NetBackup status code: 8657
Message: The SAML keystore cannot be generated.
Explanation: One of the following errors has occurred:
An error has occurred generating the NetBackup issued SAML certificate and keystore.
An error has occurred generating external CA issued SAML keystore . One of the following can be true:
The -uECA flag is provided but the master server is not ECA configured and does not have the required ECA configured keystore and passkey files.
The certificate chain or the private key files are not provided. If The certificate chain or the private key files are provided, either the file does not exist, is not in the correct format, or it is corrupted.
Recommended Action: Perform the following actions as appropriate:
For NetBackup issued SAML certificate and keystore, delete any existing SAML certificates or keystore and re-generate them.
For external CA issued SAML keystore configuration, review the following as appropriate:
If you want to reuse the NetBackup ECA configuration, verify that the master server is ECA configured and the ECA keystore and passkey files are present in the following paths:
Windows:
ECA credentials directory path:
install_path\var\global\wsl\credentials\externalcacredsECA keystore path:
install_path\var \global\wsl\credentials\externalcacreds\nbwebservice.bcfksECA keystore passkey path:
install_path\var\global\wsl\credentials\externalcacreds\jkskeyUNIX:
ECA credentials directory path:
usr/openv/var/global/wsl/credentials/externalcacredsECA keystore path:
usr/openv/var/global/wsl/credentials/externalcacreds/nbwebservice.bcfksECA keystore passkey path:
usr/openv/var/global/wsl/credentials/externalcacreds/jkskey
If the external CA issued certificate and private key files are provided, verify that the provided paths are correct and the provided files are in PEM format. Verify that the files are not corrupted.
Click here to view technical notes and other information on the Cohesity Technical Support website about this status code.