Sealed Backup

Sealed, off-site backup of this engine’s configuration — non-device software (FD&C Act §520(o)(1)(D))

💾

Create Sealed Backup

Snapshots this engine’s sealed configuration, seals the bundle under the Customer iKey, and writes a .synbak to the destination you choose. Opaque without the customer master key.

Destination (absolute path, UNC share, or remote URL)

Also wrap for the off-host recovery key (recovery if the customer master is lost). Requires backup-recovery.key on the host.

🔎

Verify & Restore

Destination folder

Bundle

Verify

Quick (decrypt + auth) Deep (+ test-restore)

Restore

Restores into a staging area — your live configuration is untouched. Promote staging → live at a deliberate cutover step. Requires the restore_db permission.

I understand this restores into staging (live configuration unchanged).