Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section II. Encryption of data-in-transit
  4. Configuring data-in-transit encryption (DTE)
  5. Configure the DTE mode on the media server
NetBackup™ Security and Encryption Guide

Configure the DTE mode on the media server

The media server setting can be used only to turn off data-in-transit encryption (DTE) for NetBackup operations.

In a NetBackup configuration where a media server is slow because of the old hardware, you can turn off the media server DTE mode so that there is no performance issue. However, it is recommended that you upgrade the old media server hardware. This setting is available for media servers with NetBackup 10.0 and later.

RESTful API to be used for the global DTE configuration:

  • GET - /config/media-servers/{hostName}

  • PATCH - /config/media-servers/{hostName}

To set or view the media server DTE mode

  1. Ensure that you have an RBAC role with the following permissions on the media server resource:
    • View

    • Update

    • Manage access

    See Default RBAC roles.

  2. Run the following command to set the media server DTE mode:

    nbseccmd -setsecurityconfig -dtemediamode off|on -mediaserver media_server_name

  3. Run the following command to view the media server DTE mode:

    nbseccmd -getsecurityconfig -dtemediamode -mediaserver media_server_name

    Note:

    For 9.1 media servers, you can only view the DTE mode as On, but you cannot set it.

Feedback

Was this page helpful?
Previous

View the DTE-specific attributes of a NetBackup image and an image copy

Next

Modify the DTE mode on a backup image

Feedback

Was this page helpful?