Backup Management
The Backup Management menu is utilized for configuring the necessary settings to schedule backups.
Backup is the process of copying files or records from a database to a secondary location if storage equipment fails. The data backup process is critical for an effective disaster recovery plan that aims to reduce the risk of data loss.
Data from the Kron PAM database is exported and saved in a different location, such as a NAS or SAN network drive storage connected to the KronPAM server, by a job configured to run at specific intervals. Backup files can be stored indefinitely, as long as there is enough storage space.
KronPAM can perform 4 different types of backups.
- Full Backup: A full database backup encompasses the entire database, including configurations, session and application logs, and audit reports.
- Password Backup: The Password Backup option enables the encryption and export of passwords and secrets stored in the database. This feature is required for implementing the "Break the Glass" procedure in emergency situations. This procedure requires "Break the Glass" scripts and the "Customer Key".
- Differential (Delta) Backup: The Delta and Config backup procedure consists of two distinct operations. The Delta backup includes data from the previous day, while the Config backup includes all configuration records but excludes specific tables from the backup process.
- App Config Backup: The App Config backup comprises Kron PAM’s module configurations and Kron PAM’s operating system network-related configurations.
To configure the backup:
- Navigate to Administration > Backup Management.
- Click on the +Add button to create a backup configuration.
- Select the Backup Type.
- Fill in the Backup Config Name. If there is more than one node, select the backup process will only be performed on the Master node. This field is mandatory.
- Fill in the Data Export. (This parameter keeps the information of the export path that will be used by the script. Export path is the first destination to export the data which means raw data will be stored in this directory.) This field is mandatory.
- Fill in the Data Backup. (This parameter keeps the information of the backup directory path that will be used by the script. The Backup directory path is the last destination of the exported files which means the compressed backup files will be stored in this directory.) This field is mandatory.
- If you want to back up to a different server, switch on the "Backup to FTP" switch. After enabling, enter the FTP server information. Otherwise, you can skip this step.
- Enable backup for OCR data and video recordings, if supported. Then, determine the desired number of monthly backups to be conducted.
- Enable backup sweep if you want to sweep the DB after the backup.
- After fill these fields click on the next button.
- Schedule time for Full DB Backup. (Enable monthly backups on selected days or "weekly")
- Save it.
If a differential (delta) backup is configured, you will be able to configure the schemas and tables that you want to exclude.