NetBackup job fails because of revoked certificate
A NetBackup job fails.
The cause may be one of the following reasons:
The host ID-based security certificate of the client is revoked.
The host ID-based security certificate of the media server that backs up the client is revoked.
The host ID-based security certificate of the master server is revoked.
The certificate revocation list (CRL) on the media server or the master server is corrupt or missing.
Examine the job details for the following message strings and adjacent status codes:
For certificate revocation, look for the message strings that contain certificate and revoked.
For the CRL, look for the message strings that contain certificate revocation list or CRL and missing or corrupted.
If necessary, determine if the client or the media server certificate was revoked.
Refer to the NetBackup documentation for the explanations for the status codes and recommended actions for recovery. If possible, resolve the issue.
If you cannot resolve the issue in a timely fashion, remove the revoked host from the backup policy or deactivate the policy. If the revoked host is the media server, deactivate it. (You can ignore "NetBackup version" errors when you deactivate the host.)
After you resolve the security issue, reissue the certificate for the revoked host. Certificate reissue is documented in the NetBackup Security and Encryption Guide.
If necessary, add the client back to the backup policy, activate the backup policy, or activate the media server.