By default, the ssh-ca-backup script takes a backup from the Certifier database, configuration info, and internal PKI data. The backup destination directory is specified in the bin/ssh-ca-runenv configuration script.
Only the most recent database backup will be stored in the system. The old backup will be purged after a successful run.
Backing Up nCipher Security Worlds
The nCipher security world is backed up IF it is located in the default nFast directory (/opt/nfast/kmdata). However, the nCipher security world is NOT restored unless this is explicitly requested for.