup.

2. Click New Backup Job.

3. On the View by Resource tab, right‐click User‐defined Selections, and then click Manage User‐defined Selections.

4. Type the name or IP address for the remote computer in the Name field and click Add

5. After adding remote computers to the list, click Close.

6. Expand User‐defined Selections in the tree.

7. Do one of the following:

To establish the trust relationship with a single remote computer:a. Select or expand the remote computer.
b. Click Yes at the prompt to establish the trust relationship.

To establish a trust relationship with more than one remote computer in the same domain:a. In the results pane on the right, click on the first remote computer to highlight it, but do not select the checkbox.
b. Use the or keys while you click on other remote computers that you want to select.
c. Right‐click the selected computers, and then click Establish trust relationship.

E. Manually establishing a trust relationship with a remote computer using the Remote Agent Utility:

1. Open the Backup Exec 2010 Remote Agent Utility from the program menu.

2. On the Publishing tab, click Change Settings.

3. After the utility closes and reopens, click the Publishing tab and click Add.

4. Type the name or IP address of the media server, user name, and password in the corresponding fields.
Note: The user must have administrative privileges on the specified media server.

5. Click OK.

6. Click the Security tab and verify that an entry appears for the specified media server.

7. Click OK to close the Remote Agent Utility.

F. Establishing a trust relationship while configuring a remote computer for deduplication

If a trust relationship with the remote computer has not already been established, establish it while configuring the remote computer for deduplication:

1. Open the Tools menu, then choose Configure Remote Agent for Deduplication... from theConfigure Devices submenu.

2. Type the name of the remote computer in the Server field.

3. Choose the port your remote computer is configured to use (default is 10000).

4. Type a description if one is desired.

5. Check or clear the Enable ICMP ping operations checkbox, depending on the network configuration.  If a firewall blocks ICMP, the checkbox will need to be cleared.

6. Choose or create a Logon account with the correct credentials for accessing the remote computer.

7. Click OK.

8. Click Yes at the prompt to establish the trust relationship.

9. Click Restart Now or Restart Later. 

Note: The Backup Exec services on the media server must be restarted before the remote computer can be used for client-side deduplication.