Back Up and Restore EJBCA Data

StarlingX provides Ansible playbooks for backing up and restoring the EJBCA application data, including all CA keys, certificates, profiles, and database content. The playbooks are located in:

/usr/share/ansible/stx-ansible/playbooks/

Backup EJBCA Data

Run the EJBCA backup playbook:

$ sudo ansible-playbook /usr/share/ansible/stx-ansible/playbooks/ejbca_backup.yml     -e "initial_backup_dir=/opt/platform-backup"

The playbook creates a .tgz file in /opt/platform-backup. Use this filename when running the restore playbook.

Restore EJBCA Data

Before running the restore playbook, ensure the backup .tgz file is present in /opt/platform-backup.

$ sudo ansible-playbook /usr/share/ansible/stx-ansible/playbooks/ejbca_restore.yml     -e "initial_backup_dir=/opt/platform-backup"     -e "backup_filename=<filename>.tgz"

Replace <filename>.tgz with the backup filename from /opt/platform-backup.

After the restore process is completed, all EJBCA PKI data (CAs, keys, profiles, and certificates) is available, and the application is ready for use.

Note

A platform full restore can leave app-ejbca in a failed state after the restore completes. If this occurs, wait until the storage resources are ready and then reapply app-ejbca.

Related Information

• EJBCA Overview

• Deploy and Manage the EJBCA Application