Redundancy Measures

Configure Database Backup

To ensure access to your data even in the unlikely scenario of something going wrong with the current installation, Securden offers disaster recovery provisions. You can take backup of the entire database periodically. In the event of a disaster, you can recover data from the backup.

Securden allows you to specify the "Backup Destination". You may give the network path of a remote machine, where the backup copy will be stored. The periodicity could be as low as one hour and you may decide to maintain x number of past backup copies.

Navigate to Admin >> High Availability >> Database Backup in the GUI to perform this.

Important

Every installation has a randomly generated, unique encryption key, using which sensitive data are encrypted and stored in the database. By default, the encryption key is placed under /conf/securden.key.

If you don’t have the encryption key, data cannot be restored. Ensure that you have a copy of the encryption key for disaster recovery.

Steps to restore data from backup copy

• If you want to test how data restoration works, take a copy of the entire Securden installation folder and keep it in a secure location.
• Install the product in another machine without disturbing the existing version.

• Stop Securden WPM Service.

• Open a command prompt with admin privilege and navigate to /bin folder.

• Execute RestoreDatabase.exe.

• Browse and select the exported backup copy of the database from the computer.
  For example

  C:\ProgramFiles\Securden\WPM\exports\PostgreSQL_Backups\Securden_postgresql_db_backup_2019-05-22-11-48-22.zip
  

• The backup copy also shares the same encryption key as that of the original copy. Ensure that the encryption key is available in the location as specified in the current version (you may identify the current location of the encryption key from Admin >> Change Encryption Key file)

• Start Securden WPM Service (You may safely ignore the other service named Securden Web Service, which is automatically taken care of).

Configure High Availability

Securden agents installed on the endpoints and servers keep getting details about application control policies from the Securden server. If the agents are not able to connect to the server, they will continue to enforce application controls and handle elevation as the control policies accessed lost.

If you want to ensure that the agents always enforce the latest control policies, you can configure high availability. If the primary server is down, the agents will connect to the secondary.

Navigate to Admin >> High Availability in the GUI to configure High Availability.