How NetBackup certificates are deployed on hosts during upgrades
During a NetBackup upgrade, NetBackup deploys NetBackup certificates before the upgrade. If the certificates cannot be deployed, you can terminate the upgrade process. The upgrade script retains the existing NetBackup setup that you can use.
If you have upgraded NetBackup from 8.0 to 8.1 or later, NetBackup certificates may already be present on the hosts. In such a case, certificates are not deployed during the upgrade process.
If you have upgraded NetBackup from 8.x to 10.4, the private keys are in an unencrypted state. After the upgrade, the new encrypted private keys are created and certificates are reissued.
Certificates are not deployed during the upgrade process, if the software is upgraded using a utility (that downloads and installs security updates and software patches). You need to manually deploy the certificates.