Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Veritas NetBackup™ Commands Reference Guide
  3. Appendix A. NetBackup Commands
  4. manageClientCerts
Veritas NetBackup™ Commands Reference Guide

Name

manageClientCerts — use this command to manage the client certificates for the VMware and the SCVMM plug-ins.

SYNOPSIS

manageClientCerts -create|-delete|-renew clientName

manageClientCerts -list

manageClientCerts -addAlias|-deleteAlias clientName -IP address|-HOST alias|-ANY

manageClientCerts -listAliases clientName

On UNIX and Linux systems, the directory path to this command is /usr/openv/wmc/bin/install/

On Windows systems, the directory path to this command is install_path\NetBackup\wmc\bin\install\

DESCRIPTION

Use the manageClientCerts command to create, delete, and list the client tokens for the VMware and the SCVMM plug-ins, as well as add, remove, and list aliases.

OPTIONS

-addAlias

Use this option to add an alternate host name or IP address for the clientName that was used when generating a token. Use the -ANY parameter with addAlias to allow any host or any TCP/IP address to communicate using the specified certificate. While this command works, it is not a secure method

-create

Use this option to create a certificate for the client specified.

-delete

Use this option to delete a certificate for the client specified.

-deleteAlias

Use this option to delete an alternate host name or IP address that is associated with a token.

-list

Use this option to list all the certificates.

-listAliases

Use this option to list all aliases for client.

-renew

Use this option to delete a token and to create a new one. Any aliases that existed for the token are retained. If a token expires, you can use this option to renew the token. Be aware that tokens expire after one year.

EXAMPLES

Example 1 - Create a token for client vCenter1

manageClientCerts -create vCenter1
Successfully created client certificate for 'vCenter1'
to secure access to the NetBackup Web Services on Master Server
'master.example.com', port '8443'.
Please find the zip at /usr/openv/var/global/wsl/credentials/clients
/vCenter1.example.com.zip.

Example 2 - Add the alias vCenter1.example.com to the client vCenter1

manageClientCerts.sh -addAlias vCenter1 -HOST vCenter1.example.com
Successful -addAlias, for client: vCenter1, type: HOST,
alias: vCenter1.example.com
manageClientCerts -addAlias vCenter1.example.com -HOST vCenter1

Example 3 - List all the aliases for vCenter1

manageClientCerts -listAliases vCenter1
Aliases for vCenter1:
HOST = vCenter1.example.com

Example 4 - Renew a token for vCenter1

manageClientCerts -renew  vCenter1
Renewing client certificate: vCenter1
Successfully deleted the entries for the client vCenter1.
Successfully created client certificate for 'vCenter1 to secure access 
to the NetBackup Web Services on Master Server 'mserver1.example.com', 
port '8443'.
Please find the zip at 
/usr/openv/var/global/wsl/credentials/clients/vCenter.example.com.zip.

Feedback

Was this page helpful?
Previous

ltid

Next

mklogdir

Feedback

Was this page helpful?