How the hosts with revoked certificates work
NetBackup certificates can be revoked by the master server administrator for various reasons. A certificate revocation list (CRL) that contains information about the revoked certificates is created by the master server and is periodically fetched by all hosts. The time interval to update the CRLs is determined by the certificate deployment security level on the master server.
During communication between hosts, CRLs are verified. The host that uses a revoked certificate is no longer trusted. Communication with such hosts is terminated.