Whenever there is any change in your vault, the bastion service will generate a backup file (.bkp) at dawn, the connector will download and store this file and it can be accessed in cases of unavailability of connections.
To be able to access the file through the BREAK-THE-GLASS process, follow the instructions in this other article: https://help.vaultone.com/hc/en-us/articles/15271430222231-Password-Backup
There is a way for you to export the .bkp file that is in the connector to a readable format (.json), for that follow the step by step below:
Obs1: When converting the file to .json format, you will leave your passwords and resources exposed in this file, keep it safely to avoid any leakage of credentials.
Obs2: It will be necessary to have access to the key used to decrypt and export the .bkp file, in the article above, “Password Backup”, we teach you how to generate and use this key.
Access your machine that has the VaultOne connector and, with the root user, type the following sequence of commands, as shown in the image below:
docker exec -ti vo-sync bash
In the list of .bkp files inside the Backup directory, select the file you want to export, note that each file has a different date, from the oldest to the most recent. Use the commands below to convert the file to .json format.
base64 -d /backup/”FILE-NAME.BKP” | openssl enc -d -aes-256-cbc -out “CHOOSE-FILE-NAME.JSON”
base64 -d /backup/638136753443829173-7ad5c7340c03490489bdf1cd4be6e508.bkp | openssl enc -d -aes-256-cbc -out backupexternal.json
Next, you will be asked for the key to decrypt the file, as shown in the image below:
After this process, the file will be available in the Backup directory.
Follow the next instructions to export the file from this directory.
Use the following command sequence, as shown in the image below.
docker cp vo-sync:/backup/“FILE-NAME.JSON” ./
docker cp vo-sync:/backup/backupexternal.json ./
All set! The file in .json format is already in the home directory.
After generating the file, you can view it better on this website: https://jsonformatter.curiousconcept.com/#
Still have doubts? If you need help, just send an email to firstname.lastname@example.org