NetBackup status code: 8311
Message: The global data-in-transit encryption (DTE) is enforced in the NetBackup domain, but the DTE setting is disabled on the media server.
Explanation: The data-in-transit encryption in the domain is enforced, but data-in-transit encryption setting on media server host is disabled. As a result of this issue, multiple NetBackup operations such as backup, restore, duplication, import, and others fail.
Recommended Action: Perform one of the following as appropriate:
Change the NetBackup configuration to select the media server which supports data-in-transit encryption for performing the NetBackup operation.
The media server that handles the secondary operation needs to have the data-in-transit encryption setting enabled. Change the media server DTE setting of the given media server to on using the following command:
nbseccmd -setsecurityconfig -dtemediamode on -mediaserver <media_server_name>If the media server that handles the NetBackup operation needs to have data-in-transit encryption disabled, ensure that the following configurations are set:
The global DTE mode should be either PREFERRED_OFF or PREFERRED_ON.
The DTE client mode setting needs to be either OFF or AUTOMATIC.
For option 3, DTE is disabled while the job is performed.
more information, refer to the Configuring data-in-transit encryption section in the NetBackup Security and Encryption Guide.
Click here to view technical notes and other information on the Cohesity Technical Support website about this status code.