NetBackup status code: 8228
Message: Failed to perform CRL check.
Explanation: Failed to perform the CRL check because the CRL can't be downloaded from the CDP or the certificate chain is not verified.
Recommended Action: Check for following things as appropriate:
Verify that the CRL and the EKMS server certificates are from the same CA.
Verify that the
ECA_CRL_PATHis set in the NetBackup configuration. If the path exists, confirm that is has EKMS server certificate CRLs.If ECA_CRL_PATH is not set, verify that the EKMS server certificate has CDP defined.
If the CDP is defined, verify that the CDP server is reachable.
If CDP server is reachable, then verify that the downloader vnetd service is up and running.
If CRL check level is not defined at the time of KMS configuration then the default CRL check level is
LEAF.
Click here to view technical notes and other information on the Cohesity Technical Support website about this status code.