Data backup and recovery in interactive mode

Expand all | Collapse all

To create a backup copy of Administration Server data in interactive mode:

Run the klbackup utility located in the Kaspersky Security Center installation folder.
The Backup and restore wizard starts.
In the first window of the wizard, select Perform backup of Administration Server data.
If you select the Restore or back up Administration Server certificate only option, only a backup copy of the Administration Server certificate and private key will be saved. Backing up of the Administration Server certificate and private key can be useful when you perform the migration from Administration Server of Kaspersky Security Center Windows to Administration Server of Kaspersky Security Center Linux. Also, you can migrate managed devices between Kaspersky Security Center Linux Administration Servers, as well as between Kaspersky Security Center Windows Administration Servers. For more information, see Using the klbackup utility to switch managed devices under management of another Administration Server.

Click Next.
In the next window of the wizard, specify the following options:
- Destination folder for the backup
- Migrate to MySQL/MariaDB format
  Enable this option if you currently use SQL Server as a DBMS for Administration Server and you want to migrate the data from SQL Server to MySQL or MariaDB DBMS. Kaspersky Security Center will create a backup compatible with MySQL and MariaDB. After that, you can restore the data from the backup into MySQL or MariaDB.
- Migrate to Azure format
  Enable this option if you currently use SQL Server as a DBMS for Administration Server and you want to migrate the data from SQL Server to Azure SQL DBMS. Kaspersky Security Center will create a backup compatible with Azure SQL. After that, you can restore the data from the backup into Azure SQL.
- Include current date and time in the name of the backup destination folder
- Password for the backup
Click the Next button to start backup.
If you are working with a database in a cloud environment such as Amazon Web Services (AWS) or Microsoft Azure, in the Sign In to Online Storage window, fill in the following fields:
- For AWS:
  - S3 bucket name
    The name of the S3 bucket that you created for the Backup.
  - Access key ID
    You received the key ID (sequence of alphanumeric characters) when you created the IAM user account for working with S3 bucket storage instance.
    
    The field is available if you selected RDS database on an S3 bucket.
  - Secret key
    The secret key that you received with the access key ID when you created the IAM user account.
    
    The characters of the secret key are displayed as asterisks. After you begin entering the secret key, the Show button is displayed. Click and hold this button for the necessary amount of time to view the characters you entered.
    
    The field is available if you selected an AWS IAM access key for authorization instead of an IAM role.
- For Microsoft Azure:
  - Azure storage account name
    You created the name of the Azure storage account for working with Kaspersky Security Center.
  - Azure Subscription ID
    You created the subscription on the Azure portal.
  - Azure password
    You received the password of the Application ID when you created the Application ID.
    
    The characters of the password are displayed as asterisks. After you begin entering the password, the Show button becomes available. Click and hold this button to view the characters you entered.
  - Azure Application ID
    You created this application ID on the Azure portal.
    
    You can provide only one Azure Application ID for polling and other purposes. If you want to poll another Azure segment, you must first delete the existing Azure connection.
  - Azure SQL server name
    The name and the resource group are available in your Azure SQL Server properties.
  - Azure SQL server resource group
    The name and the resource group are available in your Azure SQL Server properties.
  - Azure storage access key
    Available in the properties of your storage account, in the Access Keys section. You can use any of the keys (key1 or key2).

To recover Administration Server data in interactive mode:

Run the klbackup utility located in the Kaspersky Security Center installation folder. Start the utility under the same account that you used to install Administration Server. We recommend that you run the utility on a newly installed Administration Server.
The Backup and restore wizard starts.
In the first window of the wizard, select Restore Administration Server data, and then click Next.
If you select the Restore or back up Administration Server certificate only option, only the Administration Server certificate and private key will be recovered.

When you run the klbackup utility on the inactive failover cluster node, you will be prompted to select one of the options: specify Administration Server certificate or automatically retrieve data from Administration Server.
In the Restore settings window of the wizard:
- Specify the folder that contains a backup copy of Administration Server data.
  If you are working in a cloud environment such as AWS or Azure, specify the address of the storage. Also, make sure that the file is named backup.zip.
- Specify the password that was entered during data backup.
  When restoring data, you must specify the same password that was entered during backup. If the path to a shared folder changed after backup, check the operation of tasks that use restored data (restore tasks and remote installation tasks). If necessary, edit the settings of these tasks. While data is being restored from a backup file, no one must access the shared folder of Administration Server. The account under which the klbackup utility is started must have full access to the shared folder.
Click the Next button to restore data.