Black Box ET0100A manual Other hardware component failures, Damage to the ETM software or database

Backup and Restore of EncrypTight Manager

Other hardware component failures

If some component other than a drive has failed, that component could be replaced in the field, or the server could be RMA'd back to Black Box.

Damage to the ETM software or database

If some damage is done to the ETM installation, such as unintentional removal of key configuration files or binaries under /opt/jboss/server/policyserver, then the ETM software should be restored. If that is all that occurred, then the database does not need to be restored. See procedure 4 below for restoring the ETM software.

Damage to the OS or filesystem

If damage is done to other areas of the filesystem, such as unintentional removal of OS files, or files outside of the ETM root directory, then a restore from backup will be necessary. Depending on what was damaged, either part of the backup or all of the backup may be necessary for the restore. For example, if the only damage was to /etc, then only that portion of the backup would be needed to recover. If something as drastic as 'rm -rf /' had occurred, then the full backup would be needed, and then a subsequent ETM backup or database backup might also need to be applied. That would be necessary if such a backup existed that was more recent than the full backup. See procedures 2, 4 and 6 below.

Example backup and restore procedures

Procedure 0. copying drives with dd (only for non-RAID systems!!!!)

An example command, run as root to copy drive a to drive b:

dd if=/dev/sda of=/dev/sdb bs=100M conv=notrunc,noerror

Be careful with order of if and of. You can write a blank disk to a good disk if you get confused.

More info on dd can be found on wikipedia, and also on linuxquestions.org

The above procedure could be run regularly to snapshot a drive as it is modified, to keep the backup as current as desired.

This procedure can serve as a full filesystem backup (alternate for Procedure 1. below) for non-RAID configured servers. However, it is subject to drive failure of this backup drive.

Procedure 1. Backing up the entire filesystem

As stated in the General Guidelines, each IT organization will/should have standardized backup practices. At a minimum, they should retain a full snapshot of a ETM filesystem at least once, after the installation script has been run and they have made whatever configuration changes they wanted to for a given site (such as changes to files in /etc). There are many ways to accomplish this. One simple method is using the tar command. An example is provided here (this should be run as root).

cd /

EncrypTight Manager Installation Guide 27