https://docs.rapid7.com/insightvm/database-backuprestore-and-data-retention/#restore-a-local-backup
Using the link above is a good reference but you seem to have the general idea.
You’re right that you cannot have two console running at the same time using the same license. The license gets carried over with the backup/restore process. SO a quick high level of the process is:
- Deploy a new VM that will serve as the new console
- Use the latest installer to install the Security Console
- Create this directory: \rapid7\nexpose\nsc\backups
- Create a backup on the existing console
- Transfer the backup zip file to the new server in the directory created above
- copy the key from \rapid7\nexpose\shared\conf\creds.kspw
- Stop the nexpose service on the existing console (DO NOT UNINSTALL YET)
- Log into the new console and navigate to Administration > Maintenance and restore the newly copied backup using the creds.kspw copied above
- Verify everything is operational e.g. Scan Engines, Sites, etc
- After everything is verified, uninstall nexpose from original console or decommission server