BackupExec certificates fail with two media servers

[Tapsa]

Hello!

We are using two separate media servers for backups. One for full backups to tape drives and annother for incremental backups to deduplicated disk space. Trust relationship fails quite often with meda servers and client agents.

How do we get rid off this certificate based system to get working backup system?

Or can we copy those cerificates betweeen two media server so that they use the same certificate if that correctes the situation?

Regards,

TR

[pkh]

How do we get rid off this certificate based system to get working backup system?

You cannot.  This is the feature of BE 2010 R3 to prevent man-in-the-middle attacks.

Make sure that the remote servers are publishing correctly to the media servers.

See this document

Enhanced network security in Backup Exec 2010 R3

[ArulPrasad]

You need to Check Why Exactly It fails often (hope Not Always)

You need to check on wich Part of the SSL handshake it fails on.

If You have More than One NIC card attached to the remote server, Ensure that the Publishing hapens on the right NIC and SUBNET.

Enable Debug and verify if the failure is due to Certificate validation  failure.

How to enable debug on the Media server and Remote server:

sgmon.exe utility avaiable inthe install directory of backup exec and remote agent will be handy for realtime debug during the job.