Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Veritas NetBackup™ Administrator's Guide, Volume I
  3. Section II. Configuring hosts
  4. Configuring Host Properties
  5. Configuration options for NetBackup servers
  6. VIRTUALIZATION_CRL_CHECK for NetBackup servers and clients
Veritas NetBackup™ Administrator's Guide, Volume I

VIRTUALIZATION_CRL_CHECK for NetBackup servers and clients

The VIRTUALIZATION_CRL_CHECK option lets you specify the revocation check level for external certificates of the virtualization server. Based on the check, revocation status of the virtualization server certificate is validated against the certificate revocation list (CRL) during host communication.

By default, the VIRTUALIZATION_CRL_CHECK option is disabled. If you want to validate the revocation status of the virtualization server certificate against certificate revocation list (CRL), set the option to a different value.

You can choose to use the CRLs from the directory that is specified for the ECA_CRL_PATH configuration option or the CRL distribution point (CDP).

See ECA_CRL_PATH for NetBackup servers and clients.

Table: VIRTUALIZATION_CRL_CHECK information

Usage

Description

Where to use

On NetBackup master server or all access hosts.

How to use

Use the nbgetconfig and the nbsetconfig commands to view, add, or change the option.

For information about these commands, see the NetBackup Commands Reference Guide.

Use the following format:

VIRTUALIZATION_CRL_CHECK = CRL check

You can specify one of the following:

  • DISABLE (or 0) - Revocation check is disabled. Revocation status of the certificate is not validated against the CRL during host communication. This is the default value.

  • LEAF (or 1) - Revocation status of the leaf certificate is validated against the CRL.

  • CHAIN (or 2) - Revocation status of all certificates from the certificate chain are validated against the CRL.

Equivalent Administration Console property

No equivalent exists in the NetBackup Administration Console host properties.

Feedback

Was this page helpful?
Previous

WEB_SERVER_TUNNEL_ENABLE option for NetBackup servers

Next

VIRTUALIZATION_HOSTS_SECURE_CONNECT_ENABLED for servers and clients

Feedback

Was this page helpful?