Backing up and restoring Notification Server KMS encryption keys

Products

• IT Management Suite

Issue/Introduction

You will need to backup and restore Notification Server KMS encryption keys for the following reasons.

1. Migrating data from one computer to another
2. Disaster recovery. Note: you should make a backup of the KMS files and store them in a secure place (we recommend to store the KMS files on a different server),

Environment

IT Management Suite (ITMS) 7.6, 8.0, 8.1, 8.5, 8.6

Resolution

The Notification Server uses the Key Management System (KMS) encryption keys to protect sensitive data. You can take a backup of the Notification Server
KMS encryption keys at any time in the Symantec Installation Manager (SIM).

To back up and restore Notification Server cryptographic keys:

1. Start the Symantec Installation Manager
2. On the Installed Products page, click Repair installed products
3. On the Repair Product page, click Backup or restore Notification Server configuration, and then click Next
4. On the Backup or Restore Notification Server Configuration page, do one of the following:

To back up KMS encryption keys:

1. Select Back up KMS encryption keys
2. Browse and select the location where you want the backup file to be stored. Symantec recommends storing the backups on a different server
3. Provide a password for the cryptographic keys backup file. You need this password for decrypting the backup file during the restore process.
4. Click Back Up

The Backup Notification Server Cryptographic Keys page appears after the installation
is completed.

To restore KMS encryption keys:

1. Select Restore KMS encryption keys (restore using the .zip file.
2. Browse and select the KMS encryption keys backup file.
3. Enter the password to decrypt the backup file, and then click OK
4. Click Restore

Source: Backing up and restoring Notification Server KMS encryption keys

Note:

Starting with ITMS 8.5 and later, you can Import and Export Encryption Keys using the SMP Console:

Go to Settings>All Settings>Notification Server>Notification Server Settings>Encryption Keys Management>Export

As well, you can also schedule to backup important information like Notification Server Configuration and Software Library files:

Go to Settings>All Settings>Notification Server>Notification Server Settings>Critical Data Backup