Problem
After upgrading to or installing NetBackup 8.0, attempts to launch the NetBackup Administration Console result in the following pop-up message:
The host <master server> does not have NetBackup Host ID-based security certificate installed. The certificate is mandatory to establish a secure connection.
Attempts to run nbcertcmd fail with the following messages:
Examples:
nbcertcmd -getCACertificate
nbcertcmd: The -getCACertificate operation failed for server <master server>
EXIT STATUS 8503: Unknown error returned by CURL
nbcertcmd -getCertificate
Request to get the certificate deployment level failed.
EXIT STATUS 8503: Unknown error returned by CURL
nbcertcmd -ping
nbcertcmd: The -ping operation failed.
EXIT STATUS 8503: Unknown error returned by CURL
ERROR
In the nbcert log it may also show different server names. This is usually observed on Database servers.
NBCERT Logs :
"2> curl_debug_logger(): == Info: Added abcd.efgh.corp:1556:172.16.222.73 to DNS cache
13:48:21.324 [17084.17084] <2> curl_debug_logger(): == Info: Trying 172.16.52.244...
13:48:21.324 [17084.17084] <2> curl_debug_logger(): == Info: TCP_NODELAY set
13:48:21.324 [17084.17084] <2> curl_debug_logger(): == Info: Connected to xyx.efgh.corp (172.16.222.73) port 3128 (#0)
Cause
These messages have been observed when environment variables contain references to http / https proxies.Solution
To identify if environment variables exist for http / https proxies, execute the following command (adjust the command as necessary to reflect syntax unique to the OS at hand):env | grep -i http
Example:
env | grep -i http
http_proxy=https://my_web_server.example.com:80
HTTPS_PROXY=https://my_web_server.example.com:8080
If found, remove them using commands appropriate to the OS at hand.
Example:
unset http_proxy
unset HTTPS_PROXY
Note: Some commands only remove the environment variable for the active user session. Consult with your server administrator on how to reconfigure the http_proxy environment variable on a wider scale.
Once the http proxy environment variables have been successfully removed:
1. Restart the NetBackup Web Management Console service (nbwmc -stop / nbwmc -start)
2. Fetch the CA certificate from the master server: nbcertcmd -getCACertificate
3. Request a Host ID-based security certificate from the master server: nbcertcmd -getCertificate
You should now be able to login successfully using the NetBackup Administration Console.