39
■ Backup and Restore Security Platform Data
Security Platform Backup includes all data required in case of emergency. After a hardware or storage
media failure or a Trusted Platform Module failure, Security Platform Restoration reestablishes access to
Security Platform Features for all users.
In addition you can backup and restore your Personal Secure Drive data. Data from other applications
using the Security Platform Solution (e.g. Secure e-mail) is not included in Security Platform backup.
■ Backup scope
Security Platform backup comprises the following data:
Security Platform Credentials and Settings
Backup Contents A copy of the user-specific credentials and settings which are stored on the
Security Platform.
Purpose Restoration of user-specific credentials and settings after a hardware or
storage media failure.
Otherwise users could not access Security Platform Features anymore
and user data would be lost.
Archives
• Automatically written Backup Archive ("System Backup Archive",
e.g. file
SPSystemBackup.xml
and folder
SPSystemBackup
): Set up by
Security Platform Administrator. Contains credentials and settings of all
Security Platform Users (for one or multiple Security Platform
computers). Also contains computer identification and user
identification, which are used to match computers and users during the
restoration process.
• Manually written Backup Archive (e.g.
SPBackupArchive.xml
):
Created by Security Platform User. Contains credentials and settings of
one Security Platform User (for one Security Platform computer). Also
contains computer identification and user identification, which are used
to match computer and user during the restoration process.
Emergency Recovery
Backup Contents All Security Platform Basic User Keys, encrypted specifically for Emergency
Recovery.
Purpose Re-encryption of all Basic User Keys after a Trusted Platform Module failure.
In this case a new Security Platform has to be set up and a new owner
key is created. Emergency Recovery allows the re-encryption of Basic
User Keys from the old owner key to the new one.
Otherwise users could not access Security Platform Features anymore
and user data would be lost.
Archives
• Emergency Recovery data is included in automatically written
Backup Archives.
• Emergency Recovery Token (e.g.
SPEmRecToken.xml
): Created by
Security Platform Administrator. Protected with a dedicated password.
Is required for a restoration of Emergency Recovery data.
Ch3. System information
To Next Page
Loading...
