Can you configure external certificates for primary server
You can use X.509 certificates that your trusted certificate authority (CA) has issued. NetBackup supports file-based certificates and Windows certificate store as sources for external certificates for NetBackup hosts. It supports certificates in PEM, DER, and P7B formats.
See Workflow to use external certificates for NetBackup host communication.