You can only restore a backup file to a fresh and unprovisioned machine. You will need the following:

  • The backup file on a Network File System (NFS) share
  • The Domain Master Secret that you specified when installing the first machine of your environment.
  • The smart cards required by your Appliance Security Level.
    For more information about the Domain Master Secret, the Appliance Security Level, and smart cards, see Initial Set-up.

In a cluster environment, only restore a backup in an utmost emergency, for example, if all of the cluster nodes have proven to be non-operational. If at least one cluster node is still operational, you should always reconfigure a broken cluster from the last remaining node.

Restore Standalone System from Backup

Prerequisites

  • Domain Master Secret.
  • Security level requirements: PIN pad, the persons with their smart cards and their PINs.
    For a Hardware Appliance that has been configured with a low Appliance Security Level, for example for demo and testing purposes, this is not required.
  • Physical access to the Hardware Appliance.

Restore Standalone System

Proceed as follows to restore a standalone system from backup:

  1. Switch on the Hardware Appliance and wait for it to finish booting. This will take about 5 minutes.
  2. Configure the network settings by using the functions of the front display.
  3. Scroll through the front display screens and write down the One Time Password (OTP) and the TLS Fingerprint.
  4. Connect the Management Interface of the Hardware Appliance to the network.
  5. In Firefox, go to the configured IP address and login using the One Time Password.
  6. In the installation page of the WebConf wizard, click Restore system from backup
  7. Enter the connections details of your NFS server where your backup is stored.
  8. The restoration of the backup can take up to several hours depending on the size of your backup.
    Depending on the configuration of your initial system, the restore procedure will prompt you to connect a PIN pad and provide the backup protection smart cards.
  9. At the end of the restore procedure, you will be asked to reboot the system.
    If you have not done that already, you can now safely connect the second network cable to the Application Interface.

Note that the rebooted system will have the restored configuration including for example IP address and SuperAdmin certificates.