Host ID-based certificate deployment on inactive master server nodes
Certificates on inactive nodes are not deployed during installation. You must manually deploy certificates on all inactive nodes after the installation.
Veritas NetBackup™ Security and Encryption Guide · PDF
Certificates on inactive nodes are not deployed during installation. You must manually deploy certificates on all inactive nodes after the installation.