If NetBackup CA-signed certificate is used for communication: On all the hosts that are involved in the communication, examine the unified logs for nbpxyhelper (OID 486).

Examine the legacy logs for nbcertcmd.

For a Windows server, verify that the following directories exist:

install_path\NetBackup\var\vxss\crl

For a clustered master server:

install_path\NetBackup\var\global\vxss\crl

For a UNIX server, verify that the following directories exist:

/usr/openv/var/vxss/crl

For a clustered master server:

/usr/openv/var/global/vxss/crl

For a Windows server, verify in the certmapinfo.json files that the crlPath values point to a valid path for the CRL:

install_path\NetBackup\var\vxss\certmapinfo.json

For a clustered master server:

install_path\NetBackup\var\global\vxss\certmapinfo.json

For a UNIX server, verify in the certmapinfo.json files that the crlPath values point to a valid path for the CRL:

/usr/openv/var/vxss/certmapinfo.json

For a clustered master server:

/usr/openv/var/global/vxss/certmapinfo.json

Run the following command for the master server:

./nbcertcmd -getCRL -server master_server_name

On all hosts that are involved in the communication, examine the unified logs for nbpxyhelper (OID 486).

Examine the legacy logs for nbcertcmd.

For a Windows server, verify that the following directories exist:

install_path\NetBackup\var\vxss\crl

For a UNIX server, verify that the following directories exist:

/usr/openv/var/vxss/crl

Verify if above directory contains all the required valid CRLs (as per ECA_CRL_CHECK setting).