Master server security certificate is revoked
A revoked security certificate on a NetBackup master server is the worst case scenario for NetBackup security. The following symptoms may indicate that the master server certificate is revoked:
Jobs fail with network errors.
Media servers deactivate spontaneously.
The vnetd proxy process log files on hosts show that the master server's certificate is revoked.
The bptestbpcd -host master_server command output may show that the master server's certificate is revoked.
If a NetBackup CA-signed certificate is used
Do not trust the certificate revocation list on any host.
Resolve the issue, reissue the master server's security certificate, and then return the master server to service.
If you cannot resolve the issue and return the master server to service, replace it. You must then reissue all host certificates.
If an external CA-signed certificate is used, you can undo the revocation of the master server's certificate or enroll a new certificate for the master server.
See Troubleshooting issues with external CA-signed certificate revocation.