Follow the instructions of the DBMS vendor to restore the databases used by Entrust Solutions. Restoring the Certificate Hub database requires the following additional steps.

Restoring the  Certificate Hub database encryption key

Run the following command to restore the database encryption key.

sudo dbctl.sh restore -n <namespace> --backup-file <backup-file> [--kubectl-cmd <kubectl-cmd>]

Where each parameter has the value described below.

Option

Value

Mandatory

<namespace>

The namespace of the Certificate Hub instance

Always

<backup-file>

The path of the backup file.

Always

<kubectl-cmd>

The name of the kubectl client or equivalent command.

When the name of the command is not "kubectl"

For example:

sudo ./dbctl.sh restore -n certhub --backup-file backup-06_19_2023.tar.gz.gpg

Before running this command, you can ignore or delete the user-creation and role-update jobs in ERROR state.

Completing the  Certificate Hub database restoration

Redeploy Certificate Hub to make effective the restoration of the database encryption key.