TightGate-Pro

Dediziertes Remote-Controlled Browser System
zum Schutz vor Gefahren aus dem Internet

Automatisch generierter Auszug aus dem Administrationshandbuch

Datum: 11.04.2019

Herausgeber:

m-privacy GmbH

Technische Redaktion

Werner-Voß-Damm 62

12101 Berlin

Fon: +49 30 243423-34

support@m-privacy.de

www.help.m-privacy.de

Allgemeine Hinweise zu diesem Handbuch

Alle Materialien und Ausführungen wurden mit Sorgfalt erarbeitet und zusammengestellt. Den­noch sind Fehler nicht auszuschließen. Die m-privacy GmbH übernimmt keine Haftung für Schäden, die aus Unrichtigkeit einzelner Angaben entstehen.

Im Sinne einer raschen Orientierung und zur Vermeidung von Sicherheitsrisiken werden besonders wichtige Aspekte durch wiederkehrende Stichworte gekennzeichnet. Diese sind:

Hinweis
Unter diesem Stichwort werden nützliche Details zur rationellen Verwendung von TightGate-Pro er­läutert.

Achtung
Unter diesem Stichwort erfolgen Hinweise zur Problemvermeidung bzw. zur Vorbeugung von Betriebs­störungen bei TightGate-Pro.

Warnung
Unter diesem Stichwort erfolgen Hinweise auf mögliche Fehler bei der Konfiguration und Verwendung von TightGate-Pro, die weitreichende Sicherheitsrisiken bergen oder zu schwerwiegenden Betriebs­störungen führen können.

Inhaltsverzeichnis

Restoring data from a backup

While the administrator backuser is responsible for creating the backups, the restore is done by config (system configuration) or maint (user accounts and groups).

The complete restoration of a TightGate-Pro server, for example after a new installation, requires the following steps to be carried out in exactly this order:

Restore the system configuration

Restore the user accounts

Restore the groups

Restore bookmark archives

This is always needed

Before the restore can be carried out, the corresponding backup must be available locally on the TightGate-Pro in the directory /home/backuser/backup of the administrator backuser or on a USB mass storage device that has been prepared accordingly unencrypted.

If backups are to be transferred manually, please note the information in the FAQ on TightGate-ProHow can I transfer backups manually?

The backup files that are saved locally from the system are always unencrypted. Only the backups on external media can be encrypted, depending on the configuration. The private key that may be required for decryption is regularly not on the TightGate-Pro, but must be provided externally.

Existing data is overwritten during the restore process. To protect against data loss if the wrong backup is selected, it is always recommended to create a current backup immediately before the restore.

Selecting the source: For each restore (independent of roles), the source of the backup is queried at the beginning. All available partitions and hard disks are displayed. However, only local and possibly additional hard disks (e.g. USB) marked with sdb* are relevant. After selection, all back-ups available on the corresponding medium are displayed, whereby back-last always refers to the last backup created by the system.

Restoring the system configuration

Restoring the system configuration always includes the parameters of all setting options of the administrator accesses. The remaining contents of the backup depend on the settings made for the backup type settings for the backup type. Basically not included in the backup are:

Program and system files that are part of the installation packages for TightGate-Pro.

Installation files and configuration data of the add-ons for the web browser that were installed by the user.

Here's how

Logging on to the console as administrator config

Call the menu item Basic settings > Restore

Select the backup to be restored (select with space key)

Select the backup file and confirm the security prompt.

When restoring system configurations, it is absolutely necessary that the version of the mprivacy-tools used in the backup is the same as that of the newly installed system. Otherwise, inconsistencies and incorrect configurations may occur.

Restoring user accounts

The restoration of user accounts depends on the selected backup type. Groups and their configuration are generally not included.

This is how it works

Log on to the console as administrator maint

Call the menu item User administration > Regenerate user

Select_the_source (mark with space key)

Selecting the backup to be restored (select with space key)

Select the user accounts to be restored and confirm security prompt

Restore groups

Restoring groups includes all groups and their configuration, as well as the assignment to the respective users, if they exist. It is not possible to select individual groups.

This is how it works

Log on to the console as administrator maint

Call the menu item Group management > Restore all groups

Select the backup to be restored (select with space key)

Confirm security prompt

Restore bookmark archives

Restoring bookmark archives only includes the archive files. Restriction to individual user accounts is not possible. If an archive is to be restored to a user, the user must manually select the file in the web browser.

This is required:

Make sure that the bookmark archives are included in the backup. The following points must be fulfilled for this:

Are the bookmark archives switched on under config > Settings > Authentication >Bookmark archive = Yes?

Was one of the two backup types selected that contains the bookmark archives? To be checked under backuser > Backup type > System bookmark archive or System and user data

This is how it works

Logging on to the console as administrator maint

Call the menu item User administration > Regenerate bookmark archive

Select the backup to be restored (select with space key)

Confirm security prompt