How to use a Zero-Trust Encryption Model in Zmanda Pro
How to achieve a zero-trust security model in Zmanda Pro. How to Enable To enable Zero-Trust Encryption, the Allow administrator...
This article provides instructions on backing up unseal keys and unsealing the key vault for Zmanda.
Context: Zmanda’s key vault is used to securely store operational secrets. To ensure proper functionality, the vault must be unsealed.
Note: Please keep a safe copy of your keys, as losing them will make Zmanda unusable.
Solution:
After installing Zmanda (or deploying a virtual backup appliance for Zmanda):
1. Ensure that all services are up and running. Log in to Zmanda Management Console (ZMC), upload the license, and register your server(s).
* If vault is in sealed state, please run the following command: sudo setup-zmc unseal
2. Once done, please make sure that you keep a copy of ‘/var/lib/amanda/vault’ from all servers hosting ZMC or backup server securely in a reliable storage. The contents of this directory are essential for all communications between ZMC and the backup server(s).
