Whenever there is any change in your vault, the bastion service will generate a backup file (.bkp) at dawn, the connector will download and store this file and it can be accessed in cases of unavailability of connections.
To be able to access the file through the BREAK-THE-GLASS process, follow the instructions in this other article: https://help.vaultone.com/hc/en-us/articles/15271430222231-Password-Backup
There is a way for you to export the .bkp file that is in the connector to a readable format (.json), for that follow the step by step below:
Obs1: When converting the file to .json format, you will leave your passwords and resources exposed in this file, keep it safely to avoid any leakage of credentials.
Obs2: It will be necessary to have access to the key used to decrypt and export the .bkp file, in the article above, “Password Backup”, we teach you how to generate and use this key.
First step:
Access your machine that has the VaultOne connector and, with the root user, type the following sequence of commands, as shown in the image below:
Docker:
docker exec -ti vo-sync bash
cd backup
ls -la
Podman:
podman exec -ti vo-sync bash
cd backup
ls -la
Second step:
In the list of .bkp files inside the Backup directory, select the file you want to export, note that each file has a different date, from the oldest to the most recent. Use the commands below to convert the file to .json format.
base64 -d /backup/”FILE-NAME.BKP” | openssl enc -d -aes-256-cbc -out “CHOOSE-FILE-NAME.JSON”
Example:
base64 -d /backup/638136753443829173-7ad5c7340c03490489bdf1cd4be6e508.bkp | openssl enc -d -aes-256-cbc -out backupexternal.json
Next, you will be asked for the key to decrypt the file, as shown in the image below:
After this process, the file will be available in the Backup directory.
Follow the next instructions to export the file from this directory.
Third step:
Use the following command sequence, as shown in the image below.
Docker:
exit
docker cp vo-sync:/backup/“NOME-DO-ARQUIVO.JSON” ./
ls -la
Podman:
exit
podman cp vo-sync:/backup/“NOME-DO-ARQUIVO.JSON” ./
ls -la
Exemplo:
docker cp vo-sync:/backup/backupexternal.json ./
All set! The file in .json format is already in the home directory.
After generating the file, you can view it better on this website: https://jsonformatter.curiousconcept.com/#
Still have doubts? If you need help, just send an email to [email protected]