The clusterctl backup restore command throws an error when restoring the state of a PKI Hub installation with Certificate Enrollment Gateway. As explained in Known issues in the PKI Hub 1.3.0 platform, you must:

  1. Contact Entrust support for a new version of the csf-backup-restore.sh script
  2. Open a user session in any of the PKI Hub installation nodes.
  3. Run the following commands to install the script. 
    sudo cp --force csf-backup-restore.sh /opt/entrust/scripts/rhel/
    sudo chmod 550 /opt/entrust/scripts/rhel/csf-backup-restore.sh
    sudo chown sysadmin:edm /opt/entrust/scripts/rhel/csf-backup-restore.sh
  4. Follow the steps described in Restoring the state to restore the state.