The following section describes how to access the Cyber Recovery jump host and copy the files into the jump host.
- Configure VPC peering between production environment and vault environment.
For more information about VPC peering configurations, see VPC peering connection between two VPCs
- Once the VPC Peering is in place, connect to the jump host by using the Remote Desktop Connection.
- Obtain the Windows password from the AWS UI:
- Select the jump host instance.
- Click Actions > Security > Get Windows Password.
- Upload the key that is provided during the CloudFormation deployment and decrypts the password.
- Copy the decrypted password.
- Change this password when you are logged in to the jump host.
- Connect to the private IP address that is assigned to the jump host instance using the username administrator and the password that you copied in the previous step.
- Copy the private key for the Cyber Recovery host to the jump host:
- In a text editor, open the key pair on your production environment.
- Copy the entire contents in the text editor.
- On the jump host, create a file and paste the contents from the text editor.
- Save the file using the same file name and extension as the key pair on the production host.
- Open a PowerShell session with admin privileges.
- Use SCP to copy the aws-cis-regedit registry edit program to a local directory:
scp -i ec2-user@<cr-mgmt-host>:/home/ec2-user/aws_cr/aws-cis-regedit.exe C:/ Users/Administrator/Desktop
- From the PowerShell session, enable file transfers over RDP:
- Run the following command: \aws-cis-regedit.exe enableFileTransfer.
- Press Enter to confirm the command and acknowledge the reboot.
- After the reboot, use RDP to log in to the jump host and copy the files in case installing a browser.
- After transferring the files, disable file transfer over RDP to secure the jump host..
- Open a PowerShell session with admin privileges.
- Run the following command to disable file transfers over RDP.
.\aws-cis-regedit.exe disableFileTransfer
- Press Enter to confirm the command and acknowledge the reboot.
- After the reboot, use RDP to log in to the jump host.
- Delete the aws-cis-regedit registry edit program.