- Backup
- Backup Configuration Overview
- File Path
- Filename Prefix
- Number Of The Last Backups To Keep
- Backup Start Time
- Time Of Last Backup Attempt
- Encrypt downloaded backups
- Backup Password
- Customized File Permissions
- File Owner
- File Group Linux only
- File Permissions Linux only
- Verifying the Configuration
- Manual Backup
- Backup Contents
- Restoring Data from a Backup
Backup #
SecureAnyBox5 supports both automatic and manual server backups. Backups are used to protect configuration data, the database, and other important system components against loss or corruption.
Automatic backups are performed within a configured time window, provided that the server is running. If the backup cannot be created during the initial attempt (for example, because the backup location is unavailable or the server is offline), the system retries every 30 minutes until the time specified in the Time Of Last Backup Attempt field.
A backup can also be created at any time manually using the Start the backup manually button.
Backup Configuration Overview #
Open Configuration → Backup to view the backup configuration.
To modify the configuration, click Edit.
File Path #
The path to the directory where backup files will be stored.
Default locations:
- Linux:
/opt/tdp/secureanybox/backup - Windows:
C:\SecureAnyBox\backup
The user account running SecureAnyBox5 must have write permissions for the specified directory.
Filename Prefix #
The prefix used for generated backup files. A date stamp is automatically appended to the specified prefix in the following format:
-prefix-YYYY-MM-DD.zip
Example: secureanybox-backup-2026-06-17.zip
Number Of The Last Backups To Keep #
Specifies the number of automatic backups that will be retained.
When the configured number of backups is reached, the oldest automatic backup is removed when a new automatic backup is created.
This setting applies only to automatically created backups. Manually created backups are not included in this limit. The default value is 7.
Backup Start Time #
The time of the first backup attempt for the day. The time must be entered in the following format: HH:mm
The minute portion can only be: 00
30.
Valid values range from 00:00
to 23:30.
Time Of Last Backup Attempt #
The time of the last backup attempt for the day. If the backup cannot be created at the time specified in Backup Start Time, SecureAnyBox5 retries every 30 minutes until the time specified in this field.
Backup Start Time:
08:30Time Of Last Backup Attempt:
10:30Backup attempts will be made at:
08:30, 09:00, 09:30, 10:00 and 10:30
Once a backup is successfully created, no further attempts are performed.
Encrypt downloaded backups #
Enables encryption of backups downloaded through the web interface. When enabled, downloaded backups are provided as password-protected ZIP archives.
Backups stored directly on the server are not affected by this setting.
Backup Password #
The password used to encrypt backups downloaded through the web interface. This password is required when extracting the downloaded ZIP archive.
Customized File Permissions #
Allows custom file ownership and permission settings to be applied to generated backup files.
File Owner #
The user account that will be assigned as the owner of newly created backup files.
Examples: root or Administrators
File Group Linux only #
The group that will be assigned to newly created backup files. This field is available only on Linux platforms.
File Permissions Linux only #
The permissions assigned to newly created backup files. Permissions are specified using standard Unix symbolic notation, for example: rw-r-----
By default, only the file owner has read and write permissions. This field is available only on Linux platforms.
Verifying the Configuration #
The Test button can be used to verify the backup configuration. The test verifies:
- that the target directory is accessible,
- that SecureAnyBox5 can access the target directory.
- If the specified directory does not exist, the Backup or Test button will create it (provided the user account running the server has the necessary permissions).
Note: The test does not create a backup.
Manual Backup #
A backup can be created at any time by clicking: Start the backup manually
After starting a manual backup, it is recommended to monitor the server log and wait for the following entry: Manual backup finished
which confirms that the operation has finished completely and successfully.
Manual backups are not included in the limit specified by Number Of The Last Backups To Keep.
Backup Contents #
A SecureAnyBox5 backup contains:
- the SecureAnyBox5 database (without indexes),
- configuration files,
- the keystore containing all certificates used by SecureAnyBox5,
- custom dictionaries,
- issued tickets.
Database indexes are not included in the backup. They are automatically rebuilt when the server starts after a restore operation.
The database also contains synchronized user accounts from LDAP and Microsoft Entra ID (Azure AD). If a user has previously logged in to SecureAnyBox5, they can still access the system after a restore even if the LDAP or Microsoft Entra ID server is temporarily unavailable.
Restoring Data from a Backup #
Restore to an Existing Installation #
- Stop the SecureAnyBox5 server.
- Select the backup ZIP file to be restored.
- Extract the contents of the ZIP archive into the SecureAnyBox5 installation directory.
- Confirm overwriting existing files.
- Start the SecureAnyBox5 server.
During the first startup after the restore, the database indexes are automatically rebuilt.
Restore to a New Installation #
When restoring to a new server, the following procedure is recommended:
- Install the same SecureAnyBox5 version from which the backup was created.
- Do not start the server after installation.
- Extract the backup ZIP archive into the SecureAnyBox5 installation directory.
- Confirm overwriting existing files.
- Start the SecureAnyBox5 server.
Using the same product version is necessary because the database format may differ between product versions.
Extracting a Backup from the Command Line #
On Linux, the backup can be extracted using bash e.g.:
$ unzip -d /path/to/SecureAnyBox5/ backuparchive-2026-06-15.zipThe user account running the command must have sufficient permissions to write to the SecureAnyBox5 installation directory.
License File #
When restoring data to a new SecureAnyBox5 installation, the license file must be uploaded again. The license file is not included in the backup.
Restoring to Another Server or Changing the IP Address #
If the server is being restored to another machine or its IP address must be changed, use the changeaddress
utility located in the SecureAnyBox5 installation directory.
Recommended procedure:
- Install the same SecureAnyBox5 version.
- Extract the backup into the installation directory.
- Run the
changeaddressutility. - Confirm the introductory message by pressing Enter.
- Configure the new IP address and HTTP/HTTPS ports.
- Save the changes.
- Start the SecureAnyBox5 server.
After saving the configuration, the utility confirms that the changes have been successfully applied.
