Backup Details

Entrust recommends that you back up the following directories as part of your routine nShield backup schedules.

Unless configured otherwise, %NFAST_DATA_HOME% is located at /opt/nfast on Linux and %ProgramData%\nCipher on Windows.

Directory Contents

Directory	Contents
`%NFAST_DATA_HOME%/kmdata/databases`	KeySafe 5 Server Database files on Linux. Only applicable when SQLite is configured as the database.
`%NFAST_DATA_HOME%/Key Management Data/databases`	KeySafe 5 Server Database files on Windows. Only applicable when SQLite is configured as the database.
`%NFAST_DATA_HOME%/keysafe5/server/config`	KeySafe 5 Server configuration files.
`%NFAST_DATA_HOME%/keysafe5/server/https`	HTTPS certificates and key files which secure the WebUI and API interface.
`%NFAST_DATA_HOME%/keysafe5/server/filestore`	Large files uploaded to and used in KeySafe 5. Linked to items in databases.
`%NFAST_DATA_HOME%/keysafe5/server/tls`	TLS certificates and key files which secure the KeySafe 5 agent communication interface.
`%NFAST_DATA_HOME%/keysafe5/server/monitoring/databases`	KeySafe 5 Server Monitoring data files. This is the default location, an alternative path can be specified in the configuration file.
`%NFAST_DATA_HOME%/keysafe5/server/database`	KeySafe 5 Server Database connection files. Only applicable when MongoDB is configured as the database. This is the default location, an alternative path can be specified in the configuration file.

%NFAST_DATA_HOME%/kmdata/databases

KeySafe 5 Server Database files on Linux. Only applicable when SQLite is configured as the database.

%NFAST_DATA_HOME%/Key Management Data/databases

KeySafe 5 Server Database files on Windows. Only applicable when SQLite is configured as the database.

%NFAST_DATA_HOME%/keysafe5/server/config

KeySafe 5 Server configuration files.

%NFAST_DATA_HOME%/keysafe5/server/https

HTTPS certificates and key files which secure the WebUI and API interface.

%NFAST_DATA_HOME%/keysafe5/server/filestore

Large files uploaded to and used in KeySafe 5. Linked to items in databases.

%NFAST_DATA_HOME%/keysafe5/server/tls

TLS certificates and key files which secure the KeySafe 5 agent communication interface.

%NFAST_DATA_HOME%/keysafe5/server/monitoring/databases

KeySafe 5 Server Monitoring data files. This is the default location, an alternative path can be specified in the configuration file.

%NFAST_DATA_HOME%/keysafe5/server/database

KeySafe 5 Server Database connection files. Only applicable when MongoDB is configured as the database. This is the default location, an alternative path can be specified in the configuration file.

MongoDB Backup

If using MongoDB as the database backend, Entrust recommends regular backups of the MongoDB database following the guidance provided in the MongoDB documentation.

When restoring a MongoDB backup, ensure that the KeySafe 5 Service is stopped before performing the restore operation and restarted once the restore is complete.