NetWorker: commands fail "Failed to validate security token"

Summary: This error can appear when the time-based token authentication used by the NetWorker server's authc server has expired. This is seen when trying to run NetWorker commands from the NetWorker server. ...

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

When attempting to run NetWorker commands on the NetWorker server, an error appears stating that the NetWorker server failed to validate the security token.
Example: 
C:\>nsrim -X
10074:nsrim: can't bind to NSR service on Server name 
144502:nsrd: Unable to set user privileges based on user token for account_name on nw_server_name: Failed to validate security token.
NOTE: This issue is not specific to nsrim, the error appears when running any administrative NetWorker commands.

Cause

The nsrlogin command was previously used on the NetWorker server. The nsrlogin command issues a time-based token to grant authenticated command-line access to a user.

Resolution

(Option 1) Use the elevated system account:

If your user account allows you to open an Administrator command-prompt, or sudo (root) access. Perform the following.

  1. Open an elevated prompt on the NetWorker server. 
  2. Enter nsrlogout

This clears the expired token. 

  1. Run the previously failing NetWorker commands from the elevated prompt without issuing nsrlogin

(Option 2) Issue a new token:

If you do not have access to open an Administrator command prompt or run sudo commands. Issue a new token.

  1. Run the following command: nsrlogout
  2. Run the following command to issue a new token:
Syntax: nsrlogin [-s NetWorker_server] [-H authentication_host] [-P port] [-t tenant] [-d logindomain] -u username [-p 'password']
Example: nsrlogin -u Administrator -p '!Password1'
  1. Run the previously failing NetWorker commands after issue a new token.

Once you are done performing the required commands, clear the token: nsrlogout

Additional Information

More information about nsrlogin can be found in the NetWorker Command Reference and NetWorker Administrator Guides available through: https://www.dell.com/support/home/product-support/product/networker/docs

Affected Products

NetWorker

Products

NetWorker
Article Properties
Article Number: 000065549
Article Type: Solution
Last Modified: 10 Jun 2025
Version:  4
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.