Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Plug-in for VMware vSphere Client (HTML5) Guide
  3. Plug-in Configurations
  4. Configuring vCenter CA Certificates in NetBackup primary server
NetBackup™ Plug-in for VMware vSphere Client (HTML5) Guide

Configuring vCenter CA Certificates in NetBackup primary server

NetBackup 10.0.1 onwards, vCenter CA certificate is automatically added to truststoreVWCP. In case of multiple certificates, configured in the vCenter, only certificate issued to and issued by Certificate Authority is added to the truststoreVWCP. If the vCenter CA certificate is not added automatically then follow the steps to add it manually:

  1. Download the vCenter CA certificates from https://<vCenter IP/FQDN>/certs/download.zip
  2. Extract the contents of a zip file to any local location.
  3. Get the storepass from Veritas/NetBackup/var/global/jkskey .
  4. Update and run the following command:

    Windows

    C:\Program Files\Veritas\NetBackup\jre\bin\keytool"
    -storetype BCFKS providerpath "C:\Program
    Files\Veritas\NetBackup\wmc\ webserver\lib\ccj-3.0.1.jar" -
    providerclass com.safelogic.cryptocomply.
    jcajce.provider.CryptoComplyFipsProvider
    -importcert -trustcacerts -file
    C:\Users\labuser\Downloads\download \certs\win\ vCenter
    Certificate -keystore "C:\Program Files
    \Veritas\NetBackup\var\global\wsl\credentials\truststoreVWC
    P.bcfks" -storepass 3588289782 -alias VMwareCA

    Linux

    /usr/openv/java/jre/bin/keytool -storetype BCFKS -providerpath
    /usr/openv/wmc/webserver/lib/ccj-3.0.1.jar -providerclass com.
    safelogic.cryptocomply.jcajce.provider.CryptoComplyFipsProvider
    -importcert -trustcacerts -file /root/c3bc1e7a.0 -keystore
    /usr/openv/var/global/wsl/credentials/truststoreVWCP.bcfks -
    storepass
    87324987439 -alias VMwareCA

Feedback

Was this page helpful?
Previous

NetBackup permissions for the plug-in

Next

Log in to the Plug-in

Feedback

Was this page helpful?