Restore Backup Using CLI

You can restore your OT Security using CLI or via the Tenable Core interface. For more information about restoring backup via Tenable Core user interface, see Restore a Backup in the Tenable Core + Tenable OT Security User Guide. To restore using CLI, perform the following steps.

Note: You can only restore backups taken using the Tenable Core backup utility. Older backups from OT Security before version 3.18 are not compatible. If you are trying to restore from a backup captured in an older version of OT Security, before version 3.18, contact support for the necessary instructions and commands.

Before you Begin

  • Make sure you have the backup .tar files to restore.

    Note: You can download the OT Security backup files from the Backup/Restore page in Tenable Core. For more information, see Restore a Backup in the Tenable Core + Tenable OT Security User Guide.
    Example of an OT Security backup file: tenable-ot-tenable-s2cc78kg-2024-03-21T135648.tar.

To restore your OT Security backup using CLI:

  1. Do one of the following to access the ICP system:
    • Log in to Tenable Core and access the terminal.
    • Log in using SSH.
  2. In the terminal, run the following command:
    Copy
    sudo systemctl start tenablecore.restorelocal@$(systemd-escape /home/admin/my-tc-ot-backup.tar)

Where:

  • /home/admin/my-tc-ot-backup.tar is the location of the backup files.

Note: The process takes a long time to complete since it restores the backup before the command finishes. You can view the restoration progress from
Backup/Restore > Backup/Restore Logs > Restore logs in the Tenable Core user interface or by running the following command:

journalctl -xf tenablecore.restorelocal@$(systemd-escape /home/admin/my-tc-ot-backup.tar)

Where: /home/admin/my-tc-ot-backup.tar is the location of the backup files.

OT Security gets restored and you can start accessing the application. To verify that OT Security is running, use your browser to log in to the OT Security user interface via port 443 (HTTPS).