Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section II. Encryption of data-in-transit
  4. External CA and external certificates
  5. Enrolling an external certificate for a remote host
NetBackup™ Security and Encryption Guide

Enrolling an external certificate for a remote host

Use this section to enroll an external certificate for a NetBackup host remotely. This lets the security administrator to enroll external certificate for multiple remote hosts from the same host.

To enroll an external certificate for a remote host (or to perform an enrollment sync operation on a remote host), ensure that the server from which you want to enroll the certificate is listed in the SERVER configuration option on the remote host.

To enroll certificate for a remote host

  • Run the following command on the local host:

    nbcertcmd -enrollCertificate -remoteHost remote_host_name -server primary_server_name

An external certificate is enrolled for the specified remote host with the primary server that you provide with the -server option. This primary server must be available in the remote host's SERVER configuration option.

See Configuration options for external CA-signed certificates.

For more details on the commands, refer to the NetBackup Commands Reference Guide.

Feedback

Was this page helpful?
Previous

Configuring a NetBackup host (media server, client, or cluster node) to use an external CA-signed certificate after installation

Next

Viewing the certificate authorities that your NetBackup domain supports

Feedback

Was this page helpful?