Skip to main content

HowTo - NetScaler - Create a backup

··2 mins
Author
John Billekens
Technical Consultant | End User Computing
Table of Contents

group: “NetScaler”

A backup can save you a lot of time in case of emergencies, configuration errors or hacks. You could download and save it in a secure environment. And when needed restore a new appliance with the saved backup.

GUI
#

As always, login to the NetScaler by using an account with enough permissions to execute your task.

NetScaler logon

 

On the “Configuration” tab, open the menu “System” (1) and “Backup & Restore” (2).

Next click on the button “Backup/Import” (3).

NOTE: you will only see the button when no backup is created or available.

Open Backup&Restore

 

If there is one or more backups already available, you’ll see the following screen/button. Click “Backup/Import” to create a backup.

Open Backup&Restore

 

Next make sure “Create” (1) is selected as option.

Enter a “File Name” (2) meaningful for you or your company. I like to specify the type of backup (Full or Basic) the date and time of the backup. The name can be a maximum of 63 characters long.

Select the backup “Level” (3) Full or Basic.

  • Basic; You can perform this type of backup if you want to back up files that constantly change. The files that you can back up are in the following table.
DirectorySub-Directory or Files
/nsconfig/ns.conf
ZebOS.conf
rc.netscaler
snmpd.conf
nsbefore.sh
nsafter.sh
inetd.conf
ntp.conf
syslog.conf
newsyslog.conf
crontab
host.conf
hosts
ttys
sshd_config
httpd.conf
monitrc
rc.conf
ssh_config
localtime
issue
issue.net
/var/download/*
log/wicmd.log
wi/tomcat/webapps/*
wi/tomcat/logs/*
wi/tomcat/conf/catalina/localhost/*
nslw.bin/etc/krb.conf
nslw.bin/etc/krb.keytab
netscaler/locdb/*
lib/likewise/db/*
vpn/bookmark/*
netscaler/crl
nstemplates/*
learnt_data/*
/netscaler/custom.html
vsr.htm
  • Full; In addition to the files that are backed up by a basic backup, a full backup has less frequently updated files. The files that are backed up when you use the “Full” backup option are:
DirectorySub-Directory or Files
nsconfigsl*
license*
fips*
/var/netscaler/ssl/*
wi/java_home/jre/lib/security/cacerts/*
wi/java_home/lib/security/cacerts/*

And lastly add a “Comment” (4). This is a text field where you can add your own description up to 255 characters.

Click “Backup” to start the backup.

Enter name and select backup type

If you want to save created backup, you can download the file.

Select the file you want to download and choose “Download” in the Action menu. Your browser wil initiate the download. Store the file somewhere safe! This unencrypted backup may contain sensitive information and data.

Downlaod the backup

CLI
#

You can also initiate a backup from the CLI.

create system backup "Full_20231023_1502" -level full -comment "CLI Backup"
Backup via CLI

And that’s it! Make sure to backup your config regularly.

Related

HowTo - NetScaler - Update Certificate

··3 mins
group: “NetScaler” In this how-to article I will explain the procedure how to update a certificate on a Citrix NetScaler. If you wait until a certificate is expired wil cause a lot of issues for your users or visitors. By being on time with the renewal will save you a lot of trouble.

HowTo - NetScaler - Install Certificate

··3 mins
group: “NetScaler” In this how-to article I will explain the procedure how to install a new certificate on a Citrix NetScaler. Certificates are an important piece in a secure connection from a client to a server.

HowTo - Windows - Export certificate (pfx)

··3 mins
group: “Windows” Certificates are an important part of a modern environment. They make communication safer by encrypting the traffic between the client and server. A safe way to move certificates between servers or store them safely is by exporting the certificate (private and public key) to an encrypted format. A commonly used format is “pfx” (Personal Information Exchange also known as PKCS#12). A pfx file can contain one or more certificates and is encrypted with a password. Without the correct password the pfx is useless. You commonly see that a pfx contains a (web) server certificate and one or more intermediate certificate(s) and a root certificate.