How the hosts with revoked certificates work
NetBackup certificates can be revoked by the primary server administrator for various reasons. A certificate revocation list (CRL) that contains information about the revoked certificates is created by the primary server and is periodically fetched by all hosts. The time interval to update the CRLs is determined by the certificate deployment security level on the primary server.
During communication between hosts, CRLs are verified. The host that uses a revoked certificate is no longer trusted. Communication with such hosts is terminated.