Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section II. Encryption of data-in-transit
  4. NetBackup CA and NetBackup certificates
  5. Deleting host ID-based certificates
NetBackup™ Security and Encryption Guide

Deleting host ID-based certificates

Use this topic to manually delete host ID-based certificate of a NetBackup host. You may need to delete certificates in certain scenarios, for example: A NetBackup host is moved from one NetBackup domain to another NetBackup domain. In this scenario, the current host ID-based certificate needs to be deleted and the host must have a certificate issued by the new Certificate Authority (CA) that is the new master server.

Caution:

Manually deleting the host ID-based certificates may adversely impact NetBackup functionality.

Note:

During NetBackup software removal, host ID-based certificates are automatically deleted.

To delete a host ID-based certificate from a NetBackup host

  1. Run the following command on the NetBackup host to view the details of all associated host ID-based certificates.

    UNIX: /usr/openv/netbackup/bin/nbcertcmd -listCertDetails

    Windows: install_path\NetBackup\bin\nbcertcmd -listCertDetails

  2. To delete a certificate, run the following command on the host:

    UNIX: /usr/openv/netbackup/bin/nbcertcmd -deleteCertificate -hostid host_ID

    Windows: install_path\NetBackup\bin\nbcertcmd -deleteCertificate -hostid host_ID

To delete a host ID-based certificate from an active node in a cluster setup

  1. Run the following command on the active node to view the details of all associated host ID-based certificates.

    UNIX: /usr/openv/netbackup/bin/nbcertcmd -listCertDetails -cluster

    Windows: install_path\NetBackup\bin\nbcertcmd -listCertDetails -cluster

  2. To delete a certificate, run the following command on the active node of the cluster:

    nbcertcmd -deleteCertificate -hostid host_ID -cluster

    UNIX: /usr/openv/netbackup/bin/nbcertcmd -hostid host_ID -cluster]

    Windows: install_path\NetBackup\bin\nbcertcmd -hostid host_ID -cluster

Feedback

Was this page helpful?
Previous

Getting a list of NetBackup hosts that have revoked certificates

Next

Host ID-based certificate deployment in a clustered setup

Feedback

Was this page helpful?