Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section II. Encryption of data-in-transit
  4. NetBackup CA and NetBackup certificates
  5. Host ID-based certificate deployment in a clustered setup
  6. Creating a reissue token for a clustered NetBackup setup
NetBackup™ Security and Encryption Guide

Creating a reissue token for a clustered NetBackup setup

You need to reissue a certificate to a host in certain scenarios, for example a certificate is revoked for a host and you need to reissue a new certificate to the host.

See Deploying a host ID-based certificate on a clustered NetBackup setup using reissue token.

You need a reissue token to reissue a new certificate to a host.

See About Token Management for host ID-based certificates.

To create a reissue token for a cluster node

  1. Log in to the NetBackup Web Management Service with the following command:

    bpnbat -login -logintype WEB

    See Web login requirements for nbcertcmd command options.

  2. Run the following command to create a reissue token for the required cluster node:

    nbcertcmd -createToken -name token_name -reissue -host host_name

    See Creating a reissue token.

To create a reissue token for the virtual name

  1. Log in to the NetBackup Web Management Service with the following command:

    bpnbat -login -logintype WEB

    See Web login requirements for nbcertcmd command options.

  2. Run the following command to create a reissue token for the virtual name.

    nbcertcmd -createToken -name token_name_virtual -reissue -host virtual_name

    See Creating a reissue token.

Feedback

Was this page helpful?
Previous

Deploying a host ID-based certificate on a clustered NetBackup setup using reissue token

Next

Renewing a host ID-based certificate on a clustered NetBackup setup

Feedback

Was this page helpful?