2.3 Restoring an Administration Console

The restore script replaces the configuration records in the configuration database with the records in the backup of the configuration store. The restore script should not be used to move configuration data from one machine to another. It should be used to restore configuration data to a machine that has failed.

The restoration steps are dependent upon whether the Administration Console is installed on its own machine or with an Identity Server:

2.3.1 Restoring a Standalone Administration Console

If you are performing a restore because the Administration Console machine failed, install the same version of the Administration Console on the new machine. Then perform the restore.

  1. Ensure that the .zip file created during the backup process is accessible.

  2. Change to the /opt/novell/devman/bin directory.

  3. Run the following command from root: ./amrestore.sh.

  4. Enter the Access Manager administration user ID.

  5. Enter the Access Manager administration password.

  6. Enter the name of the backup file. Do not include the .zip extension.

  7. Enter the private key encryption password and press Enter.

  8. Re-enter the private key encryption password and press Enter.

  9. (Conditional) If you have a secondary Administration Console installed, you must restart Tomcat (/etc/init.d/novell-tomcat4 restart) in order to re-establish LDAP connections to the primary Administration Console.

  10. (Conditional) If any devices report certificate errors, you need to re-push the certificates.

    1. Click Access Manager > Auditing > Troubleshooting > Certificates.

    2. Select the store that is reporting errors, then click Re-push certificates.

      You can select multiple stores at the same time.

    3. (Optional) To verify that the re-push of the certificates was successful, click Certificates > Command Status.

If you are restoring only the Administration Console, other components should still function properly after the restore.

2.3.2 Restoring an Administration Console with an Identity Server on the Same Machine

If you are performing a restore because the machine failed, install the same version of the Administration Console on the new machine. Do not reinstall the Identity Server at this time. The following procedures explain when the Identity Server should be reinstalled.

IMPORTANT:Whenever you run the amrestore.sh script, the Administration Console is restored as a standalone Administration Console. You must perform the steps described in Step 9 to restore your Identity Server into the configuration.

  1. Ensure that the .zip file created during the backup process is accessible.

  2. Change to the /opt/novell/devman/bin directory.

  3. Run the following command from root: ./amrestore.sh.

  4. Enter the Access Manager administration user ID.

  5. Enter the Access Manager administration password.

  6. Enter the name of the backup file. Do not include the .zip extension.

  7. Enter the private key encryption password and press Enter.

  8. Re-enter the private key encryption password and press Enter.

  9. For the Identity Server, complete the following steps after the restore has finished:

    1. Remove the Identity Server from the cluster configuration. (See Section 6.1.3, Removing a Server from a Configuration.)

    2. Delete the Identity Server from the Administration Console. (See Section 5.1, Managing an Identity Server.)

    3. Uninstall the Identity Server. (See Uninstalling the Identity Server in the Novell Access Manager 3.0 SP4 Installation Guide.

      This is required if the Identity Server is installed on the machine. If you installed the Identity Server before running the amrestore.sh script, you need to uninstall the Identity Server.

    4. Install the Identity Server. (See Installing the Novell Identity Server in the Novell Access Manager 3.0 SP4 Installation Guide.

    5. Reassign the Identity Server to the cluster configuration that it was removed from. (See Section 6.1.2, Assigning an Identity Server to a Cluster Configuration.)

  10. (Conditional) If you have a secondary Administration Console installed, you must restart Tomcat (/etc/init.d/novell-tomcat4 restart) in order to re-establish LDAP connections to the primary Administration Console.

  11. (Conditional) If any devices report certificate errors, you need to re-push the certificates.

    1. Click Access Manager > Auditing > Troubleshooting > Certificates.

    2. Select the store that is reporting errors, then click Re-push certificates.

      You can select multiple stores at the same time.

    3. (Optional) To verify that the re-push of the certificates was successful, click Certificates > Command Status.