Database Restore

Key points:

Restore Prerequisites

Required Items

  • Backup Archives. The matching pair of EP and its Partner's archives.
  • Servers. Two servers without CORE software and data.
  • Initial Software release. It must be the same release that was used to create the backup archive.
  • Note
    We upgrade the software to the required release following the bootstrap.

  • Java Keystores. Presence of the Java Security Provider software compatible with the keystore type and supporting the required decryption algorithm. In the following examples we assume the following:
    • providername SunJCE.
    • storetype JCEKS.

Preparation Steps

  1. Backup Archives.
    • Optionally, use ekm_verify_backup to assure mutual conformance of the two archive files. To execute this command:
      1. Upload both archives to a system with installed CORE server software.
      2. Extract the digest file from each archive.
      3. Run the ekm_verify_backup procedure referring to these digests.
    • Check the content of the .properties file in one of the archives and note the following:
      • The software that created this archive.
      • The server_role=<EP|Partner> whose database is stored in this archive.
  2. Servers. On each of the two servers that are designated to be the first EP–Partner pair:
    1. As needed:
      1. Uninstall the CORE software.
      2. Clear the CORE database folder – see Database Folder.
      3. Clear the CORE CORE Server Certificates Folder.
    2. Install CORE Server software release that is specified in the .properties file.
    3. Note
      Do not bootstrap the server. If you do, you will have to repeat step 1.

Restore Quickstart

To restore the first FIPSClosedFederal Information Processing Standards - standards developed by the United States federal government for use in computer systems by non-military government agencies and government contractors triplet, see FIPS System Backup and Restore.

Step 0 - Prerequisites

  1. Make sure you have the Required Items.
  2. Make sure you completed the Preparation Steps.

Step 1 - Restore the Database of the First EP

  1. Upload to your current working directory
    • The keystore with the EP backup decryption key (e.g. EpRestore.jks).
    • The EP backup file (.tar.gz).
  2. Obtain the passphrase for JKSClosedA Java KeyStore (JKS) is a repository of security certificates – either authorization certificates or public key certificates – plus corresponding private keys, used for instance in SSL encryption. (e.g. EpRestore1!), the name of the key (e.g. DEKClosedData Encryption Key - the key that encrypts the database. See also - KEK.), the keystore type, and the required Java Security Provider. Use this data to run ekm_restore:

Step 2 - Restore the Database of the First Partner

  1. Repeat the same steps on the designated Partner using the corresponding files and data:

Step 3 - Bootstrap the Restored Pair

With both databases restored on the selected servers:

  1. Bootstrap EP the server that restored the EP DB using the --restore option:
  2. Bootstrap Partner the server that restored the Partner DB using the --restore option:

Step 4 - Optional Steps

As needed, perform the following: