Host ID-based certificates and a certificate revocation list must be present on all NetBackup 8.1 and later hosts.

The NetBackup global security settings configure how NetBackup provisions certificates.

Verify the global settings under Security Management in the NetBackup Administration Console.

To observe the certificates that NetBackup uses between hosts, use the -verbose option with the bptestbpcd -host command and option and with the bpclntcmd -pn command and option.

Host IDs must be mapped for host names on all NetBackup 8.1 and later hosts.

The NetBackup global security settings configure how NetBackup maps host IDs to name.

Verify the global settings under Security Management in the NetBackup Administration Console. Alternatively, you can use the following command and option:

UNIX/Linux:

/usr/openv/netbackup/bin/admincmd/nbseccmd -getsecurityconfig -autoaddhostmapping

Windows:

install_path\Veritas\NetBackup\bin\admincmd\nbseccmd -getsecurityconfig -autoaddhostmapping

For NetBackup hosts earlier than 8.1, you must allow insecure communication.

The NetBackup global security settings configure if NetBackup can communicate with hosts earlier than 8.1.

Verify the global settings under Security Management in the NetBackup Administration Console. Alternatively, you can use the following command and option:

UNIX/Linux:

/usr/openv/netbackup/bin/admincmd/nbseccmd -getsecurityconfig -insecurecommunication

Windows:

install_path\Veritas\NetBackup\bin\admincmd\nbseccmd -getsecurityconfig -insecurecommunication

The NetBackup web services on the master server must be active. To confirm that they are active, use the following NetBackup command and option:

UNIX: /usr/openv/netbackup/bin/nbcertcmd -ping

Windows: install_path\Veritas\NetBackup\bin\nbcertcmd -ping