Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Section III. Encryption of data at rest
  4. NetBackup key management service configuration
  5. Configuring KMS
  6. Recovering KMS by restoring only the KMS data file
NetBackup™ Security and Encryption Guide

Recovering KMS by restoring only the KMS data file

You can restore the backed-up copy of the KMS data file kms/db/KMS_DATA by regenerating the KMS_HMKF and KMS_KPKF files with pass phrases. So, if you have written down pass phrases for the host master key and key protection key, you can run a command to regenerate those files. The system prompts you for the pass phrase and if the pass phrase you now enter matches the pass phrase originally entered, you will be able to reset the files.

To recover KMS by restoring only the KMS data file

  1. Run the nbkms - resetkpk command.
  2. Run the nbkms - resethmk command.
  3. Startup the nbkms service.

Feedback

Was this page helpful?
Previous

About recovering KMS by restoring all data files

Next

Recovering KMS by regenerating the data encryption key

Feedback

Was this page helpful?