Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ for Hadoop Administrator's Guide
  3. Configuring NetBackup for Hadoop
  4. Configuring the NetBackup for Hadoop plug-in using the NetBackup for Hadoop configuration file
  5. Configuring communication between NetBackup and Hadoop clusters that are SSL-enabled (HTTPS)
  6. HADOOP_CRL_CHECK for NetBackup servers and clients
NetBackup™ for Hadoop Administrator's Guide

HADOOP_CRL_CHECK for NetBackup servers and clients

The HADOOP_CRL_CHECK option lets you specify the revocation check level for external certificates of the Hadoop server. Based on the check, revocation status of the Hadoop server certificate is validated against the certificate revocation list (CRL) during host communication.

By default, the HADOOP_CRL_CHECK option is disabled. If you want to validate the revocation status of the Hadoop server certificate against certificate revocation list (CRL), set the option to a different value.

You can choose to use the CRLs from the directory that is specified for the ECA_CRL_PATH configuration option or the CRL distribution point (CDP).

See ECA_CRL_PATH for NetBackup servers and clients.

Table: HADOOP_CRL_CHECK information

Usage

Description

Where to use

On all backup hosts.

How to use

Use the nbgetconfig and the nbsetconfig commands to view, add, or change the option.

For information about these commands, see the NetBackup Commands Reference Guide.

Use the following format:

HADOOP_CRL_CHECK = CRL check

You can specify one of the following:

  • DISABLE (or 0) - Revocation check is disabled. Revocation status of the certificate is not validated against the CRL during host communication. This is the default value.

  • LEAF (or 1) - Revocation status of the leaf certificate is validated against the CRL.

  • CHAIN (or 2) - Revocation status of all certificates from the certificate chain are validated against the CRL.

Equivalent UI property

No equivalent exists.

Feedback

Was this page helpful?
Previous

HADOOP_SECURE_CONNECT_ENABLED for servers and clients

Next

Example values for the parameters in the bp.conf file

Feedback

Was this page helpful?