The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
This article explains how to back up and restore your Sophos Management Server using Sophos-supplied tools.
The instructions for backing up and restoring have been separated out depending on whether you have a default or non-default installation.
Note: In this article the term 'default installation' refers to when you have:
\Program Files (x86)\Sophos\Enterprise Console\
\Program Files\Sophos\Enterprise Console\
If you have installed components of your management server to different servers (e.g., installed the database to a remote SQL Server, etc.) and/or have changed the default installation path, you have a 'non-default installation'.
Applies from Enterprise Console 5.1.0
We recommend you backup your management server immediately before and after you upgrade your server to a new product version. Thereafter:
For SQL Server best practice advice see article 111353.
The process for backing up a default installation is to use the DataBackupRestore.exe tool which is provided with the installation of Enterprise Console. For more information on the DataBackupRestore.exe tool see article 114299.
If you chose to install the encryption component you should save the company and Master Security Officer (MSO) certificates to a safe location.
As recommended in the article on using the DataBackupRestore.exe tool you should copy the files backed up by the tool (which are saved to a folder called 'backup') to a safe and secure location.
The process for backing up a non-default installation is more complex as the location and accessibility of the management components is unknown.
This is because the location of configuration files could be on another drive of the local server, or one or more components could be installed on one or more different servers. Therefore we recommend you follow the advice below.
Your management server is now backed up. We recommend you read the steps on restoring a management server (see below) to ensure you are familiar with the process and have all the required items available if/when required.
Important: The restore steps in this article assume you are intending to reinstate your management server set-up in exactly the same way it was backed up. This means:
In order to reinstate your management server you will need:
1If used, the DatabackupRestore.exe tool backs up this item. 2If you previously used the encryption feature.
The process for restoring a default installation is to use the restoredb.bat script and the DataBackupRestore.exe tool, both of which are provided with the installation of Enterprise Console.
On the server which is to become your Sophos Management Server:
C:\Documents and Settings\All Users\Application Data\Sophos\ManagementServer\backup\
DataBackupRestore.exe -action=restore -datasourcetype=Registry -ExcludeDB -S
DataBackupRestore.exe -action=restore -datasourcetype=SecureStore -ExcludeDB
Your management server is now restored.
The process for restoring a non-default installation is more complex as we do not know how you previously had the different server-side Sophos components distributed (i.e., console, management services, update manager(s), SQL Server hosting the Sophos databases).
Therefore we recommend you follow the advice below.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.