To resolve the issue

1. Run the following command:

   Windows: install_path\NetBackup\bin\nbcertcmd -ping

   UNIX: /usr/openv/netbackup/bin/nbcertcmd -ping

   • If it is executed successfully, proceed to the next step.

   • If it fails with status 8509 (The specified server name was not found in the web service certificate), follow the steps in this article:

     https://support.cohesity.com/s/article/article-100034092

     Proceed to the next step.

2. Perform the user logon on the primary server. Use the following command:

   install_path\netbackup\bin\bpnbat -login -loginType WEB

   For example:

   install_path\netbackup\bin\bpnbat -login -loginType WEB

   Authentication Broker [abc.example.com is default]:
   Authentication port [0 is default]:
   Authentication type (NIS, NISPLUS, WINDOWS, vx, unixpwd, ldap) 
   [WINDOWS is default]:
   Domain [abc.example.com is default]:
   Login Name [administrator is default]:
   Password:
   Operation completed successfully.

3. Note the value of key Client_Name for the primary server. For a clustered primary server, note the value of key Cluster_Name.

   This value can be found at:

   Windows: HKEY_LOCAL_MACHINE\SOFTWARE\Veritas\NetBackup\CurrentVersion\Config

   UNIX: /usr/openv/netbackup/bp.conf

   This value can be either a FQDN or a short name.

   For example:

   abc.example.com

4. Note the host ID of the primary server. You can obtain its value by running the following command:

   install_path\netbackup\bin\nbcertcmd -listCertDetails

   For a clustered primary server, run the following command:

   install_path\netbackup\bin\nbcertcmd -listCertDetails -cluster

   This command can return multiple records (if only one record is returned, select the host ID provided in that record).

   • If the host name that was obtained in step 3 is the FQDN, pick the record where the "Issued By" entry matches its short name.

   • If the host name that was obtained in step 3 is the short name, pick the record where the "Issued By" entry matches its FQDN.

   Example:

   install_path\netbackup\bin\nbcertcmd -listCertDetails

   Master Server : abc
   Host ID : 78f9eed4-xxxx-4c6a-bb40-xxxxxxxxx
   Issued By : /CN=broker/OU=root@abc/O=vx
   Serial Number : 0x62e108c90000000c
   Expiry Date : Aug 21 08:42:54 2018 GMT
   SHA1 Fingerprint : 50:89:AE:66:12:9A:29:4A:66:E9:DB:71:37:C7:
   EA:94:8C:C6:0C:A0
   Master Server : xyz
   Host ID : 5a8dde7b-xxxx-4252-xxxx-d3bedee63e0a
   Issued By : /CN=broker/OU=root@xyz.example.com/O=vx
   Serial Number : 0x6ede87a70000000a
   Expiry Date : Aug 21 09:52:13 2018 GMT
   SHA1 Fingerprint : FE:08:C2:09:AC:5D:82:57:7A:96:5C:C1:4A:E6:
   EC:CA:CC:99:09:D2
   Operation completed successfully.

   Here, two records are fetched.

   For the first record, the issuer name in the "Issued By" field matches the short name of the client_name obtained in step 3.

   Hence select the host ID that is provided in the record.

5. Add host ID-to-host name mapping for the primary server. Map the host ID obtained in step 4 with the host name obtained in step 3.

   Use the following command:

   install_path\netbackup\bin\admincmd\nbhostmgmt -a -i host ID -hm hostname

   install_path\netbackup\bin\admincmd\nbhostmgmt -a -i 
   78f9eed4-xxxx-4c6a-bb40-xxxxxxxxx -hm abc.example.com 
   abc.example.com is successfully mapped to 
   78f9eed4-xxxx-4c6a-bb40-xxxxxxxxx.

   Alternately, you can also add this host-ID-to-host name mapping in the NetBackup web UI. Open Security > Host mappings.

6. Do the following to renew the certificates:

   • To renew the NetBackup (or host ID-based) certificate of the primary server, use the following command:

     install_path\netbackup\bin\nbcertcmd -renewCertificate

     For a clustered primary server, run the following command:

     install_path\netbackup\bin\nbcertcmd -renewCertificate -cluster