Removing CA certificates from a clustered NetBackup setup

Run the following commands to remove the CA (Certificate Authority) certificates from a clustered setup.

Caution:

Removing the CA certificate from a master server node can adversely impact the NetBackup functionality.

To remove the CA certificates from a cluster node

Run the following command on a cluster node to view the fingerprints of the CA certificates:
nbcertcmd -listCACertDetails
Run the following command to remove the CA certificate by providing the appropriate fingerprint:
nbcertcmd -removeCACertificate -fingerprint fingerprint

To remove the CA certificates for the virtual name

Run the following command on the active node to view the fingerprints of the CA certificates for the virtual name:
nbcertcmd -listCACertDetails -cluster
Run the following command on the active node to remove the CA certificate for the virtual name by providing the appropriate fingerprint:nbcertcmd -removeCACertificate -fingerprint fingerprint_virtual -cluster