Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section II. Encryption of data-in-transit
  4. NetBackup CA and NetBackup certificates
  5. About host management
  6. Allowing or disallowing automatic certificate reissue
  7. Configuring validity of the autoreissue parameter for a host
NetBackup™ Security and Encryption Guide

Configuring validity of the autoreissue parameter for a host

When you allow automatic reissue of a host ID-based certificate, the autoreissue parameter is by default enabled for 2880 minutes (or 48 hours or 2 days). After this duration, the parameter is reset and the certificate reissue operation requires a reissue token.

You can configure the duration for automatic reissue of certificate or the time-to-live (TTL) setting for the autoreissue parameter by updating the web.conf file.

To configure validity of the autoreissue parameter or the TTL setting

  1. Open the web.conf file. Location for the file is as follows:

    On Windows: Install_Path\var\global\wsl\config\web.conf

    On Linux: /usr/openv/var/global/wsl/config/web.conf

  2. Configure the TTL setting for the autorissue parameter in minutes. For example:

    ttl.autoReissue.minutes = 1440

    Note:

    Valid range for the autoreissue TTL setting is 0 min to 43200 min (or 30 days).

    If the TTL value that you have configured is not within the valid range, the server continues using the last configured TTL value.

  3. For the new autoreissue TTL value to take effect, do one of the following:

    • Restart the NetBackup Web Management Console (WMC) service.

    • Run the following command:

      On Windows: Install_Path/bin/nbhostdbcmd -reloadconfig -host

      On UNIX: NETBACKUP_INSTALL_DIR\bin\nbhostdbcmd -reloadconfig -host

Feedback

Was this page helpful?
Previous

Allowing or disallowing automatic certificate reissue

Next

Adding or deleting comment for a host

Feedback

Was this page helpful?