ACS backup check files

[Kn1ghtR1d3rOfD00m]

HI, 

I have made the backup via ftp for the acs server

it downloaded a file acs_backup_31May-190601-0141.tar.gpg

How can I see the config inside, like if I want to see if all the network devices and aaa clients are there?

or am I doing the wrong backup? is it normal that extension?

Regards, 

[Damien Miller · Accepted solution]

Yes .tar.gpg is the correct backup file format. The file is a GPG encrypted tar bundle, and it is encrypted with the key you specify on the backup config. You can decrypt the backup on windows with a tool such as GPG4Win.

Now having never decrypted a backup file myself, I'm not certain what format you will find the "config" in. Doing the same thing with gpg encrypted support bundles presents text log files among other human readable content.

[Kn1ghtR1d3rOfD00m]

Thank you Damien, for the clarification,

[Arne Bier]

@Damien Miller 

Unlike ISE, are you sure that the ACS allows you to specify an encryption key when setting up backups?  I am fairly sure that in ACS 5.4 (which is the last version I checked this on) didn't allow this.  It uses a Cisco internal key - only ACS knows how to deal with the file 

[Damien Miller]

It must have changed, this is 5.6.