Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section III. Encryption of data at rest
  4. NetBackup key management service
  5. Command line interface (CLI) commands
  6. Modify host master key (HMK)
NetBackup™ Security and Encryption Guide

Modify host master key (HMK)

To modify the host master key, use the NetBackup Key Management Service (KMS) utility command (the nbkmsutil command) with the included arguments.

The HMK is used to encrypt the keystore. To modify the current HMK, the user should provide an optional seed or pass phrase. An ID (HMK ID) should also be provided that can remind them of the specified pass phrase. Both the pass phrase and HMK ID are read interactively.

# nbkmsutil -help -modifyhmk
nbkmsutil -modifyhmk [ -nopphrase ]

Feedback

Was this page helpful?
Previous

Troubleshooting common errors during an import

Next

Get host master key (HMK) ID

Feedback

Was this page helpful?