Updating KMS configuration
To update priority of KMS, run the following command: nbkmscmd -updateKMSConfig -name configuration_name -priority priority
To disable keys from specified KMS to be used for backup, run the following command: nbkmscmd -updateKMSConfig -name configuration_name -enabledForBackup 0
To disable a configured KMS for all operations, run the following command:
nbkmscmd -updateKMSConfig -name configuration_name -status 0
Note:
After any update in external KMS configuration or keys, NetBackup may take several minutes to consume appropriate key in backup or restore workflow. This is because NetBackup caches the key for 10 minutes (for external KMS). To immediately consume a key, cache can be cleared by executing the following command on the respective media server:
bpclntcmd -clear_host_cache