When an authorization token is required during certificate deployment
The information in this section applies only to NetBackup CA-signed certificates. External CA-signed certificates do not require authorization tokens.
The security level setting determines whether an authorization token is required to deploy a certificate. You can set the security level on the primary server to different levels, depending on your needs. Use the Security Management > Global Security Settings > Secure Communication tab in the NetBackup Administration Console.
The following settings are available. The default setting is High.
- The primary server fingerprint must be confirmed during certificate deployment. An authorization token is not required.
- The primary server fingerprint must be confirmed during certificate deployment. An authorization token is not required if the host is known to the primary server.
- The primary server fingerprint must be confirmed during certificate deployment. An authorization token is mandatory for every host.
Note:
Certificate deployment in certain scenarios always requires a token, such as in the case of clients in a demilitarized zone or for certificate reissue.