NetBackup™ Bare Metal Restore 管理指南

To generate and deploy a host ID-based certificate manually

1. The host administrator must have obtained the authorization token value from the CA before proceeding. The token may be conveyed to the administrator by email, by file, or verbally, depending on the various security guidelines of the environment.
2. Run the following command on the non-master host to establish that the master server can be trusted:

   nbcertcmd -getCACertificate

3. Run the following command on the non-master host and enter the token when prompted:

   nbcertcmd -getCertificate -token

   注意:

   To communicate with multiple NetBackup domains, the administrator of the host must request a certificate from each master server using the -server option.

   If the administrator obtained the token in a file, enter the following:

   nbcertcmd -getCertificate -file authorization_token_file

4. To verify that the certificate is deployed on the host, run the following command:

   nbcertcmd -listCertDetails

   Use the -cluster option to display cluster certificates.