Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Veritas NetBackup™ Cloud Administrator's Guide
  3. About the cloud storage
  4. About the Amazon S3 cloud storage API type
  5. Protecting data with Amazon Snowball and Amazon Snowball Edge
  6. Configuring SSL for Amazon Snowball and Amazon Snowball Edge
Veritas NetBackup™ Cloud Administrator's Guide

Configuring SSL for Amazon Snowball and Amazon Snowball Edge

To configure SSL for Amazon Snowball

  1. Ensure that the entries in the /.aws/snowball/config/snowball-adapter.config file are correct. Especially, ensure that the host name is set.
  2. Start the adapter. Following is a sample command:

    ./snowball-adapter -i Snowball IP address -m path to manifest file -u 29 character unlock code --ssl-enabled --aws-secret-key key

  3. Self-signed SSL certificate and key are generated in the /.aws/snowball/config/ directory.
  4. Append the certificate provided to the Amazon Snowball adapter on the command line as it is to /usr/openv/var/global/wmc/cloud/cacert.pem file on the media server. Ensure that the format and length of the newly copied certificate matches with the existing certificates in cacert.pem.

To configure SSL for Amazon Snowball Edge

  1. Lists the certificates available for use. Run the following Amazon Snowball client command:

    ./snowballEdge list-certificates

  2. Obtain the certificate. Run the following Amazon Snowball client command:

    ./snowballEdge get-certificate --certificate-arn arn_value

  3. Append the certificate provided on the command line as it is to /usr/openv/var/global/wmc/cloud/cacert.pem file on the media server. Ensure that the format and length of the newly copied certificate matches with the existing certificates in cacert.pem.

Feedback

Was this page helpful?
Previous

Configuring NetBackup for Amazon Snowball and Amazon Snowball Edge for NetBackup CloudCatalyst Appliance

Next

Post backup procedures if you have used S3 API interface

Feedback

Was this page helpful?