Command Line Reference

SecureChange can be managed from the command line interface with the following commands.

Info

If you encounter a problem that cannot be easily resolved, Tufin Support may ask you to send additional information. The following command interactively collects SecureChange logs and additional information, and places it in a file. scw info does not collect any part of the security policies or your organization's security configuration.

scw info

Version Information

scw version

Returns the version and build number of the installed SecureChange.

Reset Password

scw reset-admin

Resets the password of the initial Administrator (username: admin) to: admin. Upon subsequent login, this Administrator will be prompted to change the password.

View Status of TOS Applications

tos conf

Displays status of Tufin Orchestration Suite products, and prompts to change these settings.

View Version Information

tos version

Displays TufinOS and TOS versions currently installed.

Create Configuration Backup

tos backup [--st] [--conf-only] [--stop-all] [--scw] <backup_file>

Creates a backup of Tufin Orchestration Suite's current configuration and databases for restore and disaster recovery purposes. The backup includes all files necessary to restore a TOS server, but does not include files that are part of the operating system, such as postgresql.conf.

--st - Makes a backup of the SecureTrack database and configuration only

--conf-only - Makes a partial backup that includes only SecureTrack configuration information. You must use --conf-only with --st only.

--stop-all - Stops all SecureTrack and SecureChange processes before performing the backup. Use this option only if you need to make sure that revisions from after the time the backup is run are not included in the backup.

When --stop-all is used, some traffic usage information may be lost.

--scw - Makes a backup the SecureChange and SecureApp database and configuration only

--sa - Include Suite Administration backup data

<backup_file> - the name of the backup file. The file is compressed in TGZ format.

By default, the backup operation is performed while SecureTrack monitoring processes are active. A database locking mechanism makes sure the database maintains integrity.

When the Tufin databases take up most of the hard drive's disk space, this command may fail if the backup is made to a local (non-NFS) file.

Restore From Backup File

tos restore [--st] [--scw] <backup_file>

Restores from a backup file to an existing TOS installation.

--st - Restores the SecureTrack database and configuration

--scw - Restores the SecureChange and SecureApp database and configuration

-- sa - Restores the Suite Administration backup data

The restore completely replaces the existing configuration and database of the TOS products specified by --st, --scw, --sa or any combination of them.

The target restore server must have the same TOS version and the same amount of installed RAM as the source backup server.