Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup and NetBackup Appliances Hardening Guide
  3. Steps to protect NetBackup Flex Scale
  4. About system certificates on NetBackup Flex Scale
NetBackup and NetBackup Appliances Hardening Guide

About system certificates on NetBackup Flex Scale

NetBackup Flex Scale supports one certificate for all services. The certificate can be internal or external. The Appliance CA creates the internal certificate. Any CA can create the external certificate using a CSR generated using the NetBackup Flex Scale GUI. The CA certificate can also be downloaded using the GUI by navigating to Settings > Security Management > Certificates. The admin user can change the certificate mode by navigating to Settings > Security Management > Certificates in the GUI. After changing the certificate mode, the admin user should restart all the services to start using the new certificate.

You can navigate to Settings > Security > Certificates > Download root certificates to download the VxOS certificates which contain the intermediate and root CA certificates (both VxOS root and VxOS stem).

Note:

Ensure that you have the latest Chrome update for the secure connection to work with VxOS certificates.

If the system certificate mode is set to internal, the certificate that is signed by the Appliance CA (internal certificate) is used for all the GUI services.

You must update the clients trust-store with CA certificate to secure connection.

Feedback

Was this page helpful?
Previous

Authenticating users using digital certificates or smart cards

Next

Deploying external certificates on NetBackup Flex Scale

Feedback

Was this page helpful?