Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Deduplication Guide
  3. Using the NetBackup Deduplication Shell
  4. Managing certificates from the deduplication shell
  5. Removing certificates from the deduplication shell
NetBackup™ Deduplication Guide

Removing certificates from the deduplication shell

Use the following procedures to remove NetBackup or external certificates from the deduplication shell.

Warning:

If you remove the existing certificates but have not installed new certificates, the WORM server can no longer communicate with the primary server. To switch from one type of certificate authority (CA) to the other, install the new NetBackup or external certificates before you remove the existing certificates.

To remove the NetBackup certificates

  1. Open an SSH session to the server as the msdpadm user, or for NetBackup Flex Scale, as an appliance administrator.
  2. Run the following command:

    setting certificate disable-CA

To remove the external certificates

  1. Open an SSH session to the server as the msdpadm user, or for NetBackup Flex Scale, as an appliance administrator.
  2. Run the following command:

    setting certificate remove-enrollment

Feedback

Was this page helpful?
Previous

Importing certificates from the deduplication shell

Next

Managing FIPS mode from the deduplication shell

Feedback

Was this page helpful?