Before you begin:

  • You must have system administrator credentials to access the Vormetric DSM
  • You must be able to connect to your Cisco AnyConnect VPN client in order to reach the DSM's public IP address over an https:// connection.

Use this document to create a backup file of your data security manager (DSM). 

Before you upgrade to Generation 4, Armor recommends that you create a backup file. This backup file will include: 

At a high level, to create, save, and upload a backup file, you must:  

Step 1: Create a new wrapper key custodian  

  1. Log into the DSM console as the system administrator (admin). 

    1. Click the Administrators tab. (You can ignore the drop-down menu that appears.) 
    2. Click Add to create a new administrator. 
  2. In Login, enter a user name that you will use to log into the DSM.  
  3. (Optional) In Description, enter an easily identifiable description.  
  4. You can leave the RSA User ID field blank.
  5.  In Password and Confirm Password, enter a password. 
  6. In User Type, select System Administrator
  7. Make sure the Read-Only User box is unmarked.
  8. Click Ok

Step 2: Create and export a wrapper key

  1. In the top menu bar, select System.
  2. In the drop down menu, select Wrapper Keys
  3. In Operation drop-down menu, select Create
  4. Click Apply
  5. Next to Operation, in the drop-down menu, select Export
    1. Once you select Export, a new window will appear. 
    2. In the window that appears, for Minimum Custodians Needed, enter 1
    3. InTotal number of Custodians, enter 1
    4. In the table, mark the newly created Wrapper Key Custodian.
    5. Click Apply. The Wrapper Key has now been exported to the Wrapper Key Custodian. 
  6. Log out the DSM as the admin, and then log into the DSM as the Wrapper Key Custodian. 
  7. Next to Wrapper Key Share, click Show
  8. Copy the Wrapper Key Share, and then store the information in a secure place outside of the DSM. You will need this information in a later step in order to decrypt the DSM configuration file during a file restore.  

Step 3: Download the encrypted DSM configuration file

  1. Log out of the DSM as the Wrapper Key Custodian, and then log into the DSM as the admin. 
  2. In the top menu bar, click Systems
  3. Click Backup and Restore, and then select Manual Backup and Restore. 
  4. Click Ok. The backup configuration file will download to your local machine. 

Step 4: Restore the wrapper key and configuration file in the Generation 4 DSM

In this step, you will access the DSM under the Generation 4 platform.  

  1. Access and log into the DSM for Generation 4 as the system administrator (admin).  
  2. In the top bar, click Systems, and then select Wrapper Keys
  3. Next to Operation, in the drop-down menu, select Import
  4. Click Add
  5. In the window that appears, in Key Share, enter the Wrapper Key Share you copied from Step 2.8. 
  6. Click Ok
  7. In the window that appears, the wrapper key share will populate the field. For this wrapper key share, mark the Selected column. 
  8. Click Apply

Step 5: Upload the DSM configuration file

In this step, you will continue to use the DSM under the Generation 4 platform.  

  1. In the top menu, click Systems.
  2. Select Backup and Restore, and then select Manual Backup and Restore
  3. Click Restore
  4. Click Browse to locate and select the DSM configuration file. 
  5. Click OK.  
    1. After you click OK, you will be logged out of the DSM. 
  6. The DSM will restart, which will automatically log out. 
  7. Log into the DSM as the security administrator (admin), and then verify the DSM configuration has been restored correctly. 

Was this helpful?