Automatic host ID-based certificate deployment
A host ID-based certificate is automatically deployed on the NetBackup primary server as part of NetBackup installation.
These certificates are deployed on other NetBackup hosts (after confirming the fingerprint) depending on the certificate deployment level.
The Certificate Authority (CA) on the NetBackup primary server can accept or reject the certificate request depending on the certificate deployment level and the ability of the primary server to verify the host information.
You can check the list of the deployed certificates on any NetBackup host by using the following command:
nbcertcmd -listCertDetails
When a certificate request is rejected, the host administrator must request the NetBackup administrator to generate and share an authorization token to deploy the certificate manually.