External key management service — NetBackup 10.1 | Cohesity Documentation

AI

Welcome to Cohesity Documentation.

Ask me anything. From setup and configuration to troubleshooting, architecture, features, and release updates, I'm here to help.

AI may make mistakes. Always verify critical information.

Powered by CoVA

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Data Security Alliance

Visit Cohesity.com

Partner Portals

Cohesity Community

© 2026 Cohesity, Inc. All Rights Reserved.

Privacy Policy|

External key management service — NetBackup 10.1 | Cohesity Documentation

Home

NetBackup™ Security and Encryption Guide

Section III. Encryption of data at rest

External key management service

NetBackup™ Security and Encryption Guide · PDF

External key management service

This section includes the following topics:

About external KMS
Certificate configuration and authorization
Workflow for external KMS configuration
Validating KMS credentials
Configuring KMS credentials
Configuring KMS
Configuring keys in an external KMS for NetBackup consumption
Creating keys in an external KMS
Determining a key group name during storage configuration
Working with multiple KMS servers
Working with external KMS during backup and restore
Key rotation
Disaster recovery when catalog backup is encrypted using an external KMS server
Alerts for expiration of KMS credentials

Feedback

Was this page helpful?

Troubleshooting example - restore with an improper key record state

About external KMS

Feedback

Was this page helpful?