Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Deduplication Guide
  3. Using the NetBackup Deduplication Shell
  4. Managing images with a retention lock on a WORM storage server
NetBackup™ Deduplication Guide

Managing images with a retention lock on a WORM storage server

The backup images on a WORM storage server have a retention lock based on the retention policy. The retention lock prevents the images from being modified or deleted. Use the following procedures to manage the backup images with a retention lock from the deduplication shell.

Note:

You can also run the catdbutil command in the shell to manage the images. This command does not appear in the shell menu, but you can run it directly. However, the arguments for the command cannot include path separators (/). See About the NetBackup command line options to configure immutable and indelible data.

Viewing the backup images with a retention lock

To view the backup images with a retention lock

  1. Open an SSH session to the server as the msdpadm user, or for NetBackup Flex Scale, as an appliance administrator.
  2. Run the following command:

    retention policy list

Disabling the retention lock on a backup image

You can disable the retention lock on a backup image if the appliance is in enterprise mode. You cannot disable the lock if the appliance is in compliance mode.

To disable the retention lock

  1. Open an SSH session to the server as the msdpadm user, or for NetBackup Flex Scale, as an appliance administrator.
  2. Run the following command:

    retention policy disable backup_ID=<ID> copynumber=<number>

    You can find the backup ID and the copy number in the output of the retention policy list command.

Feedback

Was this page helpful?
Previous

Managing the retention policy on a WORM storage server

Next

Auditing WORM retention changes

Feedback

Was this page helpful?