Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section II. Encryption of data-in-transit
  4. External CA and external certificates
  5. About viewing enrollment status of primary servers
NetBackup™ Security and Encryption Guide

About viewing enrollment status of primary servers

To configure a NetBackup host to use an external certificate, you need to define the required configuration options and then enroll a certificate for the host. The enrolled certificate is used for communication between the host and the primary server domain that exists in the SERVER option.

See Configuring the primary server to use an external CA-signed certificate.

See Configuring a NetBackup host (media server, client, or cluster node) to use an external CA-signed certificate after installation.

You can view the enrollment status by running the nbcertcmd -listEnrollmentStatus command. The command lists only those records where the subject name matches that of the certificate that is configured for the ECA_CERT_PATH option.

The following enrollment statuses are displayed:

  • Not enrolled - The external certificate is not enrolled with this primary server domain. The primary server is present in primary server list in the SERVER option.

  • To be updated - The external certificate is required to be enrolled again with this primary server domain.

  • Enrolled - The external certificate is enrolled with the primary server.

See Enrolling an external certificate for a remote host.

Feedback

Was this page helpful?
Previous

About automatic enrollment of an external certificate

Next

Configuring an external certificate for the NetBackup web server

Feedback

Was this page helpful?