2.3 Restoring the Access Manager Appliance Configuration

The restore script replaces the configuration records in the configuration database with the records in the backup of the configuration store. It should be used to restore configuration data for one of the following types of scenarios:

  • An upgrade failed and you need to return to the configuration before the upgrade.

  • You want to return to the backed up configuration because the current modified configuration does not meet your needs.

If the primary Administration Console machine has failed, you have lost both the configuration and the configuration database. To recover from this scenario, you need to do more than restore the configuration.

The restore script cannot be used to move the Administration Console to a different platform, even if the new machine is configured to use the same IP address and DNS name. The backup files contains path information that is specific to the operating system.

NOTE:Restore should be made on the same version that was used to take the backup.

2.3.1 Restoring the Configuration on the Same Appliance for Which Backup Was Taken

  1. Ensure that the zip file created during the backup process is accessible.

  2. Log in as root.

  3. Change the current directory to the utility directory: /opt/novell/devman/bin

  4. Run the following command:

    ./amrestore.sh

  5. Specify and re-specify the Access Manager administration password.

  6. Specify the path where the backup file is available.

  7. Specify the name of the backup file. Do not include the .zip extension.

  8. Specify the private key encryption password, then press Enter.

  9. Re-specify the private key encryption password, then press Enter.

    Wait for the restore process to complete.

  10. (Conditional) If you have a secondary appliance installed, reboot the machines.

  11. (Conditional) If any devices report certificate errors, you need to re-push the certificates.

    1. Click Auditing > Troubleshooting > Certificates.

    2. Select the store that is reporting errors, then click Re-push Certificates.

      You can select multiple stores at the same time.

    3. (Optional) To verify that the re-push of the certificates was successful, click Security > Command Status.

2.3.2 Restoring the Configuration on a Freshly Installed Appliance with Same IP Address and DNS Settings

In this scenario, apart from restoring the Administration Console configuration, you need to re-import the device settings too.

  1. Ensure that the zip file created during the backup process is accessible.

  2. Log in as root.

  3. Change the current directory to the /opt/novell/devman/bin directory.

  4. Run the following command:

    ./amrestore.sh

  5. Specify and re-specify the Access Manager administration password.

  6. Specify the path where the backup file is available.

  7. Specify the name of the backup file. Do not include the .zip extension.

  8. Specify the private key encryption password, then press Enter.

  9. Re-specify the private key encryption password, then press Enter.

    Wait for the restore process to complete.

  10. Change the current directory to the utility directory:

    /opt/novell/devman/jcc

  11. Run the following command:

    conf/reimport_nidp.sh jcc

  12. Follow the steps to re-import the jcc settings.

    Wait for jcc to start.

  13. Run the following command:

    conf/reimport_nidp.sh nidp

  14. Follow the steps to re-import the Identity Server settings.

    Wait for the Identity Server health to turn green. You can check this in the Administration Console Dashboard.

  15. Run the following command:

    conf/reimport_ags.sh agm

  16. Follow the steps to re-import the Access Gateway settings.

    Wait for the Access Gateway health to turn green. You can check this in the Administration Console Dashboard.

  17. Run the following command:

    conf/reimport_ags.sh sslvpn

  18. Follow the steps to re-import SSL VPN settings.

    Wait for the SSL VPN health to turn green. You can check this in the Administration Console Dashboard.

  19. (Conditional) If you have a secondary appliance installed, reboot the machines.

  20. (Conditional) If any devices report certificate errors, you need to re-push the certificates.

    1. Click Auditing > Troubleshooting > Certificates.

    2. Select the store that is reporting errors, then click Re-push Certificates.

      You can select multiple stores at the same time.

    3. (Optional) To verify that the re-push of the certificates was successful, click Security > Command Status.