Renewing a file-based external certificate
Use this section to renew a file-based external certificate without restarting NetBackup services.
While you replace the certificate, private key, and passphrase files one by one with all the services up, communication may fail because of mismatch in the certificate - private key pair. To avoid any communication failure, create copies of the files that NetBackup can use if there is a mismatch in the files.
To renew a file-based external certificate
- Make a copy of the certificate file and rename it with
.oldextension.For example, if the certificate file name is
cert.pem, rename it ascert.pem.old. - Make a copy of the private key file and rename it with
.oldextension. - Carry out the following step if the certificate's private key is encrypted.
Make a copy of the passphrase file and rename it with
.oldextension. - Replace the original certificate, private key, and passphrase files with the renewed certificate, private key, and passphrase files.
- Ensure that the host communication is successful with the renewed certificate and then delete the old certificate files.