Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual page 129

data. If the information is stored in the default directories in the instance alias directory, then it is
backed up with the instance directory. To back it up separately, use a utility such as tar or zip.
• Instance directory. The instance directory contains all configuration files, security databases, and
other instance files. This can be backed up using a utility such as tar or zip.
For example, back up the alias directory or the instance directory:
1. Stop the subsystem instance.
/etc/init.d/instance_ID stop
2. Save the directory to a compressed file. For example:
cd /var/lib/rhpki-ca/
tar -cvf /export/archives/ca/alias.tar alias/
3. Restart the subsystem instance.
/etc/init.d/instance_ID start
NOTE
Stop the subsystem instance before backing up the instance or the security databases.
The Directory Server database can be restored using Directory Server-specific tools; see the Directory
Server documentation for more information on restoring the LDAP database.
The Certificate System backup files, both the alias database backups and the full instance directory
backups, can be used to replace the current directories if the data are corrupted or hardware is
damaged. To restore the data, uncompress the archive file using the unzip or tar tool, and copy the
archive over the existing files.
To restore the alias directory or the instance directory:
1. Uncompress the archive; for example, untar an alias directory archive:
cd /export/archive/ca/
tar -xvf alias.tar
2. Stop the subsystem instance if it has not already been stopped.
/etc/init.d/instance_ID stop
3. Copy the archived files to the directory. For example, restore the alias directory:
cp -r /export/archives/ca/alias /var/lib/rhpki-ca/alias
4. Restart the subsystem instance.
Backing up and Restoring Certificate System
107