Specifications

14-58
Cisco NAC Appliance - Clean Access Manager Configuration Guide
OL-28003-01
Chapter 14 Administering the CAM
Backing Up the CAM Database
https://<CAS_IP>/admin
where <CAS_IP> is the trusted interface IP address of the CAS. For example,
https://172.16.1.2/admin
Step 2 Log in with the admin user name and password.
Step 3 Click the Admin Password link from the left side menu.
Step 4 In the Old Password field, type the current password.
Step 5 Type the new password in the New Password and the Confirm Password fields.
Step 6 Click Update.
Backing Up the CAM Database
You can create a manual backup snapshot of the CAM database to backup the CAM/CAS configuration
for the current release. When you create the snapshot, it is saved on the CAM, but you can also download
it to another machine for safekeeping. Only the CAM snapshot needs to be backed up. The CAM
snapshot contains all database configuration data for the Clean Access Manager, and configuration
information for all Clean Access Servers added to the CAM’s domain. The snapshot is a standard
postgres data dump.
The Clean Access Manager uses a local master secret password to encrypt and protect important data,
like other system passwords. Cisco recommends keeping very accurate records of assigned master secret
passwords to ensure that you are able to restore database snapshots on the CAM when you need them.
(You cannot upload a CAM database snapshot that was created when the system was configured with a
different master secret password.)
Note Product licenses are stored in the database and are therefore included in the backup snapshot.
Once a CAS is added to the CAM, the CAS gets its configuration information from the CAM every time
it contacts the CAM, including after a snapshot configuration is downloaded to the CAM.
If you replace the underlying machine for a CAS that is already added to the CAM, you will need to
execute the
service perfigo config utility to configure the new machine with the CAS IP address and
certificate configuration. Thereafter, the CAM pushes all the other configuration information to the
CAS.
The Agent is always included as part of the CAM database snapshot. The Agent is always stored in the
CAM database when:
• The Agent update is received from web updates
• The Agent is manually uploaded to the CAM
However, when the CAM is newly installed from CD or upgraded to the latest release, the Agents are
not backed up to the CAM database. In this case, the CAM software contains the new Agent software
but this is not uploaded to the CAM database. Agent backups only start when a new Agent is uploaded
to the system either manually or by web updates.
Note You can only restore a CAM snapshot that has the same version as the CAM (e.g. release 4.9 snapshot
to release 4.9 CAM).