To back up and restore EAC: 

Full Backup (in cold state)

A complete backup of ACSERVER can be performed at cold state (= services are stopped) by copying configuration, logs and resources to a backup location. The easiest approach to achieve this is to copy the complete folder "C:\Program Files (x86)\Trend Micro\Endpoint Application Control\AcServer-Data".

This full backup contains all settings, logs, statistical client data and also all volatile cached information.

The databases and tree stores are the main reason why this backup requires the shutting down of services. Their copy inside a backup set would likely not be restorable when the service was running at the time of the backup.

Pre-requisites when restoring a full back-up:

1. Complete content of "C:\Program Files (x86)\Trend Micro\Endpoint Application Control\AcServer-Data" that was backupped in cold state.
2. A working (e.g. freshly installed) instance of ACSERVER can be found at "C:\Program Files (x86)\Trend Micro\Endpoint Application Control".

To restore:

1. Shutdown the service.
2. Replace current content of "C:\Program Files (x86)\Trend Micro\Endpoint Application Control\AcServer-Data" with the backup.
3. Start the service.
   If SSL certificates must be retained then the following path must be included in the backup "C:\Program Files (x86)\Trend Micro\Endpoint Application Control\SSLCerts" and processed in exactly the same way as "AcServer-Data".

Some backup software may be able to create a snapshot of the file system before starting a backup. If this is available, then a backup can be done in hot state but the backup software must explicitly support it.