About system certificates on NetBackup Flex Scale
NetBackup Flex Scale supports one certificate for all services. The certificate can be internal or external. The Appliance CA creates the internal certificate. Any CA can create the external certificate using a CSR generated using the NetBackup Flex Scale GUI. The CA certificate can also be downloaded using the GUI by navigating to . The admin user can change the certificate mode by navigating to in the GUI. After changing the certificate mode, the admin user should restart all the services to start using the new certificate.
You can navigate to to download the VxOS certificates which contain the intermediate and root CA certificates (both VxOS root and VxOS stem).
Note:
Ensure that you have the latest Chrome update for the secure connection to work with VxOS certificates.
If the system certificate mode is set to internal, the certificate that is signed by the Appliance CA (internal certificate) is used for all the GUI services.
You must update the clients trust-store with CA certificate to secure connection.