Sealed Catalog Backup

💾

Create Sealed Backup

Snapshots the archive catalog (Postgres, pg_dump consistent) plus the sealed config, seals the bundle under the Customer iKey, and writes a .synbak to the destination you choose. Opaque without the customer master key.

Destination (absolute path, UNC share, or remote URL)

Also wrap for the off-host recovery key (recovery if the customer master is lost). Requires backup-recovery.key on the host.

🔎

Verify & Restore

Destination folder

Bundle

Verify

Quick (decrypt + auth) Deep (+ test-restore)

Restore

Restores into a staging database — the live catalog is untouched. Promote staging → live at a deliberate cutover step. Requires the restore_db permission.

I understand this restores into staging (live catalog unchanged).