Use the following commands to view the details of the current certificate configuration:

• setting certificate list-certificates

  Displays the details of all the host certificates that are available on the server

• setting certificate list-CA-cert-details

  Displays the details of all the CA certificates that are available on the server

• setting certificate show-CA-cert-detail

  Displays the NetBackup CA certificate details of the primary server that is currently in use

• setting certificate show-external-CA-cert-detail

  Displays the external CA certificate details of the primary server that is currently in use

• setting certificate list-enrollment-status

  Retrieves the enrollment status of the associated primary servers from the local certificate store

• setting certificate show-CRL-check-level

  Displays the revocation check level for the external certificates

Use the following commands to verify the status of the certificates:

• setting certificate host-self-check

  Verifies whether the host certificate for the server is in the certificate revocation list (CRL)

• setting certificate external-CA-health-check

  Verifies the external certificates, the RSA keys, and the trust store