Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section III. Encryption of data at rest
  4. External key management service
  5. Configuring KMS
  6. Updating KMS configuration
NetBackup™ Security and Encryption Guide

Updating KMS configuration

Update priority of a KMS

To update priority of KMS, run the following command: nbkmscmd -updateKMSConfig -name configuration_name -priority priority

Disable a KMS configuration for backup

To disable keys from specified KMS to be used for backup, run the following command: nbkmscmd -updateKMSConfig -name configuration_name -enabledForBackup 0

Note:

After any update in external KMS configuration or keys, NetBackup may take several minutes to consume appropriate key in backup or restore workflow. This is because NetBackup caches the key for 10 minutes (for external KMS). To immediately consume a key, cache can be cleared by executing the following command on the respective media server:

bpclntcmd -clear_host_cache

Feedback

Was this page helpful?
Previous

Listing KMS configurations

Next

Deleting KMS configuration

Feedback

Was this page helpful?