Kaspersky Security for Virtualization 6.2 Light Agent

Using a backup copy of the database and the Integration Server settings

For the Integration Server, it is possible to save a backup copy of the Integration Server database, settings and certificate. Before updating the Integration Server, you can create a backup copy of the current version of the Integration Server. If errors occur in the operation of the Integration Server after an update, you can use the backup copy to restore the previous version of the Integration Server.

The backup copy of the Integration Server database and settings contains the following data:

  • Internal accounts of the Integration Server, which are used to connect management consoles, SVMs, and Light Agents to the Integration Server.
  • Settings for connecting the Integration Server to the virtual infrastructure and the Kaspersky Security Center Administration Server.
  • If the solution is used in multitenancy mode: a list of registered tenants and protection statistics of the tenant virtual machines is displayed.
  • Configuration files that define the Integration Server operation settings.

In this Help section

Linux-based Integration Server. Working with a backup copy

Windows-based Integration Server. Working with a backup copy

Page top
[Topic 274374]

Linux-based Integration Server. Working with a backup copy

Create a backup copy of the database and the Integration Server settings

You can manually save a backup copy of the Linux-based Integration Server database and settings.

An account with root account privileges is required to complete the procedure.

To save a backup copy of the database and Integration Server settings:

  1. Stop the Integration Server (viis service):

    sudo systemctl stop viis

  2. Create a directory outside the directories used by the Integration Server, preferably in the user directory: /home/{username}. For example, create the /home/root/viis_backup directory:

    sudo mkdir /home/root/viis_backup

  3. Ensure that the backup directory is secure. For example, restrict other users' access to this directory:

    sudo chmod 600 /home/root/viis_backup

  4. Copy the following Integration Server data to the created directory:
    • data from /var/opt/kaspersky/viis/common:

      sudo cp -pr /var/opt/kaspersky/viis/common /home/root/viis_backup

    • file with machine-id:

      sudo find /home/viis/ -name machine-id-* -exec cp -p {} /home/root/viis_backup \;

  5. Restart the Integration Server (viis service):

    sudo systemctl start viis

Restoring data from a backup copy of the Integration Server database and settings

An account with root account privileges is required to complete the procedure.

If errors occur in the operation of the Integration Server after an update, you can use the backup copy of the database and settings to restore the previous version of the Integration Server and the saved data.

To revert to the previous version of the Linux-based Integration Server:

  1. If you moved the backup copy of the Integration Server database and settings to another device or archived it, assign the viis account as the owner of the files in the backup copy:

    sudo chown -R viis:viis /home/root/viis_backup/*

  2. Remove the previously installed Linux-based Integration Server.
  3. Perform the installation and initial configuration of the Linux-based Integration Server. Make sure that the Integration Server is started and ready to work.
  4. Stop the Integration Server (viis service):

    sudo systemctl stop viis

  5. Delete the current Integration Server data:

    sudo rm -rf /var/opt/kaspersky/viis/common

  6. Restoring Integration Server data from a backup copy:

    sudo cp -pr /home/root/viis_backup/common /var/opt/kaspersky/viis/

  7. Delete the existing machine-id file:

    sudo find /home/viis/ -name machine-id-* -exec rm {} \;

  8. Restore the machine-id file from the backup copy:

    sudo find /home/root/viis_backup -name machine-id-* -exec cp -p {} /home/viis \;

  9. Restart the Integration Server (viis service):

    sudo systemctl start viis

If all of these operations succeeded, the directory with the backup copy of the Integration Server can be deleted:

sudo rm -rf /home/root/viis_backup

Page top
[Topic 65650]

Windows-based Integration Server. Working with a backup copy

You can save a backup copy of the database, settings and certificate of the Windows-based Integration Server automatically while updating the Integration Server using the Kaspersky Security Components Installation Wizard.

The backup copy of the database and settings of the Integration Server can be deleted automatically when removing the Integration Server, or you can delete it manually. The default path is: %ProgramData%\Kaspersky Lab\VIISLA\Backup\VIISData(1). The number in the folder name increases by 1 with each subsequent attempted update.

If errors occur in the operation of the Integration Server after an update, you can use the backup copy of the database and settings to restore the previous version of the Integration Server and the saved data.

To perform the procedure, you need a user account that is a member of the local administrators group.

To revert the Integration Server to the previous version:

  1. If you saved a backup copy of your data in the default folder (%ProgramData%\Kaspersky Lab\VIISLA\Backup), copy this folder to another location outside the %ProgramData%\Kaspersky Lab\VIISLA folder.
  2. Remove the Integration Server and Integration Server Console installed on the device without preserving data.
  3. Install the previous version of the Integration Server and Integration Server Console.
  4. Restore the Integration Server database and settings from the backup copy manually or using a script.

    Before using the script, please read the terms of the End User License Agreement between you and Kaspersky. The license.txt file with the text of the End User License Agreement is inside the archive with the script. By using the script, you accept the terms of the End User License Agreement. If you do not accept the terms of the End User License Agreement, you may not use the script.

Expand all | Collapse all

How to restore the Integration Server database and settings from the backup copy using a script

  1. Get the archive with the script from Technical Support and extract it.
  2. Run the PowerShell command prompt as administrator.
  3. Run the following command:

    recover_viis_config_from_backup.ps1 "<path to folder with backup copies>"

    where <path to folder with backup copies> is the path to the folder containing the Integration Server certificate and the backup copy of the Integration Server database and settings.

    For example, if you saved the backup copy to the C:\Backup folder, the command looks like this:

    recover_viis_config_from_backup.ps1 "C:\Backup\VIISData(1)"

  4. Open Integration Server Console and connect to the Integration Server by specifying the port for connecting to the Integration Server. Port 7271 is used by default.
  5. Specify the settings of the connection to the virtual infrastructure using the SVM Management Wizard:
    1. In the SVM management section, click the SVM management button to start the SVM Management Wizard.
    2. Select the SVM deployment option and proceed to the infrastructure selection step.
    3. Specify the settings of the connection to the virtual infrastructure in the same way as when performing the SVM deployment procedure.
    4. Finish the SVM Management Wizard.

How to restore the Integration Server database and settings from a backup copy manually

  1. Find out the port number for connecting to the Integration Server:
    1. Go to the folder containing the Integration Server certificate and the backup copy of the Integration Server database and settings.
    2. Open the appsettings.json configuration file and find the Integration Server port number:

      "Server": {

      "Address": "https://0.0.0.0:<Integration Server port>"

  2. If the Integration Server is running, stop it:

    net stop viisla

  3. Delete the contents of the %ProgramData%\Kaspersky Lab\VIISLA folder. To delete it, grant the current user from the administrators group owner rights to the %ProgramData%\Kaspersky Lab\VIISLA folder and its contents.
  4. Copy the following Integration Server databases from the backup folder to the %ProgramData%\Kaspersky Lab\VIISLA\db\ folder:
    • viisla.db
    • protectionPeriods.db
  5. Grant the NT SERVICE\VIISLA user full rights to access the %ProgramData%\Kaspersky Lab\VIISLA folder and its contents.
  6. Copy the following Integration Server configuration files from the backup folder to the %Program Files(x86)%\Kaspersky Lab\Kaspersky VIISLA\ folder:
    • appsettings.json
    • appsettings.logging.json
    • appsettings.certificate_manager.json
  7. Open the registry editor, go to the HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\KasperskyLab\VIISLA\Server\Public key and in the ServicePortProperty parameter specify the Integration Server port number that you received in the first step of the instructions.
  8. Start the Integration Server:

    net start viisla

  9. Open Integration Server Console and connect to the Integration Server by specifying the port for connecting to the Integration Server. Port 7271 is used by default.
  10. Specify the settings of the connection to the virtual infrastructure using the SVM Management Wizard:
    1. In the SVM management section, click the SVM management button to start the SVM Management Wizard.
    2. Select the SVM deployment option and proceed to the infrastructure selection step.
    3. Specify the settings of the connection to the virtual infrastructure in the same way as when performing the SVM deployment procedure.
    4. Finish the SVM Management Wizard.
Page top
[Topic 82508]