24.3 Restoring the Access Manager Appliance Configuration

The restore script replaces the existing configurations in the configuration database with the configuration in the backup of the configuration store. It should be used to restore configuration data in one of the following scenarios:

  • An upgrade failed and you need to return to the configuration before the upgrade.

  • You want to return to the backed up configuration because the current modified configuration does not meet your needs.

If the primary Administration Console machine has failed, you have lost both the configuration and the configuration database. To recover from this scenario, you need to do more than restore the configuration.

The restore script cannot be used to move the Administration Console to a different platform, even if the new machine is configured to use the same IP address and DNS name. The backup files contains path information that is specific to the operating system.

NOTE:Restore should be made on the same version that was used to take the backup.

24.3.1 Restoring the Configuration on the Same Appliance for Which Backup Was Taken

  1. Ensure that the zip file created during the backup process is accessible.

  2. Log in to as root.

  3. Change the current directory to the utility directory: /opt/novell/devman/bin

  4. Run the following command:

    ./amrestore.sh

  5. Specify and confirm the Access Manager administration password.

  6. Specify the path where the backup file is available.

  7. Specify the name of the backup file. Do not include the .zip extension.

  8. Specify the private key encryption password, then press Enter.

    Confirm the private key encryption password, then press Enter.

  9. Wait for the restore process to complete.

  10. (Conditional) If you have a secondary appliance installed, reboot the machines.

  11. (Conditional) If any devices report certificate errors, you need to re-push the certificates.

    1. Click Auditing > Troubleshooting > Certificates.

    2. Select the store that is reporting errors, then click Re-push Certificates.

      You can select multiple stores at the same time.

    3. (Optional) To verify that the re-push of the certificates was successful, click Security > Command Status.

24.3.2 Restoring the Configuration on a Freshly Installed Appliance with Same IP Address and DNS Settings

In this scenario, apart from restoring the Administration Console configuration, you need to re-import the device settings too.

  1. Ensure that the zip file created during the backup process is accessible.

  2. Log in to as root.

  3. Change the current directory to the /opt/novell/devman/bin directory.

  4. Run the following command:

    ./amrestore.sh

  5. Specify and confirm the Access Manager administration password.

  6. Specify the path where the backup file is available.

  7. Specify the name of the backup file. Do not include the .zip extension.

  8. Specify the private key encryption password, then press Enter.

    Confirm the private key encryption password, then press Enter.

    Wait for the restore process to complete.

  9. Change the current directory to the utility directory:

    /opt/novell/devman/jcc

  10. Run the following command:

    conf/reimport_nidp.sh jcc

  11. Follow the steps to re-import the jcc settings.

    Wait for jcc to start.

  12. Run the following command:

    conf/reimport_nidp.sh nidp

  13. Follow the steps to re-import the Identity Server settings.

    Wait for the Identity Server health to turn green. You can check this in the Administration Console Dashboard.

  14. Run the following command:

    conf/reimport_ags.sh agm

  15. Follow the steps to re-import the Access Gateway settings.

    Wait for the Access Gateway health to turn green. You can check this in the Administration Console Dashboard.

  16. (Conditional) If you have a secondary appliance installed, reboot the machines.

  17. (Conditional) If any devices report certificate errors, you need to re-push the certificates.

    1. Click Auditing > Troubleshooting > Certificates.

    2. Select the store that is reporting errors, then click Re-push Certificates.

      You can select multiple stores at the same time.

    3. (Optional) To verify that the re-push of the certificates was successful, click Security > Command Status.