Veritas NetBackup™ Troubleshooting Guide
- Introduction
- Troubleshooting procedures
- Troubleshooting NetBackup problems
- Troubleshooting vnetd proxy connections
- Troubleshooting security certificate revocation
- Verifying host name and service entries in NetBackup
- Frozen media troubleshooting considerations
- Troubleshooting problems with the NetBackup web services
- Resolving PBX problems
- Troubleshooting problems with validation of the remote host
- About troubleshooting Auto Image Replication
- Using NetBackup utilities
- About the NetBackup support utility (nbsu)
- About the NetBackup consistency check utility (NBCC)
- About the robotic test utilities
- Disaster recovery
- About disk recovery procedures for UNIX and Linux
- About clustered NetBackup server recovery for UNIX and Linux
- About disk recovery procedures for Windows
- About clustered NetBackup server recovery for Windows
- About recovering the NetBackup catalog
- About NetBackup catalog recovery and OpsCenter
- About recovering the entire NetBackup catalog
- About recovering the NetBackup catalog image files
- About recovering the NetBackup relational database
NetBackup job fails because of revoked certificate
A NetBackup job fails.
The cause may be one of the following reasons:
The host ID-based security certificate of the client is revoked.
The host ID-based security certificate of the media server that backs up the client is revoked.
The host ID-based security certificate of the master server is revoked.
The certificate revocation list (CRL) on the media server or the master server is corrupt or missing.
Examine the job details for the following message strings and adjacent status codes:
For certificate revocation, look for the message strings that contain certificate and revoked.
For the CRL, look for the message strings that contain certificate revocation list or CRL and missing or corrupted.
If necessary, determine if the client or the media server certificate was revoked.
Refer to the NetBackup documentation for the explanations for the status codes and recommended actions for recovery. If possible, resolve the issue.
If you cannot resolve the issue in a timely fashion, remove the revoked host from the backup policy or deactivate the policy. If the revoked host is the media server, deactivate it. (You can ignore "NetBackup version" errors when you deactivate the host.)
After you resolve the security issue, reissue the certificate for the revoked host. Certificate reissue is documented in the NetBackup Security and Encryption Guide.
If necessary, add the client back to the backup policy, activate the backup policy, or activate the media server.