Data backup and recovery in interactive mode

Restoring Administration Server data from a backup copy created by using the klbackup utility in interactive mode may occur with an error. If you have installed the patch 15.1.0.20748-pf2 for Administration Server, and then create a backup copy by using the klbackup utility with the Migrate database option disabled, an error occurs when restoring this copy (for all DBMSs, except MySQL and MariaDB). If you have the patch 15.1.0.20748-pf2 for Administration Server installed and you want to create a backup copy without migrating to another DBMS, use a data backup task or run the klbackup utility from command line.

To create a backup copy of Administration Server data in interactive mode:

Run the klbackup utility located in the Kaspersky Security Center installation folder.
The Backup and restore wizard starts.
In the first window of the wizard, select Perform backup of Administration Server data.
If you select the Restore or back up Administration Server certificate only option, only a backup copy of the Administration Server certificate and private key will be saved. Backing up of the Administration Server certificate and private key can be useful when you perform the migration from Administration Server of Kaspersky Security Center Windows to Administration Server of Kaspersky Security Center Linux. Also, you can migrate managed devices between Kaspersky Security Center Linux Administration Servers, as well as between Kaspersky Security Center Windows Administration Servers. For more information, see Using the klbackup utility to switch managed devices under management of another Administration Server.

Click Next.
In the next window of the wizard, specify the following options:
- Backup destination folder
- Migrate database
  Enable this option if you currently store Administration Server data in a Microsoft SQL Server database and you need to migrate it to one of the following databases: MySQL or MariaDB, PostgreSQL or Postgres Pro, Azure SQL. By default this option is disabled.
  - Migrate to MySQL/MariaDB format
    Enable this option if you currently use SQL Server as a DBMS for Administration Server and you want to migrate the data from SQL Server to MySQL or MariaDB DBMS. Kaspersky Security Center will create a backup compatible with MySQL and MariaDB. After that, you can restore the data from the backup into MySQL or MariaDB.
  - Migrate to Postgres
    Enable this option if you currently use SQL Server as a DBMS for Administration Server and you want to migrate the data from SQL Server to PostgreSQL or Postgres Pro DBMS. Kaspersky Security Center will create a backup compatible with PostgreSQL and Postgres Pro. After that, you can restore the data from the backup into PostgreSQL or Postgres Pro.
    
    This option becomes available only if you install the 15.1.0.20748-pf2 patch for Administration Server that enables migration to PostgreSQL and Postgres Pro. Contact Kaspersky Technical Support to get this patch.
  - Migrate to Azure format
    Enable this option if you currently use SQL Server as a DBMS for Administration Server and you want to migrate the data from SQL Server to Azure SQL DBMS. Kaspersky Security Center will create a backup compatible with Azure SQL. After that, you can restore the data from the backup into Azure SQL.
- Include current date and time in the name of the backup destination folder
- Password for the backup
Click the Next button to start backup.
If you are working with a database in a cloud environment such as Amazon Web Services (AWS) or Microsoft Azure, in the Sign In to Online Storage window, fill in the following fields:
- For AWS:
  - S3 bucket name
    The name of the S3 bucket that you created for the Backup.
  - Access key ID
    You received the key ID (sequence of alphanumeric characters) when you created the IAM user account for working with S3 bucket storage instance.
    
    The field is available if you selected RDS database on an S3 bucket.
  - Secret key
    The secret key that you received with the access key ID when you created the IAM user account.
    
    The characters of the secret key are displayed as asterisks. After you begin entering the secret key, the Show button is displayed. Click and hold this button for the necessary amount of time to view the characters you entered.
    
    The field is available if you selected an AWS IAM access key for authorization instead of an IAM role.
- For Microsoft Azure:
  - Azure storage account name
    You created the name of the Azure storage account for working with Kaspersky Security Center.
  - Azure Subscription ID
    You created the subscription on the Azure portal.
  - Azure password
    You received the password of the Application ID when you created the Application ID.
    
    The characters of the password are displayed as asterisks. After you begin entering the password, the Show button becomes available. Click and hold this button to view the characters you entered.
  - Azure Application ID
    You created this application ID on the Azure portal.
    
    You can provide only one Azure Application ID for polling and other purposes. If you want to poll another Azure segment, you must first delete the existing Azure connection.
  - Azure SQL server name
    The name and the resource group are available in your Azure SQL Server properties.
  - Azure SQL server resource group
    The name and the resource group are available in your Azure SQL Server properties.
  - Azure storage access key
    Available in the properties of your storage account, in the Access Keys section. You can use any of the keys (key1 or key2).

To recover Administration Server data in interactive mode:

Run the klbackup utility located in the Kaspersky Security Center installation folder. Start the utility under the same account that you used to install Administration Server. We recommend that you run the utility on a newly installed Administration Server.
The Backup and restore wizard starts.
In the first window of the wizard, select Restore Administration Server data, and then click Next.
If you select the Restore or back up Administration Server certificate only option, only the Administration Server certificate and private key will be recovered.

When you run the klbackup utility on the inactive failover cluster node, you will be prompted to select one of the options: specify Administration Server certificate or automatically retrieve data from Administration Server.
In the Restore settings window of the wizard:
- Specify the folder that contains a backup copy of Administration Server data.
  If you are working in a cloud environment such as AWS or Azure, specify the address of the storage. Also, make sure that the file is named backup.zip.
- Specify the password that was entered during data backup.
  When restoring data, you must specify the same password that was entered during backup. If the path to a shared folder changed after backup, check the operation of tasks that use restored data (restore tasks and remote installation tasks). If necessary, edit the settings of these tasks. While data is being restored from a backup file, no one must access the shared folder of Administration Server. The account under which the klbackup utility is started must have full access to the shared folder.
Click the Next button to restore data.