Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Security and Encryption Guide
  3. Running NetBackup commands with non-privileged user account
  4. Running NetBackup commands using the nbcmdrun wrapper command
  5. How does nbcmdrun function
NetBackup™ Security and Encryption Guide

How does nbcmdrun function

To run the nbcmdrun command, you must authenticate yourself by performing one of the following tasks:

  • Do a web login in the current NetBackup domain using the bpnbat -login -loginType WEB command.

  • Use the following command to present the file with JWT or API-Key as an environment variable:

    set FILE_LOGIN_CONTEXT=jwt or api-key file

    Alternatively use the following command:

    export FILE_LOGIN_CONTEXT=jwt or api-key file

nbcmdrun retrieves this authentication token (JWT or API-Key) of the user and presents it to the server for the user's authentication, authorization, and auditing.

nbcmdrun has multiple connection points based on the command that is run with nbcmdrun.

  • nbcmdrun can run a command (for example: nbcmdrun bpstulist) in the same user context, wherein the command itself connects to the domain services like bpdbm or nbemm.

  • nbcmdrun can run a command (for example: nbcmdrun nbdb_move) as is under the service account (vnetd).

  • nbcmdrun can run a command (for example: nbcmdrun tpconfig) as is under the privileged account (NBPAS).

  • nbcmdrun can run a command (for example: nbcmdrun bppolicynew) as is via web services (nbwebservice).

Feedback

Was this page helpful?
Previous

Who can run NetBackup commands

Next

Immutability and indelibility of data in NetBackup

Feedback

Was this page helpful?