Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section II. Encryption of data-in-transit
  4. External CA and external certificates
  5. Enabling the NetBackup CA in a NetBackup domain
NetBackup™ Security and Encryption Guide

Enabling the NetBackup CA in a NetBackup domain

Use this section to enable a NetBackup domain to use NetBackup CA-signed certificates (or host ID-based certificates) for host communication.

To enable a NetBackup domain to support NetBackup CA configuration

  1. Configure the NetBackup web server to use NetBackup (host ID-based) certificates.
    • Run the following command:

      configureWebServerCerts -addNBCert

      See Configuring an external certificate for the NetBackup web server.

    • Restart the NetBackup Web Management Console (nbwmc) service.

  2. Deploy a NetBackup host ID-based certificate on the primary server:

    See Deploying host ID-based certificates.

  3. Deploy a NetBackup host ID-based certificate on each host.

    See Deploying host ID-based certificates.

Feedback

Was this page helpful?
Previous

Disabling the NetBackup CA in a NetBackup domain

Next

Disabling an external CA in a NetBackup domain

Feedback

Was this page helpful?