Backing up Configs and Archived Logs on Azure Storage

Ivanti Policy Secure supports pushing configs and archived logs to the servers that support SCP and FTP protocols. In the Azure deployment, Ivanti Policy Secure now supports pushing configs and archived logs to the Azure storage.

Configuring Backup Configs and Archived Logs via Ivanti Policy Secure Admin Console

To configure backing up configs and archived logs:

  1. Log into the Ivanti Policy Secure admin console.
  2. Navigate to Maintenance > Archiving > Archiving Servers.
  3. In the Archive Settings section, select the Azure Storage option and configure Storage Name, Storage Key, Container Name and Destination Path Prefix.

Parameter

Description

Storage Name

To create an Azure V2 Storage account:

  1. In the Azure portal, select All services.
  2. From the list of resources, select Storage Accounts.
  3. In the Storage Accounts window, click Add.
  4. Select the subscription in which to create the storage account.
  5. Under the Resource group field, select Create new and enter a name for the new resource group.
  6. Next, enter a unique name, between 3 and 24 characters length, for the storage account.

For the procedure to create storage account, refer https://docs.microsoft.com/en-us/azure/storage/common/storage-quickstart-create-account?tabs=azure-portal

Storage Key

To view storage key,

  1. In the Azure portal, locate the storage account (see Storage Name description).
  2. In the Settings section, select Access keys. The account access keys and the complete connection string for each key appear.
  3. Find the Key value under key1 and click the Copy button to copy the account key.

For more details, refer https://docs.microsoft.com/en-us/azure/storage/common/storage-account-manage#view-and-copy-access-keys

Container Name

Container name in the storage account.

Dest Path Prefix (Optional)

Path to copy files under container.

Configuring Backup Configs and Archived Logs via REST

Setting Azure as Archive Logs Backup

REQUEST

PUT /api/v1/configuration/system/maintenance/archiving/settings HTTP/1.1

Content-Type: application/json

{

      "archive-path": "folder1/folder2",

      "method": "AZURE",

      "Password-cleartext": "fasfdsfsdasfas",

      "server": "mystorage",

      "user-name": "mycontainer"

}

Mapping of keys in POST body:

archive-path

Destination path Prefix

method

method (AZURE)

Password-cleartext

Storage Key

server

Storage Name

user-name

Container Name