Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Upgrade Guide
  3. Primary server upgrade
  4. Completing your system update after an upgrade
NetBackup™ Upgrade Guide

Completing your system update after an upgrade

After you have upgraded servers and clients, you may need to perform additional tasks to complete the update of your NetBackup environment.

Perform any of the following that apply to your NetBackup environment:

Primary server privileges

If you upgraded a primary server that allowed nonroot users to administer NetBackup, you must reconfigure the permissions and the group. The default permissions and group on the newly installed files allow only a root user to perform NetBackup administration.

Update the trust relationship between remote primary servers for targeted auto image replication (AIR)

After you upgrade both your source and your target primary server from 8.0 or earlier to 8.1 or later, you must update the trust relationship. Upgrading from NetBackup 8.1 to a later version does not require you to reestablish the trust relationship. Run the command that is shown on both the source and the target primary servers to reestablish the trust relationship:

nbseccmd -setuptrustedmaster -update

More information is available. See the NetBackup Commands Reference Guide.

Add-on products

Upgrade any add-on products (such as NetBackup language packages) on all upgraded clients. All add-on products should be at the same version as the NetBackup client.

NetBackup scripts

If you made changes to NetBackup scripts before the upgrade, apply those changes to the new, upgraded versions of the scripts.

External certificate authority

Configure your external certificate authority. If you opted to skip the security configuration or if your environment uses ECA, you may need to configure an ECA. More information about configuring ECAs is available:

https://support.cohesity.com/s/article/article-100044300

For more information, see the NetBackup Security and Encryption Guide and refer to the chapter on external CA and external certificates.

Update storage servers

NetBackup does not update objects such as storage servers and disk pools every time the storage changes. Storage changes can result from NetBackup MSDP changes and 3rd party OST vendor software upgrades. Additionally, changes to the storage-defined replication topologies that SLP replication uses as well as import operations require an update. The user must proactively confirm these changes through the use of the updatests and updatedp commands. A NetBackup upgrade may introduce new functionality you want to use in your environment. The recommendation is that you run the updatests and updatedp commands on the storage servers and disk pools where you want to use this new functionality. For more information about the updatests and updatedp commands, see the NetBackup Commands Reference Guide.

NetBackup Access Control

If NetBackup Access Control is enabled in your environment, you must run the bpnbat -login command after the primary server upgrade.

NetBackup Kubernetes operator

If your environment includes the NetBackup Kubernetes operator, see the Upgrade the NetBackup Kubernetes operator section in the NetBackup for Kubernetes Administrator's Guide for details on how to upgrade the operator.

Feedback

Was this page helpful?
Previous

About NetBackup startup and shutdown scripts

Next

Media server upgrade

Feedback

Was this page helpful?