Showing results for 
Search instead for 
Did you mean: 

I have problem to upgrade client / connect with master server - I upgrade to Veritas 8.2

Level 2

My native language is Spanish, sorry for my English translation.

I am having trouble getting clients to connect to my master server after upgrading from version 7.6.1 to 7.7 and finally to 8.2.

I know the problem is with certificates.
Where can I start looking for solutions?
Since the Clients with previous versions work correctly.
The current security level is Medium.

The Master Server is Windows.
Clients are Windows too.

Thank you very much for the help.

This message shows me when installing client 8.2 locally in the client:

#The setup wizard could not determine the security certificate mode of master server [master_server].

#The command executed was: ["C:\Users\ADMIN\AppData\Local\Temp\nbcertcmdtool.exe" -getSecConfig -caUsage -#server master_server -installDir "C:\Program Files\Veritas\NetBackup" -atLibPath #"C:\Users\ADMINI~1.SIM\AppData\Local\Temp" -debugFile #"C:\ProgramData\Veritas\NetBackup\InstallLogs\ExternalCertificateOp.20200421.165124.log"].

#Command status: [8500].

#Command output:
#The external CA usage information could not be retrieved.
#EXIT STATUS 8500: Connection with the web service was not established.



When you upgraded your master, did you setup the webservice account?

   VIP    Certified

Hola ;)

Login to your master and execute the following from CMD - admin command prompt - if this is Linux - from its shell:

nbcertcmd -createToken -name new_clients -maxusues number_of_clients

most likely you will have to loning to NBU using bpnbat - the previous commnad will tell you how to do it - cant recall from the top of my head.

Copy this token to your clipboard - we will use it later on.

Than login to upgraded client and execute as follow:

nbcertcmd -listCACertdetails

If nothing was returned or there is other cert on master (to check on master you can run the same command)

nbcertcmd -getCACertificate 

to get CA certifiate, than get certificate for this client by ecxecuting

nbcertcmd -getCertificate -token paste_your_clipboard_here -force 

That should have helped....

You can reference to this

Yes, create a domain account, with Log on as a service.

@quebek ,

What is the account that will be used when using the bpnbat command?

I have searched and I have not found if it is my account, the account used in the Client or another.

# C:\Program Files\Veritas\NetBackup\bin>bpnbat.exe -WhoAmI
# Failed to get logged in user details, either credentials are expired or not available.

   VIP    Certified
Try local administrator on this pc or any account which belongs to adminstrator's group.