8.2 Recovering PAM Primary Manager

  1. Install the Operating System. Whichever system that was lost in the disaster.

  2. Install Privileged Access Manager on the Operating System with the same Privileged Access Manager version using the RPM installer.

  3. Stop the Privileged Access Manager service.

    For more information, on starting and stopping Privileged Access Manager service, see Stopping and Restarting the Framework.

  4. Take a backup of the data based on whether you want to backup the configuration data, audit data, or both configuration and audit data. For more information see, Backup and Restore Help Command.

  5. Restore the most recent backed-up data using the command from Sample Output of Restore Command.

  6. Start the Privileged Access Manager service.

    For more information, on starting and stopping Privileged Access Manager service, see Stopping and Restarting the Framework.

8.2.1 Disaster Recovery Scenario 1: Single PAM Manager Setup

In an environment where you have single PAM manager which is lost, follow the procedure.

  1. On an Operating System, install PAM manager.

  2. Restore the backed up data.

8.2.2 Disaster Recovery Scenario 2: (Multiple Manager Environment): Promoting Backup Manager as Primary

First you must have a backup manager at par with the primary manager. For more information see, Promoting Backup Manager to Primary.

Since your primary manager is unavailable, you can select single or multiple manager packages on a backup manager to be promoted to primary status. The Framework continues to function when the primary manager is unavailable, but no must changes can be made to the Framework. Promote all the packages of any one of the backup managers to primary.

NOTE:First, promote the Registry module as the primary, ensure the conversion is successful and the module is online, then promote the other modules as master.

8.2.3 Disaster Recovery Scenario 3: (Multiple Manager Environment): Restoring the Primary Manager

  1. After promoting the backup manager as primary manager

  2. On an Operating System, install PAM manager.

  3. Restore the backed up data.

  4. Wait for that the registry sync to complete, so that the restored PAM manager displays as the Backup manager.

  5. Select the required backup packages and click Promote Manager.

NOTE:When the primary manager is down note that only Privileged Access Manager services are unavailable at this point but the Privileged Access Manager files are all intact. The delta between when the primary manager is down and when it is restored must be manually copied. The Privileged Access Manager administrator must not take up high impact configuration activities at this point.

NOTE:In an environment where you have configured audit zones, you must replicate the audit zone setup for both backup and restore. For more information about audit zones in Privileged Access Manager, see Managing Audit Zones.