Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section III. Encryption of data at rest
  4. NetBackup key management service
  5. Command line interface (CLI) commands
  6. Delete a key group
NetBackup™ Security and Encryption Guide

Delete a key group

To delete a key group, use the NetBackup Key Management Service (KMS) utility command (the nbkmsutil command) with the included arguments.

Note:

Only empty key groups can be deleted.

# nbkmsutil -help -deletekg
nbkmsutil -deletekg -kgname <key_group_name> -force

-kgname

Specifies the name of the key group to be deleted. Only empty key groups can be deleted.

-force

All the keys from the key group are deleted.

Only empty key groups can be deleted with -deletekg option. You can however, also force delete a key group even if it is not empty. Run the following command to force delete a key group:

# nbkmsutil -deletekg -kgname <key_group_name> -force

Feedback

Was this page helpful?
Previous

Get details of keys

Next

Delete a key

Feedback

Was this page helpful?