Viewing the certificate details from the deduplication shell
To view the certificate details, log in to the deduplication shell as the msdpadm user.
Use the following commands to view the details of the current certificate configuration:
setting certificate list-certificates
Displays the details of all the host certificates that are available on the server
setting certificate list-CA-cert-details
Displays the details of all the CA certificates that are available on the server
setting certificate show-CA-cert-detail
Displays the NetBackup CA certificate details of the primary server that is currently in use
setting certificate show-external-CA-cert-detail
Displays the external CA certificate details of the primary server that is currently in use
setting certificate list-enrollment-status
Retrieves the enrollment status of the associated primary servers from the local certificate store
setting certificate show-CRL-check-level
Displays the revocation check level for the external certificates
Use the following commands to verify the status of the certificates:
setting certificate host-self-check
Verifies whether the host certificate for the server is in the certificate revocation list (CRL)
setting certificate external-CA-health-check
Verifies the external certificates, the RSA keys, and the trust store