Important Update: Cohesity Products Knowledge Base Articles
All Cohesity Knowledge Base Articles are now managed via the Cohesity Support Portal: https://support.cohesity.com/. The Knowledge Base articles available here will not reflect the latest information or may no longer be accessible.
Problem
After upgrading to or installing NetBackup 8.0, attempts to launch the NetBackup Administration Console result in the following pop-up message:
The host <master server> does not have NetBackup Host ID-based security certificate installed. The certificate is mandatory to establish a secure connection.
Attempts to run nbcertcmd fail with the following messages:
Examples:
nbcertcmd -getCACertificate
nbcertcmd: The -getCACertificate operation failed for server <master server>
EXIT STATUS 8503: Unknown error returned by CURL
nbcertcmd -getCertificate
Request to get the certificate deployment level failed.
EXIT STATUS 8503: Unknown error returned by CURL
nbcertcmd -ping
nbcertcmd: The -ping operation failed.
EXIT STATUS 8503: Unknown error returned by CURL
ERROR
In the nbcert log it may also show different server names. This is usually observed on Database servers.
NBCERT Logs :
"2> curl_debug_logger(): == Info: Added abcd.efgh.corp:1556:172.16.222.73 to DNS cache
13:48:21.324 [17084.17084] <2> curl_debug_logger(): == Info: Trying 172.16.52.244...
13:48:21.324 [17084.17084] <2> curl_debug_logger(): == Info: TCP_NODELAY set
13:48:21.324 [17084.17084] <2> curl_debug_logger(): == Info: Connected to xyx.efgh.corp (172.16.222.73) port 3128 (#0)
Cause
These messages have been observed when environment variables contain references to http / https proxies.Solution
To identify if environment variables exist for http / https proxies, execute the following command (adjust the command as necessary to reflect syntax unique to the OS at hand):env | grep -i http
Example:
env | grep -i http
http_proxy=https://my_web_server.example.com:80
HTTPS_PROXY=https://my_web_server.example.com:8080
If found, remove them using commands appropriate to the OS at hand.
Example:
unset http_proxy
unset HTTPS_PROXY
Note: Some commands only remove the environment variable for the active user session. Consult with your server administrator on how to reconfigure the http_proxy environment variable on a wider scale.
Once the http proxy environment variables have been successfully removed:
1. Restart the NetBackup Web Management Console service (nbwmc -stop / nbwmc -start)
2. Fetch the CA certificate from the master server: nbcertcmd -getCACertificate
3. Request a Host ID-based security certificate from the master server: nbcertcmd -getCertificate
You should now be able to login successfully using the NetBackup Administration Console.