A new host ID-based certificate in NetBackup 10.0 cannot have a key size greater than 4096
Because of a technical limitation in NetBackup 10.0, you cannot generate or renew a host ID-based certificate to have a key size greater than 4096. Therefore, you must not migrate the NetBackup CA to have a key size greater than 4096. If the CA migration with a key size greater than 4096 is already in progress, you must complete the migration before you upgrade to NetBackup 10.0.
This technical limitation does not have any effect on the operations related to external CA-signed certificates.