1) Stop the CA Service Catalog and CA Service Accounting services.
2) Export full definition of application instance from EEM
First of all, log in the the EEM Admin UI, with the relevant application (usually "Service Catalog") selected. If the instance, or indeed the EEM installation, has already been lost, then unfortunately permissions will have to start from their defaults after the instance has been recreated.
Go to Configure > EEM Server > Export Application
You'll need to select everything that you wish to back up. This means everything that is not "global".
3) Delete the Service Catalog application in EEM.
Login to the EEM UI with the <Global> Application selected, then go to Configure > Applications > Service Catalog and click "Unregister".
4) If you have EEM configured to use an LDAP directory, switch EEM to use the local store, so we can recreate the CERT-Service Catalog and spadmin users
5) Update config.properties to set
eem.configured = false
6) Restart the CA Service Catalog and CA Service Accounting services
7) Run the CA Service Catalog Setup Utility to configure new EEM application instance - there is no need to perform the database or content stages again.
8) Set EEM to use the external LDAP store if you were previously using one.
9) Update config.properties again
10) Restart Catalog and confirm that Catalog functions as expected, including changing permissions. At this point, you'll only have the default permissions in place. For a complete restoration, you'll then need to:
11) Reimport the backup to retrieve existing permission definitions
For this step, go to the EEM server and run the following command, replacing the field values as appropriate
safex -h <target_EEM_servername> - u EiamAdmin -p <EiamAdmin_Password> - f <full_path_where_your_xml_file_is_located>