8.1.2 security certificate renewal/update on media servers from master
Never mind - did some more hunting...
The CA cert of the master got ‘lost’
From the master
# nbcertcmd -getCrl -server nbmaster
Successfully refreshed certificate revocation list for nbmaster.
Successfully refreshed security level for nbmaster.
# nbcertcmd -listCACertDetails
Subject Name : /CN=nbatd/OU=root@nbmaster/O=vx
Start Date : Sep 19 18:13:11 2018 GMT
Expiry Date : Sep 14 19:28:11 2038 GMT
SHA1 Fingerprint : blah
Operation completed successfully.
From nbmedia:
C:\Program Files\Veritas\NetBackup\bin>nbcertcmd -displayCACertDetail -server nbmaster
CA Certificate received successfully from server nbmaster.
Subject Name : /CN=nbatd/OU=root@nbmaster/O=vx
Start Date : Sep 19 18:13:11 2018 GMT
Expiry Date : Sep 14 19:28:11 2038 GMT
SHA1 Fingerprint : blah
CA Certificate State : Not Trusted
C:\Program Files\Veritas\NetBackup\bin>nbcertcmd -getCACertificate -server nbmaster
Authenticity of root certificate cannot be established.
The SHA1 fingerprint of root certificate is blah.
Are you sure you want to continue using this certificate ? (y/n): y
The validation of root certificate fingerprint is successful.
CA certificate stored successfully from server nbmaster.
C:\Program Files\Veritas\NetBackup\bin>nbcertcmd -getcrl
Successfully refreshed certificate revocation list for nbmaster.
Successfully refreshed security level for nbmaster.
