Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Veritas NetBackup™ Administrator's Guide, Volume I
  3. Section V. Configuring backups
  4. Configuring immutability and indelibility of data in NetBackup
  5. Deleting an immutable image from storage using the bpexpdate command
Veritas NetBackup™ Administrator's Guide, Volume I

Deleting an immutable image from storage using the bpexpdate command

Deletion of an immutable image can only happen when storage is used that allows for lock deletion. The lock deletion can be done using the Enterprise mode on a Flex Appliance or a third-party storage device that supports lock deletion. When an immutable image is deleted, the storage that you use is responsible for the lock deletion and NetBackup is responsible for the image deletion.

When you use a Flex Appliance, you must use the command line or an SSH session to remove the lock on the image. If you use a third-party storage device, refer to that vendor's documentation for steps on removing locked images.

To delete the immutable image on a Flex Appliance

  1. Verify that the Flex Appliance is in Enterprise mode.
  2. From the NetBackup Command Line, use bpimagelist command to find the image ID.

    This procedure uses the following example image ID:

    Backup ID: server123.veritas.com_1234567890
  3. Delete the image lock on storage using the command line option or the SSH session option. You must use the default msdadm user to run the following options.

    Command line option:

    • Open the /usr/openv/pdde/pdcr/bin/ directory.

    • Use the following command to query and modify the catalog database for the given backup ID (Example: server123.veritas.com_1234567890). The -worm disable option disables the retention lock for an image using the backup ID.

      catdbutil -worm disable -backupid

    SSH session option:

    • Open an SSH session to the WORM storage server instance.

    • Use the retention policy disable command to query and modify the catalog database for the given policy. The policy disable arguments disable the retention lock for an image using the policy ID used for the image retention that has a retention lock.

    For more information about the command options in this step, see the NetBackup Deduplication Guide.

  4. Add the image ID to bpexpdate with the -try_expire_worm_copy option.
    bpexpdate -d 0 backupid server123.veritas.com_1234567890 
    -try_expire_worm_copy -copy 1
  5. Use y or n to confirm deletion.

    If the storage lock is not removed, NetBackup returns an error indicating that there is a WORM lock error.

More Information

Removing an immutable image from the catalog using the bpexpdate command

About immutable and indelible data

Feedback

Was this page helpful?
Previous

Workflow to configure immutable and indelible data

Next

Removing an immutable image from the catalog using the bpexpdate command

Feedback

Was this page helpful?