When you purchase a new bastion host, the configuration backup feature lets you migrate configurations—users, assets, permissions, and control policies—from an existing bastion host without repeating the setup from scratch.
How it works
Export a configuration backup file from the existing bastion host. The file downloads to your on-premises machine in
.bhformat.Upload the backup file to the new bastion host. Its configurations are overwritten with those from the backup file.
Verify that the configurations appear correctly on the new bastion host.
What gets backed up
| Included | Not included |
|---|---|
| Users | Audit logs |
| Assets | Audit videos |
| Permissions | Password change tasks |
| Control policies | Network settings |
To back up audit data to your on-premises machine, see O&M audit.
Limitations
Specifications: You cannot import configurations from a high-specifications bastion host to a low-specifications one.
Edition: You can import from Basic edition to Enterprise edition, but not the reverse.
Version: You cannot import configurations between bastion hosts running different versions. For example, V3.2.35 and V3.2.36 are not compatible.
Password change tasks: Configurations for password change tasks cannot be exported or imported. If you import a backup to a bastion host that already has a password change task configured, that task is cleared. Record the password on the existing bastion host before importing.
Expired bastion hosts: You cannot export the backup file of an expired bastion host. Export the file before the bastion host expires.
Prerequisites
Before you begin, make sure that you have:
An existing bastion host with the configurations you want to migrate
A new bastion host of equal or higher specifications, the same edition (or higher), and the same version as the source
Export the configuration backup file
Log on to the Bastionhost console. In the top navigation bar, select the region where your bastion host resides.
In the bastion host list, find the bastion host you want to export from, and click Manage.
In the left-side navigation pane, click System Settings.
On the System Settings page, click the Configuration Backup File tab.
Click Export Configuration Backups.
The configuration backup file downloads to your on-premises machine in .bh format.
Import the configuration backup file
Importing a backup file overwrites all existing configurations on the target bastion host. Proceed with caution.
Log on to the Bastionhost console. In the top navigation bar, select the region where your bastion host resides.
In the bastion host list, find the new bastion host, and click Manage.
In the left-side navigation pane, click System Settings.
On the System Settings page, click the Configuration Backup File tab.
Upload the
.bhbackup file from your on-premises machine.
Verify the imported configurations
After the upload completes, you can check whether the configurations are uploaded to the new bastion host and view the uploaded configurations.
What's next
O&M audit — back up audit logs and audit videos to your on-premises machine