You can copy Administration Server data for backup and future recovery using the klbackup utility, which is part of the Kaspersky Security Center distribution kit.
The instance of Administration Server on which the restoration is to be performed, must use a DBMS of the same type. The version of Administration Server can be the same (with an identical or later patch), or later.
If you backed up data of Administration Server included in Kaspersky Security Center Linux 15 or earlier when using the MariaDB DBMS of an earlier version, and then recover data on a device with a later version of MariaDB, an error may occur. For more information, refer to How to restore Administration Server data from a backup created on an earlier DBMS version.
Network agent flags are not restored when you use the klbackup utility. You need to configure network agent flags manually.
To create a backup copy or recover Administration Server data in silent mode,
Run klbackup with the required set of keys from the command line of the device that has Administration Server installed.
Utility command line syntax:
klbackup -path <backup path> [-linux_path <DBMS backup path>-node_cert <certificate path>] [-logfile <log file> [-use_ts]|[-restore] [-password <password>] [-cert_only]
If no password is specified in the command line of the klbackup utility, the utility prompts you to enter the password interactively.
Descriptions of the keys:
-path <backup path>—Save information in the backup folder, or use data from the backup folder for recovery (mandatory parameter).-linux_path <DBMS backup path>—Local path to folder with DBMS backup data.The database server account and the klbackup utility should be granted permissions for changing data in the DBMS backup folder.
-node_cert <certificate path>—Server certificate file to configure inactive failover cluster node after recovery. If not set, it will be automatically retrieved from the Server.-logfile <log file>—Save a report about Administration Server data backup and recovery.The database server account and the klbackup utility should be granted permissions for changing data in the backup folder.
-use_ts—When saving data, copy information to the backup folder, to the subfolder with a name in the klbackup YYYY-MM-DD # HH-MM-SS format, which includes the current date and operation time in UTC. If no key is specified, information is saved in the root of the backup folder.During attempts to save information in a folder that already stores a backup copy, an error message appears. No information will be updated.
Availability of the -use_ts key allows an Administration Server data archive to be maintained. For example, if the -path key indicates the folder /tmp/KLBackups, the folder klbackup 2022/6/19 # 11-30-18 then stores information about the status of the Administration Server as of June 19, 2022, at 11:30:18 AM.
-restore—Recover Administration Server data. Data recovery is performed based on information contained in the backup folder. If no key is available, data is backed up in the backup folder.-password <password>—Password to protect the sensitive data.A forgotten password cannot be recovered. There are no password requirements. The password length is unlimited and zero length (no password) is also possible.
When restoring data, you must specify the same password that was entered during backup. If the path to a shared folder changed after backup, check the operation of tasks that use restored data (restore tasks and remote installation tasks). If necessary, edit the settings of these tasks. While data is being restored from a backup file, no one must access the shared folder of Administration Server. The account under which the klbackup utility is started must have full access to the shared folder. To restore the Administration Server data from the backup, we recommend that you run the utility on a newly installed Administration Server.
-cert_only—Save or recover only the certificate and private key of Administration Server.This flag can be useful when you perform the migration from Administration Server of Kaspersky Security Center Windows to Administration Server of Kaspersky Security Center Linux. Also, you can migrate managed devices between Kaspersky Security Center Linux Administration Servers, as well as between Kaspersky Security Center Windows Administration Servers.
You can use a data backup to move the Kaspersky Security Center Windows Administration Server data under management of Kaspersky Security Center Linux.
If you use MySQL or MariaDB as a DBMS for Kaspersky Security Center Windows and for Kaspersky Security Center Linux, the lower_case_table_names parameter must match for the current and new DBMSs.
Before you create a data backup, check the lower_case_table_names parameter. Then when installing MySQL or MariaDB for Kaspersky Security Center Linux, you must set the lower_case_table_names parameter to the same value as specified for this parameter for Windows.