Showing results for 
Search instead for 
Did you mean: 

STATUS 5986: Certificate request for host was rejected

Level 3


I have the following configuration

Master: NetBackup 8.1.1 on RHEL 7.6
Master hostname: master1
Master FQDN:
Master name configured for NetBackup: master1 (without FQDN)
Client: NetBackup 7.7.3 on RHEL 7.2, to be upgraded to NetBackup 8.1.1

When pushing the client with install_client_files, or upgrading it with update_clients, both fails with the below error:

nbcertcmdtool: The -getCertificate operation failed for server master1.
EXIT STATUS 5986: Certificate request for host was rejected as the host could not be validated as a master server.

After troubleshooting I found that the client is trying to execute "-getCertificate" using the short name "master1"

In fact whent I try getCertificate with short name it fails.

client1 # nbcertcmd -getCertificate -server master1
nbcertcmd: The -getCertificate operation failed for server master1.

While getting certificate using master's FQDN works just fine.

client1 # nbcertcmd -getCertificate -server
Host certificate and certificate revocation list received successfully from server

Anyway I could manage to update my client by forcing "master_name" variable inside install script "client_config" to master's FQDN.
However I wonder if there is a more orthodox way(s) to get it work? ideally is to have -getCertificate work with master's short name.

Your help would be appreciated.

Additional information:

From master's /etc/hosts:    master1

From client's /etc/hosts:    master1



Level 6
Partner    VIP    Accredited Certified

1) You can omit -sever  key and NBU will use first SERVER record from the client's /usr/openv/netbackup/bp.conf  

2) If you want to use short name instead of FQDN then you'll have to read the article instruction