# Back up the Network Controller database before SDN maintenance

> Which Network Controller state must an SDN maintenance recovery plan preserve?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260908-154-back-up-the-network-controller-database-before-sdn-maintenance/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-08T18:14:37+00:00
- Modified: 2026-09-08T18:26:31+00:00
- Last reviewed by DSE: 2026-09-08
- Resource type: Guide
- DSE priority: Information
- Topics: IT, Networks & Infrastructure
- Reading time: 1 minutes

## What you need to know

Which Network Controller state must an SDN maintenance recovery plan preserve?

## Potentially affected

Administrators maintaining the multi-node SDN infrastructure described in Microsoft’s upgrade and recovery guidance.

## DSE recommendation

Have the SDN owner identify the database backup artifact, protected destination, retention owner, and approved restore instructions.

## Article

## Source facts

Microsoft’s SDN maintenance guidance distinguishes a Network Controller database backup from backups of the controller VMs. It states that VM backups alone do not ensure session continuity across multiple controller nodes. After upgrading a controller node, the procedure checks its status with Get-NetworkControllerNode and waits for Up before upgrading another node. [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/networking/sdn/manage/Update-Backup-Restore).

## Applicability

Identify the actual SDN architecture and releases and compare them with the documented procedure. Review the supported backup and restore process for that design before applying guidance from a different controller hosting model.

## DSE recommendation

Have the SDN owner identify the database backup artifact, protected destination, retention owner, and approved restore instructions. Record controller node status before maintenance. Establish a pause condition if a node does not return to the expected state, and keep the backup decision separate from ordinary VM snapshot activity.

## Verification

Verify that the intended backup operation completed and that its artifact can be located and checked. In an approved recovery exercise, validate the documented restoration path and representative network policy state. During maintenance, record each node’s return to service before proceeding and retain unexplained controller errors for investigation.

## Official references

[Microsoft Learn: Upgrade, backup, and restore SDN infrastructure](https://learn.microsoft.com/en-us/windows-server/networking/sdn/manage/Update-Backup-Restore). Source reviewed September 8, 2026.

## Primary reference

- Name: Upgrade, backup, and restore SDN infrastructure
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/windows-server/networking/sdn/manage/Update-Backup-Restore
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Back up the Network Controller database before SDN maintenance,” DSE Security, https://update.dsesecurity.com/updates/dse-20260908-154-back-up-the-network-controller-database-before-sdn-maintenance/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.