# MeshCentral recovery

1. Block agent enrollment and operator access while restoring.
2. Install matching Node.js/MeshCentral versions; restore application state and configuration with restrictive ownership.
3. Restore TLS private key/certificates from the approved certificate backup.
4. Start systemd and verify the certificate, MFA and device/group data. Test one lab agent before reopening access.