How do I back up and restore the Forcepoint management infrastructure?

Backup and Restore | Web, Data, and Email Protection | 29-Apr-2022

The Forcepoint Infrastructure backup process saves:

Global configuration and infrastructure information, including administrator and appliance data, stored in the Settings Database.

Certificate files required for the Forcepoint Security Manager components.

When you either initiate an immediate backup (see Running immediate infrastructure backups) or define a backup schedule (see Scheduling management infrastructure backups), backup files are stored in the C:\EIPBackup directory by default. To change the backup location, see Changing backup settings.

The backup process checks all Forcepoint management infrastructure components on the machine, collects the data eligible for backup, and creates a new folder in the EIPBackup directory with the format:

mm-dd-yyyy-hh-mm-ss-PP

This format represents the date and time of the backup (05-10-2011-10-45-30-PM, for example).


	Important Make sure that all administrators log off from the Forcepoint Security Manager before you back up or restore your configuration.

Scheduling management infrastructure backups

When you installed the Forcepoint Security Manager, a scheduled task for backups was created. By default, this task is disabled.

Notify Security Manager administrators of the backup schedule, so that they can be sure to log off of the Security Manager during the backup process.

Although backups do not interfere with system operation, as a best practice, schedule backups when the system isn't under significant load.

To schedule backups:

On the Forcepoint management server machine, open the Windows Task Scheduler:

In the Task Scheduler window, select Task Scheduler Library.

Right-click the TRITON Backup task and select Enable.

Right-click TRITON Backup again and select Properties, then select the Triggers tab.

Click Edit, and edit the schedule as required. By default, the task is scheduled to run weekly on Saturdays at midnight.

Click OK twice.

If requested, enter the administrator password for the management server machine to confirm the changes to the task.

Running immediate infrastructure backups

Before running a manual backup, make sure that all administrators are logged off of the Forcepoint Security Manager.

To launch an immediate backup:

On the Forcepoint management server, open the Windows Task Scheduler:

Windows 2012: Open Administrative Tools and select Task Scheduler.

Windows 2008: Go to Start > Administrative Tools > Task Scheduler.

In the Task Scheduler window, select Task Scheduler Library.

If the TRITON Backup task is disabled, right-click the task and select Enable.

Right-click the TRITON Backup task and select Run.

Restoring infrastructure backup data

You can activate the restore operation from the Forcepoint Management Infrastructure "Modify" wizard. Make sure that all administrators are logged off of the Forcepoint Security Manager.

To restore management infrastructure data:

On the Forcepoint management server, open the Windows Services tool:

Windows 2012: Go to Server Manager > Tools > Services.

Windows 2008: Go to Start > Administrative Tools > Services.

Right-click the Websense TRITON Unified Security Center service and select Stop. (You may also need to stop web protection services. See How do I back up or restore web protection components and the Forcepoint Security Manager?.)

Open the Windows Control Panel and select Programs > Programs and Features, then select Forcepoint Management Infrastructure.

Click Uninstall/Change.

When asked if you want to modify, repair, or remove the Management Infrastructure, select Modify.

Click Next until you get to the Restore Data from Backup screen.

Mark the Use backup data box and click the Browse button to locate the backup folder.

Click Next until you begin the restore process.

Click Finish to complete the restore wizard.

10.

Go back to the Services window and click Refresh. If any service that you stopped manually has not restarted, right-click it and select Start.

Once the restore process is complete, a file named DataRestore.log is created in the date-stamped backup folder that was used for the restore.

Changing backup settings

When you run your first backup, an EIPBackup directory is created to contain the date-stamped folders for each set of backup files. By default this directory is created in C:\. You can change this location, and also define how many old backups are kept in the backup directory.

To change the settings for the backup files:

On the Forcepoint management server, go to the directory where you installed the Forcepoint Security Manager (by default C:\Program Files (x86)\Websense), and access the EIP Infra directory.

Open EIPBackup.xml in a text editor such as Notepad.

This file contains the following parameters:


Parameter	Description
NUM_OF_COPIES	The number of old backups to store in the backup directory. Defaults to 5.
PATH	The location of the EIPBackup directory. Defaults to C:\.
DOMAIN	Only required if the <PATH> parameter is set to access a remote machine and you need to supply credentials in the form domain\user to write to the location. Leave this field blank if you have defined a path on the local machine, or if you have entered credentials in <USER_NAME>.
USER_NAME	Only required if the <PATH> parameter is set to access a remote machine and you need to supply a user name to write to the location. Leave this field blank if you have defined a path on the local machine, or if you have entered credentials in <DOMAIN>.
PASSWORD	Only required if the <PATH> parameter is set to access a remote machine and you have entered credentials in either <DOMAIN> or <USER_NAME>. Passwords are stored as plain text.

Edit the <NUM_OF_COPIES> parameter to specify the number of old backups that should be kept. Once this number is reached, the oldest backup is deleted when the next backup is run.

Edit the <PATH> parameter to define the location of the backup files. The location must exist already as the backup process will not create it. The path can either reside on the local machine or another machine in the network. For example:

<PATH>D:\mgmt\Backups</PATH>

<PATH>\\hostname_or_IP_address\mgmt\backups</PATH>

If you do this, you may also need to enter credentials for access to the remote machine in the <USER_NAME> or <DOMAIN>, and <PASSWORD> parameters. This is not recommended as the password is stored as plain text and could therefore be accessed by other users. Instead, store the backups in a location to which you have write access without needing credentials.


	Note If you change the location of the backup files, outdated backup files will only be deleted in the new location. Old backups will not be deleted from any previous locations.

Save the file when done. Changes take effect when the next backup is run.