NetBackup web server certificate renewal failure during initiation of NetBackup CA migration or upgrade
If the initiation of NetBackup CA migration fails because of the NetBackup web service time out, renewal of the NetBackup web server certificate fails.
To renew the web server certificate using the new CA
Verify if the nbatd service has successfully migrated the NetBackup CA using the following steps:
Check the migration summary status. The status should be 'INITIATED'.
Run the nbseccmd -nbcamigrate -summary command to check the CA migration status.
The new key pair with the desired key size should be present in the NetBackup web server keystore. Check the keystore at the following location:
On Windows:
<INTSALL_PATH>/var/global/vxss/tomcatcreds/nbwebsvc/.VRTSat/profile/certstore/keystoreOn UNIX:
<INSTALL_PATH>/var/global/vxss/tomcatcreds/nbwebsvc/.VRTSat/profile/certstore/keystore
- After you have verified that the nbatd service has successfully migrated the NetBackup CA, run the following command to renew the NetBackup web server certificate:
nbseccmd -nbcamigrate -syncMigrationDB