Webconf: Restore

Prerequisites

• The Next Generation Hardware Appliance needs to be in Alarm State or Factory Reset State.

• A Backup with its DMS and the corresponding Backup Protection Smart Cards.

• A connected PIN Pad to perform interactions with the HSM restore.

Do not restart or shut down the appliance while the Restore is running.

To restore the Next Generation Hardware Appliance from an existing backup, perform the following steps:

1. Log in to the Next Generation Hardware Appliance.

2. Open the Restore page.

3. In the Restore Settings section select the Network File Setting (NFS) option from the drop down menu under Storage Type.

4. Enter your NFS URL and click Browse Storage to open the Storage Browser:

   1. Navigate to the path where the backup is located. Click on Directories to navigate one level down or click .. One level up to return to the previous level.

   2. Select the backup you want to restore.

5. Provide the Domain Master Secret (DMS).

6. Click Restore Now to open the corresponding form.

7. The form contains all the important information about the selected backup to be restored.

Be aware, that you will need to perform PIN Pad interactions in several steps during HSM restore.

8. To proceed click Restore.

9. Follow the instructions in the Restore Guide.
   The Restore Guide/Wizard appears in Webconf and guides through the next steps.
   It shows the overall progress and indicates the part, that is currently restored.

It is possible that a restore fails in a certain step. In this case, a Retry button is displayed. Click on this button to repeat the failed restore step.

The Restore is successful.

Restore for a Migration

To restore a Migration Backup from the Hardware Version 3.14.1:
Proceed in the same way as for Restore, but make sure to navigate to the path where the Export Backup from the Hardware 3.14.1 is located.
Select the backup you want to restore and proceed as described above.
If the Restore is carried out while retaining the current network, an error may occur in the Transport Layer Security (TLS) interface which can be rectified manually.
In the Transport Layer Security display, it can happen that the active interface is only displayed on one domain. This can be corrected manually. The page Transport Layer Security (TLS)
shows you how to manage Transport Layer Security certificates in Webconf.