ECA_CERT_PATH for NetBackup servers and clients
The ECA_CERT_PATH option specifies the path to the external CA-signed certificate of the host. This option is mandatory.
It supports certificates in PEM and P7B format that can either be DER or PEM encoded - PEM-formatted certificates in the same file or a P7B file that can either be DER or PEM encoded.
If you have an intermediate certificate (from a certificate chain), sequence of the certificates in the path should be as follows: leaf certificate > intermediate certificate
NetBackup supports the following certificate sources:
Windows certificate store
Note:
The Windows certificate store is not supported for clustered master servers.
File-based certificates
Table: ECA_CERT_PATH information
Usage | Description |
|---|---|
Where to use | On NetBackup servers or clients. |
How to use | Use the nbgetconfig and the nbsetconfig commands to view, add, or change the option. For information about these commands, see the NetBackup Commands Reference Guide. For file-based certificates, use the following format: ECA_CERT_PATH = Path to the external certificate of the host For example: For Windows certificate store, use the following format: ECA_CERT_PATH = Certificate store name\Issuer name\Subject name You can specify multiple certificate selection queries in a comma-separated format. ECA_CERT_PATH = Store name1\Issuer name1\Subject name1,Store name2\Issuer name2\Subject name2 |
Equivalent Administration Console property | No equivalent exists in the NetBackup Administration Console host properties. |