Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  3. NetBackup™ Flex Scale Release Notes
  5. Known issues
  7. Miscellaneous issues
  9. In a non-DNS environment, the CRL check does not work if CDP URL is not accessible
NetBackup™ Flex Scale Release Notes

In a non-DNS environment, the CRL check does not work if CDP URL is not accessible

The CRL check does not work if the CDP URL is not accessible in a non-DNS environment. (4063696)

Workaround:

If CRL is enabled, use one of the following options based on your configuration:

  • Using CDP

    If ECA_CRL_PATH is not specified, NetBackup uses the CRLs from CRL distribution point (CDP) of the peer host's certificate. Ensure that the URLs that are available in the CDP are accessible and are added in the /etc/host file.

  • Using existing downloaded CRLs

    If you have downloaded all the CRLs for all the required certificates in the trust chain (based on the ECA_CRL_CHECK setting), mention the CRL directory in the ECA_CRL_PATH in the NetBackup configuration file.

Else, you can also disable CRL by adding ECA_CRL_CHECK= DISABLE entry in bp.conf/registry.

Feedback

Was this page helpful?
Previous

In a non-DNS NetBackup Flex Scale setup, performing a backup from a snapshot operation fails for NAS-Data-Protection policy

Next

Unable to add multiple host entries against the same IP address and vice versa in a non-DNS IPv4 environment

Feedback

Was this page helpful?