Host ID-based certificate deployment on inactive master server nodes
Certificates on inactive nodes are not deployed during installation. You must manually deploy certificates on all inactive nodes after the installation.
NetBackup™ Security and Encryption Guide · PDF
Certificates on inactive nodes are not deployed during installation. You must manually deploy certificates on all inactive nodes after the installation.