OPENLINK / FIELD GUIDEBUYER + RECOVERY GUIDE ยท UPDATED 21 OCT 2026
BUY CLEARLY. CONNECT CONFIDENTLY.

Your next Virtuoso server.A clear path from purchase to first query.#

One tenant instance for an active subscription, purchased through AWS Marketplace and administered through the buyer portal.

Single Server ยท AWS Marketplace purchase ยท Buyer portal setup

01 Buy02 Set up03 Connect04 Operate
WHO THIS OFFER IS FOR

Your next move deserves a managed home.#

Whether you are extending an existing deployment, moving beyond evaluation, or bringing a solution to customers, the Virtuoso SaaS offer on AWS Marketplace gives you a place to begin.

Start with the Marketplace offer. Match the service tier to your next stage, and align the services and support you need with OpenLink. The buying guide below takes you from agreement to a working instance.

Explore the AWS Marketplace offer โ†—
01 / THE BUYING DECISION

Buy with the whole agreement in view.#

Choose the service tier and contract duration that fit your requirements. The guide describes 12-, 24- and 36-month public-offer terms; check the live offer before committing. Metered overages, where applicable, sit alongside the contract price. Screenshot prices are illustrative.

Read.
Choose.
Commit.

Review the tier, duration, taxes, overages and renewal choice before subscribing.

See the current Marketplace offer โ†—
Begin at the current Marketplace product page.Live Marketplace capture ยท 20 Oct 2026 ยท click to enlarge
02 / THE HANDOFF

One purchase. One buyer identity.#

Marketplace creates the agreement and supplies the setup context. The portal binds it to the account for that buyer AWS account, then provisions one tenant instance. If the setup link expires, reopen Set up your account from the active agreement.

AgreementAWS Marketplace
IdentityBuyer portal account
Instancerunning + healthy
Sign in with the account bound to your buyer AWS account.Live buyer portal ยท 20 Oct 2026 ยท click to enlarge
03 / THE CONNECTION

Three doors. Open the ones you need.#

Use the current endpoint values on the instance detail page. HTTPS Conductor is the administration interface. HTTPS SPARQL is the query endpoint. Secure SQL, ODBC and JDBC clients use TLS on port 1112, after you allow their public IPv4 CIDRs.

โ†—

HTTPS Conductor

Browser administration interface.

{ }

HTTPS SPARQL

Query editor and endpoint.

โŒ

SQL / ODBC / JDBC

TLS on port 1112. Allowed CIDRs required.

Closed until you allow it.

SQL access starts closed. Use trusted public IPv4 ranges; /32 permits a single address. Leave the field empty to remove public access. 0.0.0.0/0 is not permitted.

Control who can reach port 1112.Source screenshot ยท illustrative values ยท click to enlarge
04 / THE LIFECYCLE

Know what each control changes.#

Start and stop control the tenant. Delete terminates tenant infrastructure. Renewal and cancellation concern the Marketplace agreement. Review each in its own place.

Start Instance

Resumes a stopped tenant. Allow several minutes for endpoint health checks to recover.

Delete Instance

Terminates the tenant infrastructure. It does not cancel or change the Marketplace agreement.

Turn off auto-renewal

Prevents the next renewal. It does not end the active contract or automatically remove a tenant.

Review Usage & Billing

Shows operational estimates, including instance hours and estimated overages. AWS Marketplace remains the billing authority and issues the invoice.

Request cancellation or refund

Follow the agreement terms and contact OpenLink support or AWS Marketplace Support for cancellation, refund or early termination requests.

For the detailed procedures:Buyer Container Shell Access RunbookBuyer backup and restore guide
05 / BACKUP & RECOVERY

Protect what you put into production.#

Run backups while Virtuoso stays online. Confirm that the backup set reached durable S3 storage. If you need to recover, authorize OpenLink to restore a selected backup set during an agreed service outage.

You run the backup.#

Use your instanceโ€™s generated script from Backup & Recovery. It runs an online Virtuoso backup and waits for the S3 sync task to finish.

Buyers cannot restore directly. OpenLink seller administrators replace the active database only after explicit buyer authorization and acceptance of the expected outage.

Before you run the script#

Use a running instance, buyer IAM credentials with the one-time shell-access policy, AWS CLI v2 and the Session Manager plugin. Copy the latest tenant-specific script; do not reuse one from another buyer, instance or environment.

Finished means synced.#

The generated script reports success only when the scoped Fargate sync task exits with code 0. Retain that output and the reported durable S3 prefix.

Start the chain. Keep the recovery point.#

The first successful run establishes a full backup chain. The service then runs a per-instance daily workflow that creates incremental backups and copies them to the same durable S3 location.

Keep the managed backup intact.#

OpenLink manages the S3 bucket. Do not alter, delete or replace objects in the backup prefix. Ask OpenLink support for independent S3 verification, supplying the instance ID and prefix.

A restore replaces your active database.#

Restoring is not an online operation. It requires a service outage and can discard changes made after the selected backup. Deleting an instance is a termination action, not a recovery request.

What your restore request must include#

Buyer identity

Buyer AWS account ID and buyer portal email address.

Target instance

Instance ID and project name.

Recovery point

Backup date/time or backup-set prefix to restore.

Replacement authorization

Explicit authorization to replace the current database state.

Outage acceptance

Confirmation that the expected service outage is acceptable.

Validation contact

Technical contact to confirm post-restore validation.

Run the online backup workflow โ†“Prepare a restore request โ†“Read the OpenLink backup and restore guide โ†—
When backup or recovery needs attention

Backup & Recovery is missing#

Confirm that the instance is running and healthy. It may still be provisioning, stopped or missing required backup metadata. If the section remains absent, contact OpenLink support with the instance ID.

06 / YOUR ONBOARDING RECEIPT

Leave setup with proof.#

Use this checklist to record what you have verified. These checkmarks are a personal aid; they do not test or change your tenant.

0 / 7

Ready when you have verified each item.

YOUR OPERATING PLAYBOOK

Your operating playbook.#

From agreement to a working instance#

Seven steps from the buyer guide.

1

Choose the agreement#

Sign in to the AWS account that will own and pay for the agreement. Review the live offer, term, selected plan, taxes, overages, EULA, support and renewal terms. Select exactly one plan dimension, accept the terms and subscribe.

2

Carry the purchase into setup#

Keep the Marketplace tab open. After purchase confirmation, choose Set up your account. Use the fresh Marketplace setup context; do not reuse or bookmark a fulfillment URL.

3

Bind one buyer account#

Sign in to the existing portal account for this buyer AWS account, or create one. Use one portal account per buyer AWS account and reuse it for future setup links and portal visits.

4

Wait for the green light#

Open Instances. Wait until status is running and health is healthy before using the displayed endpoints. Provisioning can take several minutes; refresh Instances rather than repeat setup.

5

Open your first connection#

Use the tenant-specific Conductor and SPARQL HTTPS links. The instance detail page supplies the dba username and database password. Keep the password out of tickets, screenshots, source control and shell history.

6

Allow SQL only where needed#

TLS SQL access starts closed. Allow trusted public IPv4 CIDRs for port 1112. Use /32 for one address; separate ranges with commas. Leave the field empty to remove public access. The range 0.0.0.0/0 is not permitted.

7

Verify, then operate#

Confirm that Conductor and SPARQL respond and TLS SQL works from an allowed CIDR and is rejected outside it. Store credentials securely. Review renewal in AWS Marketplace, and use the linked runbooks for shell access and backup/recovery.

Run and verify an online backup#

Buyer-operated backup, ending with durable S3 sync confirmation.

1

Prepare your buyer workstation#

Sign in to the buyer portal and select the running instance. Use buyer IAM credentials with the one-time shell-access policy, AWS CLI v2 and the Session Manager plugin. Use a buyer IAM user or role, not AWS root credentials.

2

Run the instance-specific script#

Open Backup & Recovery and choose Copy Script or Download Script for Run online backup. Run that generated script in a terminal configured with the buyer IAM user or role. Keep the terminal open while the backup-sync task runs.

3

Wait for the durable copy#

The script assumes the scoped ECS Exec role, configures the backup directory, runs the Virtuoso backup online and starts a scoped Fargate task to sync the backup set to durable S3. Success is reported only when the sync task exits with code 0.

4

Retain your recovery evidence#

Record the instance ID and project name, completion date and UTC time, backup prefix or backup-set timestamp, and script output confirming successful S3 sync. The first successful run establishes a full backup chain; the service then runs daily incremental backups to the same durable S3 location.

Request and validate a controlled restore#

Buyer authorization, seller-admin recovery, and workload validation.

1

Request and authorize the recovery#

Send OpenLink support the buyer AWS account ID and portal email, instance ID and project name, selected backup date/time or prefix, explicit authorization to replace the current database, acceptance of the expected outage, and a technical contact for post-restore validation.

2

OpenLink verifies the buyer, instance ownership and requested backup set; creates a rollback copy of the current database files; stops the tenant service and restores the selected backup; restarts Virtuoso and checks health; then confirms the result and retains the most recent rollback copy for the configured retention period.

3

Validate the restored workload#

After OpenLink confirms completion, check that the portal reports running and healthy. Open HTTPS Conductor and verify the expected database content. Run application-level or SQL validation for the workload. Run a new online backup if the restored state needs immediate protection.

Connect with the native Virtuoso isql client
isql <tenant-hostname>:1112 -E dba
SQL> status();

Use your tenant hostname. Enter the password only when prompted. The guide notes that a self-signed certificate warning is expected unless your client trusts the tenant certificate.

THE QUESTIONS THAT MATTER

Buyer questions, answered.#

Where should I begin?

Start from the AWS Marketplace product page, using the AWS account that will own and pay for the agreement.

Which prices should I trust?

The live Marketplace offer is authoritative. Screenshot prices are illustrative, and the portal billing figures are operational estimates.

How many plan dimensions should I select?

Select exactly one plan dimension for the service tier you require.

Can I reuse a setup link?

Do not reuse an expired or invalid setup link. Open the active Marketplace agreement and choose Set up your account again.

Which portal account should I use?

Use one portal account per buyer AWS account. Sign in with the account already bound to that buyer account.

When is the instance ready?

Wait until instance status is running and health is healthy, then use the endpoints shown in the detail page.

Why can I not connect with TLS SQL?

Check that your source public IPv4 address is allowed and that the client uses TLS on port 1112. A self-signed certificate warning is expected unless the client trusts the tenant certificate.

Does stopping retain my data?

The guide says Stop Instance retains tenant data. Start Instance resumes the stopped tenant.

Does deleting the instance cancel the agreement?

No. Delete Instance terminates tenant infrastructure. Cancellation or changes to the Marketplace agreement must be handled separately.

Does disabling auto-renewal end the active contract?

No. It prevents the next renewal; it does not terminate the active contract or automatically remove the tenant.

How do I get container shell access?

Use the buyer-specific IAM policy, role ARN, external ID and generated AWS CLI script in the portal. Use a buyer IAM user or role, and follow the linked shell-access runbook.

How does restore differ from backup?

Online backup keeps Virtuoso running and copies the backup set to durable S3. Restore replaces the active database, requires an outage, and is performed by OpenLink seller administrators only after explicit buyer authorization.

Must I stop Virtuoso to make a backup?

No. The buyer script runs the Virtuoso backup while the service remains online. A restore is different: it requires a service outage and is performed by OpenLink seller administrators.

How do I know a backup reached durable storage?

The generated script waits for its scoped Fargate S3-sync task and reports success only when that task exits with code 0. Keep the successful output and the reported durable S3 prefix.

What happens after my first successful backup?

It establishes a full backup chain. The service then runs a per-instance daily workflow that creates incremental backups and copies them to the same durable S3 location.

Can I restore a backup myself?

No. Request a seller-admin controlled restore from OpenLink, with explicit authorization to replace the active database and confirmation that the expected outage is acceptable. Changes after the selected backup may be discarded.

Can I change objects in the managed S3 prefix?

Do not alter, delete or replace those objects. OpenLink manages the bucket. Request independent S3 object verification from support, including the instance ID and reported backup prefix.

What should I validate after a restore?

Check running and healthy status, verify expected database content through HTTPS Conductor, and run application-level or SQL validation appropriate to the workload. Make a new online backup if immediate protection of the restored state is required.

A SMALL GLOSSARY

Know the terms.#

Buyer AWS account
The AWS account that owns and pays for the Marketplace agreement.
Marketplace setup context
The one-time context supplied by AWS Marketplace after purchase to bind the buyer to a portal account.
Plan dimension
The selected service tier in the Marketplace contract; the guide instructs buyers to select exactly one.
Tenant instance
The buyer-specific Virtuoso instance provisioned for an active subscription.
Healthy
The portal health state required before using the instance endpoints.
Secure SQL access
TLS SQL client connectivity on port 1112, limited to explicitly allowed public IPv4 CIDRs.
Allowed IPv4 CIDRs
Trusted public IPv4 network ranges permitted to connect to the tenant SQL port.
Auto-renewal
The agreement setting governing the next contract renewal, separate from the current term and tenant lifecycle.
Billing estimate
An operational estimate displayed by the portal; AWS Marketplace is the billing authority.
Controlled restore
Replacement of the active database with a selected backup set, performed by OpenLink seller administrators after explicit buyer authorization and acceptance of a service outage.
Full backup chain
The backup chain established by the first successful online-backup run, followed by the serviceโ€™s daily incremental backup workflow.
Durable S3 backup prefix
The reported location identifying the instanceโ€™s backup set in the OpenLink-managed S3 bucket; retain it for recovery and support requests.
Backup-sync completion
Successful completion of the scoped Fargate task that copies the backup set to durable S3; the generated script reports success only on exit code 0.
Rollback copy
The copy of current database files that OpenLink creates before restoring a selected backup; the most recent copy is retained for the configured retention period.
Knowledge Graph Explorer โ€” explore the buyer journey#

Interactive graph visualization derived from the companion RDF. Click nodes to resolve, drag to explore. Graph data embedded from companion RDF at generation time.

Your next Virtuoso server.

Nodes: 0 Links: 0
Click SVG to activate zoom, click outside to release | Drag nodes to pin, double-click to unpin
Classes Properties Instances
SPARQL Workbench โ€” inspect the collection#

Local collection; not published. The graph address below is the intended publication address. Live recipes require the Turtle file to be loaded at that address first. Your tenantโ€™s SPARQL endpoint is supplied privately by your portal.

Query this knowledge graph on URIBurner. The editor opens on the canonical SAMPLE entity-type summary (DAV named graph). Pick a recipe, edit freely, then run live or copy.

Sample Queries#

Reproduced verbatim from the companion RDF. Execute loads the query into the workbench below and runs it live.

Your first SPARQL query
SELECT * WHERE { ?s ?p ?o } LIMIT 10

Copy this example into your healthy tenantโ€™s SPARQL editor. It may return no rows on an empty database.

Query editor#

โ–ถ Run live on URIBurner SELECT: text/x-html+tr | DESCRIBE/CONSTRUCT: text/x-html-nice-turtle

Source screenshot ยท illustrative values