Troubleshooting problems with validation of the remote host
NetBackup uses Secure Socket Layer (SSL) to communicate securely with other NetBackup hosts. Unless the other host is 8.0 or earlier, NetBackup 8.1 always requires the communication to be secure. For this, all hosts that are setting up or accepting a connection validate the remote host against its details available with the primary server. The connection is dropped, if the host validation fails and this in turn can cause certain operations (like backup or restore) to fail.
To resolve the issues that arise because of host validation failures, do the following:
Check the logs pertaining to host validation failures.
Verify that the NetBackup web services are running on the primary server.
See Troubleshooting problems with the NetBackup web services.
Verify that the NetBackup web server certificate is correctly deployed.
See Troubleshooting problems with the NetBackup web server certificate.
Verify that the host can connect to the NetBackup web service on the primary server.
See the 'About the communication between a NetBackup client located in a demilitarized zone and a primary server through an HTTP tunnel' topic from the NetBackup Security and Encryption Guide.
If the remote host is 8.0 or earlier, verify that insecure communication with such hosts is enabled.
See Enabling insecure communication with NetBackup 8.0 and earlier hosts.
Verify if there are any host ID-to-host name mappings for the remote host that are pending for approval on the primary server.
If NetBackup software of the remote host was recently downgraded from 8.1 to an earlier version, ensure that host information is reset on the primary server.
See the 'Resetting a NetBackup host attributes' topic from the NetBackup Security and Encryption Guide.
Verify that the host cache has updated information about the remote host.
See Clearing host cache.
If the NetBackup web server is configured to use external CA-signed certificates, ensure that the host certificate is successfully enrolled with the appropriate primary server domain.
For more information on the external CA support and certificate enrollment, refer to the NetBackup Security and Encryption Guide.