Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section II. Encryption of data-in-transit
  4. NetBackup CA and NetBackup certificates
  5. Host ID-based certificate deployment in a clustered setup
  6. Removing CA certificates from a clustered NetBackup setup
NetBackup™ Security and Encryption Guide

Removing CA certificates from a clustered NetBackup setup

Run the following commands to remove the CA (Certificate Authority) certificates from a clustered setup.

Caution:

Removing the CA certificate from a primary server node can adversely impact the NetBackup functionality.

To remove the CA certificates from a cluster node

  1. Run the following command on a cluster node to view the fingerprints of the CA certificates:

    nbcertcmd -listCACertDetails

  2. Run the following command to remove the CA certificate by providing the appropriate fingerprint:

    nbcertcmd -removeCACertificate -fingerprint fingerprint

To remove the CA certificates for the virtual name

  1. Run the following command on the active node to view the fingerprints of the CA certificates for the virtual name:

    nbcertcmd -listCACertDetails -cluster

  2. Run the following command on the active node to remove the CA certificate for the virtual name by providing the appropriate fingerprint:nbcertcmd -removeCACertificate -fingerprint fingerprint_virtual -cluster

Feedback

Was this page helpful?
Previous

Viewing certificate details of a clustered NetBackup setup

Next

Generating a certificate on a clustered master server after disaster recovery installation

Feedback

Was this page helpful?