NetBackup status code: 6821
Message: One or more hosts have pending certificate renewals with the new CA. Communication with these hosts may break. Rerun the command with the -force option to skip this validation.
Explanation: NetBackup CA migration cannot be completed. The active NetBackup CA does not have host name-based or host ID-based signed certificates for a few hosts. NetBackup CA migration should be completed when all NetBackup hosts in the domain have their certificates signed by the active NetBackup CA. For NetBackup 8.2.1 or later hosts, certificates are automatically renewed after the newly set up NetBackup CA is activated. For earlier hosts, manual steps should be carried out.
Recommended Action: Do the following, as appropriate:
Ensure that all NetBackup hosts in the domain have their certificates signed by the active NetBackup CA and can be verified using the
RESTful API GET /config/hosts-pending-renewalor the nbseccmd -nbcamigrate -hostspendingrenewal command. Verify the certificates for NetBackup 8.2 or earlier hosts manually.If you want to skip the validation, rerun the command with the -force option.
Click here to view technical notes and other information on the Cohesity Technical Support website about this status code.