Backup and Restore

Backup and restore means that administrators can keep reserve appliances and upload configuration settings, which have previously been backed up, onto a new appliance. Backup and restore is managed via the OneSpan Authentication Server Appliance Configuration Tool (see OneSpan Authentication Server Appliance Configuration Tool ).

For more information about backup and restore, refer to the OneSpan Authentication Server Appliance Installation and Maintenance Guide.

When you copy, migrate, or back up encrypted database files, ensure that you also back up the encryption key (and/or the optional password key). Otherwise, you will not be able to read the data afterward, as it will be encrypted.

Backup

Backup contents

Backup data includes all configuration of the Administration Web Interface and the Configuration Tool and all database information, such as authenticator run-time information.

Backup data does not include audit and logging data. However, audit data can be exported (see Exporting and downloading auditing information). Backup is possible in a replicated environment. In this case, audit data is replicated to another OneSpan Authentication Server Appliance instance (see Replication).

Backup methods

Backup is configured in the Configuration Tool and can run in the following modes:

• Manually.
• Automatically. The backup is pushed from the OneSpan Authentication Server Appliance instance.
• Scripted. The backup is pulled from another server.

Manual backup

The Configuration Tool allows a backup to be created at any time via an update command.

Automatic backup

Scripted backup

You can write your own backup script or tool to request a backup from OneSpan Authentication Server Appliance. Static password authentication is used. The IP addresses of the network servers permitted to request a backup must be configured via the OneSpan Authentication Server Appliance Configuration Tool.

Backup encryption

All backups (manual, automatic, and scripted) are encrypted by default. A custom encryption passphrase can be configured. In this case, the passphrase is required to upload a backup.

Backup restore

The restore function in the Configuration Tool allows you to upload configuration settings and data, which have been backed up from the same or another appliance, to your current OneSpan Authentication Server Appliance internal database.

The file to be restored is first verified as a valid restore file. OneSpan Authentication Server Appliance needs to be restarted before the restore is completed. When the file has been restored, you can verify the restore state on the Status page.

• If you restore a backup to the same appliance, e.g. to repair a configuration error or loss of data, the settings and data overwrite the current data in the appliance. In this case, re-licensing is not necessary.
• If you restore a backup to another appliance, you will get a warning message that the license was issued for a different appliance and will only be operational for a grace period of 30 days. In this case, a new license must be obtained (see Licensing).

The appliance to which a backup is restored should run the same product version as the appliance from which the backup was made. Upgrade paths for all features may not be supported when restoring a backup to a more recent version. If in doubt, contact your OneSpan Authentication Server Appliance supplier.