Users carrying out direct backup require Windows authentication administrator permissions in order to access the Server. Direct restore involves copying the Safes back to the ‘Restored Safes' folder. This means accessing the Server and copying the Safes, using any ordinary copying method, such as a local tape, or any existing backup utility. Direct backup using a third party backup solutionĪ complete Vault can also be backed up and restored by Direct Backup, instead of using the Replicate utility. The next time you run the Backup utility to the same location, it will update only the modified files and reduce the time of the replication. Keep the replicated files on the Backup utility machine after the external backup application copies all the files. Step 2: After the replication process is complete, the external backup application copies all the files from the replicated Data folder and the Metadata folder. Step 1: The Vault Backup utility (PAReplicate.exe) generates a metadata backup in the Vault’s Metadata Backup folder, then exports the contents of the Data folder and the contents of the Metadata Backup folder to the computer on which the Backup utility is installed. The following diagram displays the processes that take place during Vault replication. If your Safes are on an NTFS partition, the replicated Safes should also be on an NTFS partition, and not FAT/FAT32

The entire backup procedure takes place within the Vault environment, thus maintaining the high level of security that is characteristic to the CyberArk Vault. This user authenticates to the Vault with a user credentials file which contains its username and encrypted logon credentials.Īs the Backup utility is part of the total CyberArk Vault environment, there is no need for any external application to cross the firewall. Each user that is subsequently assigned to this group must be given backup authorizations manually. A predefined group called ‘Backup Users’ is created during Vault installation and upgrading, and is added automatically to every Safe that is created. In order to be able to issue the replicate utility in a Safe, a user must have the ‘Backup All Safes’ user authorization and the ‘Backup Safe’ authorization in the Safe being replicated. The global backup system can then access the files from that computer. The Safes are copied in a similar format and structure to the one in the Server. The Vault Backup utility exports the Safe files from the CyberArk Vault to a computer on the local network where the Backup utility has been installed. Safes backup should be synchronized with your backup methodology. These utilities can be configured to run automatically using a scheduling program.

The Vault’s Backup solution is comprised of several utilities that manage and perform the backup and restore operations.

A global backup system can then access the replicated Safe files in the same way as it would access any other files on the network. The CyberArk Vault provides an easy method of exporting the encrypted contents of your Safes securely to a computer outside the Vault environment.

Tape backup systems for servers