Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section III. Encryption of data at rest
  4. NetBackup key management service
  5. Troubleshooting KMS
  6. Troubleshooting example - backup with no active key record
NetBackup™ Security and Encryption Guide

Troubleshooting example - backup with no active key record

The following example shows what happens when you attempt a backup when there is no active key record.

Figure: Listing of key records shows a listing of key records. Three of them have the key group ENCR_mygroup and the same volume pool name. One key group named Q2_2008_key was active. At the end of the command sequence, the state of the Q2_2008_key key group is set to inactive.

Figure: Listing of key records

Listing of key records

Figure: Listing of key records with active key group modified shows the listing of key records that are produced again, and you can see that the Q2_2008_key state is now listed as inactive.

Figure: Listing of key records with active key group modified

Listing of key records with active key group modified

With no active key, what happens to the backup?

Figure: Output from bptm command shows the BPTM log output. It logs the message within the 1227 error code in the BPTM log.

Figure: Output from bptm command

Output from bptm command

The Job Details dialog box shows the detailed status. You can see a message stating what failed and the detailed status. With the information in the previous diagnostics, you can determine the particular problem or to identify what a given problem is related to.

Feedback

Was this page helpful?
Previous

Solution for restores that do not decrypt

Next

Troubleshooting example - restore with an improper key record state

Feedback

Was this page helpful?