topic ACS backup check files in Network Access Control

ACS backup check files

Kn1ghtR1d3rOfD00m — Thu, 10 Mar 2022 06:55:37 GMT

HI,

I have made the backup via ftp for the acs server

it downloaded a file acs_backup_31May-190601-0141.tar.gpg

How can I see the config inside, like if I want to see if all the network devices and aaa clients are there?

or am I doing the wrong backup? is it normal that extension?

Regards,

Re: ACS backup check files

Damien Miller — Sat, 01 Jun 2019 04:35:31 GMT

Yes .tar.gpg is the correct backup file format. The file is a GPG encrypted tar bundle, and it is encrypted with the key you specify on the backup config. You can decrypt the backup on windows with a tool such as GPG4Win.

Now having never decrypted a backup file myself, I'm not certain what format you will find the "config" in. Doing the same thing with gpg encrypted support bundles presents text log files among other human readable content.

Re: ACS backup check files

Kn1ghtR1d3rOfD00m — Sat, 01 Jun 2019 17:23:03 GMT

Thank you Damien, for the clarification,

Re: ACS backup check files

Arne Bier — Tue, 04 Jun 2019 12:28:22 GMT

@Damien Miller

Unlike ISE, are you sure that the ACS allows you to specify an encryption key when setting up backups? I am fairly sure that in ACS 5.4 (which is the last version I checked this on) didn't allow this. It uses a Cisco internal key - only ACS knows how to deal with the file

Re: ACS backup check files

Damien Miller — Tue, 04 Jun 2019 14:09:33 GMT

It must have changed, this is 5.6.