Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section II. Encryption of data-in-transit
  4. External CA and external certificates
  5. Configuring an external certificate for the NetBackup web server
  6. Removing the external certificate configured for the web server
NetBackup™ Security and Encryption Guide

Removing the external certificate configured for the web server

You can remove the external certificate that is configured for the web server. NetBackup then uses the NetBackup CA-signed certificate for secure communication.

To remove the external certificate configured for the web server

  1. Run the following command (in a clustered primary server setup, run this command on the active node):

    configureWebServerCerts -removeExternalCert -nbHost

    • In a clustered primary server setup, run the following command on the active node to freeze the cluster to avoid a failover:

      install_path/netbackup/bin/bpclusterutil -freeze

  2. Restart the NetBackup Web Management Console service.
    • In a clustered primary server setup, run the following command on the active node to unfreeze the cluster:

      install_path/netbackup/bin/bpclusterutil -unfreeze

Feedback

Was this page helpful?
Previous

Updating or renewing external certificate for the web server

Next

Configuring the primary server to use an external CA-signed certificate

Feedback

Was this page helpful?