When installed in several nodes, perform the step below in any node to back up the PKI Hub installation
To back up a multi-node PKI Hub installation
- Run the clusterctl backup create command to generate a backup file – for example:
$ sudo clusterctl backup create --file /home/sysadmin/202341014.bkp --password 7Txsxu - Manually back up the following data.
- The key and certificate for TLS.
- The volume capacity policies configured with the clusterctl volume capacity command.
- The retention policies configured wit the clusterctl retention config logs and clusterctl retention config metrics commands.
- The proxy settings are configured with the clusterctl proxy set command.
- Back up the PKI Hub and solution databases according to the instructions of the DBMS vendor.
If the deployed solutions use an HSM (Hardware Security Module) to protect private keys, back up the device using the tools provided by the HSM vendor.
- Move all the backup data from the PKI Hub node to a secure location – for example, using an SFTP client.