Environment variable for certificate key size
NetBackup uses security certificates to authenticate NetBackup hosts for secure communication. The security certificates conform to the X.509 Public Key Infrastructure (PKI) standard. A NetBackup master server acts as the certificate authority (CA) and issues digital certificates to hosts. NetBackup now supports the following certificate key sizes: 2048 bits, 4096 bits, 8192 bits, and 16384 bits.
With a NetBackup 10.0 installation, new root CA with 2048 bits key strength is deployed. To use a certificate key size larger than 2048 bits, set the NB_KEYSIZE environment variable on the master server before you start the installation.
For example:
NB_KEYSIZE = 4096
The NB_KEYSIZE can only have the following values: 2048, 4096, 8192, and 16384.
Caution:
You should carefully choose the key size for your environment. Choosing a large key size may reduce performance. You should consider all factors to determine the correct key size for your environment.
For more information about CA migration and certificate key sizes, see the NetBackup Security and Encryption Guide.