Open topic with navigation

# Factory Restore Using System Restore

An appliance restored using System Restore will be restored to an ArcSight Management Center image.

To perform a factory restore using System Restore:

1. Note the IP address , default gateway, and netmask of the appliance.

2. Attach a keyboard, monitor, and mouse directly to the appliance.

3. Reboot ArcMC from the GUI. Click Setup > System Admin > Reboot and then click the Start Reboot Now button. You can also reboot using the command line interface.

4. When the following screen displays, press any key on your keyboard.

   Note: This screen is displayed for a very short time. Make sure you press a key on your keyboard quickly; otherwise, the appliance continues to boot normally.

5. A screen similar to the one shown below appears on the attached monitor. Use the mouse or arrow keys to select System Restore and press Enter. The System Restore utility launches.

6. Press the F1 (Auto-Select) key.

7. Press the F2 key to Restore the appliance.

8. When prompted Proceed with restore?, press y. The restore begins.

9. Allow the restore utility to complete the process.

10. When complete, press Enter.

11. Press the F12 key to reboot the appliance.

12. When prompted Reboot appliance?, press y. The appliance will be rebooted.

The result of the restore process is a factory restored ArcMC.

For use, the appliance must now be configured with an IP address , default gateway, and netmask you noted previously.

Troubleshooting a G10 (C6700) ARI System Restore: IP Address

After performing a system restore using a G10 (C6700) appliance with an ARI image, and the IP address isn't automatically assigned, you will need to access iLO in order to enable the network interface controller (NIC) and the SNMP service.

1. Identify the NIC with the flag UP: `ip a`

2. Run `ifdown <nic-name>` then `ifup <nic-name>` (eg: eno1, ensf0). Use the nic-name obtained in step 1.

3. To verify that the IP address has been assigned, check the NIC again: `ip a`

4. Access /opt/local/monit/bin and run `./monit summary` to confirm that the SNMP service is running.