Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ Troubleshooting Guide
  3. Disaster recovery
  4. Requirements and notes for disaster recovery
NetBackup™ Troubleshooting Guide

Requirements and notes for disaster recovery

Note the following information and requirements before you perform disaster recovery:

  • Cohesity strongly recommends that during NetBackup installation in a disaster recovery mode after a disaster, you use the same primary server name that is available in the disaster recovery email.

  • For cluster environments, you must manually deploy certificates on all cluster nodes using a reissue token after you install NetBackup in a disaster recovery mode. Certificates for active and inactive nodes are not recovered during catalog recovery.

    See Generating a certificate on a clustered primary server after disaster recovery installation.

  • For a successful disaster recovery in all environments, you must know:

    • The location of the disaster recovery package (.drpkg) file.

      See Disaster recovery packages.

    • The passphrase for that specific disaster recovery package.

    If the passphrase is lost, refer to the following article to get the host identity back.

    https://support.cohesity.com/s/article/article-100033743

  • If a non-privileged user (or service user) account is configured, ensure that the service account has the write access permissions on the directory where the disaster recovery package resides.

    For more information on the service user account, refer to the NetBackup Security and Encryption Guide.

  • NetBackup domain with external CA-signed certificates

    If external CA-signed certificates are used for host communication in your NetBackup domain, ensure the following before you start disaster recovery installation:

    • You have configured the required Certificate Revocation Lists (CRLs).

    • You have copied the valid external certificates in the Windows certificate store, if they were not backed up during catalog backup.

  • Be aware that NetBackup does not support push, remote, or silent installation for the disaster recovery of primary servers. Exception: NetBackup supports these installation methods for hosts in a NetBackup primary server cluster.

Feedback

Was this page helpful?
Previous

Recommended backup practices

Next

Disaster recovery packages

Feedback

Was this page helpful?