To create a backup copy or recover Administration Server data in silent mode,
Run klbackup with the required set of keys from the command line of the device that has Administration Server installed.
Network agent flags are not restored when you use the klbackup utility. You need to configure network agent flags manually.
The instance of Administration Server on which the restoration is to be performed, must use a DBMS of the same type. The version of Administration Server can be the same (with an identical or later patch), or later.
Utility command line syntax:
klbackup -path BACKUP_PATH [-linux_path LINUX_PATH][-node_cert CERT_PATH] [-logfile LOGFILE] [-use_ts]|[-restore] [-password PASSWORD] [-cert_only] [-online] [-migrate postgres]
If no password is specified in the command line of the klbackup utility, the utility prompts you to enter the password interactively.
Descriptions of the keys:
-path BACKUP_PATH—Save information in the BACKUP_PATH folder, or use data from the BACKUP_PATH folder for recovery (mandatory parameter).The database server account and the klbackup utility should be granted permissions for changing data in the folder BACKUP_PATH.
-linux_path LINUX_PATH—Local path to folder with backup data for SQL Server on Linux.The database server account and the klbackup utility should be granted permissions for changing data in the folder LINUX_PATH.
-node_cert CERT_PATH—Server certificate file to configure inactive failover cluster node after recovery. If not set, it will be automatically retrieved from the Server.When you run the klbackup utility on the inactive failover cluster node, use this key to specify the path to the Server certificate.
-logfile LOGFILE—Save a report about Administration Server data backup and recovery.-use_ts—When saving data, copy information to the BACKUP_PATH folder, to the subfolder with a name in the klbackup YYYY-MM-DD # HH-MM-SS format, which includes the current date and operation time in UTC. If no key is specified, information is saved in the root of the folder BACKUP_PATH.During attempts to save information in a folder that already stores a backup copy, an error message appears. No information will be updated.
Availability of the -use_ts key allows an Administration Server data archive to be maintained. For example, if the -path key indicates the folder C:\KLBackups, the folder klbackup 2022/6/19 # 11-30-18 then stores information about the status of the Administration Server as of June 19, 2022, at 11:30:18 AM.
-restore—Recover Administration Server data. Data recovery is performed based on information contained in the BACKUP_PATH folder. If no key is available, data is backed up in the BACKUP_PATH folder.-password PASSWORD—Password to protect the sensitive data. A forgotten password cannot be recovered. There are no password requirements. The password length is unlimited and zero length (no password) is also possible.
When restoring data, you must specify the same password that was entered during backup. If the path to a shared folder changed after backup, check the operation of tasks that use restored data (restore tasks and remote installation tasks). If necessary, edit the settings of these tasks. While data is being restored from a backup file, no one must access the shared folder of Administration Server. The account under which the klbackup utility is started must have full access to the shared folder. We recommend that you run the utility on a newly installed Administration Server.
-cert_only—Save or recover only the certificate and private key of Administration Server.This flag can be useful when you perform the migration from Administration Server of Kaspersky Security Center Windows to Administration Server of Kaspersky Security Center Linux. Also you can migrate managed devices between Kaspersky Security Center Linux Administration Servers as well as between Kaspersky Security Center Windows Administration Servers.
-online—Back up Administration Server data by creating a volume snapshot to minimize the offline time of the Administration Server. When you use the utility to recover data, this option is ignored. Do not use this flag when creating a backup to migrate to a different DBMS.-archive 0—Keep server data as plain files. By default (-archive 1), server data is stored in an archive file.-migrate mysql—Create a backup of Administration Server data stored in the SQL Server database that is compatible with MySQL (including MariaDB). You can restore the data from the backup into MySQL.-migrate postgres—Create a backup of Administration Server data stored in the SQL Server database that is compatible with PostgreSQL and Postgres Pro. You can restore the data from the backup into PostgreSQL or Postgres Pro. Use this flag when you perform the migration to Kaspersky Security Center Linux by using the Administration Server data backup.This option becomes available only if you install the patch 15.1.0.20748-pf2 for Administration Server that enables migration to PostgreSQL and Postgres Pro. Contact Kaspersky Technical Support to get this patch.