Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section III. Encryption of data at rest
  4. External key management service
  5. Certificate configuration and authorization
NetBackup™ Security and Encryption Guide

Certificate configuration and authorization

Before configuring any certificate to be used with NetBackup, you should do certain configurations on the external KMS server to ensure that NetBackup has the required permissions to perform key-specific operations. Configuration steps may vary for different external KMS solutions.

Ensure the following:

  • An entity (user) is created in the external KMS that represents NetBackup master server.

  • The master server host has a certificate that the external KMS server trusts.

  • The certificate common name (CN) is associated with the entity that represents the master server.

Feedback

Was this page helpful?
Previous

About external KMS

Next

Workflow for external KMS configuration

Feedback

Was this page helpful?