DataBackupRestore error migrating to another server SEC 5.3

Question

Hello, I tried searching the forums and KB for this particular issue but I haven't found anything yet that applies to my scenario. 
 What I've looked at so far: 
 https://community.sophos.com/products/endpoint-security-control/f/16/t/7664 
 https://community.sophos.com/products/endpoint-security-control/f/3/t/6165 
 https://community.sophos.com/kb/en-US/121755 
 
 I'm using this guide to migrate SEC to a new Windows 2012 R2 system from a Windows 2008 system (both in the same domain) using this guide: 
 https://www.sophos.com/en-us/medialibrary/PDFs/documentation/sec_53_mgeng.pdf?la=en 
 
 On step 10.3 the backup build fails. Any help would be appreciated. Here's the log: 
 C:\Program Files (x86)\Sophos\Enterprise Console>DataBackupRestore.exe -Action=b ackup Microsoft (R) Build Engine version 4.0.30319.34209 [Microsoft .NET Framework, version 4.0.30319.34209] Copyright (C) Microsoft Corporation. All rights reserved. 
 Build started 12/28/2015 10:24:19 PM. 
 C:\Program Files (x86)\Sophos\Enterprise Console>sqlcmd -E -S "(local)\SOPHOS" - b -Q "BACKUP DATABASE SOPHOSENC52 TO DISK = 'C:\ProgramData\Sophos\TempData\SOPH OSENC52.bak'" Processed 264 pages for database 'SOPHOSENC52', file 'SOPHOSENC51' on file 1. Processed 2 pages for database 'SOPHOSENC52', file 'SOPHOSENC51_log' on file 1. BACKUP DATABASE successfully processed 266 pages in 0.014 seconds (148.158 MB/se c). Succeeded Copy file C:\ProgramData\Sophos\TempData\SOPHOSENC52.bak successful. 
 C:\Program Files (x86)\Sophos\Enterprise Console>sqlcmd -E -S "(local)\SOPHOS" - b -Q "BACKUP DATABASE SOPHOSPATCH52 TO DISK = 'C:\ProgramData\Sophos\TempData\SO PHOSPATCH52.bak'" Processed 256 pages for database 'SOPHOSPATCH52', file 'SOPHOSPATCH52' on file 1 . Processed 2 pages for database 'SOPHOSPATCH52', file 'SOPHOSPATCH52_log' on file 1. BACKUP DATABASE successfully processed 258 pages in 0.005 seconds (402.343 MB/se c). Succeeded Copy file C:\ProgramData\Sophos\TempData\SOPHOSPATCH52.bak successful. Backup successfully for registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Patch Backup successfully for registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\So phos\EE\Patch 
 C:\Program Files (x86)\Sophos\Enterprise Console>sqlcmd -E -S "(local)\SOPHOS" - b -Q "BACKUP DATABASE SOPHOS521 TO DISK = 'C:\ProgramData\Sophos\TempData\SOPHOS 521.bak'" Processed 8024 pages for database 'SOPHOS521', file 'SOPHOS521' on file 1. Processed 5 pages for database 'SOPHOS521', file 'SOPHOS521_log' on file 1. BACKUP DATABASE successfully processed 8029 pages in 0.106 seconds (591.760 MB/s ec). Succeeded Copy file C:\ProgramData\Sophos\TempData\SOPHOS521.bak successful. Backup successfully for registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\So phos\Certification Manager Backup successfully for registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\So phos\EE\Management Tools Backup successfully for registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Managem entServer Backup successfully for registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\So phos\EE\Sophos Enterprise Console Unable to load the secret store. 
 Build FAILED. 
 Time Elapsed 00:00:01.17 Process 'C:\Windows\Microsoft.NET\Framework64\v4.0.30319\msbuild.exe "C:\Program Files (x86)\Sophos\Enterprise Console"\BackupRestore.proj /t:backup /clp:NoSumm ary /p:SubSystem=all;DataSourceType=all;ExcludeDB=False;LocationSpecific=False;S lientMode=False;DBServerInstance=' returned Error 1 
 C:\Program Files (x86)\Sophos\Enterprise Console>

jak · Accepted Answer

You could use the 5.1 version of the tool found here: 
 www.sophos.com/.../111425.aspx 
 
To try and export the store. 
Note: The "store" is the registry keys under: 
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\EE\Management Tools\Private 
I assume this exists? 
You can't just export and import these keys as a reg file to the new server as they are secrets linked to the computer. It's for that reason you have to use the tool to export them as XML, inorder to re-create them on the new computer. 
 
In addition to the above keys, if you have any AD Sync points, it also includes the value syncpointdata under: 
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\EE\Management Tools 
but that only exists if you have ever created a syncpoint. This is why the exported XML has 2 sections. 
 
If exportprivatestore errors it might be more helpful. 
 
If not, export the file using exportprivatestore with the same name, e.g. SEC_SecureStore.bak as detailed here: 
 www.sophos.com/.../114299.aspx 
and copy it into the same backup location. 
 
I can't remember if this export format is the identical if you use: Databackuprestore or exportprivatestore, i.e if you can use each tools export as an import but when it comes to the stage of importing the data, you could use whichever tool works. 
 
Hope this helps.