NetBackup status code: 8790
Message: Failed to update security descriptor of private key corresponding to certificate in Windows certificate store.
Explanation: Some Cryptographic Service Providers or key storage providers do not support certain cryptographic operations. For example, not all providers support security descriptors. NetBackup updates the private key permissions during external CA enrollment, when the NetBackup non-privileged services are running with Local Service account. If the provider corresponding to the certificate that the ECA_CERT_PATH value identifies in NetBackup configuration doesn't support security descriptors, this error can occur.
Recommended Action: Perform the following:
Check if the user has permissions to modify the security descriptor of the private key.
Check if the Cryptographic Service Provider or key storage provider supports security descriptors. Use a provider that supports security descriptors or the Local System or an administrator account to run the NetBackup non-privileged services.
For more information about changing the service user, see the NetBackup Security and Encryption Guide.
Click here to view technical notes and other information on the Veritas Technical Support website about this status code.