Troubleshooting issues with external certificate configuration

This topic provides information on troubleshooting issues that are specific to external certificates, configuration, removal and so on.

For more information on external certificate configuration, see the NetBackup Security and Encryption Guide.

Table:

Sr. No.	Issue	Possible reason	Resolution
1.	The following error is displayed when an external certificate is configured: NetBackup Web Management Console service is down with error. nbcertcmd: The -ping operation failed. EXIT STATUS 26: client/server handshaking failed Ensure that NetBackup Web Management Console service is up and running before trying this operation.	The NetBackup Web Management Console (nbwmc) service is down.	Start the NetBackup Web Management Console (nbwmc) service.
2.	No audit entries are created when external certificates are added or deleted.	The configureWebServerCerts command is run with the -force option.	Run the configureWebServerCerts command without the -force option
3.	The NetBackup Web Management Console (nbwmc) service does not start after external certificate is configured.	There may be some issue with external certificate configuration process.	Do the following: Ensure that the external certificate parameters like certificate chain, private key, and trust store are in the correct format and try configuring the external certificate again. If the issue persists, try configuring the external certificate with the -force option. If the problem still persists, save all the error log information and contact Cohesity Technical Support.
4.	The command ./configureWebServerCerts -removeExternalCert -all exited with one of the following errors: EXIT STATUS 7724: The certificate cannot be removed. EXIT STATUS 7733: External certificate of the NetBackup web UI cannot be removed. EXIT STATUS 7734: External certificate of the NetBackup host cannot be removed.	Possible reasons: There is no space left on the disk to back up the existing web server configuration. There are issues with permissions to update the web server configuration at the following location: NetBackup Install Directory/var/global/wsl/webserver/config	Do the following: Increase the disk space. If the problem still persists, save all the error log information and contact Cohesity Technical Support.
5.	The ./configureWebServerCerts -addExternalCert -all -certPath file_path -privateKeypath file_path -trustStorePath file_path command exited with one of the following errors: EXIT STATUS 7728: The input file of ECA configuration is not valid. EXIT STATUS 7730: The private key cannot be added. EXIT STATUS 7731: The trust bundle cannot be added.	Possible reasons: There is no space left on the disk to add the certificate. There are issues with permissions to add certificate at the following location: NetBackup Install Directory/var/global/wsl/credentials The primary server runs in FIPS mode and the files that are provided to configure the external certificate are not in the PEM format.	Increase the disk space. If the primary server runs in FIPS mode, run the command using the PEM formatted files. If the problem still persists, save all the error log information and contact Cohesity Technical Support.

Troubleshooting issues with external certificate configuration

Feedback

Feedback