SPP provides a Recovery Kiosk (Serial Kiosk) with the following options.
-
Appliance information (Recovery Kiosk): Allows you to view basic appliance information.
-
Backups: Allows you to access backups from quarantined appliances.
-
Power options: These options allow you to remotely restart or shut down the appliance.
-
Admin password reset: Allows you to reset the Bootstrap Administrator's password to its initial value.
-
Factory reset from the Recovery Kiosk: Allows you to recover from major problems or to clear the data and configuration settings on the appliance.
Factory reset is not available for virtual appliances. Virtual appliances are backed up and can be recovered. For more information, see Virtual appliance backup and recovery..
|
|
Caution: Care should be taken when performing a factory reset against a physical appliance, because this operation removes all data and audit history, returning it to its original state when it first came from the factory. Performing a factory reset will NOT reset the BMC/IPMI interface or the IP address. However, the BMC/IPMI interface will need to be reenabled after the reset has completed (for more information, see Lights Out Management (BMC)). The appliance must go through configuration again as if it had just come from the factory. For more information, see Setting up Safeguard for Privileged Passwords for the first time..
In addition, performing a factory reset may change the default SSL certificate and default SSH host key.
The appliance resets to the current Long Term Support (LTS) version. For example, if the appliance is running version 6.6 (feature release) or 6.0.6 LTS (maintenance Long Term Support release) and then factory reset, the appliance will reset down to 6.0 LTS and you will have to patch up to your desired version. For more information, see Long Term Support (LTS) and Feature Releases.. |
-
Support bundle: Allows you to generate and send a support bundle to a Windows share.
To start the Recovery Kiosk
On the terminal or laptop running the Recovery Kiosk, you must configure your serial port settings as follows:
-
Connect a serial cable from a laptop or terminal to the serial port on the back of the appliance marked with |0|0|.
-
On the laptop or terminal, configure the serial port settings as follows:
-
Speed: 115200
-
Data bits: 8
-
Parity: None
-
Stop bit: 1
-
These options display on the Recovery Kiosk screen:
-
Use the up-arrow and down-arrow to select one of these options.
-
Use the right-arrow to initiate the option.
-
Use the left-arrow to return to the option.
Kiosk keyboard shortcuts
SPP provides these keyboard shortcuts. If you make the window too small to accommodate the kiosk elements, SPP tells you how to readjust the window size.
-
Ctrl+D: Resets the kiosk to its original state.
-
Ctrl+R: Redraws the kiosk to fit a resized window. If you resize the window, press Ctrl + R to reorganize the kiosk elements to fit properly into the newly-sized window.
Use the Appliance Information option on the Recovery Kiosk to view basic appliance information and edit the IP addresses.
If you are using Azure, configure the SPP VM with a static IP address in Azure. If you need to change the IP address of the Safeguard appliance, or if it changes due to dynamic configuration in Azure, and the appliance is part of a cluster, the appliance will automatically reset to Standalone Read-only mode on the next boot (effectively leaving the cluster). The Administrator can join the appliance back to the cluster.
To view or edit the appliance information
- From the Recovery Kiosk, select the Appliance Information option.
-
Right-arrow to see:
- Appliance State: The appliance's current state.
- Uptime: The amount of time (hours and minutes) the appliance has been running.
- MGMT (not used Azure): The management host's network interface properties, including the MAC address and IPv4 (and optionally IPv6) properties.
- X0: The network interface properties for the primary interface that connects your appliance to the network, including the MAC address and IPv4 (and optionally IPv6) properties.
- To change the network properties for the primary interface (XO), click Edit next to the appropriate heading. Clicking Edit displays the network interface properties which can be modified. If you are using Azure, the IP address cannot be changed.
-
After editing the network interface properties, click Submit.
Once the updates are completed, a Network interface update request accepted message is displayed.
This page allows you to access backups from quarantined appliances, so long as the appliance is not rebooted.
Accessing backup from quarantined appliance
-
Connect to the recovery Kiosk, either physically via serial cable or via the IPMI network interface.
- From the Recovery Kiosk, select the Backups option.
- Press the Enter key (or right arrow).
- At Name or Email, enter your identification and press the Tab key (or down arrow).
- Select Submit.
-
At View Challenge, press the Enter key.
SPP produces a challenge.
-
Copy and paste the challenge into a text document and send it to One Identity Support.
-
When you get the response from One Identity Support, select Enter Response and copy and paste the response into the kiosk screen.
-
Select Authorize Backups. The response is only valid for 24 hours from when it was generated by One Identity.
- The Backups page will display any previously generated backups. You will only have 24 hours after the successful authorization to access the backups. The following options are available:
- Select a backup to copy to a CIFS share:
- Select the backup and press the Enter key.
- Enter the UNC path and login credentials.
- Select Submit.
- Once the backup has been copied, select Close.
- Delete Authorization: Select this option to delete the authorization granted by the challenge response process. Once deleted, you will be unable to access the backups page until a new challenge response has been successfully completed.
Use the power options in the Recovery Kiosk to remotely restart or shut down the physical appliance or AWS or Azure virtual deployment.
- You can use the Reboot option in the Recovery Kiosk to restart the appliance. Reboot from the Recovery Kiosk if you cannot access the SPP web client or API to restart the appliance using the normal procedures. Reboot the AWS or Azure virtual deployment.
- You must use the Shut Down option in the Recovery Kiosk to shutdown the physical appliance or AWS or Azure virtual deployment.
