Forum Discussion

peterblue's avatar
peterblue
Level 3
6 years ago

Certificates Expired

I am running 8.1.1, and 12 clients have recently come up in Certificate Management with a Status of Expired. 9 are Windows, and 3 are Linux. Backups fail with Status 7625: - 02-May-2019 02:20:05 -...
8
Windows Server 2008 R2
  • X2's avatar
    X2
    6 years ago

    The log indicates that the master server (CA) was not able to communicate with the clients successfully. The communication issue has been there for a months, hence the reason that the auto-renew didn't work.

    I would start verifying communication between the master and client (NetBackup client running, firewall, ACLs, etc). Once that is fixed/verified, request the certificate from the master using the reissue token. Use the following command on the client after creating the reissue token for it.

    $> /usr/openv/netbackup/bin/nbcertcmd -getCertificate -server <masterserverFQDN> -reissue

    C:\> C:\Program Files\Veritas\NetBackup\bin\nbcertcmd -getCertificate -server <masterserverFQDN> -reissue

X2's avatar
X2
Moderator
6 years ago

The log indicates that the master server (CA) was not able to communicate with the clients successfully. The communication issue has been there for a months, hence the reason that the auto-renew didn't work.

I would start verifying communication between the master and client (NetBackup client running, firewall, ACLs, etc). Once that is fixed/verified, request the certificate from the master using the reissue token. Use the following command on the client after creating the reissue token for it.

$> /usr/openv/netbackup/bin/nbcertcmd -getCertificate -server <masterserverFQDN> -reissue

C:\> C:\Program Files\Veritas\NetBackup\bin\nbcertcmd -getCertificate -server <masterserverFQDN> -reissue