Backup and Restore Tenable Security Center

Note: These steps apply only to Tenable Enclave Security versions 1.6 and earlier. For later versions, see External PostgreSQL with Tenable Security Center in the Tenable Security Center user guide

These steps describe how to back up and restore an existing Tenable Security Center deployment in Tenable Enclave Security.

Note: If your backup file is larger than 1 TB, contact Tenable Professional Services for assistance.

Backup Tenable Security Center in Tenable Enclave Security

Back up a Tenable Security Center in Tenable Enclave Security deployment:

Log in to the Kubernetes runtime container with the following command:
Copy
```
kubectl exec -it tenable-enclave-security-0 -n tenable -- /bin/sh
```
Stop Tenable Security Center and all running processes:
1. Stop Tenable Security Center with the following command:
  Copy
```
/scbase/SC.sh stop
```
2. In the CLI in Tenable Security Center, run the following command to view all running processes:
  Copy
```
ps -fu tns
```
3. If any processes are listed, run the following commands to stop them:
  Copy
```
killall -u tns
```
  Copy
```
killall httpd
```
  Note: These commands stop all jobs (including scans) running on Tenable Security Center.
4. If necessary, repeat step c to confirm all processes are stopped.
Create a backup .tar file using the following command:
Copy
```
cd /opt
tar -Ppzcf /opt/sc_backup.tar.gz /opt/sc
```
Note: The.tar file switches are case-sensitive.

Tenable Security Center creates the sc_backup.tar.gz backup file in the /opt/sc directory.
Copy the backup file with the following command, where /backup/directory is the local path for the backup file:
Copy
```
kubectl cp <namespace_name>/tenable-security-center-0:/opt/sc_backup.tar.gz -c sc-runtime-container sc_backup.tar.gz
```
Note: Ensure your local directory has enough space for the backup file.

Tenable Security Center is backed up to your local directory.
Remove the backup file from the opt directory with the following command:
Copy
```
rm /opt/sc_backup.tar.gz
```
Restart Tenable Security Center with the following command:
Copy
```
/scbase/SC.sh restart
```
Tenable Security Center is ready to use again.

Restore Tenable Security Center in Tenable Enclave Security

To restore Tenable Security Center from a backup file:

Uninstall the Helm Charts for your Tenable Security Center deployment using the following command:
Copy
```
helm uninstall privatecloud
```
Perform a fresh install of Tenable Security Center using the steps in Install Tenable Enclave Security.

Note: Ensure you install the same version of Tenable Security Center as the version in your backup file.
Log in to the Kubernetes runtime container with the following command:
Copy
```
kubectl exec -it tenable-security-center-0 -n tenable -- /bin/sh
```
Stop Tenable Security Center and all running processes:
1. Stop Tenable Security Center with the following command:
  Copy
```
/scbase/SC.sh stop
```
2. In the CLI in Tenable Security Center, run the following command to view all running processes:
  Copy
```
ps -fu tns
```
3. If any processes are listed, run the following commands to stop them:
  Copy
```
killall -u tns
```
  Copy
```
killall httpd
```
  Note: These commands stop all jobs (including scans) running on Tenable Security Center.
4. If necessary, repeat step c to confirm all processes are stopped.

Copy and extract the backup file to the container with the following command:

Copy

kubectl cp sc_backup.tar.gz <namespace>/tenable-security-center-0:/opt/sc_backup.tar.gz -c sc-runtime-container

Restore Tenable Security Center from the backup file with the following command:
Copy
```
tar -Pxvf /opt/sc_backup.tar.gz
```
Remove the backup file from the opt directory with the following command:
Copy
```
rm /opt/sc_backup.tar.gz
```
Start Tenable Security Center with the following command:
Copy
```
/scbase/SC.sh start
```
The Tenable Security Center deployment is restored from the backup file.