Forum Discussion

Chris_V_1's avatar
Chris_V_1
Level 3
7 years ago

Completely remove host certificates in 8.1

I have a customer that will potentially have hundreds of servers that will be used for a short period of time and then decomissioned.  In NetBackup 8.1 I know you can revoke the certificate for hosts...
8
8.1
certificate
NetBackup
  • VerJD's avatar
    VerJD
    6 years ago

    FYI, the KB article (100041506) posted by Joseph_Vidal was written for the case that WayneCierkowski mentioned above, suggest marking both of their posts as the solution.

    Also keep in mind, the "nbcertcmd -deleteCertificate -hostid <host id>" command is intended to be run on a client (not on the master) to delete the client's hostID certificate from the local certificate store and it does not change any tables in EMM DB on the master. Thus, it will not change the contents of what is visible in the Certificate Management or Host Management tables as presented in the GUI, so the requested functionality is currently not available. However, it is possible in some future release that this functionality may be added or modified in some way.

    Note: We do not recommend moving the clock forward for testing on your master server, as this could result in images expiring, causing a data loss condition.

Chris_V_1's avatar
Chris_V_1
Level 3

Yes, please let us know.  I've even tried moving the clock forward as a test, but that is messing up the CRL, even if I run the normal commands to fix it.  

VerJD's avatar
VerJD
Level 4
6 years ago

FYI, the KB article (100041506) posted by Joseph_Vidal was written for the case that WayneCierkowski mentioned above, suggest marking both of their posts as the solution.

Also keep in mind, the "nbcertcmd -deleteCertificate -hostid <host id>" command is intended to be run on a client (not on the master) to delete the client's hostID certificate from the local certificate store and it does not change any tables in EMM DB on the master. Thus, it will not change the contents of what is visible in the Certificate Management or Host Management tables as presented in the GUI, so the requested functionality is currently not available. However, it is possible in some future release that this functionality may be added or modified in some way.

Note: We do not recommend moving the clock forward for testing on your master server, as this could result in images expiring, causing a data loss condition.

  • Hamza_H's avatar
    Hamza_H
    Moderator
    4 years ago

    Hello,

    as mentioned above, you can't delete these entries from certificate management on the master server's co,nsole, at least not in your version ( 8.2)..

  • emyatsuna's avatar
    emyatsuna
    Level 3
    4 years ago

    Hi, Bumped into this old thread. I also get the same problem. I have a number of hosts that are not being used anymore. Plus, I can't execute the nbcertcmd because it does not exist in the client anymore (whole NB folder was deleted - uninstalled). Is there a way to remove certificates automatically directly in the master server? We're using 8.2. Thanks.