Bastionhost provides the configuration backup feature. After you purchase a new bastion host, you can use the feature to export the configurations of an existing bastion host to your on-premises machine and then import the configurations to the new bastion host. This way, you do not need to repeat the configuration steps on the new bastion host. This topic describes how to use the configuration backup feature.
Limits
You cannot import the configurations from a bastion host that has high specifications to a bastion host that has low specifications.
You can import the configurations from a bastion host that runs the Basic edition to a bastion host that runs the Enterprise edition. However, you cannot import the configurations from a bastion host that runs the Enterprise edition to a bastion host that runs the Basic edition.
You cannot import the configurations from a bastion host to a bastion host of a different version. For example, you cannot import the configurations from a bastion host that runs V3.2.35 to a bastion host that runs V3.2.36.
You cannot export or import the configurations of a password change task.
WarningIf you import the configurations of an existing bastion host to a new bastion host after you configure a password change task on the new bastion host, the password change task is cleared. We recommend that you keep the password on the existing bastion host in a secure manner.
You cannot export the configuration backup file of a bastion host that has expired. We recommend that you export the configuration backup file to your computer before your bastion host expires.
Data description
A configuration backup file contains only part of the configurations of a bastion host, including users, assets, permissions, and control policies. You cannot back up audit logs, audit videos, password change tasks, or network settings.
For information about how to back up audit data to your on-premises machine, see O&M audit.
Procedure
To apply the configurations of an existing bastion host to a new bastion host, perform the following steps:
Create a configuration backup task for the existing bastion host and export the configuration backup file. For more information, see the "Create a configuration backup task" section of this topic.
Upload the configuration backup file that you exported to the new bastion host. For more information, see the "Upload the configuration backup file" section of this topic.
Create a configuration backup task
Log on to the Bastionhost console. In the top navigation bar, select the region in which your bastion host resides.
In the bastion host list, find the bastion host that you want to manage and click Manage.
In the left-side navigation pane, click System Settings.
On the System Settings page, click the Configuration Backup File tab.
On the Configuration Backup File tab, click Export Configuration Backups.
The configuration backup file of the bastion host is downloaded to your on-premises machine in the .bh format.
Upload the configuration backup file
After you import the configurations to the new bastion host, the configurations of the new bastion host are overwritten. Proceed with caution.
Log on to the Bastionhost console. In the top navigation bar, select the region in which your bastion host resides.
In the bastion host list, find the bastion host that you want to manage and click Manage.
In the left-side navigation pane, click System Settings.
On the System Settings page, click the Configuration Backup File tab.
On the Configuration Backup File tab, upload the configuration backup file in your on-premises machine.
After you upload the configuration backup file, you can check whether the configurations are uploaded to the new bastion host and view the uploaded configurations.