NetBackup status code: 8791
Message: Failed to read the security descriptor of private key corresponding to certificate in Windows certificate store.
Explanation: Some Cryptographic Service Providers or key storage providers do not support certain cryptographic operations. For example, not all providers support security descriptors. NetBackup updates the private key permissions during external CA enrollment when services are running with Local Service account. If the provider corresponding to the certificate that the ECA_CERT_PATH value in NetBackup configuration identifies doesn't support the security descriptors, this error occurs.
Recommended Action: Perform the following:
Check if the user reading the security descriptor of the private key has permissions to read it.
Check if the Cryptographic Service Provider or key storage provider supports security descriptors. Use a provider that supports security descriptors or the Local System or an administrator account to run the NetBackup non-privileged services.
For more information about changing the service user, see the NetBackup Security and Encryption Guide.
Click here to view technical notes and other information on the Cohesity Technical Support website about this status code.