NetBackup status code: 8311
Message: The global data-in-transit encryption (DTE) is enforced in the NetBackup domain, but the DTE setting is disabled on the media server.
Explanation: The data-in-transit encryption in the domain is enforced, but data-in-transit encryption setting on media server host is disabled. As a result of this issue, multiple NetBackup operations such as backup, restore, duplication, import, and others fail.
Recommended Action: Perform one of the following as appropriate:
Change the NetBackup configuration to select the media server which supports data-in-transit encryption for performing the NetBackup operation.
The media server that handles the secondary operation needs to have the data-in-transit encryption setting enabled. Change the media server DTE setting of the given media server to on using the following command:
nbseccmd -setsecurityconfig -dtemediamode on -mediaserver <media_server_name>If the media server that handles the NetBackup operation needs to have data-in-transit encryption disabled, ensure that the following configurations are set:
The global DTE mode should be either PREFERRED_OFF or PREFERRED_ON.
The DTE client mode setting needs to be either OFF or AUTOMATIC.
For option 3, DTE is disabled while the job is performed.
For more information, refer to the Configuring data-in-transit encryption section in the NetBackup Security and Encryption Guide.
Click here to view technical notes and other information on the Cohesity Technical Support website about this status code.