30.3.2 Restoring the Configuration with an Identity Server on the Same Machine

Select the type of machine Administration Console is installed on:

Linux

Whenever you run the amrestore.sh script, Administration Console is restored as a standalone Administration Console. You must perform the steps described in Step 8 to restore your Identity Server into the configuration.

  1. Ensure that the .zip file created during the backup process is accessible.

  2. Log in as root.

  3. Change to the /opt/novell/devman/bin directory.

  4. Run the following command:

    ./amrestore.sh

  5. Specify the Access Manager administration user ID and password.

  6. Specify the name of the backup file. Do not include the .zip extension.

  7. Specify the private key encryption password, then press Enter.

    Confirm the private key encryption password, then press Enter.

  8. For Identity Server, complete the following steps after the restore process is completed:

    1. Remove Identity Server from the cluster configuration. See Removing a Server from a Cluster Configuration.

    2. Delete Identity Server from Administration Console. (See Managing a Cluster of Identity Servers.)

    3. Uninstall Identity Server. (See Uninstalling Identity Server in the NetIQ Access Manager 4.5 Installation and Upgrade Guide.

      This is required if Identity Server is installed on the machine. If you installed Identity Server before running the amrestore.sh script, you need to uninstall Identity Server.

    4. Install Identity Server. (See Installing Identity Server on Linux in the NetIQ Access Manager 4.5 Installation and Upgrade Guide.

    5. If you have customized login pages, error pages, messages, or configuration files, copy these files to Identity Server.

    6. Reassign Identity Server to the cluster configuration that it was removed from. (See Assigning an Identity Server to a Cluster Configuration.)

    7. Update Identity Server.

  9. (Conditional) If any devices report certificate errors, you need to re-push the certificates.

    1. Click Troubleshooting > Certificates.

    2. Select the store that is reporting errors, then click Re-push certificates.

      You can select multiple stores at the same time.

    3. (Optional) To verify that the re-push of the certificates was successful, click Security > Command Status.

Windows

To perform a restore when an Administration Console and an Identity Server are installed on the same machine:

  1. Log in to as an administrator user.

  2. Run the Access Manager restore utility.

    1. From a command line, change to the utility directory:

      Windows Server 2012: \Program Files\Novell\bin directory.

    2. Specify amrestore.bat.

    3. Answer the prompts.

  3. Remove Identity Server from the cluster configuration. (See Removing a Server from a Cluster Configuration.)

  4. Delete Identity Server from Administration Console. (See Managing a Cluster of Identity Servers.)

  5. Install Identity Server on Administration Console. (See Installing Identity Server on Windows in the NetIQ Access Manager 4.5 Installation and Upgrade Guide.

  6. If you have customized login pages, error pages, messages, or configuration files, copy these files to Identity Server.

  7. Reassign Identity Server to the cluster configuration that it was removed from. (See Assigning an Identity Server to a Cluster Configuration.)

  8. Update Identity Server.