1. Support
  2. Knowledge base
  3. 100046295

Important Update: Cohesity Products Knowledge Base Articles

All Cohesity Knowledge Base Articles are now managed via the Cohesity Support Portal: https://support.cohesity.com/s/searchunify. The Knowledge Base articles available here will not reflect the latest information or may no longer be accessible.

Upgrade KMS encryption for MSDP on the Solaris platform

Article: 100046295
Last Published: 2019-09-17
Ratings: 0 0
Product(s): NetBackup

Problem

When you upgrade NetBackup from 7.7.3 to 8.1.2 using the steps given in this link, KMS encryption for MSDP does not work on the Solaris platform.

Error Message

After you upgrade NetBackup and start a test backup job, KMS encryption is disabled as displayed for the following command:

/usr/openv/pdde# /usr/openv/pdde/pdcr/bin/crcontrol --getmode
Mode : GET=Yes PUT=Yes DEREF=Yes SYSTEM=Yes STORAGED=Yes REROUTE=No COMPACTD=Yes FIPS=No KMS=No

Cause

KMS encryption setting is not added in the MSDP configuration.

Solution

After you upgrade NetBackup from 7.7.3 to 8.1.2 using the steps given in this link, run the following steps to enable KMS encryption:

  1. get contentrouter.cfg path in /etc/pdregistry.cfg
  2. add KMSOptions in contentrouter.cfg
    [KMSOptions]
    KMSEnable=true
    KMSKeyGroupName=YourKMSKeyGroupName
    KMSServerName= YourKMSServerName
    KMSType=0
  3. Restart MSDP using:
    /usr/openv/pdde/pdconfigure/pdde stop
    /usr/openv/pdde/pdconfigure/pdde start

 

Was this content helpful?

Article Languages