User chose not to trust the CA

[spitman]

I found the bpnbat command through this thread:

https://www-secure.symantec.com/connect/forums/admin-console-asks-again-and-again-add-ca-truststore

It looks like my cert has expired...

(Linux)root@kronos:/usr/openv/var/vxss/credentials> /usr/openv/netbackup/bin/bpnbat -WhoAmI -cf /usr/openv/var/vxss/credentials/kronos
Name: kronos
Domain: NBU_Machines@kronos.fnc.net.local
Issued by: /CN=broker/OU=root@kronos.fnc.net.local/O=vx
Expiry Date: Jun  3 20:07:35 2015 GMT
Authentication method: Symantec Private Domain

I've never worked on this cert before. How do I go about getting this updated? I wasn't able to find anything in the admin guides...

[Yasuhisa_Ishika · Accepted solution]

As suggested in HOWTO89914, try to run bpnbat -Login to update an expired credential.

http://www.symantec.com/docs/HOWTO89914

[spitman]

Rock! Thank you.

Interesting note: until you update this you can't change any of your system properties from the GUI!   8|

[spitman]

I wanted to post a follow-up to this, in case someone finds this thread looking for help...

I opened a case, because the cert didn't seem to "stick" (i.e. when I ran the -WhoAmI option the cert wasn't showing a new date. They said to run this command, and it seems to have worked:

> bpnbaz -configureauth -force
Gathering configuration information.
Waiting for the security services to start operation.
Generating identity for host 'kronos'
Setting up security on target host: kronos
nbatd is successfully configured on NetBackup Master Server.
Operation completed successfully.

The person who worked the ticket left this note:

*) This issue was effects on  NBU 7.6.0.4 and 7.6.1.1.
ETrack 3767922 -The Java GUI repeatedly prompts with a CA certificate confirmation pop up when connecting to a NetBackup host - has already opened.