F-SECURE POLICY MANAGER 9.0, Administrator'S Manual

Page: 62 / 102

Backing up & restoring Policy Manager Console data
Policy Manager Server can be maintained by routinely backing up the console data on the server in case it
needs to be restored.
It is highly recommended that you back up the most important management information regularly. At a
minimum, back up the entire
fsa\domains
directory of the communication directory. The communication
directory is normally located under the Policy Manager Server installation directory under
commdir\
. This
directory contains both the policy domain structure and all saved policy data.
Note: Before backing up the
fsa\domains
directory, make sure that no Policy Manager Console
sessions are open.
It is also possible to back up the entire repository. By doing so, you will be able to restore not only the policy
domain structure, but also the alerts, host statistics, and installation operations. You will also be able to quickly
restore policy files. When you only back up the
fsa\domains
directory, you must distribute the policies
afterwards. The disadvantage of backing up the entire repository is that there can be substantially more data
than in the
fsa\domains
directory. Another disadvantage is that Policy Manager Server must be stopped
before doing the full backup.
To back up the management key-pair, copy the
admin.prv
file and the
admin.pub
file from the root of the
local Policy Manager Console installation directory. Keep the
admin.prv
file stored in a secure place. It is
very important to save a backup copy of the
admin.prv
key file.
Note: If you lose a management key (either
admin.pub
or
admin.prv
), you will have to create a new
key pair and distribute the respective
admin.pub
key to all the managed hosts by reinstalling each host
manually, since policy based operations cannot be used any more. Trust between Policy Manager Console
and managed hosts is based on a digital signature. Without the correct private key, it is not possible to
create a valid signature that hosts would accept.
If you want to save the Policy Manager Console preferences, back up the
lib\Administrator.properties
file from the local installation directory.
Note: The
Administrator.properties
file is created during the first run of Policy Manager Console
and contains session related information such as window size or the server URL.
62 | F-Secure Policy Manager | Maintaining Policy Manager Server