hardtaobaoprotect.exe

IBMSpectrumProtectVersion8.
1.
0Single-SiteDiskSolutionGuideIBMIBMSpectrumProtectVersion8.
1.
0Single-SiteDiskSolutionGuideIBMNote:Beforeyouusethisinformationandtheproductitsupports,readtheinformationin"Notices"onpage137.
Thiseditionappliestoversion8,release1,modification0ofIBMSpectrumProtect(productnumbers5725-W98,5725-W99,5725-X15),andtoallsubsequentreleasesandmodificationsuntilotherwiseindicatedinneweditions.
CopyrightIBMCorporation1993,2016.
USGovernmentUsersRestrictedRights–Use,duplicationordisclosurerestrictedbyGSAADPScheduleContractwithIBMCorp.
ContentsAboutthispublicationvWhoshouldreadthisguidevPublicationsvWhat'snewinthisreleaseviiPart1.
Planningforasingle-sitediskdataprotectionsolution.
1Chapter1.
Selectingasystemsize.
.
.
3Chapter2.
Systemrequirementsforasingle-sitedisksolution5Hardwarerequirements.
5Softwarerequirements6Chapter3.
Planningworksheets.
.
.
.
9Chapter4.
Planningforstorage.
.
.
.
19Planningthestoragearrays19Chapter5.
Planningforsecurity.
.
.
.
21Planningforadministratorroles21Planningforsecurecommunications22Planningforstorageofencrypteddata22Planningfirewallaccess23Part2.
Single-sitediskimplementationofadataprotectionsolution25Chapter6.
Settingupthesystem.
.
.
27Configuringthestoragehardware27Installingtheserveroperatingsystem27InstallingonAIXsystems.
27InstallingonLinuxsystems29InstallingonWindowssystems34ConfiguringmultipathI/O34AIXsystems35Linuxsystems36Windowssystems37CreatingtheuserIDfortheserver38Preparingfilesystemsfortheserver39AIXsystems39Linuxsystems40Windowssystems41Chapter7.
InstallingtheserverandOperationsCenter43InstallingonAIXandLinuxsystems43InstallingprerequisiteRPMfilesforthegraphicalwizard44InstallingonWindowssystems44Chapter8.
ConfiguringtheserverandtheOperationsCenter47Configuringtheserverinstance.
47Installingthebackup-archiveclient48Settingoptionsfortheserver48ConfiguringsecurecommunicationswithTransportLayerSecurity50ConfiguringtheOperationsCenter51SecuringcommunicationsbetweentheOperationsCenterandthehubserver.
.
.
.
52Registeringtheproductlicense54Configuringdatadeduplication.
55Definingdataretentionrulesforyourbusiness.
.
55Definingschedulesforservermaintenanceactivities56Definingclientschedules58Chapter9.
Installingandconfiguringclients59Registeringandassigningclientstoschedules.
.
.
59Installingtheclientmanagementservice.
60Verifyingthattheclientmanagementserviceisinstalledcorrectly60ConfiguringtheOperationsCentertousetheclientmanagementservice62Chapter10.
Completingtheimplementation63Part3.
Monitoringasingle-sitedisksolution65Chapter11.
Dailymonitoringchecklist67Chapter12.
Periodicmonitoringchecklist71Chapter13.
Verifyinglicensecompliance77Chapter14.
Trackingsystemstatusbyusingemailreports79Part4.
Managingoperations.
.
.
.
81Chapter15.
ManagingtheOperationsCenter83Addingandremovingspokeservers83CopyrightIBMCorp.
1993,2016iiiAddingaspokeserver83Removingaspokeserver84Startingandstoppingthewebserver.
84Restartingtheinitialconfigurationwizard.
.
.
.
85Changingthehubserver86Restoringtheconfigurationtothepreconfigurationstate86Chapter16.
Protectingapplications,virtualmachines,andsystems.
.
.
.
89Addingclients89Selectingtheclientsoftwareandplanningtheinstallation90Specifyingrulesforbackingupandarchivingclientdata91Schedulingbackupandarchiveoperations.
.
.
94Registeringclients95Installingandconfiguringclients96Managingclientoperations.
101Evaluatingerrorsinclienterrorlogs.
101Stoppingandrestartingtheclientacceptor.
.
102Resettingpasswords103Modifyingthescopeofaclientbackup.
.
.
.
104Managingclientupgrades105Decommissioningaclientnode106Deactivatingdatatofreestoragespace108Chapter17.
Managingdatastorage109Auditingastoragepoolcontainer109Managinginventorycapacity110Managingmemoryandprocessorusage.
.
.
.
112Tuningscheduledactivities112Chapter18.
SecuringtheIBMSpectrumProtectserver.
115Securityconcepts115Managingadministrators116Changingpasswordrequirements117Securingtheserveronthesystem119Restrictinguseraccesstotheserver119Limitingaccessthroughportrestrictions.
.
.
119Chapter19.
Stoppingandstartingtheserver121Stoppingtheserver121Startingtheserverformaintenanceorreconfigurationtasks122Chapter20.
Planningtoupgradetheserver125Chapter21.
Implementingadisasterrecoveryplan127Preparingforanoutageorsystemupdate.
.
.
.
127Completingrecoverydrills127Chapter22.
Recoveringfromsystemoutages129Restoringthedatabase130Part5.
Appendixes133Appendix.
AccessibilityfeaturesfortheIBMSpectrumProtectproductfamily.
135Notices137Glossary141Index143ivIBMSpectrumProtect:Single-SiteDiskSolutionGuideAboutthispublicationThispublicationprovidesinformationaboutplanningfor,implementing,monitoring,andoperatingadataprotectionsolutionthatusesIBMSpectrumProtectbestpractices.
WhoshouldreadthisguideThisguideisintendedforanyonewhoisregisteredasanadministratorforIBMSpectrumProtect.
AsingleadministratorcanmanageIBMSpectrumProtect,orseveralpeoplecanshareadministrativeresponsibilities.
Youshouldbefamiliarwiththeoperatingsystemonwhichtheserverresidesandthecommunicationprotocolsrequiredfortheclientorserverenvironment.
Youalsoneedtounderstandthestoragemanagementpracticesofyourorganization,suchashowyouarecurrentlybackingupworkstationfilesandhowyouareusingstoragedevices.
PublicationsTheIBMSpectrumProtectproductfamilyincludesIBMSpectrumProtectSnapshot,IBMSpectrumProtectforSpaceManagement,IBMSpectrumProtectforDatabases,andseveralotherstoragemanagementproductsfromIBM.
ToviewIBMproductdocumentation,seeIBMKnowledgeCenter.
CopyrightIBMCorp.
1993,2016vviIBMSpectrumProtect:Single-SiteDiskSolutionGuideWhat'snewinthisreleaseThisreleaseofIBMSpectrumProtectintroducesnewfeaturesandupdates.
Foralistofnewfeaturesandupdates,seeWhat'snew.
CopyrightIBMCorp.
1993,2016viiviiiIBMSpectrumProtect:Single-SiteDiskSolutionGuidePart1.
Planningforasingle-sitediskdataprotectionsolutionPlanforadataprotectionimplementationthatincludesaserveratasinglesitethatusesdatadeduplication.
ImplementationoptionsYoucanconfiguretheserverforasingle-sitedisksolutioninthefollowingways:ConfiguretheserverbyusingtheOperationsCenterandadministrativecommandsThisdocumentationprovidesstepstoconfigurearangeofstoragesystemsandtheserversoftwareforyoursolution.
ConfigurationtasksarecompletedbyusingwizardsandoptionsintheOperationsCenterandIBMSpectrumProtectcommands.
Forinformationaboutgettingstarted,seethe"Planningroadmap.
"ConfiguretheserverbyusingautomatedscriptsFordetailedguidanceonimplementingasingle-sitedisksolutionwithspecificIBMStorwizestoragesystems,andbyusingautomatedscriptstoconfiguretheserver,seetheIBMSpectrumProtectblueprints.
ThedocumentationandscriptsareavailableonIBMdeveloperWorksat:IBMSpectrumProtectBlueprints.
TheblueprintdocumentationdoesnotincludestepsforinstallingandconfiguringtheOperationsCenter,orsettingupsecurecommunicationsbyusingTransportSecurityLayer(TLS).
AnoptionforusingElasticStorageServer,basedonIBMSpectrumScaletechnology,isincluded.
PlanningroadmapPlanforthesingle-sitedisksolutionbyreviewingthearchitecturelayoutinthefollowingfigureandthencompletingtheroadmaptasksthatfollowthediagram.
CopyrightIBMCorp.
1993,20161Thefollowingstepsarerequiredtoplanforasingle-sitediskenvironment.
1.
Selectyoursystemsize.
2.
Meetsystemrequirementsforhardwareandsoftware.
3.
Recordvaluesforyoursystemconfigurationintheplanningworksheets.
4.
Planforstorage.
5.
Planforsecurity.
a.
Planforadministratorroles.
b.
Planforsecurecommunications.
c.
Planforstorageofencrypteddata.
d.
Planforfirewallaccess.
2IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter1.
SelectingasystemsizeSelectthesizeoftheIBMSpectrumProtectserverbasedontheamountofdatathatyoumanageandthesystemstobeprotected.
AboutthistaskYoucanusetheinformationinthetabletodeterminethesizeoftheserverthatisrequired,basedontheamountofdatathatyoumanage.
Thefollowingtabledescribesthevolumeofdatathataservermanages.
Thisamountincludesallversions.
Thedailyamountofdataishowmuchnewdatayoubackupeachday.
Boththetotalmanageddataanddailyamountofnewdataaremeasuredasthesizebeforeanydatareduction.
Table1.
DeterminingthesizeoftheserverTotalmanageddataDailyamountofnewdatatobackupRequiredserversize45TB-180TBUpto6TBperdaySmall200TB-800TB6-20TBperdayMedium1000TB-4000TB20-100TBperdayLargeThedailybackupvaluesinthetablearebasedontestresultswith128MBsizedobjects,whichareusedbyIBMSpectrumProtectforVirtualEnvironments.
Workloadsthatconsistofobjectsthataresmallerthan128KBmightnotbeabletoachievethesedailylimits.
CopyrightIBMCorp.
1993,201634IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter2.
Systemrequirementsforasingle-sitedisksolutionAfteryouselecttheIBMSpectrumProtectsolutionthatbestfitsyourdataprotectionrequirements,reviewthesystemrequirementstoplanforimplementationofthedataprotectionsolution.
Ensurethatyoursystemmeetsthehardwareandsoftwareprerequisitesforthesizeofserverthatyouplantouse.
Relatedinformation:IBMSpectrumProtectSupportedOperatingSystemsHardwarerequirementsHardwarerequirementsforyourIBMSpectrumProtectsolutionarebasedonsystemsize.
Chooseequivalentorbettercomponentsthanthoseitemsthatarelistedtoensureoptimumperformanceforyourenvironment.
Foradefinitionofsystemsizes,seeChapter1,"Selectingasystemsize,"onpage3.
Thefollowingtableincludesminimumhardwarerequirementsfortheserverandstorage,basedonthesizeoftheserverthatyouplantobuild.
Ifyouareusinglocalpartitions(LPARs)orworkpartitions(WPARs),adjustthenetworkrequirementstotakeaccountofthepartitionsizes.
HardwarecomponentSmallsystemMediumsystemLargesystemServerprocessor6processorcores,3.
42GHzorfaster12processorcores,1.
9GHzorfaster8processorcores,3.
42GHzorfaster16processorcores,2.
0GHzorfaster20processorcores,3.
42GHz32processorcores,2.
0GHzorfasterServermemory64GBRAM128GBRAM192GBRAMNetworkv10GBEthernet(1port)v8GBFibreChanneladapter(2ports)v10GBEthernet(2ports)v8GBFibreChanneladapter(2ports)v10GBEthernet(4ports)v8GBFibreChanneladapter(4ports)Storagev1.
3TBinventory,plusspaceforOperationsCenterrecordsv46TBdeduplicateddirectory-containerstoragepoolv2TBinventory,plusspaceforOperationsCenterrecordsv200TBdeduplicateddirectory-containerstoragepoolv4TBinventory,plusspaceforOperationsCenterrecordsv1000TBdeduplicateddirectory-containerstoragepoolEstimatingdatabasespacerequirementsfortheOperationsCenterHardwarerequirementsfortheOperationsCenterareincludedintheprecedingtable,exceptforthedatabaseandarchivelogspace(inventory)thattheOperationsCenterusestoholdrecordsformanagedclients.
CopyrightIBMCorp.
1993,20165IfyoudonotplantoinstalltheOperationsCenteronthesamesystemastheserver,youcanestimatesystemrequirementsseparately.
TocalculatesystemrequirementsfortheOperationsCenter,seethesystemrequirementscalculatorintechnote1641684.
ManagingtheOperationsCenterontheserverisaworkloadthatrequiresextraspacefordatabaseoperations.
Theamountofspacedependsonthenumberofclientsthataremonitoredonaserver.
Reviewthefollowingguidelinestoestimatehowmuchspaceyourserverrequires.
DatabasespaceTheOperationsCenterusesapproximately1.
2GBofdatabasespaceforevery1000clientsthataremonitoredonaserver.
Forexample,considerahubserverwith2000clientsthatalsomanagesthreespokeservers,eachwith1500clients.
Thisconfigurationhasatotalof6500clientsacrossthefourserversandrequiresapproximately8.
4GBofdatabasespace.
Thisvalueiscalculatedbyroundingthe6500clientsuptothenextclosest1000,whichis7000:7x1.
2GB=8.
4GBArchivelogspaceTheOperationsCenterusesapproximately8GBofarchivelogspaceevery24hours,forevery1000clients.
Intheexampleof6500clientsacrossthehubserverandthespokeservers,56GBofarchivelogspaceisusedovera24-hourperiodforthehubserver.
Foreachspokeserverintheexample,thearchivelogspacethatisusedover24hoursisapproximately16GB.
Theseestimatesarebasedonthedefaultstatuscollectionintervalof5minutes.
Ifyoureducethecollectionintervalfromonceevery5minutestoonceevery3minutes,thespacerequirementsincrease.
Thefollowingexamplesshowtheapproximateincreaseinthelogspacerequirementwithacollectionintervalofonceevery3minutes:vHubserver:56GBtoapproximately94GBvEachspokeserver:16GBtoapproximately28GBIncreasethearchivelogspacesothatyouhavesufficientspaceavailabletosupporttheOperationsCenter,withoutaffectingtheexistingserveroperations.
SoftwarerequirementsDocumentationforthesingle-sitediskIBMSpectrumProtectsolutionincludesinstallationandconfigurationtasksforthefollowingoperatingsystems.
Youmustmeettheminimumsoftwarerequirementsthatarelisted.
Operatingsystemsandversions:Thefollowingtablesshowtheoperatingsystemsthatarechosenasthebasefortheimplementationinstructionsforthesolution.
Youcanimplementyoursolutionwithanyoftheoperatingsystemsandversionsthataresupported.
However,ifyouuseadifferentoperatingsystem,someoftheimplementationstepsmightdiffer,ormightnotapplyfordifferentoperatingsystemversions.
Fordetailsaboutotheroperatingsystemsandversionsthataresupportedfortheserver,seeIBMSpectrumProtectSupportedOperatingSystems.
6IBMSpectrumProtect:Single-SiteDiskSolutionGuideAIXsystemsTypeofsoftwareMinimumsoftwarerequirementsOperatingsystemIBMAIX7.
1GunziputilityThegunziputilitymustbeavailableonyoursystembeforeyouinstallorupgradetheIBMSpectrumProtectserver.
EnsurethatthegunziputilityisinstalledandthepathtoitissetinthePATHenvironmentvariable.
FilesystemtypeJFS2filesystemsAIXsystemscancachealargeamountoffilesystemdata,whichcanreducememorythatisrequiredforserverandDB2processes.
ToavoidpagingwiththeAIXserver,usetherbrwmountoptionfortheJFS2filesystem.
LessmemoryisusedforthefilesystemcacheandmoreisavailableforIBMSpectrumProtect.
Donotusethefilesystemmountoptions,ConcurrentI/O(CIO),andDirectI/O(DIO),forfilesystemsthatcontaintheIBMSpectrumProtectdatabase,logs,orstoragepoolvolumes.
Theseoptionscancauseperformancedegradationofmanyserveroperations.
IBMSpectrumProtectandDB2canstilluseDIOwhereitisbeneficialtodoso,butIBMSpectrumProtectdoesnotrequirethemountoptionstoselectivelytakeadvantageofthesetechniques.
OthersoftwareKornShell(ksh)LinuxsystemsTypeofsoftwareMinimumsoftwarerequirementsOperatingsystemRedHatEnterpriseLinux7(x86_64)LibrariesGNUClibraries,Version2.
3.
3-98.
38orlaterthatisinstalledontheIBMSpectrumProtectsystem.
RedHatEnterpriseLinuxServers:vlibaiovlibstdc++.
so.
6(32-bitand64-bitpackagesarerequired)vnumactl.
x86_64FilesystemtypeFormatdatabase-relatedfilesystemswithext3orext4.
Forstoragepool-relatedfilesystems,useXFS.
OthersoftwareKornShell(ksh)WindowssystemsTypeofsoftwareMinimumsoftwarerequirementsOperatingsystemMicrosoftWindows2012R2(64-bit)FilesystemtypeNTFSChapter2.
Systemrequirementsforasingle-sitedisksolution7TypeofsoftwareMinimumsoftwarerequirementsOthersoftwareWindows2012R2with.
NETFramework4.
5isinstalledandenabled.
ThefollowingUserAccountControlpoliciesmustbedisabled:vUserAccountControl:AdminApprovalModefortheBuilt-inAdministratoraccountvUserAccountControl:RunalladministratorsinAdminApprovalModeRelatedtasks:SettingAIXnetworkoptions8IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter3.
PlanningworksheetsUsetheplanningworksheetstorecordvaluesthatyouusetosetupyoursystemandconfiguretheIBMSpectrumProtectserver.
Usethebestpracticedefaultvaluesthatarelistedintheworksheets.
Eachworksheethelpsyoupreparefordifferentpartsofthesystemconfigurationbyusingbestpracticevalues:ServersystempreconfigurationUsethepreconfigurationworksheetstoplanforthefilesystemsanddirectoriesthatyoucreatewhenyouconfigurefilesystemsforIBMSpectrumProtectduringsystemsetup.
Alldirectoriesthatyoucreatefortheservermustbeempty.
ServerconfigurationUsetheconfigurationworksheetswhenyouconfiguretheserver.
Defaultvaluesarerecommendedformostitems,exceptwherenoted.
AIXTable2.
WorksheetforpreconfigurationofanAIXserversystemItemDefaultvalueYourvalueMinimumdirectorysizeNotesTCP/IPportaddressforcommunicationswiththeserver1500NotapplicableEnsurethatthisportisavailablewhenyouinstallandconfiguretheoperatingsystemTheportnumbercanbeanumberintherange1024-32767.
Directoryfortheserverinstance/home/tsminst1/tsminst150GBIfyouchangethevaluefortheserverinstancedirectoryfromthedefault,alsomodifytheDB2instanceownervalueinTable3onpage11.
Directoryforserverinstallation/Availablespacethatisrequiredforthedirectory:5GBDirectoryforserverinstallation/usrAvailablespacethatisrequiredforthedirectory:5GBDirectoryforserverinstallation/varAvailablespacethatisrequiredforthedirectory:5GBDirectoryforserverinstallation/tmpAvailablespacethatisrequiredforthedirectory:5GBCopyrightIBMCorp.
1993,20169Table2.
WorksheetforpreconfigurationofanAIXserversystem(continued)ItemDefaultvalueYourvalueMinimumdirectorysizeNotesDirectoryforserverinstallation/optAvailablespacethatisrequiredforthedirectory:10GBDirectoryfortheactivelog/tsminst1/TSMalogvSmallandmedium:140GBvLarge:300GBWhenyoucreatetheactivelogduringtheinitialconfigurationoftheserver,setthesizeto128GB.
Directoryforthearchivelog/tsminst1/TSMarchlogvSmall:1TBvMedium:3TBvLarge:4TBDirectoriesforthedatabase/tsminst1/TSMdbspace00/tsminst1/TSMdbspace01/tsminst1/TSMdbspace02/tsminst1/TSMdbspace03.
.
.
Minimumtotalspaceforalldirectories:vSmall:Atleast1TBvMedium:Atleast2TBvLarge:4TBCreateaminimumnumberoffilesystemsforthedatabase,dependingonthesizeofyoursystem:vSmall:Atleast4filesystemsvMedium:Atleast4filesystemsvLarge:Atleast8filesystemsDirectoriesforstorage/tsminst1/TSMfile00/tsminst1/TSMfile01/tsminst1/TSMfile02/tsminst1/TSMfile03.
.
.
Minimumtotalspaceforalldirectories:vSmall:Atleast38TBvMedium:Atleast180TBvLarge:Atleast980TBCreateaminimumnumberoffilesystemsforstorage,dependingonthesizeofyoursystem:vSmall:Atleast10filesystemsvMedium:Atleast20filesystemsvLarge:Atleast40filesystems10IBMSpectrumProtect:Single-SiteDiskSolutionGuideTable2.
WorksheetforpreconfigurationofanAIXserversystem(continued)ItemDefaultvalueYourvalueMinimumdirectorysizeNotesDirectoriesfordatabasebackup/tsminst1/TSMbkup00/tsminst1/TSMbkup01/tsminst1/TSMbkup02/tsminst1/TSMbkup03Minimumtotalspaceforalldirectories:vSmall:Atleast3TBvMedium:Atleast10TBvLarge:Atleast16TBCreateaminimumnumberoffilesystemsforbackingupthedatabase,dependingonthesizeofyoursystem:vSmall:Atleast2filesystemsvMedium:Atleast4filesystemsvLarge:Atleast4filesystemsNote:Thefirstdatabasebackupdirectoryisalsousedforthearchivelogfailoverdirectory.
Table3.
WorksheetforIBMSpectrumProtectconfigurationItemDefaultvalueYourvalueNotesDB2instanceownertsminst1IfyouchangedthevaluefortheserverinstancedirectoryinTable2onpage9fromthedefault,alsomodifythevaluefortheDB2instanceowner.
DB2instanceownerpasswordpassw0rdSelectadifferentvaluefortheinstanceownerpasswordthanthedefault.
Ensurethatyourecordthisvalueinasecurelocation.
PrimarygroupfortheDB2instanceownertsmsrvrsServernameThedefaultvaluefortheservernameisthesystemhostname.
Serverpasswordpassw0rdSelectadifferentvaluefortheserverpasswordthanthedefault.
Ensurethatyourecordthisvalueinasecurelocation.
AdministratorID:userIDfortheserverinstanceadminAdministratorIDpasswordpassw0rdSelectadifferentvaluefortheadministratorpasswordthanthedefault.
Ensurethatyourecordthisvalueinasecurelocation.
Chapter3.
Planningworksheets11Table3.
WorksheetforIBMSpectrumProtectconfiguration(continued)ItemDefaultvalueYourvalueNotesSchedulestarttime22:00Thedefaultschedulestarttimebeginstheclientworkloadphase,whichispredominantlytheclientbackupandarchiveactivities.
Duringtheclientworkloadphase,serverresourcessupportclientoperations.
Normally,theseoperationsarecompletedduringthenightlyschedulewindow.
Schedulesforservermaintenanceoperationsaredefinedtobegin10hoursafterthestartoftheclientbackupwindow.
LinuxTable4.
WorksheetforpreconfigurationofaLinuxserversystemItemDefaultvalueYourvalueMinimumdirectorysizeNotesTCP/IPportaddressforcommunicationswiththeserver1500NotapplicableEnsurethatthisportisavailablewhenyouinstallandconfiguretheoperatingsystemTheportnumbercanbeanumberintherange1024-32767.
Directoryfortheserverinstance/home/tsminst1/tsminst125GBIfyouchangethevaluefortheserverinstancedirectoryfromthedefault,alsomodifytheDB2instanceownervalueinTable5onpage13.
Directoryfortheactivelog/tsminst1/TSMalogvSmallandmedium:140GBvLarge:300GBDirectoryforthearchivelog/tsminst1/TSMarchlogvSmall:1TBvMedium:3TBvLarge:4TB12IBMSpectrumProtect:Single-SiteDiskSolutionGuideTable4.
WorksheetforpreconfigurationofaLinuxserversystem(continued)ItemDefaultvalueYourvalueMinimumdirectorysizeNotesDirectoriesforthedatabase/tsminst1/TSMdbspace00/tsminst1/TSMdbspace01/tsminst1/TSMdbspace02/tsminst1/TSMdbspace03.
.
.
Minimumtotalspaceforalldirectories:vSmall:Atleast1TBvMedium:Atleast2TBvLarge:4TBCreateaminimumnumberoffilesystemsforthedatabase,dependingonthesizeofyoursystem:vSmall:Atleast4filesystemsvMedium:Atleast4filesystemsvLarge:Atleast8filesystemsDirectoriesforstorage/tsminst1/TSMfile00/tsminst1/TSMfile01/tsminst1/TSMfile02/tsminst1/TSMfile03.
.
.
Minimumtotalspaceforalldirectories:vSmall:Atleast38TBvMedium:Atleast180TBvLarge:Atleast980TBCreateaminimumnumberoffilesystemsforstorage,dependingonthesizeofyoursystem:vSmall:Atleast10filesystemsvMedium:Atleast20filesystemsvLarge:Atleast40filesystemsDirectoriesfordatabasebackup/tsminst1/TSMbkup00/tsminst1/TSMbkup01/tsminst1/TSMbkup02/tsminst1/TSMbkup03Minimumtotalspaceforalldirectories:vSmall:Atleast3TBvMedium:Atleast10TBvLarge:Atleast16TBCreateaminimumnumberoffilesystemsforbackingupthedatabase,dependingonthesizeofyoursystem:vSmall:Atleast2filesystemsvMedium:Atleast4filesystemsvLarge:Atleast4filesystemsNote:Thefirstdatabasebackupdirectoryisalsousedforthearchivelogfailoverdirectory.
Table5.
WorksheetforIBMSpectrumProtectconfigurationItemDefaultvalueYourvalueNotesDB2instanceownertsminst1IfyouchangedthevaluefortheserverinstancedirectoryinTable4onpage12fromthedefault,alsomodifythevaluefortheDB2instanceowner.
Chapter3.
Planningworksheets13Table5.
WorksheetforIBMSpectrumProtectconfiguration(continued)ItemDefaultvalueYourvalueNotesDB2instanceownerpasswordpassw0rdSelectadifferentvaluefortheinstanceownerpasswordthanthedefault.
Ensurethatyourecordthisvalueinasecurelocation.
PrimarygroupfortheDB2instanceownertsmsrvrsServernameThedefaultvaluefortheservernameisthesystemhostname.
Serverpasswordpassw0rdSelectadifferentvaluefortheserverpasswordthanthedefault.
Ensurethatyourecordthisvalueinasecurelocation.
AdministratorID:userIDfortheserverinstanceadminAdministratorIDpasswordpassw0rdSelectadifferentvaluefortheadministratorpasswordthanthedefault.
Ensurethatyourecordthisvalueinasecurelocation.
Schedulestarttime22:00Thedefaultschedulestarttimebeginstheclientworkloadphase,whichispredominantlytheclientbackupandarchiveactivities.
Duringtheclientworkloadphase,serverresourcessupportclientoperations.
Normally,theseoperationsarecompletedduringthenightlyschedulewindow.
Schedulesforservermaintenanceoperationsaredefinedtobegin10hoursafterthestartoftheclientbackupwindow.
WindowsBecausemanyvolumesarecreatedfortheserver,configuretheserverbyusingtheWindowsfeatureofmappingdiskvolumestodirectoriesratherthantodriveletters.
Forexample,C:\tsminst1\TSMdbpsace00isamountpointtoavolumewithitsownspace.
ThevolumeismappedtoadirectoryundertheC:drive,butdoesnottakeupspacefromtheC:drive.
Theexceptionistheserverinstancedirectory,C:\tsminst1,whichcanbeamountpointoraregulardirectory.
14IBMSpectrumProtect:Single-SiteDiskSolutionGuideTable6.
WorksheetforpreconfigurationofaWindowsserversystemItemDefaultvalueYourvalueMinimumdirectorysizeNotesTCP/IPportaddressforcommunicationswiththeserver1500NotapplicableEnsurethatthisportisavailablewhenyouinstallandconfiguretheoperatingsystemTheportnumbercanbeanumberintherange1024-32767.
DirectoryfortheserverinstanceC:\tsminst125GBIfyouchangethevaluefortheserverinstancedirectoryfromthedefault,alsomodifytheDB2instanceownervalueinTable7onpage16.
DirectoryfortheactivelogC:\tsminst1\TSMalogvSmallandmedium:140GBvLarge:300GBDirectoryforthearchivelogC:\tsminst1\TSMarchlogvSmall:1TBvMedium:3TBvLarge:4TBDirectoriesforthedatabaseC:\tsminst1\TSMdbspace00C:\tsminst1\TSMdbspace01C:\tsminst1\TSMdbspace02C:\tsminst1\TSMdbspace03.
.
.
Minimumtotalspaceforalldirectories:vSmall:Atleast1TBvMedium:Atleast2TBvLarge:4TBCreateaminimumnumberoffilesystemsforthedatabase,dependingonthesizeofyoursystem:vSmall:Atleast4filesystemsvMedium:Atleast4filesystemsvLarge:Atleast8filesystemsDirectoriesforstorageC:\tsminst1\TSMfile00C:\tsminst1\TSMfile01C:\tsminst1\TSMfile02C:\tsminst1\TSMfile03.
.
.
Minimumtotalspaceforalldirectories:vSmall:Atleast38TBvMedium:Atleast180TBvLarge:Atleast980TBCreateaminimumnumberoffilesystemsforstorage,dependingonthesizeofyoursystem:vSmall:Atleast10filesystemsvMedium:Atleast20filesystemsvLarge:Atleast40filesystemsChapter3.
Planningworksheets15Table6.
WorksheetforpreconfigurationofaWindowsserversystem(continued)ItemDefaultvalueYourvalueMinimumdirectorysizeNotesDirectoriesfordatabasebackupC:\tsminst1\TSMbkup00C:\tsminst1\TSMbkup01C:\tsminst1\TSMbkup02C:\tsminst1\TSMbkup03Minimumtotalspaceforalldirectories:vSmall:Atleast3TBvMedium:Atleast10TBvLarge:Atleast16TBCreateaminimumnumberoffilesystemsforbackingupthedatabase,dependingonthesizeofyoursystem:vSmall:Atleast2filesystemsvMedium:Atleast4filesystemsvLarge:Atleast4filesystemsNote:Thefirstdatabasebackupdirectoryisalsousedforthearchivelogfailoverdirectory.
Table7.
WorksheetforIBMSpectrumProtectconfigurationItemDefaultvalueYourvalueNotesDB2instanceownertsminst1IfyouchangedthevaluefortheserverinstancedirectoryinTable6onpage15fromthedefault,alsomodifythevaluefortheDB2instanceowner.
DB2instanceownerpasswordpAssW0rdSelectadifferentvaluefortheinstanceownerpasswordthanthedefault.
Ensurethatyourecordthisvalueinasecurelocation.
ServernameThedefaultvaluefortheservernameisthesystemhostname.
Serverpasswordpassw0rdSelectadifferentvaluefortheserverpasswordthanthedefault.
Ensurethatyourecordthisvalueinasecurelocation.
AdministratorID:userIDfortheserverinstanceadminAdministratorIDpasswordpassw0rdSelectadifferentvaluefortheadministratorpasswordthanthedefault.
Ensurethatyourecordthisvalueinasecurelocation.
16IBMSpectrumProtect:Single-SiteDiskSolutionGuideTable7.
WorksheetforIBMSpectrumProtectconfiguration(continued)ItemDefaultvalueYourvalueNotesSchedulestarttime22:00Thedefaultschedulestarttimebeginstheclientworkloadphase,whichispredominantlytheclientbackupandarchiveactivities.
Duringtheclientworkloadphase,serverresourcessupportclientoperations.
Normally,theseoperationsarecompletedduringthenightlyschedulewindow.
Schedulesforservermaintenanceoperationsaredefinedtobegin10hoursafterthestartoftheclientbackupwindow.
Chapter3.
Planningworksheets1718IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter4.
PlanningforstorageChoosethemosteffectivestoragetechnologyforIBMSpectrumProtectcomponentstoensureefficientserverperformanceandoperations.
Storagehardwaredeviceshavedifferentcapacityandperformancecharacteristics,whichdeterminehowtheycanbeusedeffectivelywithIBMSpectrumProtect.
Forgeneralguidanceonselectingtheappropriatestoragehardwareandsetupforyoursolution,reviewthefollowingguidelines.
DatabaseandactivelogvUseafastdiskfortheIBMSpectrumProtectdatabaseandactivelog,forexamplewiththefollowingcharacteristics:–Highperformance,15krpmdiskwithFibreChannelorserial-attachedSCSI(SAS)interface–Solid-statedisk(SSD)vIsolatetheactivelogfromthedatabaseunlessyouuseSSDorflashhardwarevWhenyoucreatearraysforthedatabase,useRAIDlevel5StoragepoolvYoucanuselessexpensiveandslowerdisksforthestoragepoolvThestoragepoolcansharedisksforthearchiveloganddatabasebackupstoragevUseRAIDlevel6forstoragepoolarraystoaddprotectionagainstdoubledrivefailureswhenyouuselargedisktypesRelatedreference:StoragesystemrequirementsandreducingtheriskofdatacorruptionPlanningthestoragearraysPreparefordiskstorageconfigurationbyplanningforRAIDarraysandvolumes,accordingtothesizeofyourIBMSpectrumProtectsystem.
YoudesignstoragearrayswithsizeandperformancecharacteristicsthataresuitableforoneoftheIBMSpectrumProtectserverstoragecomponents,suchastheserverdatabaseorastoragepool.
Thestorageplanningactivitymusttakeaccountofdrivetype,RAIDlevel,numberofdrives,thenumberofsparedrives,andsoon.
Inthesolutionconfigurations,storagegroupscontaininternal-storageRAIDarraysandconsistofmultiplephysicaldisksthatarepresentedaslogicalvolumestothesystem.
Whenyouconfigurethediskstoragesystem,youcreatestoragegroups,ordatastoragepools,andthencreatestoragearraysinthegroups.
Youcreatevolumes,orLUNs,fromthestoragegroups.
Thestoragegroupdefineswhichdisksprovidethestoragethatmakesupthevolume.
Whenyoucreatevolumes,makethemfullyallocated.
Fasterdiskstypesareusedtoholdthedatabasevolumesandactivelogvolumes.
Slowerdisktypescanbeusedforthestoragepoolvolumes,archivelog,anddatabasebackupvolumes.
Table8onpage20andTable9onpage20describethelayoutrequirementsforstoragegroupsandvolumeconfiguration.
CopyrightIBMCorp.
1993,201619Table8.
ComponentsofstoragegroupconfigurationComponentDetailsServerstoragerequirementHowthestorageisusedbytheserver.
DisktypeSizeandspeedforthedisktypethatisusedforthestoragerequirement.
DiskquantityNumberofeachdisktypethatisneededforthestoragerequirement.
HotsparecapacityNumberofdisksthatarereservedassparestotakeoverifdiskfailuresoccur.
RAIDlevelLevelofRAIDarraythatisusedforlogicalstorage.
TheRAIDleveldefinesthetypeofredundancythatisprovidedbythearray,forexample5or6.
RAIDarrayquantityNumberofRAIDarraystobecreated.
DDMsperRAIDarrayHowmanydiskdrivemodules(DDMs)aretobeusedineachoftheRAIDarrays.
UsablesizeperRAIDarraySizethatisavailablefordatastorageineachRAIDarrayafteraccountingforspacethatislostduetoredundancy.
TotalusablesizeTotalsizethatisavailablefordatastorageintheRAIDarrays:[QuantityxUsablesize].
SuggestedstoragegroupandarraynamesPreferrednametouseforMDisksandMDiskgroups.
UsageServercomponentthatusespartofthephysicaldisk.
Table9.
ComponentsofvolumeconfigurationComponentDetailsServerstoragerequirementRequirementforwhichthephysicaldiskisused.
VolumenameUniquenamethatisgiventoaspecificvolume.
StoragegroupNameofthestoragegroupfromwhichthespaceisobtainedtocreatethevolume.
SizeSizeofeachvolume.
IntendedservermountpointDirectoryontheserversystemwherethevolumeismounted.
QuantityNumberofvolumestocreateforaspecificrequirement.
Usethesamenamingstandardforeachvolumethatiscreatedforthesamerequirement.
UsageServercomponentthatusespartofthephysicaldisk.
ExamplesConfigurationexamplesforstoragegroupsandvolumesareavailableatthefollowinglink:Examplesofworksheetsforplanningstoragearrays.
Theexamplesshowhowtoplanthestoragefordifferentserversizes.
Intheexampleconfigurations,thereisaone-to-onemappingbetweendisksandstoragegroups.
Youcandownloadtheexamplesandedittheworksheetstoplanthestorageconfigurationforyourserver.
20IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter5.
PlanningforsecurityPlantoprotectthesecurityofsystemsintheIBMSpectrumProtectsolutionwithaccessandauthenticationcontrols,andconsiderencryptingdataandpasswordtransmission.
PlanningforadministratorrolesDefinetheauthoritylevelsthatyouwanttoassigntoadministratorswhohaveaccesstotheIBMSpectrumProtectsolution.
Youcanassignoneofthefollowinglevelsofauthoritytoadministrators:SystemAdministratorswhohavesystemauthorityhavethehighestlevelofauthority.
Administratorswiththislevelofauthoritycancompleteanytask.
Theycanmanageallpolicydomainsandstoragepools,andgrantauthoritytootheradministrators.
PolicyAdministratorswhohavepolicyauthoritycanmanageallofthetasksthatarerelatedtopolicymanagement.
Thisprivilegecanbeunrestricted,orcanberestrictedtospecificpolicydomains.
StorageAdministratorswhohaveStorageauthoritycanallocateandcontrolstorageresourcesfortheserver.
OperatorAdministratorswhohaveOperatorauthoritycancontroltheimmediateoperationoftheserverandtheavailabilityofstoragemediasuchastapelibrariesanddrives.
ThescenariosinTable10provideexamplesaboutwhyyoumightwanttoassignvaryinglevelsofauthoritysothatadministratorscanperformtasks:Table10.
ScenariosforadministratorrolesScenarioTypeofadministratorIDtosetupAnadministratoratasmallcompanymanagestheserverandisresponsibleforallserveractivities.
vSystemauthority:1administratorIDAnadministratorformultipleserversalsomanagestheoverallsystem.
Severalotheradministratorsmanagetheirownstoragepools.
vSystemauthorityonallservers:1administratorIDfortheoverallsystemadministratorvStorageauthorityfordesignatedstoragepools:1administratorIDforeachoftheotheradministratorsAnadministratormanages2servers.
Anotherpersonhelpswiththeadministrationtasks.
Twoassistantsareresponsibleforhelpingtoensurethatimportantsystemsarebackedup.
EachassistantisresponsibleformonitoringthescheduledbackupsononeoftheIBMSpectrumProtectservers.
vSystemauthorityonbothservers:2administratorIDsvOperatorauthority:2administratorIDsfortheassistantswithaccesstotheserverthateachpersonisresponsibleforCopyrightIBMCorp.
1993,201621PlanningforsecurecommunicationsPlanforprotectingcommunicationsamongtheIBMSpectrumProtectsolutioncomponents.
Determinethelevelofprotectionthatisrequiredforyourdata,basedonregulationsandbusinessrequirementsunderwhichyourcompanyoperates.
Ifyourbusinessrequiresahighlevelofsecurityforpasswordsanddatatransmission,planonimplementingsecurecommunicationwithTransportLayerSecurity(TLS)orSecureSocketsLayer(SSL)protocols.
TLSandSSLprovidesecurecommunicationsbetweentheserverandclient,butcanaffectsystemperformance.
TLS,aformofSSL,isrequiredforallLDAPpasswordcommunications.
IfyoudecidetouseTLSorSSL,usetheprotocolonlyforsessionswhereitisnecessaryandaddprocessorresourcesontheservertomanagetheincreasedrequirements.
Youcanalsotryotheroptions,suchasnetworkingdevicessuchasroutersandswitchesthatprovidetheTLSorSSLfunction.
YoucanuseTLSandSSLtoprotectsomeorallofthedifferentpossiblecommunicationpaths,forexample:vOperationsCenter:browsertohub;hubtospokevClienttoservervServertoserver:nodereplicationRelatedtasks:SecuringcommunicationsPlanningforstorageofencrypteddataDeterminewhetheryourcompanyrequiresstoreddatatobeencrypted,andchoosetheoptionthatbestsuitsyourneeds.
Ifyourcompanyrequiresthedatainstoragepoolstobeencrypted,thenyouhavetheoptionofusingIBMSpectrumProtectencryption,oranexternaldevicesuchastapeforencryption.
IfyouchooseIBMSpectrumProtecttoencryptthedata,extracomputingresourcesarerequiredattheclientthatmightaffecttheperformanceforthebackingupandrestoreprocesses.
Relatedinformation:technote196363522IBMSpectrumProtect:Single-SiteDiskSolutionGuidePlanningfirewallaccessDeterminethefirewallsthataresetandtheportsthatmustbeopenfortheIBMSpectrumProtectsolutiontowork.
Table11describestheportsthatareusedbytheserver,client,andOperationsCenter.
Table11.
Portsthatareusedbytheserver,client,andOperationsCenterItemDefaultDirectionDescriptionBaseport(TCPPORT)1500Outbound/InboundEachserverinstancerequiresauniqueTCPport.
YoucanspecifyanalternativeTCPportnumber.
YoucanusetheTCPADMINPORToptionandADMINONCLIENTPORToptiontosetTCPportvalues.
SSLBasePort(SSLTCPPORT)NodefaultOutbound/InboundThisportisusedonlyifSSLcommunicationisenabled.
AservercansupportbothSSLandnon-SSLcommunicationifbothTCPPORTandSSLTCPPORTarespecified.
SMB45Inbound/OutboundThisportisusedbyconfigurationwizardsthatcommunicatebyusingnativeprotocolswithmultiplehosts.
SSH22Inbound/OutboundThisportisusedbyconfigurationwizardsthatcommunicatebyusingnativeprotocolswithmultiplehosts.
SMTP25OutboundThisportisusedtosendemailalertsfromtheserver.
NDMPNodefaultInbound/OutboundTheservermustbeabletoopenanoutboundNDMPcontrolportconnectiontotheNASdevice.
TheoutboundcontrolportistheLow-LevelAddressinthedatamoverdefinitionfortheNASdevice.
DuringanNDMPfiler-to-serverrestore,theservermustbeabletoopenanoutboundNDMPdataconnectiontotheNASdevice.
ThedataconnectionportthatisusedduringarestorecanbeconfiguredontheNASdevice.
DuringNDMPfiler-to-serverbackups,theNASdevicemustbeabletoopenoutbounddataconnectionstotheserverandtheservermustbeabletoacceptinboundNDMPdataconnections.
YoucanusetheserveroptionNDMPPORTRANGEtorestrictthesetofportsavailableforuseasNDMPdataconnections.
Youcanconfigureafirewallforconnectionstotheseports.
ReplicationNodefaultOutbound/InboundTheportandprotocolfortheoutboundportforreplicationaresetbytheDEFINESERVERcommandthatisusedtosetupreplication.
TheinboundportsforreplicationaretheTCPportsandSSLportsthatthesourceservernamesintheDEFINESERVERcommand.
Chapter5.
Planningforsecurity23Table11.
Portsthatareusedbytheserver,client,andOperationsCenter(continued)ItemDefaultDirectionDescriptionClientscheduleportClientport:1501OutboundTheclientlistensontheportthatisnamedandcommunicatestheportnumbertotheserver.
Theservercontactstheclientifserverpromptedschedulingisused.
Youcanspecifyanalternativeportnumberintheclientoptionsfile.
LongrunningsessionsKEEPALIVEsetting:YESOutboundWhentheKEEPALIVEoptionisenabled,keepalivepacketsaresentduringclient-serversessionstopreventthefirewallsoftwarefromclosinglong-running,inactiveconnections.
OperationsCenterHTTPS:11090InboundTheseportsareusedfortheOperationsCenterwebbrowser.
Youcanspecifyanalternativeportnumber.
ClientmanagementserviceportClientport:9028InboundTheclientmanagementserviceportmustbeaccessiblefromtheOperationsCenter.
Ensuretherearenofirewallsthatcanpreventconnections.
TheclientmanagementserviceusestheTCPportoftheserverfortheclientnodeforauthenticationbyusinganadministrativesession.
24IBMSpectrumProtect:Single-SiteDiskSolutionGuidePart2.
Single-sitediskimplementationofadataprotectionsolutionThesingle-sitedisksolutionisconfiguredatonesiteandusesdatadeduplication.
ImplementationroadmapThefollowingstepsarerequiredtosetuptheIBMSpectrumProtectsingle-sitediskenvironment.
1.
Setupthesystem.
a.
Configurethestoragehardwareandsetupstoragearraysforyourenvironmentsize.
b.
Installtheserveroperatingsystem.
c.
ConfiguremultipathI/O.
d.
CreatetheuserIDfortheserverinstance.
e.
PreparefilesystemsforIBMSpectrumProtect.
2.
InstalltheserverandOperationsCenter.
3.
ConfiguretheserverandOperationsCenter.
a.
Completetheinitialconfigurationoftheserver.
b.
Setserveroptions.
c.
ConfigureSecureSocketsLayerfortheserverandclient.
d.
ConfiguretheOperationsCenter.
e.
RegisteryourIBMSpectrumProtectlicense.
f.
Configuredatadeduplication.
g.
Definedataretentionrulesforyourbusiness.
h.
Defineservermaintenanceschedules.
i.
Defineclientschedules.
4.
Installandconfigureclients.
a.
Registerandassignclientstoschedules.
b.
Installandverifytheclientmanagementservice.
c.
ConfiguretheOperationsCentertousetheclientmanagementservice.
5.
Completetheimplementation.
CopyrightIBMCorp.
1993,20162526IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter6.
SettingupthesystemTosetupthesystem,youmustfirstconfigureyourdiskstoragehardwareandtheserversystemforIBMSpectrumProtect.
ConfiguringthestoragehardwareToconfigureyourstoragehardware,reviewgeneralguidancefordisksystemsandIBMSpectrumProtect.
Procedure1.
Provideaconnectionbetweentheserverandthestorage.
vUseaswitchordirectconnectionforFibreChannelconnections.
vConsiderthenumberofportsthatareconnectedandaccountfortheamountofbandwidththatisneeded.
vConsiderthenumberofportsontheserverandthenumberofhostportsonthedisksystemthatareconnected.
2.
Verifythatdevicedriversandfirmwarefortheserversystem,adapters,andoperatingsystemarecurrentandattherecommendedlevels.
3.
Configurestoragearrays.
Makesurethatyouplannedproperlytoensureoptimalperformance.
SeeChapter4,"Planningforstorage,"onpage19formoreinformation.
4.
Ensurethattheserversystemhasaccesstodiskvolumesthatarecreated.
Completethefollowingsteps:a.
IfthesystemisconnectedtoaFibreChannelswitch,zonetheservertoseethedisks.
b.
Mapallofthevolumestotellthedisksystemthatthisspecificserverisallowedtoseeeachdisk.
InstallingtheserveroperatingsystemInstalltheoperatingsystemontheserversystemandensurethatIBMSpectrumProtectserverrequirementsaremet.
Adjustoperatingsystemsettingsasdirected.
InstallingonAIXsystemsCompletethefollowingstepstoinstallAIXontheserversystem.
Procedure1.
InstallAIXVersion7.
1TL4,SP2,orlateraccordingtothemanufacturerinstructions.
2.
ConfigureyourTCP/IPsettingsaccordingtotheoperatingsysteminstallationinstructions.
3.
Openthe/etc/hostsfileandcompletethefollowingactions:vUpdatethefiletoincludetheIPaddressandhostnamefortheserver.
Forexample:192.
0.
2.
7server.
yourdomain.
comservervVerifythatthefilecontainsanentryforlocalhostwithanaddressof127.
0.
0.
1.
Forexample:CopyrightIBMCorp.
1993,201627127.
0.
0.
1localhost4.
EnableAIXI/Ocompletionportsbyissuingthefollowingcommand:chdev-liocp0-P5.
Optional:ServerperformancecanbeaffectedbytheOlsontimezonedefinition.
Ifperformanceisafactorinyourenvironment,youcanchangeyoursystemtimezoneformatfromOlsontoPOSIX.
Completethefollowingsteps:a.
Usethefollowingcommandformattoupdatethetimezonesetting:chtz=local_timezone,date/time,date/timeForexample,ifyoulivedinTucson,Arizona,whereMountainStandardTimeisused,youwouldissuethefollowingcommandtochangetothePOSIXformat:chtzMST7MDT,M3.
2.
0/2:00:00,M11.
1.
0/2:00:00b.
Addanentryinthe.
profileoftheinstanceusersothatthefollowingenvironmentisset:exportMALLOCOPTIONS=multiheap:16c.
Setthesystemtocreatefullapplicationcorefiles.
Issuethefollowingcommand:chdev-lsys0-afullcore=true-P6.
ForcommunicationswiththeserverandOperationsCenter,makesurethatthefollowingportsareopenonanyfirewallsthatmightexist:vForcommunicationswiththeserver,openport1500vForsecurecommunicationswiththeOperationsCenter,openport11090onthehubserverIfyouarenotusingthedefaultportvalues,makesurethattheportsyouareusingareopen.
7.
EnableTCPhighperformanceenhancements.
Issuethefollowingcommand:no-p-orfc1323=18.
Foroptimalthroughputandreliability,bondfour10GbEthernetportstogether.
ThroughSMIT,bondtheportstogetherbyusingEtherchannel.
Thefollowingsettingswereusedduringtesting:mode8023adauto_recoveryyesEnableautomaticrecoveryafterfailoverbackup_adapterNONEAdapterusedwhenwholechannelfailshash_modesrc_dst_portDetermineshowoutgoingadapterischosenintervallongDeterminesintervalvalueforIEEE802.
3admodemode8023adEtherChannelmodeofoperationnetaddr0Addresstopingnoloss_failoveryesEnablelosslessfailoverafterpingfailurenum_retries3Timestoretrypingbeforefailingretry_time1Waittime(inseconds)betweenpingsuse_alt_addrnoEnableAlternateEtherChannelAddressuse_jumbo_framenoEnableGigabitEthernetJumboFrames9.
Verifythatuserprocessresourcelimits,alsoknownasulimits,aresetaccordingtoguidelinesinTable12.
Ifulimitvaluesarenotsetcorrectly,youmightexperienceserverinstabilityorafailureoftheservertorespond.
Table12.
Userlimits(ulimit)valuesUserlimittypeSettingValueCommandtoqueryvalueMaximumsizeofcorefilescreatedcoreUnlimitedulimit-Hc28IBMSpectrumProtect:Single-SiteDiskSolutionGuideTable12.
Userlimits(ulimit)values(continued)UserlimittypeSettingValueCommandtoqueryvalueMaximumsizeofadatasegmentforaprocessdataUnlimitedulimit-HdMaximumfilesizefsizeUnlimitedulimit-HfMaximumnumberofopenfilesnofile65536ulimit-HnMaximumamountofprocessortimeinsecondscpuUnlimitedulimit-HtMaximumnumberofuserprocessesnproc16384ulimit-HuIfyouneedtomodifyanyuserlimitvalues,followtheinstructionsinthedocumentationforyouroperatingsystem.
InstallingonLinuxsystemsCompletethefollowingstepstoinstallLinuxx86_64ontheserversystem.
BeforeyoubeginTheoperatingsystemisinstalledontheinternalharddisks.
ConfiguretheinternalharddisksbyusingahardwareRAID1array.
Forexample,ifyouareconfiguringasmallsystem,thetwo300GBinternaldisksaremirroredinRAID1sothatasingle300GBdiskappearsavailabletotheoperatingsysteminstaller.
Procedure1.
InstallRedHatEnterpriseLinuxVersion7.
1orlater,accordingtothemanufacturerinstructions.
ObtainabootableDVDthatcontainsRedHatEnterpriseLinuxVersion7.
1andstartyoursystemfromthisDVD.
Seethefollowingguidanceforinstallationoptions.
Ifanitemisnotmentionedinthefollowinglist,leavethedefaultselection.
a.
AfteryoustarttheDVD,chooseInstallorupgradeanexistingsystemfromthemenu.
b.
OntheWelcomescreen,selectTestthismedia&installRedHatEnterpriseLinux7.
1.
c.
Selectyourlanguageandkeyboardpreferences.
d.
Selectyourlocationtosetthecorrecttimezone.
e.
SelectSoftwareSelectionandthenonthenextscreen,selectServerwithGUI.
f.
Fromtheinstallationsummarypage,clickInstallationDestinationandverifythefollowingitems:vThelocal300GBdiskisselectedastheinstallationtarget.
vUnderOtherStorageOptions,Automaticallyconfigurepartitioningisselected.
ClickDone.
g.
ClickBeginInstallation.
Aftertheinstallationstarts,settherootpasswordforyourrootuseraccount.
Chapter6.
Settingupthesystem29Aftertheinstallationiscompleted,restartthesystemandloginastherootuser.
Issuethedfcommandtoverifyyourbasicpartitioning.
Forexample,onatestsystem,theinitialpartitioningproducedthefollowingresult:[root@tvapp02]#df–hFilesystemSizeUsedAvailUse%Mountedon/dev/mapper/rhel-root50G3.
0G48G6%/devtmpfs32G032G0%/devtmpfs32G92K32G1%/dev/shmtmpfs32G8.
8M32G1%/runtmpfs32G032G0%/sys/fs/cgroup/dev/mapper/rhel-home220G37M220G1%/home/dev/sda1497M124M373M25%/boot2.
ConfigureyourTCP/IPsettingsaccordingtotheoperatingsysteminstallationinstructions.
Foroptimalthroughputandreliability,considerbondingmultiplenetworkportstogether.
ThiscanbeaccomplishedbycreatingaLinkAggregationControlProtocol(LACP)networkconnection,whichaggregatesseveralsubordinateportsintoasinglelogicalconnection.
Configurationrecommendationsincludeusingabondmodeof802.
3ad,miimonsettingof100,andaxmit_hash_policysettingoflayer3+4.
ForadditionalinstructionsaboutconfiguringbondednetworkconnectionswithRedHatEnterpriseLinuxVersion7,seeCreateaChannelBondingInterface.
3.
Openthe/etc/hostsfileandcompletethefollowingactions:vUpdatethefiletoincludetheIPaddressandhostnamefortheserver.
Forexample:192.
0.
2.
7server.
yourdomain.
comservervVerifythatthefilecontainsanentryforlocalhostwithanaddressof127.
0.
0.
1.
Forexample:127.
0.
0.
1localhost4.
Installcomponentsthatarerequiredfortheserverinstallation.
CompletethefollowingstepstocreateaYellowdogUpdaterModified(YUM)repositoryandinstalltheprerequisitepackages.
a.
MountyourRedHatEnterpriseLinuxinstallationDVDtoasystemdirectory.
Forexample,tomountittothe/mntdirectory,issuethefollowingcommand:mount-tiso9660-oro/dev/cdrom/mntb.
VerifythattheDVDmountedbyissuingthemountcommand.
Youshouldseeoutputsimilartothefollowingexample:/dev/sr0on/mnttypeiso9660c.
ChangetotheYUMrepositorydirectorybyissuingthefollowingcommand:cd/etc/yum/repos.
dIftherepos.
ddirectorydoesnotexist,createit.
d.
Listdirectorycontents:lsrhel-source.
repoe.
Renametheoriginalrepofilebyissuingthemvcommand.
Forexample:mvrhel-source.
reporhel-source.
repo.
origf.
Createanewrepofilebyusingatexteditor.
Forexample,tousethevieditor,issuethefollowingcommand:virhel71_dvd.
repog.
Addthefollowinglinestothenewrepofile.
Thebaseurlparameterspecifiesyourdirectorymountpoint:30IBMSpectrumProtect:Single-SiteDiskSolutionGuide[rhel71_dvd]name=DVDRedhatEnterpriseLinux7.
1baseurl=file:///mntenabled=1gpgcheck=0h.
Installtheprerequisitepackageksh.
x86_64,byissuingtheyumcommand.
Forexample:yuminstallksh.
x86_64Exception:Youdonotneedtoinstallthecompat-libstdc++-33-3.
2.
3-69.
el6.
i686andlibstdc++.
i686librariesforRedHatEnterpriseLinuxVersion7.
1.
5.
Whenthesoftwareinstallationiscomplete,youcanrestoretheoriginalYUMrepositoryvaluesbycompletingthefollowingsteps:a.
UnmounttheRedHatEnterpriseLinuxinstallationDVDbyissuingthefollowingcommand:unmount/mntb.
ChangetotheYUMrepositorydirectorybyissuingthefollowingcommand:cd/etc/yum/repos.
dc.
Renametherepofilethatyoucreated:mvrhel71_dvd.
reporhel71_dvd.
repo.
origd.
Renametheoriginalfiletotheoriginalname:mvrhel-source.
repo.
origrhel-source.
repo6.
Determinewhetherkernelparameterchangesarerequired.
Completethefollowingsteps:a.
Usethesysctl-acommandtolisttheparametervalues.
b.
AnalyzetheresultsbyusingtheguidelinesinTable13todeterminewhetheranychangesarerequired.
c.
Ifchangesarerequired,settheparametersinthe/etc/sysctl.
conffile.
Thefilechangesareappliedwhenthesystemisstarted.
Tips:vKernelparametervaluesthatarelistedinTable13includecommasforeaseofreading.
Donotincludecommasforanyvaluethatyouupdateinthe/etc/sysctl.
conffile.
vOnLinux,theDB2productmightautomaticallyincreaseinterprocesscommunication(IPC)kernelparametervaluestothepreferredsettings.
IftheDB2productupdatesthevaluesthatyouset,youdonotneedtochangethembacktothevaluesthatarelistedinTable13.
Table13.
LinuxkernelparameteroptimumsettingsParameterDescriptionPreferredvaluekernel.
shmmniThemaximumnumberofsegments.
256xsizeofRAMinGBValuesforeachsystemsize:vSmall:16,384vMedium:32,768vLarge:49,152Chapter6.
Settingupthesystem31Table13.
Linuxkernelparameteroptimumsettings(continued)ParameterDescriptionPreferredvaluekernel.
shmmaxThemaximumsizeofasharedmemorysegment(bytes).
ThisparametermustbesetbeforeautomaticallystartingtheIBMSpectrumProtectserveronsystemstartup.
SizeofRAMinbytesValuesforeachsystemsize:vSmall:68,719,476,736vMedium:137,438,953,472vLarge:206,158,430,208kernel.
shmallThemaximumallocationofsharedmemorypages(pages)2xsizeofRAMinbytes(settingisin4KBpages)Valueforallsystemsizes:4,294,967,296Changestothefactorysettingsforthisparameterarenotrequired.
kernel.
semYoumustspecifyfourvaluesforthekernel.
semparameter.
Whenyouupdatethisparameter,includeallvaluesononelineinthefollowingorder:kernel.
sem=SEMMSLSEMMNSSEMOPMSEMMNIForexample,toupdatetheparameterforamediumsystem,enterthefollowingononelineinthe/etc/sysctl.
conffile:kernel.
sem=2502560003232768(SEMMSL)Themaximumsemaphoresperarray250(SEMMNS)Themaximumsemaphorespersystem256,000(SEMOPM)Themaximumoperationspersemaphorecall32(SEMMNI)Themaximumnumberofarrays256xsizeofRAMinGBValuesforeachsystemsize:vSmall:16,384vMedium:32,768vLarge:49,152kernel.
msgmniThemaximumnumberofsystem-widemessagequeues1024xsizeofRAMinGBValuesforeachsystemsize:vSmall:65,536vMedium:131,072vLarge:196,608kernel.
msgmaxThemaximumsizeofmessages(bytes)65,536kernel.
msgmnbThedefaultmaximumsizeofqueue(bytes)65,536kernel.
randomize_va_spaceThekernel.
randomize_va_spaceparameterconfigurestheuseofmemoryASLRforthekernel.
DisableASLRbecauseitcancauseerrorsfortheDB2software.
TolearnmoredetailsabouttheLinuxASLRandDB2,seetechnote1365583.
0vm.
swappinessThevm.
swappinessparameterdefineswhetherthekernelcanswapapplicationmemoryoutofphysicalrandomaccessmemory(RAM).
Formoreinformationaboutkernelparameters,seetheDB2productinformation.
032IBMSpectrumProtect:Single-SiteDiskSolutionGuideTable13.
Linuxkernelparameteroptimumsettings(continued)ParameterDescriptionPreferredvaluevm.
overcommit_memoryThevm.
overcommit_memoryparameterinfluenceshowmuchvirtualmemorythekernelpermitsallocating.
Formoreinformationaboutkernelparameters,seetheDB2productinformation.
07.
Openfirewallportstocommunicatewiththeserver.
Completethefollowingsteps:a.
Determinethezonethatisusedbythenetworkinterface.
Thezoneispublic,bydefault.
Issuethefollowingcommand:#firewall-cmd--get-active-zonespublicinterfaces:ens4f0b.
Tousethedefaultportaddressforcommunicationswiththeserver,openTCP/IPport1500intheLinuxfirewall.
Issuethefollowingcommand:firewall-cmd--zone=public--add-port=1500/tcp--permanentIfyouwanttouseavalueotherthanthedefault,youcanspecifyanumberintherange1024-32767.
Ifyouopenaportotherthanthedefault,youwillneedtospecifythatportwhenyouruntheconfigurationscript.
c.
Ifyouplantousethissystemasahub,openport11090,whichisthedefaultportforsecure(https)communications.
Issuethefollowingcommand:firewall-cmd--zone=public--add-port=11090/tcp--permanentd.
Reloadthefirewalldefinitionsforthechangestotakeeffect.
Issuethefollowingcommand:firewall-cmd--reload8.
Verifythatuserprocessresourcelimits,alsoknownasulimits,aresetaccordingtoguidelinesinTable14.
Ifulimitvaluesarenotsetcorrectly,youmightexperienceserverinstabilityorafailureoftheservertorespond.
Table14.
Userlimits(ulimit)valuesUserlimittypeSettingValueCommandtoqueryvalueMaximumsizeofcorefilescreatedcoreUnlimitedulimit-HcMaximumsizeofadatasegmentforaprocessdataUnlimitedulimit-HdMaximumfilesizefsizeUnlimitedulimit-HfMaximumnumberofopenfilesnofile65536ulimit-HnMaximumamountofprocessortimeinsecondscpuUnlimitedulimit-HtMaximumnumberofuserprocessesnproc16384ulimit-HuIfyouneedtomodifyanyuserlimitvalues,followtheinstructionsintheChapter6.
Settingupthesystem33documentationforyouroperatingsystem.
InstallingonWindowssystemsInstallMicrosoftWindowsServer2012StandardEditionontheserversystemandpreparethesystemforinstallationandconfigurationoftheIBMSpectrumProtectserver.
Procedure1.
InstallMicrosoftWindowsServer2012R2StandardEdition,accordingtothemanufacturerinstructions.
2.
ChangetheWindowsaccountcontrolpoliciesbycompletingthefollowingsteps.
a.
OpentheLocalSecurityPolicyeditorbyrunningsecpol.
msc.
b.
ClickLocalPolicies>SecurityOptionsandensurethatthefollowingUserAccountControlpoliciesaredisabled:vAdminApprovalModefortheBuilt-inAdministratoraccountvRunalladministratorsinAdminApprovalMode3.
ConfigureyourTCP/IPsettingsaccordingtoinstallationinstructionsfortheoperatingsystem.
4.
ApplyWindowsupdatesandenableoptionalfeaturesbycompletingthefollowingsteps:a.
ApplythelatestWindows2012R2updates.
b.
InstallandenabletheWindows2012R2featureMicrosoft.
NETFramework3.
5fromtheWindowsServerManager.
c.
Ifrequired,updatetheFCandEthernetHBAdevicedriverstonewerlevels.
d.
InstallthemultipathI/Odriverthatisappropriateforthedisksystemthatyouareusing.
5.
OpenthedefaultTCP/IPport,1500,forcommunicationswiththeIBMSpectrumProtectserver.
Forexample,issuethefollowingcommand:netshadvfirewallfirewalladdrulename="Backupserverport1500"dir=inaction=allowprotocol=TCPlocalport=15006.
OntheOperationsCenterhubserver,openthedefaultportforsecure(https)communicationswiththeOperationsCenter.
Theportnumberis11090.
Forexample,issuethefollowingcommand:netshadvfirewallfirewalladdrulename="OperationsCenterport11090"dir=inaction=allowprotocol=TCPlocalport=11090ConfiguringmultipathI/OCompletethefollowingstepstoenableandconfiguremultipathingfordiskstorage.
Usethedocumentationthatisprovidedwithyourhardwarefordetailedinstructions.
34IBMSpectrumProtect:Single-SiteDiskSolutionGuideAIXsystemsProcedure1.
DeterminetheFibreChannelportaddressthatyoumustuseforthehostdefinitiononthedisksubsystem.
Issuethelscfgcommandforeveryport.
vOnsmallandmediumsystems,issuethefollowingcommands:lscfg-vps-lfcs0|grep"NetworkAddress"lscfg-vps-lfcs1|grep"NetworkAddress"vOnlargesystems,issuethefollowingcommands:lscfg-vps-lfcs0|grep"NetworkAddress"lscfg-vps-lfcs1|grep"NetworkAddress"lscfg-vps-lfcs2|grep"NetworkAddress"lscfg-vps-lfcs3|grep"NetworkAddress"2.
EnsurethatthefollowingAIXfilesetsareinstalled:vdevices.
common.
IBM.
mpio.
rtevdevices.
fcp.
disk.
array.
rtevdevices.
fcp.
disk.
rte3.
IssuethecfgmgrcommandtohaveAIXrescanthehardwareanddiscoveravailabledisks.
Forexample:cfgmgr4.
Tolisttheavailabledisks,issuethefollowingcommand:lsdev-CcdiskYoushouldseeoutputsimilartothefollowing:hdisk0Available00-00-00SASDiskDrivehdisk1Available00-00-00SASDiskDrivehdisk2Available01-00-00SASDiskDrivehdisk3Available01-00-00SASDiskDrivehdisk4Available06-01-02MPIOIBM2076FCDiskhdisk5Available07-01-02MPIOIBM2076FCDisk.
.
.
5.
UsetheoutputfromthelsdevcommandtoidentifyandlistdeviceIDsforeachdiskdevice.
Forexample,hdisk4.
SavethelistofdeviceIDstousewhenyoucreatefilesystemsfortheIBMSpectrumProtectserver.
6.
CorrelatetheSCSIdeviceIDstospecificdiskLUNsfromthedisksystembylistingdetailedinformationaboutallphysicalvolumesinthesystem.
Issuethefollowingcommand:lspv-uOnanIBMStorwizesystem,thefollowinginformationisanexampleofwhatisshownforeachdevice:hdisk400f8cf083fd97327Noneactive332136005076300810105780000000000003004214503IBMfcpIntheexample,60050763008101057800000000000030istheUIDforthevolume,asreportedbytheStorwizemanagementinterface.
ToverifydisksizeinMBandcomparewithwhatislistedforthesystem,issuethefollowingcommand:bootinfo-shdisk4Chapter6.
Settingupthesystem35LinuxsystemsProcedure1.
Editthe/etc/multipath.
conffiletoenablemultipathingforLinuxhosts.
Ifthemultipath.
conffiledoesnotexist,youcancreateitbyissuingthefollowingcommand:mpathconf--enableThefollowingparametersweresetinmultipath.
conffortestingonanIBMStorwizesystem:defaults{user_friendly_namesno}devices{device{vendor"IBM"product"2145"path_grouping_policygroup_by_priouser_friendly_namesno}}2.
Setthemultipathoptiontostartwhenthesystemisstarted.
Issuethefollowingcommands:systemctlenablemultipathd.
servicesystemctlstartmultipathd.
service3.
Toverifythatdisksarevisibletotheoperatingsystemandaremanagedbymultipath,issuethefollowingcommand:multipath-l4.
Ensurethateachdeviceislistedandthatithasasmanypathsasyouexpect.
YoucanusesizeanddeviceIDinformationtoidentifywhichdisksarelisted.
Forexample,thefollowingoutputshowsthata2TBdiskhastwopathgroupsandfouractivepaths.
The2TBsizeconfirmsthatthediskcorrespondstoapoolfilesystem.
UsepartofthelongdeviceIDnumber(12,inthisexample)tosearchforthevolumeonthedisk-systemmanagementinterface.
[root@tapsrv01code]#multipath-l36005076802810c509800000000000012dm-43IBM,2145size=2.
0Tfeatures='1queue_if_no_path'hwhandler='0'wp=rw|-+-policy='round-robin0'prio=0status=active||-2:0:1:18sdcw70:64activeundefrunning|`-4:0:0:18sdgb131:112activeundefrunning`-+-policy='round-robin0'prio=0status=enabled|-1:0:1:18sdat66:208activeundefrunning`-3:0:0:18sddy128:0activeundefrunninga.
Ifneeded,correctdiskLUNhostassignmentsandforceabusrescan.
Forexample:echosys/class/scsi_host/host0/scanechosys/class/scsi_host/host1/scanechosys/class/scsi_host/host2/scanYoucanalsorestartthesystemtorescandiskLUNhostassignments.
b.
ConfirmthatdisksarenowavailableformultipathI/Obyreissuingthemultipath-lcommand.
5.
UsethemultipathoutputtoidentifyandlistdeviceIDsforeachdiskdevice.
Forexample,thedeviceIDforyour2TBdiskis36005076802810c509800000000000012.
36IBMSpectrumProtect:Single-SiteDiskSolutionGuideSavethelistofdeviceIDstouseinthenextstep.
WindowssystemsProcedure1.
EnsurethattheMultipathI/Ofeatureisinstalled.
Ifneeded,installadditionalvendor-specificmultipathdrivers.
2.
ToverifythatdisksarevisibletotheoperatingsystemandaremanagedbymultipathI/O,issuethefollowingcommand:c:\programfiles\IBM\SDDDSM\datapath.
exequerydevice3.
Reviewthemultipathoutputandensurethateachdeviceislistedandthatithasasmanypathsasyouexpect.
Youcanusesizeanddeviceserialinformationtoidentifywhichdisksarelisted.
Forexample,byusingpartofthelongdeviceserialnumber(34,inthisexample)youcansearchforthevolumeonthedisk-systemmanagementinterface.
The2TBsizeconfirmsthatthediskcorrespondstoastoragepoolfilesystem.
DEV#:4DEVICENAME:Disk5Part0TYPE:2145POLICY:OPTIMIZEDSERIAL:60050763008101057800000000000034LUNSIZE:2.
0TBPath#Adapter/HardDiskStateModeSelectErrors0ScsiPort2Bus0/Disk5Part0OPENNORMAL001ScsiPort2Bus0/Disk5Part0OPENNORMAL2717602ScsiPort3Bus0/Disk5Part0OPENNORMAL2849403ScsiPort3Bus0/Disk5Part0OPENNORMAL004.
CreatealistofdiskdeviceIDsbyusingtheserialnumbersthatarereturnedfromthemultipathoutputinthepreviousstep.
Forexample,thedeviceIDforyour2TBdiskis60050763008101057800000000000034SavethelistofdeviceIDstouseinthenextstep.
5.
Afterthenewdisksareadded,youmightneedtobringthemonlineandcleartheread-onlyattribute.
Rundiskpart.
exewiththefollowingcommands.
Repeatforeachofthedisks:diskpartselectDisk1onlinediskattributediskclearreadonlyselectDisk2onlinediskattributediskclearreadonlyselectDisk49onlinediskattributediskclearreadonlyexitChapter6.
Settingupthesystem37CreatingtheuserIDfortheserverCreatetheuserIDthatownstheIBMSpectrumProtectserverinstance.
YouspecifythisuserIDwhenyoucreatetheserverinstanceduringinitialconfigurationoftheserver.
AboutthistaskYoucanspecifyonlylowercaseletters(a-z),numerals(0-9),andtheunderscorecharacter(_)fortheuserID.
TheuserIDandgroupnamemustcomplywiththefollowingrules:vThelengthmustbe8charactersorless.
vTheuserIDandgroupnamecannotstartwithibm,sql,sys,oranumeral.
vTheuserIDandgroupnamecannotbeuser,admin,guest,public,local,oranySQLreservedword.
Procedure1.
UseoperatingsystemcommandstocreateauserID.
vCreateagroupanduserIDinthehomedirectoryoftheuserthatownstheserverinstance.
Forexample,tocreatetheuserIDtsminst1ingrouptsmsrvrswithapasswordoftsminst1,issuethefollowingcommandsfromanadministrativeuserID:mkgroupid=1001tsmsrvrsmkuserid=1002pgrp=tsmsrvrshome=/home/tsminst1tsminst1passwdtsminst1groupaddtsmsrvrsuseradd-d/home/tsminst1-m-gtsmsrvrs-s/bin/bashtsminst1passwdtsminst1Logoff,andthenlogintoyoursystem.
Changetotheuseraccountthatyoucreated.
Useaninteractiveloginprogram,suchastelnet,sothatyouarepromptedforthepasswordandcanchangeitifnecessary.
vCreateauserIDandthenaddthenewIDtotheAdministratorsgroups.
Forexample,tocreatetheuserIDtsminst1,issuethefollowingcommand:netusertsminst1*/addAfteryoucreateandverifyapasswordforthenewuser,addtheuserIDtotheAdministratorsgroupbyissuingthefollowingcommands:netlocalgroupAdministratorstsminst1/addnetlocalgroupDB2ADMNStsminst1/add2.
LogoffthenewuserID.
38IBMSpectrumProtect:Single-SiteDiskSolutionGuidePreparingfilesystemsfortheserverYoumustcompletefilesystemconfigurationforthediskstoragetobeusedbytheserver.
AIXsystemsYoumustcreatevolumegroups,logicalvolumes,andfilesystemsfortheserverbyusingtheAIXLogicalVolumeManager.
Procedure1.
IncreasethequeuedepthandmaximumtransfersizeforalloftheavailablehdiskXdisksthatwerelistedinthepreviousstep.
Issuethefollowingcommandsforeachdisk:chdev-lhdisk4-amax_transfer=0x100000chdev-lhdisk4-aqueue_depth=32chdev-lhdisk4-areserve_policy=no_reservechdev-lhdisk4-aalgorithm=round_robinDonotrunthesecommandsforoperatingsysteminternaldisks,forexample,hdisk0.
2.
CreatevolumegroupsfortheIBMSpectrumProtectdatabase,activelog,archivelog,databasebackup,andstoragepool.
Issuethemkvgcommand,specifyingthedeviceIDsforcorrespondingdisksthatyoupreviouslyidentified.
Forexample,ifthedevicenameshdisk4,hdisk5,andhdisk6correspondtodatabasedisks,includetheminthedatabasevolumegroupandsoon.
Systemsize:Thefollowingcommandsarebasedonthemediumsystemconfiguration.
Forsmallandlargesystems,youmustadjustthesyntaxasrequired.
mkvg-S-ytsmdbhdisk2hdisk3hdisk4mkvg-S-ytsmactloghdisk5mkvg-S-ytsmarchloghdisk6mkvg-S-ytsmdbbackhdisk7hdisk8hdisk9hdisk10mkvg-S-ytsmstgpoolhdisk11hdisk12hdisk13hdisk14.
.
.
hdisk493.
Determinethephysicalvolumenamesandthenumberoffreephysicalpartitionstousewhenyoucreatelogicalvolumes.
Issuethelsvgforeachvolumegroupthatyoucreatedinthepreviousstep.
Forexample:lsvg-ptsmdbTheoutputissimilartothefollowing.
TheFREEPPscolumnrepresentsthefreephysicalpartitions:tsmdb:PV_NAMEPVSTATETOTALPPsFREEPPsFREEDISTRIBUTIONhdisk4active16311631327.
.
326.
.
326.
.
326.
.
326hdisk5active16311631327.
.
326.
.
326.
.
326.
.
326hdisk6active16311631327.
.
326.
.
326.
.
326.
.
3264.
Createlogicalvolumesineachvolumegroupbyusingthemklvcommand.
Thevolumesize,volumegroup,anddevicenamesvary,dependingonthesizeofyoursystemandvariationsinyourdiskconfiguration.
Forexample,tocreatethevolumesfortheIBMSpectrumProtectdatabaseonamediumsystem,issuethefollowingcommands:Chapter6.
Settingupthesystem39mklv-ytsmdb00-tjfs2-u1-x1631tsmdb1631hdisk2mklv-ytsmdb01-tjfs2-u1-x1631tsmdb1631hdisk3mklv-ytsmdb02-tjfs2-u1-x1631tsmdb1631hdisk45.
Formatfilesystemsineachlogicalvolumebyusingthecrfscommand.
Forexample,toformatfilesystemsforthedatabaseonamediumsystem,issuethefollowingcommands:crfs-vjfs2-dtsmdb00-prw-alogname=INLINE-aoptions=rbrw-aagblksize=4096-m/tsminst1/TSMdbspace00-Ayescrfs-vjfs2-dtsmdb01-prw-alogname=INLINE-aoptions=rbrw-aagblksize=4096-m/tsminst1/TSMdbspace01-Ayescrfs-vjfs2-dtsmdb02-prw-alogname=INLINE-aoptions=rbrw-aagblksize=4096-m/tsminst1/TSMdbspace02-Ayes6.
Mountallofthenewlycreatedfilesystemsbyissuingthefollowingcommand:mount-a7.
Listallfilesystemsbyissuingthedfcommand.
VerifythatfilesystemsaremountedatthecorrectLUNandcorrectmountpoint.
Also,verifytheavailablespace.
Thefollowingexampleofcommandoutputshowsthattheamountofusedspaceistypicallyonepercent:tapsrv07>df-g/tsminst1/*FilesystemGBblocksFree%UsedIused%IusedMountedon/dev/tsmact00195.
12194.
591%41%/tsminst1/TSMalog8.
VerifythattheuserIDyoucreatedin"CreatingtheuserIDfortheserver"onpage38hasreadandwriteaccesstothedirectoriesfortheserver.
LinuxsystemsYoumustformatext4orxfsfilesystemsoneachofthediskLUNstobeusedbytheIBMSpectrumProtectserver.
Procedure1.
UsingthelistofdeviceIDsthatyougeneratedinthepreviousstep,issuethemkfscommandtocreateandformatafilesystemforeachstorageLUNdevice.
SpecifythedeviceIDinthecommand.
Seethefollowingexamples.
Forthedatabase,formatext4filesystems:mkfs-text4-Tlargefile-m2/dev/mapper/36005076802810c509800000000000012ForstoragepoolLUNs,formatxfsfilesystems:mkfs-txfs/dev/mapper/3600507630081010578000000000002c3Youmightissuethemkfscommandasmanyas50times,dependingonhowmanydifferentdevicesyouhave.
2.
Createmountpointdirectoriesforfilesystems.
Issuethemkdircommandforeachdirectorythatyoumustcreate.
Usethedirectoryvaluesthatyourecordedintheplanningworksheets.
Forexample,tocreatetheserverinstancedirectorybyusingthedefaultvalue,issuethefollowingcommand:mkdir/tsminst1Repeatthemkdircommandforeachfilesystem.
3.
Addanentryinthe/etc/fstabfileforeachfilesystemsothatfilesystemsaremountedautomaticallywhentheserverisstarted.
Forexample:/dev/mapper/36005076802810c509800000000000012/tsminst1/TSMdbspace00ext4defaults0040IBMSpectrumProtect:Single-SiteDiskSolutionGuide4.
Mountthefilesystemsthatyouaddedtothe/etc/fstabfilebyissuingthemount-acommand.
5.
Listallfilesystemsbyissuingthedfcommand.
VerifythatfilesystemsaremountedatthecorrectLUNandcorrectmountpoint.
Also,verifytheavailablespace.
ThefollowingexampleonanIBMStorwizesystemshowsthattheamountofusedspaceistypicallyonepercent:[root@tapsrv04~]#df-h/tsminst1/*FilesystemSizeUsedAvailUse%Mountedon/dev/mapper/360050763008101057800000000000003134G188M132G1%/tsminst1/TSMalog6.
VerifythattheuserIDyoucreatedin"CreatingtheuserIDfortheserver"onpage38hasreadandwriteaccesstothedirectoriesfortheIBMSpectrumProtectserver.
WindowssystemsYoumustformatNTFSfilesystemsoneachofthediskLUNstobeusedbytheIBMSpectrumProtectserver.
Procedure1.
Createmountpointdirectoriesforfilesystems.
Issuethemdcommandforeachdirectorythatyoumustcreate.
Usethedirectoryvaluesthatyourecordedintheplanningworksheets.
Forexample,tocreatetheserverinstancedirectorybyusingthedefaultvalue,issuethefollowingcommand:mdc:\tsminst1Repeatthemdcommandforeachfilesystem.
2.
CreateavolumeforeverydiskLUNthatismappedtoadirectoryundertheserverinstancedirectorybyusingtheWindowsvolumemanager.
GotoServerManager>FileandStorageServicesandcompletethefollowingstepsforeachdiskthatcorrespondstotheLUNmappingthatwascreatedinthepreviousstep:a.
Bringthediskonline.
b.
InitializethedisktotheGPTbasictype,whichisthedefault.
c.
Createasimplevolumethatoccupiesallofthespaceonthedisk.
FormatthefilesystembyusingNTFS,andassignalabelthatmatchesthepurposeofthevolume,suchasTSMfile00.
Donotassignthenewvolumetoadriveletter.
Instead,mapthevolumetoadirectoryundertheinstancedirectory,suchasC:\tsminst1\TSMfile00.
Tip:Determinethevolumelabelanddirectorymappinglabelsbasedonthesizeofthediskthatisreported.
3.
VerifythatfilesystemsaremountedatthecorrectLUNandcorrectmountpoint.
Listallfilesystemsbyissuingthemountvolcommandandthenreviewtheoutput.
Forexample:\\\Volume{8ffb9678-3216-474c-a021-20e420816a92}\C:\tsminst1\TSMdbspace00\4.
Afterthediskconfigurationiscomplete,restartthesystem.
WhattodonextYoucanconfirmtheamountoffreespaceforeachvolumebyusingWindowsExplorer.
Chapter6.
Settingupthesystem4142IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter7.
InstallingtheserverandOperationsCenterUsetheIBMInstallationManagergraphicalwizardtoinstallthecomponents.
InstallingonAIXandLinuxsystemsInstalltheIBMSpectrumProtectserverandtheOperationsCenteronthesamesystem.
BeforeyoubeginVerifythattheoperatingsystemissettothelanguagethatyourequire.
Bydefault,thelanguageoftheoperatingsystemisthelanguageoftheinstallationwizard.
Procedure1.
VerifythattherequiredRPMfilesareinstalledonyoursystem.
See"InstallingprerequisiteRPMfilesforthegraphicalwizard"onpage44fordetails.
2.
Beforeyoudownloadtheinstallationpackage,verifythatyouhaveenoughspacetostoretheinstallationfileswhentheyareextractedfromtheproductpackage.
Forspacerequirements,seethedownloaddocumentattechnote4042992.
3.
GotoPassportAdvantageanddownloadthepackagefiletoanemptydirectoryofyourchoice.
4.
Ensurethatexecutablepermissionissetforthepackage.
Ifnecessary,changethefilepermissionsbyissuingthefollowingcommand:chmoda+xpackage_name.
bin5.
Extractthepackagebyissuingthefollowingcommand:.
/package_name.
binwherepackage_nameisthenameofthedownloadedfile.
6.
Ensurethatthefollowingcommandisenabledsothatthewizardsworkproperly:lsuserBydefault,thecommandisenabled.
7.
Changetothedirectorywhereyouplacedtheexecutablefile.
8.
Starttheinstallationwizardbyissuingthefollowingcommand:.
/install.
shWhenyouselectthepackagestoinstall,chooseboththeserverandOperationsCenter.
WhattodonextvIferrorsoccurduringtheinstallationprocess,theerrorsarerecordedinlogfilesthatarestoredintheIBMInstallationManagerlogsdirectory.
ToviewinstallationlogfilesfromtheInstallationManagertool,clickFile>ViewLog.
TocollecttheselogfilesfromtheInstallationManagertool,clickHelp>ExportDataforProblemAnalysis.
CopyrightIBMCorp.
1993,201643vAfteryouinstalltheserverandbeforeyoucustomizeitforyouruse,gototheIBMSpectrumProtectsupportsite.
ClickSupportanddownloadsandapplyanyapplicablefixes.
Relatedtasks:OthermethodsforinstallingIBMSpectrumProtectcomponents(AIX)OthermethodsforinstallingIBMSpectrumProtectcomponents(Linux)InstallingprerequisiteRPMfilesforthegraphicalwizardRPMfilesarerequiredfortheIBMInstallationManagergraphicalwizard.
Procedure1.
Verifythatthefollowingfilesareinstalledonyoursystem.
Ifthefilesarenotinstalled,gotoStep2.
atk-1.
12.
3-2.
aix5.
2.
ppc.
rpmlibpng-1.
2.
32-2.
aix5.
2.
ppc.
rpmcairo-1.
8.
8-1.
aix5.
2.
ppc.
rpmlibtiff-3.
8.
2-1.
aix5.
2.
ppc.
rpmexpat-2.
0.
1-1.
aix5.
2.
ppc.
rpmpango-1.
14.
5-4.
aix5.
2.
ppc.
rpmfontconfig-2.
4.
2-1.
aix5.
2.
ppc.
rpmpixman-0.
12.
0-3.
aix5.
2.
ppc.
rpmfreetype2-2.
3.
9-1.
aix5.
2.
ppc.
rpmxcursor-1.
1.
7-3.
aix5.
2.
ppc.
rpmgettext-0.
10.
40-6.
aix5.
1.
ppc.
rpmxft-2.
1.
6-5.
aix5.
1.
ppc.
rpmglib2-2.
12.
4-2.
aix5.
2.
ppc.
rpmxrender-0.
9.
1-3.
aix5.
2.
ppc.
rpmgtk2-2.
10.
6-4.
aix5.
2.
ppc.
rpmzlib-1.
2.
3-3.
aix5.
1.
ppc.
rpmlibjpeg-6b-6.
aix5.
1.
ppc.
rpm2.
Ensurethatthereisatleast150MBoffreespaceinthe/optfilesystem.
3.
Fromthedirectorywheretheinstallationpackagefileisextracted,gotothegtkdirectory.
4.
DownloadtheRPMfilestothecurrentworkingdirectoryfromtheIBMAIXToolboxforLinuxApplicationswebsitebyissuingthefollowingcommand:download-prerequisites.
sh5.
FromthedirectorythatcontainstheRPMfilesthatyoudownloaded,installthembyissuingthefollowingcommand:rpm-Uvh*.
rpmInstallingonWindowssystemsInstalltheIBMSpectrumProtectserverandtheOperationsCenteronthesamesystem.
BeforeyoubeginMakesurethatthefollowingprerequisitesaremet:vVerifythattheoperatingsystemissettothelanguagethatyourequire.
Bydefault,thelanguageoftheoperatingsystemisthelanguageoftheinstallationwizard.
vEnsurethattheuserIDthatyouplantouseduringtheinstallationisauserwithlocalAdministratorauthority.
Procedure1.
Beforeyoudownloadtheinstallationpackage,verifythatyouhaveenoughspacetostoretheinstallationfileswhentheyareextractedfromtheproductpackage.
Forspacerequirements,seethedownloaddocumentattechnote4042993.
44IBMSpectrumProtect:Single-SiteDiskSolutionGuide2.
GotoPassportAdvantageanddownloadthepackagefiletoanemptydirectoryofyourchoice.
3.
Changetothedirectorywhereyouplacedtheexecutablefile.
4.
Double-clicktheexecutablefiletoextracttothecurrentdirectory.
5.
Inthedirectorywheretheinstallationfileswereextracted,starttheinstallationwizardbydouble-clickingtheinstall.
batfile.
Whenyouselectthepackagestoinstall,chooseboththeserverandOperationsCenter.
WhattodonextvIferrorsoccurduringtheinstallationprocess,theerrorsarerecordedinlogfilesthatarestoredintheIBMInstallationManagerlogsdirectory.
ToviewinstallationlogfilesfromtheInstallationManagertool,clickFile>ViewLog.
TocollecttheselogfilesfromtheInstallationManagertool,clickHelp>ExportDataforProblemAnalysis.
vAfteryouinstalltheserverandbeforeyoucustomizeitforyouruse,gototheIBMSpectrumProtectsupportsite.
ClickSupportanddownloadsandapplyanyapplicablefixes.
Relatedtasks:OthermethodsforinstallingIBMSpectrumProtectcomponentsChapter7.
InstallingtheserverandOperationsCenter4546IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter8.
ConfiguringtheserverandtheOperationsCenterAfteryouinstallthecomponents,completetheconfigurationfortheIBMSpectrumProtectserverandtheOperationsCenter.
ConfiguringtheserverinstanceUsetheIBMSpectrumProtectserverinstanceconfigurationwizardtocompletetheinitialconfigurationoftheserver.
BeforeyoubeginEnsurethatthefollowingrequirementsaremet:vThesystemwhereyouinstalledIBMSpectrumProtectmusthavetheXWindowSystemclient.
YoumustalsoberunninganXWindowSystemserveronyourdesktop.
vThesystemmusthavetheSecureShell(SSH)protocolenabled.
Ensurethattheportissettothedefaultvalue,22,andthattheportisnotblockedbyafirewall.
Youmustenablepasswordauthenticationinthesshd_configfileinthe/etc/ssh/directory.
Also,ensurethattheSSHdaemonservicehasaccessrightstoconnecttothesystembyusingthelocalhostvalue.
vYoumustbeabletologintoIBMSpectrumProtectwiththeuserIDthatyoucreatedfortheserverinstance,byusingtheSSHprotocol.
Whenyouusethewizard,youmustprovidethisuserIDandpasswordtoaccessthatsystem.
vIfyouchangedanysettingsintheprecedingsteps,restarttheserverbeforeyouproceedwiththeconfigurationwizard.
Verifythattheremoteregistryserviceisstartedbycompletingthefollowingsteps:1.
ClickStart>AdministrativeTools>Services.
IntheServiceswindow,selectRemoteRegistry.
Ifitisnotstarted,clickStart.
2.
Ensureport137,139,and445arenotblockedbyafirewall:a.
ClickStart>ControlPanel>WindowsFirewall.
b.
SelectAdvancedSettings.
c.
SelectInboundRules.
d.
SelectNewRule.
e.
CreateaportruleforTCPports137,139,and445toallowconnectionsfordomainandprivatenetworks.
3.
Configuretheuseraccountcontrolbyaccessingthelocalsecuritypolicyoptionsandcompletingthefollowingsteps.
a.
ClickStart>AdministrativeTools>LocalSecurityPolicy.
ExpandLocalPolicies>SecurityOptions.
b.
Ifnotalreadyenabled,enablethebuilt-inadministratoraccountbyselectingAccounts:Administratoraccountstatus>Enable>OK.
CopyrightIBMCorp.
1993,201647c.
Ifnotalreadydisabled,disableuseraccountcontrolforallWindowsadministratorsbyselectingUserAccountControl:RunalladministratorsinAdminApprovalMode>Disable>OK.
d.
Ifnotalreadydisabled,disabletheUserAccountControlforthebuilt-inAdministratoraccountbyselectingUserAccountControl:AdminApprovalModefortheBuilt-inAdministratorAccount>Disable>OK.
4.
Ifyouchangedanysettingsintheprecedingsteps,restarttheserverbeforeyouproceedwiththeconfigurationwizard.
AboutthistaskThewizardcanbestoppedandrestarted,buttheserverisnotoperationaluntiltheentireconfigurationprocessiscomplete.
Procedure1.
Startthelocalversionofthewizard.
vOpenthedsmicfgxprograminthe/opt/tivoli/tsm/server/bindirectory.
Thiswizardcanbeonlyrunasarootuser.
vClickStart>AllPrograms>IBMSpectrumProtect>ConfigurationWizard.
2.
Followtheinstructionstocompletetheconfiguration.
UsetheinformationthatyourecordedinChapter3,"Planningworksheets,"onpage9duringIBMSpectrumProtectsystemsetuptospecifydirectoriesandoptionsinthewizard.
OntheServerInformationwindow,settheservertostartautomaticallybyusingtheinstanceuserIDwhenthesystemboots.
Byusingtheconfigurationwizard,theserverissettostartautomaticallywhenrebooted.
Installingthebackup-archiveclientAsabestpractice,installtheIBMSpectrumProtectbackup-archiveclientontheserversystemsothattheadministrativecommand-lineclientandschedulerareavailable.
ProcedureToinstallthebackup-archiveclient,followtheinstallationinstructionsforyouroperatingsystem.
vInstallingtheUNIXandLinuxbackup-archiveclientsvInstallingtheWindowsbackup-archiveclientSettingoptionsfortheserverReviewtheserveroptionsfilethatisinstalledwiththeIBMSpectrumProtectservertoverifythatthecorrectvaluesaresetforyoursystem.
Procedure1.
Gototheserverinstancedirectoryandopenthedsmserv.
optfile.
2.
Reviewthefollowingtablevaluesandverifyyourserveroptionsettings,basedonsystemsize.
48IBMSpectrumProtect:Single-SiteDiskSolutionGuideServeroptionSmallsystemvalueMediumsystemvalueLargesystemvalueACTIVELOGDIRECTORYDirectorypaththatwasspecifiedduringconfigurationDirectorypaththatwasspecifiedduringconfigurationDirectorypaththatwasspecifiedduringconfigurationACTIVELOGSIZE131072131072262144ARCHLOGCOMPRESSYesNoNoARCHLOGDIRECTORYDirectorypaththatwasspecifiedduringconfigurationDirectorypaththatwasspecifiedduringconfigurationDirectorypaththatwasspecifiedduringconfigurationCOMMMETHODTCPIPTCPIPTCPIPCOMMTIMEOUT360036003600DEDUPREQUIRESBACKUPNoNoNoDEVCONFIGdevconf.
datdevconf.
datdevconf.
datEXPINTERVAL000IDLETIMEOUT606060MAXSESSIONS2505001000NUMOPENVOLSALLOWED202020TCPADMINPORT150015001500TCPPORT150015001500VOLUMEHISTORYvolhist.
datvolhist.
datvolhist.
datUpdateserveroptionsettingsifnecessary,tomatchthevaluesinthetable.
Tomakeupdates,closethedsmserv.
optfileandusetheSETOPTcommandfromtheadministrativecommand-lineinterfacetosettheoptions.
Forexample,toupdatetheIDLETIMEOUToptionto60,issuethefollowingcommand:setoptidletimeout603.
Toconfiguresecurecommunicationsfortheserver,clients,andtheOperationsCenter,verifytheoptionsinthefollowingtable.
ServeroptionAllsystemsizesSSLDISABLELEGACYTLSYESSSLFIPSMODENOSSLTCPPORTSpecifytheSSLportnumber.
TheserverTCP/IPcommunicationdriverwaitsforrequestsonthisportforSSL-enabledsessionsfromtheclient.
SSLTCPADMINPORTSpecifytheportaddressonwhichtheserverwaitsforrequestsforSSL-enabledsessionsfromthecommand-lineadministrativeclient.
SSLTLS12YESIfanyoftheoptionvaluesmustbeupdated,editthedsmserv.
optfilebyusingthefollowingguidelines:vRemovetheasteriskatthebeginningofalinetoenableanoption.
vOneachline,enteronlyoneoptionandthespecifiedvaluefortheoption.
Chapter8.
ConfiguringtheserverandtheOperationsCenter49vIfanoptionoccursinmultipleentriesinthefile,theserverusesthelastentry.
Saveyourchangesandclosethefile.
Ifyoueditthedsmserv.
optfiledirectly,youmustrestarttheserverforthechangestotakeeffect.
Relatedreference:ServeroptionsreferenceSETOPT(Setaserveroptionfordynamicupdate)ConfiguringsecurecommunicationswithTransportLayerSecurityIfyourenvironmentrequiressecurecommunications,youcansetupSecureSocketsLayer(SSL)andTransportLayerSecurity(TLS)ontheIBMSpectrumProtectserverandbackup-archiveclienttoencryptdata.
AnSSLcertificateisusedtoverifycommunicationrequestsbetweentheserverandclient.
AboutthistaskAsshowninthefollowingfigure,youcanconfigureSSL/TLScommunicationsbetweentheserverandbackup-archiveclientbysettingoptionsintheserverandclientoptionsfiles,andthentransferringtheself-signedcertificatethatisgeneratedontheservertotheclient.
Whenyouupdatedtheserveroptionsfilein"Settingoptionsfortheserver"onpage48,theSSLTLS12andSSLDISABLELEGACYTLSserveroptionsweresettorestrictsecurecommunicationstouseTLS1.
2.
ThissettingpreventstheuseofpreviousTLSprotocollevels,whicharelesssecure.
ProcedureToconfiguretheserverandclientsforSSLorTLS,completethefollowingsteps:1.
Createthekeydatabasefile,dsmcert.
kdb,oneachclient.
Issuethefollowingcommandinthebindirectoryontheclient:gsk8capicmd_64-keydb-create-populate-dbdsmcert.
kdb-pwpassword-stash2.
Changethedefaultcertificateinthecert.
kdbkeyringdatabasefiletothe"TSMServerSelfSignedSHAKey"label.
Issuethefollowingcommandfromtheserverinstancedirectory:gsk8capicmd_64-cert-setdefault-dbcert.
kdb-stashed-label"TSMServerSelfSignedSHAKey"3.
ManuallytransfertheIBMSpectrumProtectservercert256.
armfiletotheclientcomputers.
50IBMSpectrumProtect:Single-SiteDiskSolutionGuideThecert256.
armiscreatedintheserverinstancedirectorywhentheSSLTCPPORTserveroptionisspecified.
4.
Specifythefollowingoptionsintheclientoptionsfile:vSetthessloptiontoyes.
vSetthetcpportoptionvaluetomatchthevalueoftheSSLTCPPORToptionthatissetontheserver.
ConfiguringtheOperationsCenterAfteryouinstalltheOperationsCenter,completethefollowingconfigurationstepstostartmanagingyourstorageenvironment.
BeforeyoubeginWhenyouconnecttotheOperationsCenterforthefirsttime,youmustprovidethefollowinginformation:vConnectioninformationfortheserverthatyouwanttodesignateasahubservervLogincredentialsforanadministratorIDthatisdefinedforthatserverProcedure1.
Designatethehubserver.
Inawebbrowser,enterthefollowingaddress:https://hostname:secure_port/ocwhere:vhostnamerepresentsthenameofthecomputerwheretheOperationsCenterisinstalledvsecure_portrepresentstheportnumberthattheOperationsCenterusesforHTTPScommunicationonthatcomputerForexample,ifyourhostnameistsm.
storage.
mylocation.
comandyouareusingthedefaultsecureportfortheOperationsCenter,whichis11090,theaddressis:https://tsm.
storage.
mylocation.
com:11090/ocWhenyoulogintotheOperationsCenterforthefirsttime,awizardguidesyouthroughaninitialconfigurationtosetupanewadministratorwithsystemauthorityontheserver.
2.
SetupsecurecommunicationsbetweentheOperationsCenterandthehubserverbyconfiguringtheSecureSocketsLayer(SSL)protocol.
Followtheinstructionsin"SecuringcommunicationsbetweentheOperationsCenterandthehubserver"onpage52.
3.
Optional:Toreceiveadailyemailreportthatsummarizessystemstatus,configureyouremailsettingsintheOperationsCenter.
FollowtheinstructionsinChapter14,"Trackingsystemstatusbyusingemailreports,"onpage79.
Chapter8.
ConfiguringtheserverandtheOperationsCenter51SecuringcommunicationsbetweentheOperationsCenterandthehubserverTosecurecommunicationsbetweentheOperationsCenterandthehubserverbyusingtheSecureSocketsLayer(SSL)protocol,addtheSSLcertificateofthehubservertothetruststorefileoftheOperationsCenter.
BeforeyoubeginThetruststorefileoftheOperationsCenterisacontainerforSSLcertificatesthattheOperationsCentercanaccess.
ItcontainstheSSLcertificatethattheOperationsCenterusesforHTTPScommunicationwithwebbrowsers.
DuringtheinstallationoftheOperationsCenter,youcreateapasswordforthetruststorefile.
TosetupSSLcommunicationbetweentheOperationsCenterandthehubserver,youmustusethesamepasswordtoaddtheSSLcertificateofthehubservertothetruststorefile.
Ifyoudonotrememberthispassword,youcanresetit.
ThefollowingfigureillustratesthecomponentsforsettingupSSLbetweentheOperationsCenterandthehubserver.
AboutthistaskThisprocedureprovidesstepstoimplementsecurecommunicationsbyusingself-signedcertificates.
Tousecertificateauthority(CA)certificates,followtheinstructionsinConfiguringSSLandTLSbyusingCA-signedcertificates.
ProcedureTosetupSSLcommunicationbyusingself-signedcertificates,completethefollowingsteps.
1.
Specifythecert256.
armcertificateasthedefaultcertificateinthekeydatabasefileofthehubserver:a.
Issuethefollowingcommandfromthehubserverinstancedirectory:gsk8capicmd_64-cert-setdefault-dbcert.
kdb-stashed-label"TSMServerSelfSignedSHAKey"b.
Restartthehubserversothatitcanreceivethechangestothekeydatabasefile.
52IBMSpectrumProtect:Single-SiteDiskSolutionGuidec.
Verifythatthecert256.
armcertificateissetasthedefault.
Issuethefollowingcommand:gsk8capicmd_64-cert-list-dbcert.
kdb-stashed2.
StoptheOperationsCenterwebserver.
3.
OpentheoperatingsystemcommandlineonthesystemwheretheOperationsCenterisinstalled,andchangetothefollowingdirectory:vinstallation_dir/ui/jre/binvinstallation_dir\ui\jre\binWhereinstallation_dirrepresentsthedirectoryinwhichtheOperationsCenterisinstalled.
4.
OpentheIBMKeyManagementwindowbyissuingthefollowingcommand:ikeyman5.
ClickKeyDatabaseFile>Open.
6.
ClickBrowse,andgotothefollowingdirectory,whereinstallation_dirrepresentsthedirectoryinwhichtheOperationsCenterisinstalled:vinstallation_dir/ui/Liberty/usr/servers/guiServervinstallation_dir\ui\Liberty\usr\servers\guiServer7.
IntheguiServerdirectory,selectthegui-truststore.
jksfile.
8.
ClickOpen,andclickOK.
9.
Enterthepasswordforthetruststorefile,andclickOK.
10.
IntheKeydatabasecontentareaoftheIBMKeyManagementwindow,clickthearrow,andselectSignerCertificatesfromthelist.
ClickAdd.
11.
IntheOpenwindow,clickBrowse,andgotothehubserverinstancedirectory:v/opt/tivoli/tsm/server/binvc:\ProgramFiles\Tivoli\TSM\server1ThedirectorycontainsthefollowingSSLcertificates:cert.
armcert256.
armIfyoucannotaccessthehubserverinstancedirectoryfromtheOpenwindow,completethefollowingsteps:a.
UseFTPoranotherfile-transfermethodtocopythecert256.
armfilesfromthehubservertothefollowingdirectoryonthecomputerwheretheOperationsCenterisinstalled:vinstallation_dir/ui/Liberty/usr/servers/guiServervinstallation_dir\ui\Liberty\usr\servers\guiServerb.
IntheOpenwindow,gototheguiServerdirectory.
12.
Selectthecert256.
armcertificateastheSSLcertificate.
13.
ClickOpen,andclickOK.
14.
Enteralabelforthecertificate.
Forexample,enterthenameofthehubserver.
15.
ClickOK.
TheSSLcertificateofthehubserverisaddedtothetruststorefile,andthelabelisdisplayedintheKeydatabasecontentareaoftheIBMKeyManagementwindow.
16.
ClosetheIBMKeyManagementwindow.
Chapter8.
ConfiguringtheserverandtheOperationsCenter5317.
StarttheOperationsCenterwebserver.
18.
Completethefollowingstepsintheloginwindowoftheconfigurationwizard:a.
IntheConnecttofield,enterthevalueoftheSSLTCPADMINPORTserveroptionastheportnumber.
b.
SelectUseSSL.
Relatedtasks:"Startingandstoppingthewebserver"onpage84RegisteringtheproductlicenseToregisteryourlicensefortheIBMSpectrumProtectproduct,usetheREGISTERLICENSEcommand.
AboutthistaskLicensesarestoredinenrollmentcertificatefiles,whichcontainlicensinginformationfortheproduct.
Theenrollmentcertificatefilesareontheinstallationmedia,andareplacedontheserverduringinstallation.
Whenyouregistertheproduct,thelicensesarestoredinaNODELOCKfilewithinthecurrentdirectory.
ProcedureRegisteralicensebyspecifyingthenameoftheenrollmentcertificatefilethatcontainsthelicense.
TousetheOperationsCentercommandbuilderforthistask,completethefollowingsteps.
1.
OpentheOperationsCenter.
2.
OpentheOperationsCentercommandbuilderbyhoveringoverthesettingsiconandclickingCommandBuilder.
3.
IssuetheREGISTERLICENSEcommand.
Forexample,toregisterabaseIBMSpectrumProtectlicense,issuethefollowingcommand:registerlicensefile=tsmbasic.
licWhattodonextSavetheinstallationmediathatcontainsyourenrollmentcertificatefiles.
Youmightneedtoregisteryourlicenseagainif,forexample,oneofthefollowingconditionsoccur:vTheserverismovedtoadifferentcomputer.
vTheNODELOCKfileiscorrupted.
TheserverstoreslicenseinformationintheNODELOCKfile,whichisinthedirectoryfromwhichtheserverisstarted.
vIfyouchangetheprocessorchipthatisassociatedwiththeserveronwhichtheserverisinstalled.
Relatedreference:REGISTERLICENSE(Registeranewlicense)54IBMSpectrumProtect:Single-SiteDiskSolutionGuideConfiguringdatadeduplicationCreateadirectory-containerstoragepoolandatleastonedirectorytouseinlinedatadeduplication.
BeforeyoubeginUsethestoragepooldirectoryinformationthatyourecordedinChapter3,"Planningworksheets,"onpage9forthistask.
Procedure1.
OpentheOperationsCenter.
2.
OntheOperationsCentermenubar,hoveroverStorage.
3.
Fromthelistthatisdisplayed,clickStoragePools.
4.
Clickthe+StoragePoolbutton.
5.
CompletethestepsintheAddStoragePoolwizard:vTouseinlinedatadeduplication,selectaDirectorystoragepoolunderContainer-basedstorage.
vWhenyouconfiguredirectoriesforthedirectory-containerstoragepool,specifythedirectorypathsthatyoucreatedforstorageduringsystemsetup.
6.
Afteryouconfigurethenewdirectory-containerstoragepool,clickClose&ViewPoliciestoupdateamanagementclassandstartusingthestoragepool.
DefiningdataretentionrulesforyourbusinessAfteryoucreateadirectory-containerstoragepoolfordatadeduplication,updatethedefaultserverpolicytousethenewstoragepool.
TheAddStoragePoolwizardopenstheServicespageintheOperationsCentertocompletethistask.
Procedure1.
OntheServicespageoftheOperationsCenter,selecttheSTANDARDdomainandclickDetails.
2.
OntheSummarypageforthepolicydomain,clickthePolicySetstab.
ThePolicySetspageindicatesthenameoftheactivepolicysetandlistsallofthemanagementclassesforthatpolicyset.
3.
ClicktheConfiguretoggle,andmakethefollowingchanges:vChangethebackupdestinationfortheSTANDARDmanagementclasstothedirectory-containerstoragepool.
vChangethevaluefortheBackupscolumntoNolimit.
vChangetheretentionperiod.
SettheKeepExtraBackupscolumnto30daysormore,dependingonyourbusinessrequirements.
4.
SaveyourchangesandclicktheConfiguretoggleagainsothatthepolicysetisnolongereditable.
5.
ActivatethepolicysetbyclickingActivate.
Chapter8.
ConfiguringtheserverandtheOperationsCenter55DefiningschedulesforservermaintenanceactivitiesCreateschedulesforeachservermaintenanceoperationbyusingtheDEFINESCHEDULEcommandintheOperationsCentercommandbuilder.
AboutthistaskScheduleservermaintenanceoperationstorunafterclientbackups.
Youcancontrolthetimingofschedulesformaintenancetasksbysettingthestarttimeincombinationwiththedurationtimeforeachoperation.
Thefollowingexampleshowshowyoucanscheduleservermaintenanceprocessesincombinationwiththeclientbackupscheduleforasingle-sitedisksolution.
OperationScheduleClientbackupStartsat22:00.
ProcessingfordatabaseanddisasterrecoveryfilesvDatabasebackupstartsat11:00,or13hoursafterthebeginningoftheclientbackup.
Thisprocessrunsuntilcompletion.
vDeviceconfigurationinformationandvolumehistorybackupstartsat17:00,or6hoursafterthestartofthedatabasebackup.
vVolumehistorydeletionstartsat20:00,or9hoursafterthestartofthedatabasebackup.
InventoryexpirationStartsat12:00,or14hoursafterthebeginningoftheclientbackup.
Thisprocessrunsuntilcompletion.
ProcedureAfteryouconfigurethedeviceclassforthedatabasebackups,createschedulesfordatabasebackupandotherrequiredmaintenanceoperationsbyusingtheDEFINESCHEDULEcommand.
Dependingonthesizeofyourenvironment,youmightneedtoadjustthestarttimesforeachscheduleintheexample.
1.
Defineadeviceclassforthebackupoperationbeforeyoucreatetheschedulefordatabasebackups.
UsetheDEFINEDEVCLASScommandtocreateadeviceclassthatisnamedDBBACK_FILEDEV:definedevclassdbback_filedevdevtype=filedirectory=db_backup_directorieswheredb_backup_directoriesisalistofthedirectoriesthatyoucreatedforthedatabasebackup.
Forexample,ifyouhavefourdirectoriesfordatabasebackups,startingwith/tsminst1/TSMbkup00,issuethefollowingcommand:definedevclassdbback_filedevdevtype=filedirectory=/tsminst1/TSMbkup00,/tsminst1/TSMbkup01,/tsminst1/TSMbkup02,/tsminst1/TSMbkup03"Forexample,ifyouhavefourdirectoriesfordatabasebackups,startingwithC:\tsminst1\TSMbkup00,issuethefollowingcommand:definedevclassdbback_filedevdevtype=filedirectory="c:\tsminst1\TSMbkup00,c:\tsminst1\TSMbkup01,c:\tsminst1\TSMbkup02,c:\tsminst1\TSMbkup03"56IBMSpectrumProtect:Single-SiteDiskSolutionGuide2.
Setthedeviceclassforautomaticdatabasebackups.
UsetheSETDBRECOVERYtospecifythedeviceclassthatyoucreatedforthedatabasebackupintheprecedingstep.
Forexample,ifthedeviceclassisdbback_filedev,issuethefollowingcommand:setdbrecoverydbback_filedev3.
CreateschedulesforthemaintenanceoperationsbyusingtheDEFINESCHEDULEcommand.
Seethefollowingtablefortherequiredoperationswithexamplesofthecommands.
OperationExamplecommandBackupthedatabase.
CreateascheduletoruntheBACKUPDBcommand.
Ifyouareconfiguringasmallsystem,settheCOMPRESSparametertoYES.
Forexample,onasmallsystem,issuethefollowingcommandtocreateabackupschedulethatusesthenewdeviceclass:definescheduleDBBACKUPtype=admincmd="backupdbdevclass=dbback_filedevtype=fullnumstreams=3wait=yescompress=yes"active=yesdesc="Backupthedatabase.
"startdate=todaystarttime=11:00:00duration=45durunits=minutesBackupthedeviceconfigurationinformation.
CreateascheduletoruntheBACKUPDEVCONFIGcommand:definescheduleDEVCONFIGBKUPtype=admincmd="backupdevconfigfilenames=devconfig.
dat"active=yesdesc="Backupthedeviceconfigurationfile.
"startdate=todaystarttime=17:00:00duration=45durunits=minutesBackupthevolumehistory.
CreateascheduletoruntheBACKUPVOLHISTORYcommand:definescheduleVOLHISTBKUPtype=admincmd="backupvolhistoryfilenames=volhist.
dat"active=yesdesc="Backupthevolumehistory.
"startdate=todaystarttime=17:00:00duration=45durunits=minutesRemoveolderversionsofdatabasebackupsthatarenolongerrequired.
CreateascheduletoruntheDELETEVOLHISTORYcommand:definescheduleDELVOLHISTtype=admincmd="deletevolhistorytype=dbbtodate=today-6totime=now"active=yesdesc="Removeolddatabasebackups.
"startdate=todaystarttime=20:00:00duration=45durunits=minutesRemoveobjectsthatexceedtheirallowedretention.
CreateascheduletoruntheEXPIREINVENTORYcommand.
SettheRESOURCEparameterbasedonthesystemsizethatyouareconfiguring:vSmallsystems:10vMediumsystems:30vLargesystems:40Forexample,onamedium-sizedsystem,issuethefollowingcommandtocreateaschedulethatisnamedEXPINVENTORY:definescheduleEXPINVENTORYtype=admincmd="expireinventorywait=yesresource=30duration=120"active=yesdesc="Removeexpiredobjects.
"startdate=todaystarttime=12:00:00duration=45durunits=minutesWhattodonextAfteryoucreateschedulesfortheservermaintenancetasks,youcanviewthemintheOperationsCenterbycompletingthefollowingsteps:Chapter8.
ConfiguringtheserverandtheOperationsCenter571.
OntheOperationsCentermenubar,hoveroverServers.
2.
ClickMaintenance.
Relatedreference:DEFINESCHEDULE(Defineascheduleforanadministrativecommand)DefiningclientschedulesUsetheOperationsCentertocreateschedulesforclientoperations.
Procedure1.
OntheOperationsCentermenubar,hoveroverClients.
2.
ClickSchedules.
3.
Click+Schedule.
4.
CompletethestepsintheCreateSchedulewizard.
Setclientbackupschedulestostartat22:00,basedontheservermaintenanceactivitiesthatyouscheduledin"Definingschedulesforservermaintenanceactivities"onpage56.
58IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter9.
InstallingandconfiguringclientsFollowingthesuccessfulsetupofyourIBMSpectrumProtectserversystem,installandconfigureclientsoftwaretobeginbackingupdata.
ProcedureToinstallthebackup-archiveclient,followtheinstallationinstructionsforyouroperatingsystem.
vInstallingtheUNIXandLinuxbackup-archiveclientsvInstallingtheWindowsbackup-archiveclientWhattodonextRegisterandassignyourclientstoschedules.
RegisteringandassigningclientstoschedulesAddandregisteryourclientsthroughtheOperationsCenterbyusingtheAddClientwizard.
BeforeyoubeginDeterminewhethertheclientrequiresanadministrativeuserIDwithclientownerauthorityovertheclientnode.
TodeterminewhichclientsrequireanadministrativeuserID,seetechnote7048963.
Restriction:Forsometypesofclients,theclientnodenameandtheadministrativeuserIDmustmatch.
YoucannotauthenticatethoseclientsbyusingtheLightweightDirectoryAccessProtocolauthenticationmethodthatwasintroducedinV7.
1.
7.
Fordetailsaboutthisauthenticationmethod,sometimesreferredtoasintegratedmode,seeAuthenticatingusersbyusinganActiveDirectorydatabase.
ProcedureToregisteraclient,completeoneofthefollowingactions.
vIftheclientrequiresanadministrativeuserID,registertheclientbyusingtheREGISTERNODEcommandandspecifytheUSERIDparameter:registernodenode_namepassworduserid=node_namewherenode_namespecifiesthenodenameandpasswordspecifiesthenodepassword.
Fordetails,seeRegisteranode.
vIftheclientdoesnotrequireanadministrativeuserID,registertheclientbyusingtheOperationsCenterAddClientwizard.
Completethefollowingsteps:1.
OntheOperationsCentermenubar,clickClients.
2.
IntheClientstable,click+Client.
3.
CompletethestepsintheAddClientwizard:a.
Specifythatredundantdatacanbeeliminatedonboththeclientandserver.
IntheClient-sidedatadeduplicationarea,selecttheEnablecheckbox.
CopyrightIBMCorp.
1993,201659b.
IntheConfigurationwindow,copytheTCPSERVERADDRESS,TCPPORT,NODENAME,andDEDUPLICATIONoptionvalues.
Tip:Recordtheoptionvaluesandkeeptheminasafeplace.
Afteryoucompletetheclientregistrationandinstallthesoftwareontheclientnode,usethevaluestoconfiguretheclient.
c.
Followtheinstructionsinthewizardtospecifythepolicydomain,schedule,andoptionset.
d.
Sethowrisksaredisplayedfortheclientbyspecifyingtheat-risksetting.
e.
ClickAddClient.
InstallingtheclientmanagementserviceInstalltheclientmanagementserviceforbackup-archiveclientsthatrunonLinuxandWindowsoperatingsystems.
Theclientmanagementservicecollectsdiagnosticinformationaboutbackup-archiveclientsandmakestheinformationavailabletotheOperationsCenterforbasicmonitoringcapability.
ProcedureInstalltheclientmanagementserviceonthesamecomputerasthebackup-archiveclientbycompletingthefollowingsteps:1.
ObtaintheinstallationpackagefortheclientmanagementservicefromtheproductDVD.
Alternatively,youcandownloadtheinstallationpackagefortheclientmanagementservicefromanIBMdownloadsitesuchasIBMPassportAdvantageorIBMFixCentral.
Lookforafilenamethatissimilartoversion-TIV-TSMCMS-operating_system.
bin.
2.
Createadirectoryontheclientsystemthatyouwanttomanage,andcopytheinstallationpackagethere.
3.
Extractthecontentsoftheinstallationpackagefile.
4.
Runtheinstallationbatchfilefromthedirectorywhereyouextractedtheinstallationandassociatedfiles.
Thisisthedirectorythatyoucreatedinstep2.
5.
Toinstalltheclientmanagementservice,followtheinstructionsintheIBMInstallationManagerwizard.
IfIBMInstallationManagerisnotalreadyinstalledontheclientsystem,youmustselectbothIBMInstallationManagerandIBMSpectrumProtectClientManagementServices.
Relatedtasks:ConfiguringtheclientmanagementserviceforcustomclientinstallationsVerifyingthattheclientmanagementserviceisinstalledcorrectlyBeforeyouusetheclientmanagementservicetocollectdiagnosticinformationaboutabackup-archiveclient,youcanverifythattheclientmanagementserviceiscorrectlyinstalledandconfigured.
ProcedureOntheclientsystem,atthecommandline,runthefollowingcommandstoviewtheconfigurationoftheclientmanagementservice:vOnLinuxclientsystems,issuethefollowingcommand:client_install_dir/cms/bin/CmsConfig.
shlist60IBMSpectrumProtect:Single-SiteDiskSolutionGuidewhereclient_install_diristhedirectorywherethebackup-archiveclientisinstalled.
Forexample,withthedefaultclientinstallation,issuethefollowingcommand:/opt/tivoli/tsm/cms/bin/CmsConfig.
shlistTheoutputissimilartothefollowingtext:ListingCMSconfigurationserver1.
example.
com:1500NO_SSLHOSTNAMECapabilities:[LOG_QUERY]OptPath:/opt/tivoli/tsm/client/ba/bin/dsm.
sysLogFile:/opt/tivoli/tsm/client/ba/bin/dsmerror.
logen_USMM/dd/yyyyHH:mm:ssWindows-1252LogFile:/opt/tivoli/tsm/client/ba/bin/dsmsched.
logen_USMM/dd/yyyyHH:mm:ssWindows-1252vOnWindowsclientsystems,issuethefollowingcommand:client_install_dir\cms\bin\CmsConfig.
batlistwhereclient_install_diristhedirectorywherethebackup-archiveclientisinstalled.
Forexample,withthedefaultclientinstallation,issuethefollowingcommand:C:\"ProgramFiles"\Tivoli\TSM\cms\bin\CmsConfig.
batlistTheoutputissimilartothefollowingtext:ListingCMSconfigurationserver1.
example.
com:1500NO_SSLHOSTNAMECapabilities:[LOG_QUERY]OptPath:C:\ProgramFiles\Tivoli\TSM\baclient\dsm.
optLogFile:C:\ProgramFiles\Tivoli\TSM\baclient\dsmerror.
logen_USMM/dd/yyyyHH:mm:ssWindows-1252LogFile:C:\ProgramFiles\Tivoli\TSM\baclient\dsmsched.
logen_USMM/dd/yyyyHH:mm:ssWindows-1252Iftheclientmanagementserviceiscorrectlyinstalledandconfigured,theoutputdisplaysthelocationoftheerrorlogfile.
Theoutputtextisextractedfromthefollowingconfigurationfile:vOnLinuxclientsystems:client_install_dir/cms/Liberty/usr/servers/cmsServer/client-configuration.
xmlvOnWindowsclientsystems:client_install_dir\cms\Liberty\usr\servers\cmsServer\client-configuration.
xmlIftheoutputdoesnotcontainanyentries,youmustconfiguretheclient-configuration.
xmlfile.
Forinstructionstoconfigurethisfile,seeConfiguringtheclientmanagementserviceforcustomclientinstallations.
YoucanusetheCmsConfigverifycommandtoverifythatanodedefinitioniscorrectlycreatedintheclient-configuration.
xmlfile.
Chapter9.
Installingandconfiguringclients61ConfiguringtheOperationsCentertousetheclientmanagementserviceIfyoudidnotusethedefaultconfigurationfortheclientmanagementservice,youmustconfiguretheOperationsCentertoaccesstheclientmanagementservice.
BeforeyoubeginEnsurethattheclientmanagementserviceisinstalledandstartedontheclientsystem.
Verifywhetherthedefaultconfigurationisused.
Thedefaultconfigurationisnotusedifeitherofthefollowingconditionsismet:vTheclientmanagementservicedoesnotusethedefaultportnumber,9028.
vThebackup-archiveclientisnotaccessedbythesameIPaddressastheclientsystemwherethebackup-archiveclientisinstalled.
Forexample,adifferentIPaddressmightbeusedinthefollowingsituations:–Thecomputersystemhastwonetworkcards.
Thebackup-archiveclientisconfiguredtocommunicateononenetwork,whiletheclientmanagementservicecommunicatesontheothernetwork.
–TheclientsystemisconfiguredwiththeDynamicHostConfigurationProtocol(DHCP).
Asaresult,theclientsystemisdynamicallyassignedanIPaddress,whichissavedontheserverduringthepreviousbackup-archiveclientoperation.
Whentheclientsystemisrestarted,theclientsystemmightbeassignedadifferentIPaddress.
ToensurethattheOperationsCentercanalwaysfindtheclientsystem,youspecifyafullyqualifieddomainname.
ProcedureToconfiguretheOperationsCentertousetheclientmanagementservice,completethefollowingsteps:1.
OntheClientspageoftheOperationsCenter,selecttheclient.
2.
ClickDetails>Properties.
3.
IntheRemotediagnosticsURLfieldintheGeneralsection,specifytheURLfortheclientmanagementserviceontheclientsystem.
Theaddressmuststartwithhttps.
ThefollowingtableshowsexamplesoftheremotediagnosticsURL.
TypeofURLExampleWithDNShostnameanddefaultport,9028https://server.
example.
comWithDNShostnameandnon-defaultporthttps://server.
example.
com:1599WithIPaddressandnon-defaultporthttps://192.
0.
2.
0:15994.
ClickSave.
WhattodonextYoucanaccessclientdiagnosticinformationsuchasclientlogfilesfromtheDiagnosistabintheOperationsCenter.
62IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter10.
CompletingtheimplementationAftertheIBMSpectrumProtectsolutionisconfiguredandrunning,testbackupoperationsandsetupmonitoringtoensurethateverythingrunssmoothly.
Procedure1.
Testbackupoperationstoverifythatyourdataisprotectedinthewaythatyouexpect.
a.
OntheClientspageoftheOperationsCenter,selecttheclientsthatyouwanttobackup,andclickBackUp.
b.
OntheServerspageoftheOperationsCenter,selecttheserverforwhichyouwanttobackupthedatabase.
ClickBackUp,andfollowtheinstructionsintheBackUpServerDatabasewindow.
c.
Verifythatthebackupscompletedsuccessfullywithnowarningorerrormessages.
2.
SetupmonitoringforyoursolutionbyfollowingtheinstructionsinPart3,"Monitoringasingle-sitedisksolution,"onpage65.
CopyrightIBMCorp.
1993,20166364IBMSpectrumProtect:Single-SiteDiskSolutionGuidePart3.
Monitoringasingle-sitedisksolutionAfteryouimplementasingle-sitedisksolutionwithIBMSpectrumProtect,monitorthesolutionforcorrectoperation.
Bymonitoringthesolutiondailyandperiodically,youcanidentifyexistingandpotentialissues.
Theinformationthatyougathercanbeusedtotroubleshootproblemsandoptimizesystemperformance.
AboutthistaskThepreferredwaytomonitorasolutionisbyusingtheOperationsCenter,whichprovidesoverallanddetailedsystemstatusinagraphicaluserinterface.
Inaddition,youcanconfiguretheOperationsCentertogenerateadailyemailreportthatsummarizessystemstatus.
Insomecases,youmightwanttouseadvancedmonitoringtoolstocompletespecificmonitoringortroubleshootingtasks.
Tip:Ifyouplantodiagnoseissueswithbackup-archiveclientsonLinuxorWindowsoperatingsystems,installIBMSpectrumProtectclientmanagementservicesoneachcomputerwhereabackup-archiveclientisinstalled.
Inthisway,youcanensurethattheDiagnosebuttonisavailableintheOperationsCenterfordiagnosingissueswithbackup-archiveclients.
Toinstalltheclientmanagementservice,followtheinstructionsinInstallingtheclientmanagementservice.
Procedure1.
Completedailymonitoringtasks.
Forinstructions,seeDailychecklist.
2.
Completeperiodicmonitoringtasks.
Forinstructions,seePeriodicchecklist.
3.
ToverifythatyourIBMSpectrumProtectsolutioncomplieswithlicensingrequirements,followtheinstructionsinVerifyinglicensecompliance.
4.
TosetupOperationsCentertogenerateemailstatusreports,seeTrackingsystemstatusbyusingemailreportsWhattodonextResolveanyissuesthatyoudetect.
Toresolveanissuebychangingtheconfigurationofyoursolution,followtheinstructionsinPart4,"Managingoperations,"onpage81.
Thefollowingresourcesarealsoavailable:vToresolveperformanceissues,seePerformance.
vToresolveothertypesofissues,seeTroubleshooting.
CopyrightIBMCorp.
1993,20166566IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter11.
DailymonitoringchecklistToensurethatyouarecompletingthedailymonitoringtasksforyourIBMSpectrumProtectsolution,reviewthedailymonitoringchecklist.
CompletethedailymonitoringtasksfromtheOperationsCenterOverviewpage.
YoucanaccesstheOverviewpagebyopeningtheOperationsCenterandclickingOverviews.
Thefollowingfigureshowsthelocationforcompletingeachtask.
Tip:Torunadministrativecommandsforadvancedmonitoringtasks,usetheOperationsCentercommandbuilder.
Thecommandbuilderprovidesatype-aheadfunctiontoguideyouasyouentercommands.
Toopenthecommandbuilder,gototheOperationsCenterOverviewpage.
Onthemenubar,hoveroverthesettingsiconandclickCommandBuilder.
Thefollowingtableliststhedailymonitoringtasksandprovidesinstructionsforcompletingeachtask.
Table15.
DailymonitoringtasksTaskBasicproceduresAdvancedproceduresandtroubleshootinginformationDeterminewhetherclientsareatriskofbeingunprotectedduetofailedormissedbackupoperations.
Toverifywhetherclientsareatrisk,intheClientsarea,lookforanAtrisknotification.
Toviewdetails,clicktheClientsarea.
Ifyouinstalledtheclientmanagementserviceonabackup-archiveclient,youcanviewandanalyzetheclienterrorandschedulelogsbycompletingthefollowingsteps:1.
IntheClientstable,selecttheclientandclickDetails.
2.
Todiagnoseanissue,clickDiagnosis.
Forclientsthatdonothavetheclientmanagementserviceinstalled,accesstheclientsystemtoreviewtheclienterrorlogs.
CopyrightIBMCorp.
1993,201667Table15.
Dailymonitoringtasks(continued)TaskBasicproceduresAdvancedproceduresandtroubleshootinginformationDeterminewhetherclient-relatedorserver-relatederrorsrequireattention.
Todeterminetheseverityofanyreportedalerts,intheAlertsarea,hoveroverthecolumns.
Toviewadditionalinformationaboutalerts,completethefollowingsteps:1.
ClicktheAlertsarea.
2.
IntheAlertstable,selectanalert.
3.
IntheActivityLogpane,reviewthemessages.
Thepanedisplaysrelatedmessagesthatwereissuedbeforeandaftertheselectedalertoccurred.
DeterminewhetherserversthataremanagedbytheOperationsCenterareavailabletoprovidedataprotectionservicestoclients.
1.
Toverifywhetherserversareatrisk,intheServersarea,lookforanUnavailablenotification.
2.
Toviewadditionalinformation,clicktheServersarea.
3.
SelectaserverintheServerstableandclickDetails.
Tip:Ifyoudetectanissuethatisrelatedtoserverproperties,updatetheserverproperties:1.
IntheServerstable,selectaserverandclickDetails.
2.
Toupdateserverproperties,clickProperties.
Determinewhethersufficientspaceisavailablefortheserverinventory,whichconsistsoftheserverdatabase,activelog,andarchivelog.
1.
ClicktheServersarea.
2.
IntheStatuscolumnofthetable,viewthestatusoftheserverandresolveanyissues:vNormalSufficientspaceisavailablefortheserverdatabase,activelog,andarchivelog.
vCriticalInsufficientspaceisavailablefortheserverdatabase,activelog,orarchivelog.
Youmustaddspaceimmediately,orthedataprotectionservicesthatareprovidedbytheserverwillbeinterrupted.
vWarningTheserverdatabase,activelog,orarchivelogisrunningoutofspace.
Ifthisconditionpersists,youmustaddspace.
vUnavailableStatuscannotbeobtained.
Ensurethattheserverisrunning,andthattherearenonetworkissues.
ThisstatusisalsoshownifthemonitoringadministratorIDislockedorotherwiseunavailableontheserver.
ThisIDisnamedIBM-OC-hub_server_name.
vUnmonitoredUnmonitoredserversaredefinedtothehubserver,butarenotconfiguredformanagementbytheOperationsCenter.
Toconfigureanunmonitoredserver,selecttheserver,andclickMonitorSpoke.
YoucanalsolookforrelatedalertsontheAlertspage.
Foradditionalinstructionsabouttroubleshooting,seeResolvingserverproblems.
68IBMSpectrumProtect:Single-SiteDiskSolutionGuideTable15.
Dailymonitoringtasks(continued)TaskBasicproceduresAdvancedproceduresandtroubleshootinginformationVerifyserverdatabasebackupoperations.
Todeterminewhenaserverwasmostrecentlybackedup,completethefollowingsteps:1.
ClicktheServersarea.
2.
IntheServerstable,reviewtheLastDatabaseBackupcolumn.
Toobtainmoredetailedinformationaboutbackupoperations,completethefollowingsteps:1.
IntheServerstable,selectarowandclickDetails.
2.
IntheDBBackuparea,hoveroverthecheckmarkstoreviewinformationaboutbackupoperations.
Ifadatabasewasnotbackeduprecently(forexample,inthelast24hours),youcanstartabackupoperation:1.
OntheOperationsCenterOverviewpage,clicktheServersarea.
2.
Inthetable,selectaserverandclickBackUp.
Todeterminewhethertheserverdatabaseisconfiguredforautomaticbackupoperations,completethefollowingsteps:1.
Onthemenubar,hoveroverthesettingsiconandclickCommandBuilder.
2.
IssuetheQUERYDBcommand:querydbf=d3.
Intheoutput,reviewtheFullDeviceClassNamefield.
Ifadeviceclassisspecified,theserverisconfiguredforautomaticdatabasebackups.
Monitorotherservermaintenancetasks.
Servermaintenancetaskscanincluderunningadministrativecommandschedules,maintenancescripts,andrelatedcommands.
Tosearchforinformationaboutprocessesthatfailedbecauseofserverissues,completethefollowingsteps:1.
ClickServers>Maintenance.
2.
Toobtainthetwo-weekhistoryofaprocess,viewtheHistorycolumn.
3.
Toobtainmoreinformationaboutascheduledprocess,hoveroverthecheckboxthatisassociatedwiththeprocess.
Formoreinformationaboutmonitoringprocessesandresolvingissues,seetheOperationsCenteronlinehelp.
Verifythattheamountofdatathatwasrecentlysenttoandfromserversiswithintheexpectedrange.
vToobtainanoverviewofactivityinthelast24hours,viewtheActivityarea.
vTocompareactivityinthelast24hourswithactivityintheprevious24hours,reviewthefiguresintheCurrentandPreviousareas.
vIfmoredatawassenttotheserverthanyouexpected,determinewhichclientsarebackingupmoredataandinvestigatethecause.
Itispossiblethatclient-sidedatadeduplicationisnotworkingcorrectly.
vIflessdatawassenttotheserverthanyouexpected,investigatewhetherclientbackupoperationsareproceedingonschedule.
Chapter11.
Dailychecklist69Table15.
Dailymonitoringtasks(continued)TaskBasicproceduresAdvancedproceduresandtroubleshootinginformationVerifythatstoragepoolsareavailabletobackupclientdata.
1.
IfproblemsareindicatedintheStorage&DataAvailabilityarea,clickPoolstoviewthedetails:vIftheCriticalstatusisdisplayed,insufficientspaceisavailableinthestoragepool,oritsaccessstatusisunavailable.
vIftheWarningstatusisdisplayed,thestoragepoolisrunningoutofspace,oritsaccessstatusisread-only.
2.
Toviewtheused,free,andtotalspaceforyourselectedstoragepool,hoverovertheentriesintheCapacityUsedcolumn.
Toviewthestorage-poolcapacitythatwasusedoverthepasttwoweeks,selectarowintheStoragePoolstableandclickDetails.
Verifythatstoragedevicesareavailableforbackupoperations.
IntheStorage&DataAvailabilityarea,intheVolumessection,underthecapacitybars,reviewthestatusthatisreportednexttoDevices.
IfaCriticalorWarningstatusisdisplayedforanydevice,investigatetheissue.
Toviewdetails,clickDevices.
Diskdevicesmighthaveacriticalorwarningstatusforthefollowingreasons:vForDISKdeviceclasses,volumesmightbeofflineorhavearead-onlyaccessstatus.
TheDiskStoragecolumnoftheDiskDevicestableshowsthestateofvolumes.
vForFILEdeviceclassesthatarenotshared,directoriesmightbeoffline.
Also,insufficientfreespacemightbeavailableforallocatingscratchvolumes.
TheDiskStoragecolumnoftheDiskDevicestableshowsthestateofdirectories.
vForFILEdeviceclassesthatareshared,drivesmightbeunavailable.
Adriveisunavailableifitisoffline,ifitstoppedrespondingtotheserver,orifitspathisoffline.
OthercolumnsoftheDiskDevicestableshowthestateofthedrivesandpaths.
70IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter12.
PeriodicmonitoringchecklistTohelpensurethatyourIBMSpectrumProtectsolutionoperatescorrectly,completethetasksintheperiodicmonitoringchecklist.
Scheduleperiodictasksfrequentlyenoughsothatyoucandetectpotentialissuesbeforetheybecomeproblematic.
Tip:Torunadministrativecommandsforadvancedmonitoringtasks,usetheOperationsCentercommandbuilder.
Thecommandbuilderprovidesatype-aheadfunctiontoguideyouasyouentercommands.
Toopenthecommandbuilder,gototheOperationsCenterOverviewpage.
Onthemenubar,hoveroverthesettingsiconandclickCommandBuilder.
Table16.
PeriodicmonitoringtasksTaskBasicproceduresAdvancedproceduresandtroubleshootingMonitorsystemperformance.
Determinethelengthoftimethatisrequiredforclientbackupoperations:1.
OntheOperationsCenterOverviewpage,clickClients.
Findtheserverthatisassociatedwiththeclient.
2.
ClickServers.
SelecttheserverandclickDetails.
3.
Toviewthedurationofcompletedtasksinthelast24hours,clickCompletedTasks.
4.
Toviewthedurationoftasksthatwerecompletedmorethan24hoursago,usetheQUERYACTLOGcommand.
FollowtheinstructionsinQUERYACTLOG(Querytheactivitylog).
5.
Ifthedurationofclientbackupoperationsisincreasingandthereasonsarenotclear,investigatethecause.
Ifyouinstalledtheclientmanagementserviceonabackup-archiveclient,youcandiagnoseperformanceissuesforthebackup-archiveclientbycompletingthefollowingsteps:1.
OntheOperationsCenterOverviewpage,clickClients.
2.
Selectabackup-archiveclientandclickDetails.
3.
Toretrieveclientlogs,clickDiagnosis.
Forinstructionsaboutreducingthetimethatittakesfortheclienttobackupdatatotheserver,seeResolvingcommonclientperformanceproblems.
Lookforperformancebottlenecks.
Forinstructions,seeIdentifyingperformancebottlenecks.
Forinformationaboutidentifyingandresolvingotherperformanceissues,seePerformance.
CopyrightIBMCorp.
1993,201671Table16.
Periodicmonitoringtasks(continued)TaskBasicproceduresAdvancedproceduresandtroubleshootingDeterminethedisksavingsthatareprovidedbydatadeduplication.
1.
OntheOperationsCenterOverviewpage,clickPools.
2.
SelectapoolandclickQuickLook.
3.
IntheDataDeduplicationarea,viewtheSpacesavedrow.
Foradvancedmonitoring,toobtaindetailedstatisticsaboutthedata-deduplicationprocessforaspecificdirectory-containerstoragepoolorcloud-containerstoragepool,completethefollowingsteps:1.
OntheOperationsCenterOverviewpage,hoveroverthesettingsiconandclickCommandBuilder.
2.
ObtainastatisticalreportbyissuingtheGENERATEDEDUPSTATScommand.
FollowtheinstructionsinGENERATEDEDUPSTATS(Generatedatadeduplicationstatisticsforadirectory-containerstoragepool).
3.
ViewthestatisticalreportbyissuingtheQUERYDEDUPSTATScommand.
FollowtheinstructionsinQUERYDEDUPSTATS(Querydatadeduplicationstatistics).
Verifythatcurrentbackupfilesfordeviceconfigurationandvolumehistoryinformationaresaved.
Accessyourstoragelocationstoensurethatthefilesareavailable.
Thepreferredmethodistosavethebackupfilestotwolocations.
Tolocatethevolumehistoryanddeviceconfigurationfiles,completethefollowingsteps:1.
OntheOperationsCenterOverviewpage,hoveroverthesettingsiconandclickCommandBuilder.
2.
Tolocatethevolumehistoryanddeviceconfigurationfiles,issuethefollowingcommands:queryoptionvolhistoryqueryoptiondevconfig3.
Intheoutput,reviewtheOptionSettingcolumntofindthefilelocations.
Ifadisasteroccurs,boththevolumehistoryfileandthedeviceconfigurationfilearerequiredtorestoretheserverdatabase.
72IBMSpectrumProtect:Single-SiteDiskSolutionGuideTable16.
Periodicmonitoringtasks(continued)TaskBasicproceduresAdvancedproceduresandtroubleshootingDeterminewhethersufficientspaceisavailablefortheinstancedirectoryfilesystem.
Verifythatatleast20%offreespaceisavailableintheinstancedirectoryfilesystem.
Taketheactionthatisappropriateforyouroperatingsystem:vToviewavailablespaceinthefilesystem,ontheoperatingsystemcommandline,issuethefollowingcommand:df-ginstance_directorywhereinstance_directoryspecifiestheinstancedirectory.
vToviewavailablespaceinthefilesystem,ontheoperatingsystemcommandline,issuethefollowingcommand:df-hinstance_directorywhereinstance_directoryspecifiestheinstancedirectory.
vIntheWindowsExplorerprogram,right-clickthefilesystemandclickProperties.
Viewthecapacityinformation.
Thepreferredlocationoftheinstancedirectorydependsontheoperatingsystemwheretheserverisinstalled:v/home/tsminst1/tsminst1vC:\tsminst1Tip:Ifyoucompletedaplanningworksheet,thelocationoftheinstancedirectoryisrecordedintheworksheet.
Identifyunexpectedclientactivity.
Tomonitorclientactivitytodeterminewhetherdatavolumesexceedexpectedamounts,completethefollowingsteps:1.
OntheOperationsCenterOverviewpage,clicktheClientsarea.
2.
Toviewactivityoverthepasttwoweeks,double-clickanyclient.
3.
Toviewthenumberofbytessenttotheclient,clickthePropertiestab.
4.
IntheLastSessionarea,viewtheSenttoclientrow.
Whenyoudouble-clickaclientintheClientstable,theActivityover2Weeksareadisplaystheamountofdatathattheclientsenttotheservereachday.
Chapter12.
Periodicchecklist73Table16.
Periodicmonitoringtasks(continued)TaskBasicproceduresAdvancedproceduresandtroubleshootingMonitorstoragepoolgrowthovertime.
1.
OntheOperationsCenterOverviewpage,clickthePoolsarea.
2.
Toviewthecapacitythatwasusedoverthelasttwoweeks,selectapoolandclickDetails.
Tips:vTospecifythetimeperiodthatmustelapsebeforealldeduplicatedextentsareremovedfromadirectory-containerstoragepoolorcloud-containerstoragepoolaftertheyarenolongerreferencedbytheinventory,completethefollowingsteps:1.
OntheStoragePoolspageoftheOperationsCenter,selectthestoragepool.
2.
ClickDetails>Properties.
3.
SpecifythedurationintheDelayperiodforcontainerreusefield.
vTodeterminedatadeduplicationperformancefordirectory-containerandcloud-containerstoragepools,usetheGENERATEDEDUPSTATScommand.
vToviewdatadeduplicationstatisticsforastoragepool,completethefollowingsteps:1.
OntheStoragePoolspageoftheOperationsCenter,selectthestoragepool.
2.
ClickDetails>Properties.
Alternatively,usetheQUERYEXTENTUPDATEScommandtodisplayinformationaboutupdatestodataextentsindirectory-containerorcloud-containerstoragepools.
Thecommandoutputcanhelpyoudeterminewhichdataextentsarenolongerreferencedandwhichonesareeligibletobedeletedfromthesystem.
Intheoutput,monitorthenumberofdataextentsthatareeligibletobedeletedfromthesystem.
Thismetrichasadirectcorrelationtotheamountoffreespacethatwillbeavailablewithinthecontainerstoragepool.
vTodisplaytheamountofphysicalspacethatisoccupiedbyafilespaceaftertheremovalofthedatadeduplicationsavings,usetheselect*fromoccupancycommand.
ThecommandoutputincludestheLOGICAL_MBvalue.
LOGICAL_MBistheamountofspacethatisusedbythefilespace.
Evaluatethetimingofclientschedules.
Ensurethatthestartandendtimesofclientschedulesmeetyourbusinessneeds.
OntheOperationsCenterOverviewpage,clickClients>Schedules.
IntheSchedulestable,theStartcolumndisplaystheconfiguredstarttimeforthescheduledoperation.
Toseewhenthemostrecentoperationwasstarted,hoverovertheclockicon.
Tip:Youcanreceiveawarningmessageifaclientoperationrunslongerthanexpected.
Completethefollowingsteps:1.
OntheOperationsCenterOverviewpage,hoveroverClientsandclickSchedules.
2.
SelectascheduleandclickDetails.
3.
Viewthedetailsofaschedulebyclickingthebluearrownexttotherow.
4.
IntheRuntimealertfield,specifythetimewhenawarningmessagewillbeissuedifthescheduledoperationisnotcompleted.
5.
ClickSave.
74IBMSpectrumProtect:Single-SiteDiskSolutionGuideTable16.
Periodicmonitoringtasks(continued)TaskBasicproceduresAdvancedproceduresandtroubleshootingEvaluatethetimingofmaintenancetasks.
Ensurethatthestartandendtimesofmaintenancetasksmeetyourbusinessneeds.
OntheOperationsCenterOverviewpage,clickServers>Maintenance.
IntheMaintenancetable,reviewtheinformationintheLastRunTimecolumn.
Toseewhenthelastmaintenancetaskwasstarted,hoverovertheclockicon.
Tip:Ifamaintenancetaskisrunningtoolong,changethestarttimeorthemaximumruntime.
Completethefollowingsteps:1.
OntheOperationsCenterOverviewpage,hoveroverthesettingsiconandclickCommandBuilder.
2.
Tochangethestarttimeormaximumruntimeforatask,issuetheUPDATESCHEDULEcommand.
Forinstructions,seeUPDATESCHEDULE(Updateaclientschedule).
Relatedreference:QUERYACTLOG(Querytheactivitylog)UPDATESTGPOOL(Updateastoragepool)QUERYEXTENTUPDATES(Queryupdateddataextents)Chapter12.
Periodicchecklist7576IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter13.
VerifyinglicensecomplianceVerifythatyourIBMSpectrumProtectsolutioncomplieswiththeprovisionsofyourlicensingagreement.
Byverifyingcomplianceregularly,youcantracktrendsindatagrowthorprocessorvalueunit(PVU)usage.
Usethisinformationtoplanforfuturelicensepurchasing.
AboutthistaskThemethodforverifyinglicensecompliancevariesdependingontheprovisionsofyourIBMSpectrumProtectlicensingagreement:Front-endcapacitylicensingThefront-endmodeldetermineslicenserequirementsbasedontheamountofprimarydatathatisreportedasbeingbackedupbyclients.
Clientsincludeapplications,virtualmachines,andsystems.
Back-endcapacitylicensingTheback-endmodeldetermineslicenserequirementsbasedontheterabytesofdatathatarestoredinprimarystoragepoolsandrepositories.
Tips:vToensuretheaccuracyoffront-endandback-endcapacityestimates,installthelatestversionoftheclientsoftwareoneachclientnode.
vThefront-endandback-endcapacityinformationintheOperationsCenterisforplanningandestimationpurposes.
PVUlicensingThePVUmodelisbasedontheuseofPVUsbyserverdevices.
Important:ThePVUcalculationsthatareprovidedbyIBMSpectrumProtectareconsideredestimatesandarenotlegallybinding.
ThePVUlicensinginformationthatisreportedbyIBMSpectrumProtectisnotconsideredanacceptablesubstitutefortheIBMLicenseMetricTool.
Forthelatestinformationaboutlicensingmodels,seetheinformationaboutcomparingbundlesattheIBMSpectrumProtectproductfamilywebsite.
Ifyouhavequestionsorconcernsaboutlicensingrequirements,contactyourIBMSpectrumProtectsoftwareprovider.
ProcedureTomonitorlicensecompliance,completethestepsthatcorrespondtotheprovisionsofyourlicensingagreement.
Tip:TheOperationsCenterprovidesanemailreportthatsummarizesfront-endandback-endcapacityusage.
Reportscanbesentautomaticallytooneormorerecipientsonaregularbasis.
Toconfigureandmanageemailreports,clickReportsontheOperationsCentermenubar.
CopyrightIBMCorp.
1993,201677OptionDescriptionFront-endmodel1.
OntheOperationsCentermenubar,hoveroverthesettingsiconandclickLicensing.
Thefront-endcapacityestimateisdisplayedontheFront-endUsagepage.
2.
IfavalueisdisplayedintheNotReportingcolumn,clickthenumbertoidentifyclientsthatdidnotreportcapacityusage.
3.
Toestimatecapacityforclientsthatdidnotreportcapacityusage,gotothefollowingFTPsite,whichprovidesmeasuringtoolsandinstructions:ftp://public.
dhe.
ibm.
com/storage/tivoli-storage-management/front_end_capacity_measurement_toolsFollowtheinstructionsinthelatestavailablelicensingguidetomeasurefront-endcapacitybyscript.
4.
AddtheOperationsCenterestimateandanyestimatesthatyouobtainedbyusingascript.
5.
Verifythattheestimatedcapacitycomplieswithyourlicensingagreement.
Back-endmodelRestriction:YoucannotusetheOperationsCentertomonitorback-endcapacityusageforreplicatedclientsifthesourceandtargetreplicationserversdonotusethesamepolicysettings.
Forinformationabouthowtoestimatecapacityusagefortheseclients,seetechnote1656476.
1.
OntheOperationsCentermenubar,hoveroverthesettingsiconandclickLicensing.
2.
ClicktheBack-endtab.
3.
Verifythattheestimatedamountofdatacomplieswithyourlicensingagreement.
PVUmodelFollowtheinstructionsinAssessingcompliancewiththePVUlicensingmodel.
78IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter14.
TrackingsystemstatusbyusingemailreportsSetuptheOperationsCentertogenerateemailreportsthatsummarizesystemstatus.
Youcanconfigureamailserverconnection,changereportsettings,andoptionallycreatecustomSQLreports.
BeforeyoubeginBeforeyousetupemailreports,ensurethatthefollowingrequirementsaremet:vASimpleMailTransferProtocol(SMTP)hostserverisavailabletosendandreceivereportsbyemail.
TheSMTPservermustbeconfiguredasanopenmailrelay.
YoumustalsoensurethattheIBMSpectrumProtectserverthatsendsemailmessageshasaccesstotheSMTPserver.
IftheOperationsCenterisinstalledonaseparatecomputer,thatcomputerdoesnotrequireaccesstotheSMTPserver.
vTosetupemailreports,youmusthavesystemprivilegefortheserver.
vTospecifytherecipients,youcanenteroneormoreemailaddressesoradministratorIDs.
IfyouplantoenteranadministratorID,theIDmustberegisteredonthehubserverandmusthaveanemailaddressassociatedwithit.
Tospecifyanemailaddressforanadministrator,usetheEMAILADDRESSparameteroftheUPDATEADMINcommand.
AboutthistaskYoucanconfiguretheOperationsCentertosendageneraloperationsreport,alicensecompliancereport,andoneormorecustomreports,whichuseSQLSELECTstatementstoquerymanagedservers.
Tip:Thegeneraloperationsreportincludesanattachment.
Tofindmoredetailedinformation,expandthesectionsintheattachment.
ProcedureTosetupandmanageemailreports,completethefollowingsteps:1.
OntheOperationsCentermenubar,clickReports.
2.
Ifanemailserverconnectionisnotyetconfigured,clickConfigureMailServerandcompletethefields.
Afteryouconfigurethemailserver,thegeneraloperationsreportandlicensecompliancereportareenabled.
3.
Tochangereportsettings,selectareport,clickDetails,andupdatetheform.
4.
Optional:ToaddacustomSQLreport,click+Report,andcompletethefields.
Tip:Toimmediatelyrunandsendareport,selectthereportandclickSend.
ResultsEnabledreportsaresent,accordingtothespecifiedsettings.
Ifyoucannotviewtheimageinareport,youmightbeusinganemailclientthatconvertsHTMLtoanotherformat.
Forinformationaboutrestrictions,seetheOperationsCenteronlinehelp.
Relatedreference:CopyrightIBMCorp.
1993,201679UPDATEADMIN(Updateanadministrator)80IBMSpectrumProtect:Single-SiteDiskSolutionGuidePart4.
ManagingoperationsUsethisinformationtomanageoperationsforasingle-sitedisksolutionwithIBMSpectrumProtectthatincludesaserverandusesdatadeduplicationforasinglelocation.
CopyrightIBMCorp.
1993,20168182IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter15.
ManagingtheOperationsCenterTheOperationsCenterprovideswebandmobileaccesstostatusinformationabouttheIBMSpectrumProtectenvironment.
YoucanusetheOperationsCentertomonitormultipleserversandtocompletesomeadministrativetasks.
TheOperationsCenteralsoprovideswebaccesstotheIBMSpectrumProtectcommandline.
AddingandremovingspokeserversInamultiple-serverenvironment,youcanconnecttheotherservers,calledspokeservers,tothehubserver.
AboutthistaskThespokeserverssendalertsandstatusinformationtothehubserver.
TheOperationsCentershowsyouaconsolidatedviewofalertsandstatusinformationforthehubserverandanyspokeservers.
AddingaspokeserverAfteryouconfigurethehubserverfortheOperationsCenter,youcanaddoneormorespokeserverstothehubserver.
BeforeyoubeginWhenyouinstalltheIBMSpectrumProtectserver,thedefaultconfigurationrequiressecurecommunicationbyusingtheSecureSocketsLayer(SSL)orTransportLayerSecurity(TLS)protocol.
Unlessthisrequirementwasdisabledforboththehubandthespokeservers,youmustaddthecertificateofthespokeservertothetruststorefileofthehubserver.
Procedure1.
IntheOperationsCentermenubar,clickServers.
TheServerspageopens.
InthetableontheServerspage,aservermighthaveastatusof"Unmonitored.
"ThisstatusmeansthatalthoughanadministratordefinedthisservertothehubserverbyusingtheDEFINESERVERcommand,theserverisnotyetconfiguredasaspokeserver.
2.
Completeoneofthefollowingsteps:vClicktheservertohighlightit,andinthetablemenubar,clickMonitorSpoke.
vIftheserverthatyouwanttoaddisnotshowninthetable,andsecureSSL/TLScommunicationisnotrequired,click+Spokeinthetablemenubar.
3.
Providethenecessaryinformation,andcompletethestepsinthespokeconfigurationwizard.
Tip:Iftheevent-recordretentionperiodoftheserverislessthan14days,theperiodisautomaticallyresetto14daysifyouconfiguretheserverasaspokeserver.
CopyrightIBMCorp.
1993,201683RemovingaspokeserverYoucanremoveaspokeserverfromtheOperationsCenter.
AboutthistaskYoumightneedtoremoveaspokeserverinthefollowingsituations,forexample:vYouwanttomovethespokeserverfromonehubservertoanotherhubserver.
vYouwanttodecommissionthespokeserver.
ProcedureToremovethespokeserverfromthegroupofserversthataremanagedbythehubserver,completethefollowingsteps:1.
FromtheIBMSpectrumProtectcommandline,issuethefollowingcommandonthehubserver:QUERYMONITORSETTINGS2.
Fromtheoutputofthecommand,copythenamethatisintheMonitoredGroupfield.
3.
Issuethefollowingcommandonthehubserver,wheregroup_namerepresentsthenameofthemonitoredgroup,andmember_namerepresentsthenameofthespokeserver:DELETEGRPMEMBERgroup_namemember_name4.
Optional:Ifyouwanttomovethespokeserverfromonehubservertoanotherhubserver,donotcompletethisstep.
Otherwise,youcandisablealertingandmonitoringonthespokeserverbyissuingthefollowingcommandsonthespokeserver:SETSTATUSMONITOROFFSETALERTMONITOROFF5.
Optional:Ifthespokeserverdefinitionisusedforotherpurposes,suchasenterpriseconfiguration,commandrouting,storingvirtualvolumes,orlibrarymanagement,donotcompletethisstep.
Otherwise,youcandeletethespokeserverdefinitiononthehubserverbyissuingthefollowingcommandonthehubserver:DELETESERVERspoke_server_nameStartingandstoppingthewebserverThewebserveroftheOperationsCenterrunsasaserviceandstartsautomatically.
Youmighthavetostopandstartthewebserver,forexample,tomakeconfigurationchanges.
Procedure1.
Stopthewebserver.
vFromthe/installation_dir/ui/utilsdirectory,whereinstallation_dirrepresentsthedirectorywheretheOperationsCenterisinstalled,issuethefollowingcommand:.
/stopserver.
shvIssuethefollowingcommand:serviceopscenter.
rcstopvFromtheServiceswindow,stoptheIBMSpectrumProtectOperationsCenterservice.
84IBMSpectrumProtect:Single-SiteDiskSolutionGuide2.
Startthewebserver.
vFromthe/installation_dir/ui/utilsdirectory,whereinstallation_dirrepresentsthedirectorywheretheOperationsCenterisinstalled,issuethefollowingcommand:.
/startserver.
shvIssuethefollowingcommands:Starttheserver:serviceopscenter.
rcstartRestarttheserver:serviceopscenter.
rcrestartDeterminewhethertheserverisrunning:serviceopscenter.
rcstatusvFromtheServiceswindow,starttheIBMSpectrumProtectOperationsCenterservice.
RestartingtheinitialconfigurationwizardYoumightneedtorestarttheinitialconfigurationwizardoftheOperationsCenter,forexample,tomakeconfigurationchanges.
BeforeyoubeginTochangethefollowingsettings,usetheSettingspageintheOperationsCenterratherthanrestartingtheinitialconfigurationwizard:vThefrequencyatwhichstatusdataisrefreshedvThedurationthatalertsremainactive,inactive,orclosedvTheconditionsthatindicatethatclientsareatriskTheOperationsCenterhelpincludesmoreinformationabouthowtochangethesesettings.
AboutthistaskTorestarttheinitialconfigurationwizard,youmustdeleteapropertiesfilethatincludesinformationaboutthehubserverconnection.
However,anyalerting,monitoring,at-risk,ormultiserversettingsthatwereconfiguredforthehubserverarenotdeleted.
Thesesettingsareusedasthedefaultsettingsintheconfigurationwizardwhenthewizardrestarts.
Procedure1.
StoptheOperationsCenterwebserver.
2.
OnthecomputerwheretheOperationsCenterisinstalled,gotothefollowingdirectory,whereinstallation_dirrepresentsthedirectoryinwhichtheOperationsCenterisinstalled:vinstallation_dir/ui/Liberty/usr/servers/guiServervinstallation_dir\ui\Liberty\usr\servers\guiServerForexample:v/opt/tivoli/tsm/ui/Liberty/usr/servers/guiServervc:\ProgramFiles\Tivoli\TSM\ui\Liberty\usr\servers\guiServerChapter15.
ManagingtheOperationsCenter853.
IntheguiServerdirectory,deletetheserverConnection.
propertiesfile.
4.
StarttheOperationsCenterwebserver.
5.
OpentheOperationsCenter.
6.
UsetheconfigurationwizardtoreconfiguretheOperationsCenter.
SpecifyanewpasswordforthemonitoringadministratorID.
7.
Onanyspokeserversthatwerepreviouslyconnectedtothehubserver,updatethepasswordforthemonitoringadministratorIDbyissuingthefollowingcommandfromtheIBMSpectrumProtectcommand-lineinterface:UPDATEADMINIBM-OC-hub_server_namenew_passwordRestriction:DonotchangeanyothersettingsforthisadministratorID.
Afteryouspecifytheinitialpassword,thispasswordismanagedautomaticallybytheOperationsCenter.
ChangingthehubserverYoucanusetheOperationsCentertoremovethehubserverofIBMSpectrumProtect,andconfigureanotherhubserver.
Procedure1.
RestarttheinitialconfigurationwizardoftheOperationsCenter.
Aspartofthisprocedure,youdeletetheexistinghubserverconnection.
2.
UsethewizardtoconfiguretheOperationsCentertoconnecttothenewhubserver.
Relatedtasks:"Restartingtheinitialconfigurationwizard"onpage85RestoringtheconfigurationtothepreconfigurationstateIfcertainproblemsoccur,youmightwanttorestoretheOperationsCenterconfigurationtothepreconfiguredstatewheretheIBMSpectrumProtectserversarenotdefinedashuborspokeservers.
ProcedureTorestoretheconfiguration,completethefollowingsteps:1.
StoptheOperationsCenterwebserver.
2.
Unconfigurethehubserverbycompletingthefollowingsteps:a.
Onthehubserver,issuethefollowingcommands:SETMONITORINGADMIN""SETMONITOREDSERVERGROUP""SETSTATUSMONITOROFFSETALERTMONITOROFFREMOVEADMINIBM-OC-hub_server_nameTip:IBM-OC-hub_server_namerepresentsthemonitoringadministratorIDthatwasautomaticallycreatedwhenyouinitiallyconfiguredthehubserver.
b.
Resetthepasswordforthehubserverbyissuingthefollowingcommandonthehubserver:SETSERVERPASSWORD""86IBMSpectrumProtect:Single-SiteDiskSolutionGuideAttention:Donotcompletethisstepifthehubserverisconfiguredwithotherserversforotherpurposes,suchaslibrarysharing,exportingandimportingofdata,ornodereplication.
3.
Unconfigureanyspokeserversbycompletingthefollowingsteps:a.
Onthehubserver,todeterminewhetheranyspokeserversremainasmembersoftheservergroup,issuethefollowingcommand:QUERYSERVERGROUPIBM-OC-hub_server_nameTip:IBM-OC-hub_server_namerepresentsthenameofthemonitoredservergroupthatwasautomaticallycreatedwhenyouconfiguredthefirstspokeserver.
ThisservergroupnameisalsothesameasthemonitoringadministratorIDthatwasautomaticallycreatedwhenyouinitiallyconfiguredthehubserver.
b.
Onthehubserver,todeletespokeserversfromtheservergroup,issuethefollowingcommandforeachspokeserver:DELETEGRPMEMBERIBM-OC-hub_server_namespoke_server_namec.
Afterallspokeserversaredeletedfromtheservergroup,issuethefollowingcommandsonthehubserver:DELETESERVERGROUPIBM-OC-hub_server_nameSETMONITOREDSERVERGROUP""d.
Oneachspokeserver,issuethefollowingcommands:REMOVEADMINIBM-OC-hub_server_nameSETOPTPUSHSTATUSNOSETALERTMONITOROFFSETSTATUSMONITOROFFe.
Oneachspokeserver,deletethedefinitionofthehubserverbyissuingthefollowingcommand:DELETESERVERhub_server_nameAttention:Donotcompletethisstepifthedefinitionisusedforotherpurposes,suchaslibrarysharing,exportingandimportingofdata,ornodereplication.
f.
Onthehubserver,deletethedefinitionofeachspokeserverbyissuingthefollowingcommand:DELETESERVERspoke_server_nameAttention:Donotcompletethisstepiftheserverdefinitionisusedforotherpurposes,suchaslibrarysharing,exportingandimportingofdata,ornodereplication.
4.
Restorethedefaultsettingsoneachserverbyissuingthefollowingcommands:SETSTATUSREFRESHINTERVAL5SETALERTUPDATEINTERVAL10SETALERTACTIVEDURATION480SETALERTINACTIVEDURATION480SETALERTCLOSEDDURATION60SETSTATUSATRISKINTERVALTYPE=APINTERVAL=24SETSTATUSATRISKINTERVALTYPE=VMINTERVAL=24SETSTATUSATRISKINTERVALTYPE=SYINTERVAL=24SETSTATUSSKIPASFAILUREYESTYPE=ALL5.
RestarttheinitialconfigurationwizardoftheOperationsCenter.
Relatedtasks:"Restartingtheinitialconfigurationwizard"onpage85"Startingandstoppingthewebserver"onpage84Chapter15.
ManagingtheOperationsCenter8788IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter16.
Protectingapplications,virtualmachines,andsystemsTheserverprotectsdataforclients,whichcanincludeapplications,virtualmachines,andsystems.
Tostartprotectingclientdata,registertheclientnodewiththeserverandselectabackupscheduletoprotecttheclientdata.
AddingclientsAfteryouimplementadataprotectionsolutionwithIBMSpectrumProtect,youcanexpandthesolutionbyaddingclients.
AboutthistaskTheproceduredescribesbasicstepsforaddingaclient.
Formorespecificinstructionsaboutconfiguringclients,seethedocumentationfortheproductthatyouinstallontheclientnode.
Youcanhavethefollowingtypesofclientnodes:ApplicationclientnodesApplicationclientnodesincludeemailservers,databases,andotherapplications.
Forexample,anyofthefollowingapplicationscanbeanapplicationclientnode:vIBMSpectrumProtectSnapshotvIBMSpectrumProtectforDatabasesvIBMSpectrumProtectforEnterpriseResourcePlanningvIBMSpectrumProtectforMailvIBMSpectrumProtectforVirtualEnvironmentsSystemclientnodesSystemclientnodesincludeworkstations,network-attachedstorage(NAS)fileservers,andAPIclients.
VirtualmachineclientnodesVirtualmachineclientnodesconsistofanindividualguesthostwithinahypervisor.
Eachvirtualmachineisrepresentedasafilespace.
ProcedureToaddaclient,completethefollowingsteps:1.
Selectthesoftwaretoinstallontheclientnodeandplantheinstallation.
Followtheinstructionsin"Selectingtheclientsoftwareandplanningtheinstallation"onpage90.
2.
Specifyhowtobackupandarchiveclientdata.
Followtheinstructionsin"Specifyingrulesforbackingupandarchivingclientdata"onpage91.
3.
Specifywhentobackupandarchiveclientdata.
Followtheinstructionsin"Schedulingbackupandarchiveoperations"onpage94.
4.
Toallowtheclienttoconnecttotheserver,registertheclient.
Followtheinstructionsin"Registeringclients"onpage95.
5.
Tostartprotectingaclientnode,installandconfiguretheselectedsoftwareontheclientnode.
Followtheinstructionsin"Installingandconfiguringclients"onpage96.
CopyrightIBMCorp.
1993,201689SelectingtheclientsoftwareandplanningtheinstallationDifferenttypesofdatarequiredifferenttypesofprotection.
Identifythetypeofdatathatyoumustprotectandselecttheappropriatesoftware.
AboutthistaskThepreferredpracticeistoinstallthebackup-archiveclientonallclientnodessothatyoucanconfigureandstarttheclientacceptorontheclientnode.
Theclientacceptorisdesignedtoefficientlyrunscheduledoperations.
Theclientacceptorrunsschedulesforthefollowingproducts:thebackup-archiveclient,IBMSpectrumProtectforDatabases,IBMSpectrumProtectforEnterpriseResourcePlanning,IBMSpectrumProtectforMail,andIBMSpectrumProtectforVirtualEnvironments.
Ifyouinstallaproductforwhichtheclientacceptordoesnotrunschedules,youmustfollowtheconfigurationinstructionsintheproductdocumentationtoensurethatscheduledoperationscanoccur.
ProcedureBasedonyourgoal,selecttheproductstoinstallandreviewtheinstallationinstructions.
Tip:Ifyouinstalltheclientsoftwarenow,youmustalsocompletetheclientconfigurationtasksthataredescribedin"Installingandconfiguringclients"onpage96beforeyoucanusetheclient.
GoalProductanddescriptionInstallationinstructionsProtectafileserverorworkstationThebackup-archiveclientbacksupandarchivesfilesanddirectoriesfromfileserversandworkstationstostorage.
Youcanalsorestoreandretrievebackupversionsandarchivedcopiesoffiles.
vBackup-archiveclientrequirementsvInstallingtheUNIXandLinuxbackup-archiveclientsvInstallingtheWindowsbackup-archiveclientProtectapplicationswithsnapshotbackupandrestorecapabilitiesIBMSpectrumProtectSnapshotprotectsdatawithintegrated,application-awaresnapshotbackupandrestorecapabilities.
YoucanprotectdatathatisstoredbyIBMDB2databasesoftwareandSAP,Oracle,MicrosoftExchange,andMicrosoftSQLServerapplications.
vInstallingandupgradingIBMSpectrumProtectSnapshotforUNIXandLinuxvInstallingandupgradingIBMSpectrumProtectSnapshotforVMwarevInstallingandupgradingIBMSpectrumProtectSnapshotforWindowsProtectanemailapplicationonanIBMDominoserverIBMSpectrumProtectforMail:DataProtectionforIBMDominoautomatesdataprotectionsothatbackupsarecompletedwithoutshuttingdownIBMDominoservers.
vInstallationofDataProtectionforIBMDominoonaUNIX,AIX,orLinuxsystem(V7.
1.
0)vInstallationofDataProtectionforIBMDominoonaWindowssystem(V7.
1.
0)ProtectanemailapplicationonaMicrosoftExchangeserverIBMSpectrumProtectforMail:DataProtectionforMicrosoftExchangeServerautomatesdataprotectionsothatbackupsarecompletedwithoutshuttingdownMicrosoftExchangeservers.
Installing,upgrading,andmigratingIBMSpectrumProtectforMail:DataProtectionforMicrosoftExchangeServerProtectanIBMDB2databaseTheapplicationprogramminginterface(API)ofthebackup-archiveclientcanbeusedtobackupDB2datatotheIBMSpectrumProtectserver.
InstallingtheIBMSpectrumProtectbackup-archiveclients(UNIX,Linux,andWindows)90IBMSpectrumProtect:Single-SiteDiskSolutionGuideGoalProductanddescriptionInstallationinstructionsProtectanIBMInformixdatabaseTheAPIofthebackup-archiveclientcanbeusedtobackupInformixdatatotheIBMSpectrumProtectserver.
InstallingtheIBMSpectrumProtectbackup-archiveclients(UNIX,Linux,andWindows)ProtectaMicrosoftSQLdatabaseIBMSpectrumProtectforDatabases:DataProtectionforMicrosoftSQLServerprotectsMicrosoftSQLdata.
InstallingDataProtectionforSQLServeronWindowsServerCoreProtectanOracledatabaseIBMSpectrumProtectforDatabases:DataProtectionforOracleprotectsOracledata.
DataProtectionforOracleinstallationProtectanSAPenvironmentIBMSpectrumProtectforEnterpriseResourcePlanning:DataProtectionforSAPprovidesprotectionthatiscustomizedforSAPenvironments.
TheproductisdesignedtoimprovetheavailabilityofSAPdatabaseserversandreduceadministrationworkload.
vInstallingIBMSpectrumProtectforEnterpriseResourcePlanning:DataProtectionforSAPforDB2vInstallingIBMSpectrumProtectforEnterpriseResourcePlanning:DataProtectionforSAPforOracleProtectavirtualmachineIBMSpectrumProtectforVirtualEnvironmentsprovidesprotectionthatistailoredforMicrosoftHyper-VandVMwarevirtualenvironments.
YoucanuseIBMSpectrumProtectforVirtualEnvironmentstocreateincrementalforeverbackupsthatarestoredonacentralizedserver,createbackuppolicies,andrestorevirtualmachinesorindividualfiles.
Alternatively,usethebackup-archiveclienttobackupandrestoreafullVMwareorMicrosoftHyper-Vvirtualmachine.
YoucanalsobackupandrestorefilesordirectoriesfromaVMwarevirtualmachine.
vInstallingDataProtectionforMicrosoftHyper-VvInstallingandupgradingDataProtectionforVMwarevInstallingtheIBMSpectrumProtectbackup-archiveclients(UNIX,Linux,andWindows)Tip:Tousetheclientforspacemanagement,youcaninstallIBMSpectrumProtectforSpaceManagementorIBMSpectrumProtectHSMforWindows.
SpecifyingrulesforbackingupandarchivingclientdataBeforeyouaddaclient,ensurethatappropriaterulesarespecifiedforbackingupandarchivingtheclientdata.
Duringtheclientregistrationprocess,youassigntheclientnodetoapolicydomain,whichhastherulesthatcontrolhowandwhenclientdataisstored.
BeforeyoubeginDeterminehowtoproceed:vIfyouarefamiliarwiththepoliciesthatareconfiguredforyoursolutionandyouknowthattheydonotrequirechanges,continuewith"Schedulingbackupandarchiveoperations"onpage94.
vIfyouarenotfamiliarwiththepolicies,followthestepsinthisprocedure.
AboutthistaskPoliciesaffecthowmuchdataisstoredovertime,andhowlongdataisretainedandavailableforclientstorestore.
Tomeetobjectivesfordataprotection,youcanupdatethedefaultpolicyandcreateyourownpolicies.
Apolicyincludesthefollowingrules:Chapter16.
Protectingapplications,virtualmachines,andsystems91vHowandwhenfilesarebackedupandarchivedtoserverstoragevThenumberofcopiesofafileandthelengthoftimecopiesarekeptinserverstorageDuringtheclientregistrationprocess,youassignaclienttoapolicydomain.
Thepolicyforaspecificclientisdeterminedbytherulesinthepolicydomaintowhichtheclientisassigned.
Inthepolicydomain,therulesthatareineffectareintheactivepolicyset.
Whenaclientbacksuporarchivesafile,thefileisboundtoamanagementclassintheactivepolicysetofthepolicydomain.
Amanagementclassisthekeysetofrulesformanagingclientdata.
Thebackupandarchiveoperationsontheclientusethesettingsinthedefaultmanagementclassofthepolicydomainunlessyoufurthercustomizepolicy.
Apolicycanbecustomizedbydefiningmoremanagementclassesandassigningtheirusethroughclientoptions.
Clientoptionscanbespecifiedinalocal,editablefileontheclientsystemandinaclientoptionsetontheserver.
Theoptionsintheclientoptionsetontheservercanoverrideoraddtotheoptionsinthelocalclientoptionfile.
Procedure1.
Reviewthepoliciesthatareconfiguredforyoursolutionbyfollowingtheinstructionsin"Viewingpolicies.
"2.
Ifyouneedtomakeminorchangestomeetdataretentionrequirements,followtheinstructionsin"Editingpolicies"onpage93.
3.
Optional:Ifyouneedtocreatepolicydomainsormakeextensivechangestopoliciestomeetdataretentionrequirements,seeCustomizingpolicies.
ViewingpoliciesViewpoliciestodeterminewhethertheymustbeeditedtomeetyourrequirements.
Procedure1.
Toviewtheactivepolicysetforapolicydomain,completethefollowingsteps:a.
OntheServicespageoftheOperationsCenter,selectapolicydomainandclickDetails.
b.
OntheSummarypageforthepolicydomain,clickthePolicySetstab.
2.
Toviewinactivepolicysetsforapolicydomain,completethefollowingsteps:a.
OnthePolicySetspage,clicktheConfiguretoggle.
Youcannowviewandeditthepolicysetsthatareinactive.
b.
Scrollthroughtheinactivepolicysetsbyusingtheforwardandbackarrows.
Whenyouviewaninactivepolicyset,thesettingsthatdifferentiatetheinactivepolicysetfromtheactivepolicysetarehighlighted.
c.
ClicktheConfiguretoggle.
Thepolicysetsarenolongereditable.
92IBMSpectrumProtect:Single-SiteDiskSolutionGuideEditingpoliciesTochangetherulesthatapplytoapolicydomain,edittheactivepolicysetforthepolicydomain.
Youcanalsoactivateadifferentpolicysetforadomain.
BeforeyoubeginChangestopolicycanaffectdataretention.
Ensurethatyoucontinuetobackupdatathatisessentialtoyourorganizationsothatyoucanrestorethatdataifadisasteroccurs.
Also,ensurethatyoursystemhassufficientstoragespaceforplannedbackupoperations.
AboutthistaskYoueditapolicysetbychangingoneormoremanagementclasseswithinthepolicyset.
Ifyouedittheactivepolicyset,thechangesarenotavailabletoclientsunlessyoureactivatethepolicyset.
Tomaketheeditedpolicysetavailabletoclients,activatethepolicyset.
Althoughyoucandefinemultiplepolicysetsforapolicydomain,onlyonepolicysetcanbeactive.
Whenyouactivateadifferentpolicyset,itreplacesthecurrentlyactivepolicyset.
Tolearnaboutpreferredpracticesfordefiningpolicies,seeCustomizingpolicies.
Procedure1.
OntheServicespageoftheOperationsCenter,selectapolicydomainandclickDetails.
2.
OntheSummarypageforthepolicydomain,clickthePolicySetstab.
ThePolicySetspageindicatesthenameoftheactivepolicysetandlistsallofthemanagementclassesforthatpolicyset.
3.
ClicktheConfiguretoggle.
Thepolicysetiseditable.
4.
Optional:Toeditapolicysetthatisnotactive,clicktheforwardandbackarrowstolocatethepolicyset.
5.
Editthepolicysetbycompletinganyofthefollowingactions:OptionDescriptionAddamanagementclass1.
InthePolicySetstable,click+ManagementClass.
2.
Tospecifytherulesforbackingupandarchivingdata,completethefieldsintheAddManagementClasswindow.
3.
Tomakethemanagementclassthedefaultmanagementclass,selecttheMakedefaultcheckbox.
4.
ClickAdd.
DeleteamanagementclassIntheManagementClasscolumn,click-.
Tip:Todeletethedefaultmanagementclass,youmustfirstassignadifferentmanagementclassasthedefault.
MakeamanagementclassthedefaultmanagementclassIntheDefaultcolumnforthemanagementclass,clicktheradiobutton.
Tip:Thedefaultmanagementclassmanagesclientfileswhenanothermanagementclassisnotassignedto,orappropriateformanaging,afile.
Toensurethatclientscanalwaysbackupandarchivefiles,chooseadefaultmanagementclassthatcontainsrulesforbothbackingupandarchivingfiles.
Chapter16.
Protectingapplications,virtualmachines,andsystems93OptionDescriptionModifyamanagementclassTochangethepropertiesofamanagementclass,updatethefieldsinthetable.
6.
ClickSave.
Attention:Whenyouactivateanewpolicyset,datamightbelost.
Datathatisprotectedunderonepolicysetmightnotbeprotectedunderanotherpolicyset.
Therefore,beforeyouactivateapolicyset,ensurethatthedifferencesbetweenthepreviouspolicysetandthenewpolicysetdonotcausedatatobelost.
7.
ClickActivate.
Asummaryofthedifferencesbetweentheactivepolicysetandthenewpolicysetisdisplayed.
Ensurethatthechangesinthenewpolicysetareconsistentwithyourdataretentionrequirementsbycompletingthefollowingsteps:a.
Reviewthedifferencesbetweencorrespondingmanagementclassesinthetwopolicysets,andconsidertheconsequencesforclientfiles.
Clientfilesthatareboundtomanagementclassesintheactivepolicysetwillbeboundtothemanagementclasseswiththesamenamesinthenewpolicyset.
b.
Identifymanagementclassesintheactivepolicysetthatdonothavecounterpartsinthenewpolicyset,andconsidertheconsequencesforclientfiles.
Clientfilesthatareboundtothesemanagementclasseswillbemanagedbythedefaultmanagementclassinthenewpolicyset.
c.
Ifthechangestobeimplementedbythepolicysetareacceptable,selecttheIunderstandthattheseupdatescancausedatalosscheckboxandclickActivate.
SchedulingbackupandarchiveoperationsBeforeyouregisteranewclientwiththeserver,ensurethatascheduleisavailabletospecifywhenbackupandarchiveoperationstakeplace.
Duringtheregistrationprocess,youassignascheduletotheclient.
BeforeyoubeginDeterminehowtoproceed:vIfyouarefamiliarwiththeschedulesthatareconfiguredforthesolutionandyouknowthattheydonotrequiremodification,continuewith"Registeringclients"onpage95.
vIfyouarenotfamiliarwiththeschedulesortheschedulesrequiremodification,followthestepsinthisprocedure.
AboutthistaskTypically,backupoperationsforallclientsmustbecompleteddaily.
Carefullyscheduleclientandserverworkloadstoachievethebestperformanceforyourstorageenvironment.
Toavoidtheoverlapofclientandserveroperations,considerschedulingclientbackupandarchiveoperationssothattheyrunatnight.
Ifclientandserveroperationsoverlaporarenotgivenenoughtimeandresourcestobeprocessed,youmightexperiencedecreasedsystemperformance,failedoperations,andotherissues.
Procedure1.
ReviewavailableschedulesbyhoveringoverClientsontheOperationsCentermenubar.
ClickSchedules.
94IBMSpectrumProtect:Single-SiteDiskSolutionGuide2.
Optional:Modifyorcreateaschedulebycompletingthefollowingsteps:OptionDescriptionModifyaschedule1.
IntheSchedulesview,selectthescheduleandclickDetails.
2.
OntheScheduleDetailspage,viewdetailsbyclickingthebluearrowsatthebeginningoftherows.
3.
Modifythesettingsintheschedule,andclickSave.
CreateascheduleIntheSchedulesview,click+Scheduleandcompletethestepstocreateaschedule.
3.
Optional:ToconfigureschedulesettingsthatarenotvisibleintheOperationsCenter,useaservercommand.
Forexample,youmightwanttoscheduleaclientoperationthatbacksupaspecificdirectoryandassignsittoamanagementclassotherthanthedefault.
a.
OntheOverviewpageoftheOperationsCenter,hoveroverthesettingsiconandclickCommandBuilder.
b.
IssuetheDEFINESCHEDULEcommandtocreateascheduleortheUPDATESCHEDULEcommandtomodifyaschedule.
Fordetailsaboutthecommands,seeDEFINESCHEDULE(Defineaclientschedule)orUPDATESCHEDULE(Updateaclientschedule).
Relatedtasks:TuningtheschedulefordailyoperationsRegisteringclientsRegisteraclienttoensurethattheclientcanconnecttotheserver,andtheservercanprotectclientdata.
BeforeyoubeginDeterminewhethertheclientrequiresanadministrativeuserIDwithclientownerauthorityovertheclientnode.
TodeterminewhichclientsrequireanadministrativeuserID,seetechnote7048963.
Restriction:Forsometypesofclients,theclientnodenameandtheadministrativeuserIDmustmatch.
YoucannotauthenticatethoseclientsbyusingtheLightweightDirectoryAccessProtocolauthenticationmethodthatwasintroducedinV7.
1.
7.
Fordetailsaboutthisauthenticationmethod,sometimesreferredtoasintegratedmode,seeAuthenticatingusersbyusinganActiveDirectorydatabase.
ProcedureToregisteraclient,completeoneofthefollowingactions.
vIftheclientrequiresanadministrativeuserID,registertheclientbyusingtheREGISTERNODEcommandandspecifytheUSERIDparameter:registernodenode_namepassworduserid=node_namewherenode_namespecifiesthenodenameandpasswordspecifiesthenodepassword.
Fordetails,seeRegisteranode.
Chapter16.
Protectingapplications,virtualmachines,andsystems95vIftheclientdoesnotrequireanadministrativeuserID,registertheclientbyusingtheOperationsCenterAddClientwizard.
Completethefollowingsteps:1.
OntheOperationsCentermenubar,clickClients.
2.
IntheClientstable,click+Client.
3.
CompletethestepsintheAddClientwizard:a.
Specifythatredundantdatacanbeeliminatedonboththeclientandserver.
IntheClient-sidedatadeduplicationarea,selecttheEnablecheckbox.
b.
IntheConfigurationwindow,copytheTCPSERVERADDRESS,TCPPORT,NODENAME,andDEDUPLICATIONoptionvalues.
Tip:Recordtheoptionvaluesandkeeptheminasafeplace.
Afteryoucompletetheclientregistrationandinstallthesoftwareontheclientnode,usethevaluestoconfiguretheclient.
c.
Followtheinstructionsinthewizardtospecifythepolicydomain,schedule,andoptionset.
d.
Sethowrisksaredisplayedfortheclientbyspecifyingtheat-risksetting.
e.
ClickAddClient.
Relatedreference:TcpserveraddressoptionTcpportoptionNodenameoptionDeduplicationoptionInstallingandconfiguringclientsTostartprotectingaclientnode,youmustinstallandconfiguretheselectedsoftware.
ProcedureIfyoualreadyinstalledthesoftware,startatstep2onpage97.
1.
Takeoneofthefollowingactions:vToinstallsoftwareonanapplicationorclientnode,followtheinstructions.
SoftwareLinktoinstructionsIBMSpectrumProtectbackup-archiveclientvInstallingtheUNIXandLinuxbackup-archiveclientsvInstallingtheWindowsbackup-archiveclientIBMSpectrumProtectforDatabasesvDataProtectionforOracleinstallationvInstallingDataProtectionforSQLServeronWindowsServerCoreIBMSpectrumProtectforMailvInstallationofDataProtectionforIBMDominoonaUNIX,AIX,orLinuxsystem(V7.
1.
0)vInstallationofDataProtectionforIBMDominoonaWindowssystem(V7.
1.
0)vInstalling,upgrading,andmigratingIBMSpectrumProtectforMail:DataProtectionforMicrosoftExchangeServer96IBMSpectrumProtect:Single-SiteDiskSolutionGuideSoftwareLinktoinstructionsIBMSpectrumProtectSnapshotvInstallingandupgradingIBMSpectrumProtectSnapshotforUNIXandLinuxvInstallingandupgradingIBMSpectrumProtectSnapshotforVMwarevInstallingandupgradingIBMSpectrumProtectSnapshotforWindowsIBMSpectrumProtectforEnterpriseResourcePlanningvInstallingIBMSpectrumProtectforEnterpriseResourcePlanning:DataProtectionforSAPforDB2vInstallingIBMSpectrumProtectforEnterpriseResourcePlanning:DataProtectionforSAPforOraclevToinstallsoftwareonavirtualmachineclientnode,followtheinstructionsfortheselectedbackuptype.
BackuptypeLinktoinstructionsIfyouplantocreatefullVMwarebackupsofvirtualmachines,installandconfiguretheIBMSpectrumProtectbackup-archiveclient.
vInstallingtheUNIXandLinuxbackup-archiveclientsvInstallingtheWindowsbackup-archiveclientIfyouplantocreateincrementalforeverfullbackupsofvirtualmachines,installandconfigureIBMSpectrumProtectforVirtualEnvironmentsandthebackup-archiveclientonthesameclientnodeorondifferentclientnodes.
vIBMSpectrumProtectforVirtualEnvironmentsonlineproductdocumentationTip:YoucanobtainthesoftwareforIBMSpectrumProtectforVirtualEnvironmentsandthebackup-archiveclientintheIBMSpectrumProtectforVirtualEnvironmentsinstallationpackage.
2.
Toallowtheclienttoconnecttotheserver,addorupdatethevaluesfortheTCPSERVERADDRESS,TCPPORT,andNODENAMEoptionsintheclientoptionsfile.
Usethevaluesthatyourecordedwhenyouregisteredtheclient("Registeringclients"onpage95).
vForclientsthatareinstalledonanAIX,Linux,orMacOSXoperatingsystem,addthevaluestotheclientsystem-optionsfile,dsm.
sys.
vForclientsthatareinstalledonaWindowsoperatingsystem,addthevaluestothedsm.
optfile.
Bydefault,theoptionsfilesareintheinstallationdirectory.
3.
Ifyouinstalledabackup-archiveclientonaLinuxorWindowsoperatingsystem,installtheclientmanagementserviceontheclient.
Followtheinstructionsin"Installingtheclientmanagementservice"onpage60.
4.
Configuretheclienttorunscheduledoperations.
Followtheinstructionsin"Configuringtheclienttorunscheduledoperations"onpage98.
5.
Optional:Configurecommunicationsthroughafirewall.
Followtheinstructionsin"Configuringclient/servercommunicationsthroughafirewall"onpage100.
6.
Runatestbackuptoverifythatdataisprotectedasyouplanned.
Forexample,forabackup-archiveclient,completethefollowingsteps:a.
OntheClientspageoftheOperationsCenter,selecttheclientthatyouwanttobackup,andclickBackUp.
Chapter16.
Protectingapplications,virtualmachines,andsystems97b.
Verifythatthebackupcompletessuccessfullyandthattherearenowarningorerrormessages.
7.
MonitortheresultsofthescheduledoperationsfortheclientintheOperationsCenter.
WhattodonextIfyouneedtochangewhatisgettingbackedupfromtheclient,followtheinstructionsin"Modifyingthescopeofaclientbackup"onpage104.
ConfiguringtheclienttorunscheduledoperationsYoumustconfigureandstartaclientschedulerontheclientnode.
Theclientschedulerenablescommunicationbetweentheclientandserversothatscheduledoperationscanoccur.
Forexample,scheduledoperationstypicallyincludebackingupfilesfromaclient.
AboutthistaskThepreferredmethodistoinstallthebackup-archiveclientonallclientnodessothatyoucanconfigureandstarttheclientacceptorontheclientnode.
Theclientacceptorisdesignedtoefficientlyrunscheduledoperations.
Theclientacceptormanagestheclientschedulersothattheschedulerrunsonlywhenrequired:vWhenitistimetoquerytheserveraboutthenextscheduledoperationvWhenitistimetostartthenextscheduledoperationByusingtheclientacceptor,youcanreducethenumberofbackgroundprocessesontheclientandhelptoavoidmemoryretentionproblems.
Theclientacceptorrunsschedulesforthefollowingproducts:thebackup-archiveclient,IBMSpectrumProtectforDatabases,IBMSpectrumProtectforEnterpriseResourcePlanning,IBMSpectrumProtectforMail,andIBMSpectrumProtectforVirtualEnvironments.
Ifyouinstalledaproductforwhichtheclientacceptordoesnotrunschedules,followtheconfigurationinstructionsintheproductdocumentationtoensurethatscheduledoperationscanoccur.
Ifyourbusinessusesathird-partyschedulingtoolasstandardpractice,youcanusethatschedulingtoolasanalternativetotheclientacceptor.
Typically,third-partyschedulingtoolsstartclientprogramsdirectlybyusingoperatingsystemcommands.
Toconfigureathird-partyschedulingtool,seetheproductdocumentation.
ProcedureToconfigureandstarttheclientschedulerbyusingtheclientacceptor,followtheinstructionsfortheoperatingsystemthatisinstalledontheclientnode:AIXandOracleSolaris1.
Fromthebackup-archiveclientGUI,clickEdit>ClientPreferences.
2.
ClicktheWebClienttab.
3.
IntheManagedServicesOptionsfield,clickSchedule.
Ifyoualsowanttheclientacceptortomanagethewebclient,clicktheBothoption.
4.
Toensurethattheschedulercanstartunattended,inthedsm.
sysfile,setthepasswordaccessoptiontogenerate.
98IBMSpectrumProtect:Single-SiteDiskSolutionGuide5.
Tostoretheclientnodepassword,issuethefollowingcommandandentertheclientnodepasswordwhenprompted:dsmcquerysess6.
Starttheclientacceptorbyissuingthefollowingcommandonthecommandline:/usr/bin/dsmcad7.
Toenabletheclientacceptortostartautomaticallyafterasystemrestart,addthefollowingentrytothesystemstartupfile(typically,/etc/inittab):tsm::once:/usr/bin/dsmcad>/dev/null2>&1#ClientAcceptorDaemonLinux1.
Fromthebackup-archiveclientGUI,clickEdit>ClientPreferences.
2.
ClicktheWebClienttab.
3.
IntheManagedServicesOptionsfield,clickSchedule.
Ifyoualsowanttheclientacceptortomanagethewebclient,clicktheBothoption.
4.
Toensurethattheschedulercanstartunattended,inthedsm.
sysfile,setthepasswordaccessoptiontogenerate.
5.
Tostoretheclientnodepassword,issuethefollowingcommandandentertheclientnodepasswordwhenprompted:dsmcquerysess6.
StarttheclientacceptorbylogginginwiththerootuserIDandissuingthefollowingcommand:servicedsmcadstart7.
Toenabletheclientacceptortostartautomaticallyafterasystemrestart,addtheservicebyissuingthefollowingcommandatashellprompt:#chkconfig--adddsmcadMACOSX1.
Inthebackup-archiveclientGUI,clickEdit>ClientPreferences.
2.
Toensurethattheschedulercanstartunattended,clickAuthorization,selectPasswordGenerate,andclickApply.
3.
Tospecifyhowservicesaremanaged,clickWebClient,selectSchedule,clickApply,andclickOK.
4.
Toensurethatthegeneratedpasswordissaved,restartthebackup-archiveclient.
5.
UsetheIBMSpectrumProtectToolsforAdministratorsapplicationtostarttheclientacceptor.
Windows1.
Inthebackup-archiveclientGUI,clickUtilities>SetupWizard>HelpmeconfiguretheClientScheduler.
ClickNext.
2.
ReadtheinformationontheSchedulerWizardpageandclickNext.
3.
OntheSchedulerTaskpage,selectInstallaneworadditionalschedulerandclickNext.
4.
OntheSchedulerNameandLocationpage,specifyanamefortheclientschedulerthatyouareadding.
Then,selectUsetheClientAcceptordaemon(CAD)tomanagetheschedulerandclickNext.
5.
Enterthenamethatyouwanttoassigntothisclientacceptor.
ThedefaultnameisClientAcceptor.
ClickNext.
Chapter16.
Protectingapplications,virtualmachines,andsystems996.
Completetheconfigurationbysteppingthroughthewizard.
7.
Updatetheclientoptionsfile,dsm.
opt,andsetthepasswordaccessoptiontogenerate.
8.
Tostoretheclientnodepassword,issuethefollowingcommandatthecommandprompt:dsmcquerysessEntertheclientnodepasswordwhenprompted.
9.
StarttheclientacceptorservicefromtheServicesControlpage.
Forexample,ifyouusedthedefaultname,starttheClientAcceptorservice.
DonotstarttheschedulerservicethatyouspecifiedontheSchedulerNameandLocationpage.
Theschedulerserviceisstartedandstoppedautomaticallybytheclientacceptorserviceasneeded.
Configuringclient/servercommunicationsthroughafirewallIfaclientmustcommunicatewithaserverthroughafirewall,youmustenableclient/servercommunicationsthroughthefirewall.
BeforeyoubeginIfyouusedtheAddClientwizardtoregisteraclient,findtheoptionvaluesintheclientoptionsfilethatyouobtainedduringthatprocess.
Youcanusethevaluestospecifyports.
AboutthistaskAttention:Donotconfigureafirewallinawaythatmightcauseterminationofsessionsthatareinusebyaserverorstorageagent.
Terminationofavalidsessioncancauseunpredictableresults.
Processesandsessionsmightappeartostopduetoinput/outputerrors.
Tohelpexcludesessionsfromtimeoutrestrictions,configureknownportsforIBMSpectrumProtectcomponents.
EnsurethattheKEEPALIVEserveroptionremainssettothedefaultvalueofYES.
Inthisway,youcanhelptoensurethatclient/servercommunicationisuninterrupted.
ForinstructionsaboutsettingtheKEEPALIVEserveroption,seeKEEPALIVE.
ProcedureOpenthefollowingportstoallowaccessthroughthefirewall:TCP/IPportforthebackup-archiveclient,command-lineadministrativeclient,andtheclientschedulerSpecifytheportbyusingthetcpportoptionintheclientoptionsfile:vIfyouarenotusingtheSecureSocketsLayer(SSL)protocoltosecurecommunications,thetcpportoptionintheclientoptionfilemustmatchtheTCPPORToptionintheserveroptionsfile.
Thedefaultvalueis1500.
Ifyoudecidetouseavalueotherthanthedefault,specifyanumberintherange1024-32767.
vIfyouusetheSSLprotocoltosecurecommunications,thetcpportclientoptionmustmatchthevalueoftheSSLTCPPORTserveroption.
HTTPporttoenablecommunicationbetweenthewebclientandremoteworkstationsSpecifytheportfortheremoteworkstationbysettingthehttpportoptionintheclientoptionsfileoftheremoteworkstation.
Thedefaultvalueis1581.
100IBMSpectrumProtect:Single-SiteDiskSolutionGuideTCP/IPportsfortheremoteworkstationThedefaultvalueof0(zero)causestwofreeportnumberstoberandomlyassignedtotheremoteworkstation.
Ifyoudonotwanttheportnumberstoberandomlyassigned,specifyvaluesbysettingthewebportsoptionintheclientoptionsfileoftheremoteworkstation.
TCP/IPportforadministrativesessionsSpecifytheportonwhichtheserverwaitsforrequestsforadministrativeclientsessions:vIfyouarenotusingtheSSLprotocoltosecurecommunications,thevalueoftheclienttcpadminportoptionmustmatchthevalueoftheTCPADMINPORTserveroption.
Inthisway,youcansecureadministrativesessionswithinaprivatenetwork.
vIfyouareusingtheSSLprotocoltosecurecommunications,thevalueoftheclienttcpadminportoptionmustmatchthevalueoftheserverSSLTCPADMINPORToption.
ManagingclientoperationsYoucanevaluateandresolveerrorsthatarerelatedtoabackup-archiveclientbyusingtheOperationsCenter,whichprovidessuggestionsforresolvingerrors.
Forerrorsonothertypesofclients,youmustexaminetheerrorlogsontheclientandreviewtheproductdocumentation.
AboutthistaskInsomecases,youcanresolveclienterrorsbystoppingandstartingtheclientacceptor.
IfclientnodesoradministratorIDsarelocked,youcanresolvetheissuebyunlockingtheclientnodeoradministratorID,andthenresettingthepassword.
Fordetailedinstructionsaboutidentifyingandresolvingclienterrors,seeResolvingIBMSpectrumProtectclientproblems.
EvaluatingerrorsinclienterrorlogsYoucanresolveclienterrorsbyobtainingsuggestionsfromtheOperationsCenterorbyreviewingerrorlogsontheclient.
BeforeyoubeginToresolveerrorsinabackup-archiveclientonaLinuxorWindowsoperatingsystem,ensurethattheclientmanagementserviceisinstalledandstarted.
Forinstallationinstructions,see"Installingtheclientmanagementservice"onpage60.
Forinstructionsaboutverifyingtheinstallation,see"Verifyingthattheclientmanagementserviceisinstalledcorrectly"onpage60.
ProcedureTodiagnoseandresolveclienterrors,takeoneofthefollowingactions:vIftheclientmanagementserviceisinstalledontheclientnode,completethefollowingsteps:1.
OntheOperationsCenterOverviewpage,clickClientsandselecttheclient.
2.
ClickDetails.
3.
OntheclientSummarypage,clicktheDiagnosistab.
4.
Reviewtheretrievedlogmessages.
Chapter16.
Protectingapplications,virtualmachines,andsystems101Tips:–ToshoworhidetheClientLogspane,double-clicktheClientLogsbar.
–ToresizetheClientLogspane,clickanddragtheClientLogsbar.
IfsuggestionsaredisplayedontheDiagnosispage,selectasuggestion.
IntheClientLogspane,clientlogmessagestowhichthesuggestionrelatesarehighlighted.
5.
Usethesuggestionstoresolvetheproblemsthatareindicatedbytheerrormessages.
Tip:Suggestionsareprovidedforonlyasubsetofclientmessages.
vIftheclientmanagementserviceisnotinstalledontheclientnode,reviewtheerrorlogsfortheinstalledclient.
StoppingandrestartingtheclientacceptorIfyouchangetheconfigurationofyoursolution,youmustrestarttheclientacceptoronallclientnodeswhereabackup-archiveclientisinstalled.
AboutthistaskInsomecases,youcanresolveclientschedulingproblemsbystoppingandrestartingtheclientacceptor.
Theclientacceptormustberunningtoensurethatscheduledoperationscanoccurontheclient.
Forexample,ifyouchangetheIPaddressordomainnameoftheserver,youmustrestarttheclientacceptor.
ProcedureFollowtheinstructionsfortheoperatingsystemthatisinstalledontheclientnode:AIXandOracleSolarisvTostoptheclientacceptor,completethefollowingsteps:1.
DeterminetheprocessIDfortheclientacceptorbyissuingthefollowingcommandonthecommandline:ps-ef|grepdsmcadReviewtheoutput.
Inthefollowingsampleoutput,6764istheprocessIDfortheclientacceptor:root67641016:26:350:00/usr/bin/dsmcad2.
Issuethefollowingcommandonthecommandline:kill-9PIDwherePIDspecifiestheprocessIDfortheclientacceptor.
vTostarttheclientacceptor,issuethefollowingcommandonthecommandline:/usr/bin/dsmcadLinuxvTostoptheclientacceptor(andnotrestartit),issuethefollowingcommand:#servicedsmcadstopvTostopandrestarttheclientacceptor,issuethefollowingcommand:#servicedsmcadrestartMACOSX102IBMSpectrumProtect:Single-SiteDiskSolutionGuideClickApplications>Utilities>Terminal.
vTostoptheclientacceptor,issuethefollowingcommand:/bin/launchctlunload-wcom.
ibm.
tivoli.
dsmcadvTostarttheclientacceptor,issuethefollowingcommand:/bin/launchctlload-wcom.
ibm.
tivoli.
dsmcadWindowsvTostoptheclientacceptorservice,completethefollowingsteps:1.
ClickStart>AdministrativeTools>Services.
2.
Double-clicktheclientacceptorservice.
3.
ClickStopandOK.
vTorestarttheclientacceptorservice,completethefollowingsteps:1.
ClickStart>AdministrativeTools>Services.
2.
Double-clicktheclientacceptorservice.
3.
ClickStartandOK.
Relatedreference:ResolvingclientschedulingproblemsResettingpasswordsIfapasswordforaclientnodeoranadministratorIDislostorforgotten,youcanresetthepassword.
MultipleattemptstoaccessthesystemwithanincorrectpasswordcancauseaclientnodeoradministratorIDtobelocked.
Youcantakestepstoresolvetheissue.
ProcedureToresolvepasswordissues,takeoneofthefollowingactions:vIfabackup-archiveclientisinstalledonaclientnode,andthepasswordislostorforgotten,completethefollowingsteps:1.
GenerateanewpasswordbyissuingtheUPDATENODEcommand:updatenodenode_namenew_passwordforcepwreset=yeswherenode_namespecifiestheclientnodeandnew_passwordspecifiesthepasswordthatyouassign.
2.
Informtheclientnodeowneraboutthechangedpassword.
Whentheowneroftheclientnodelogsinwiththespecifiedpassword,anewpasswordisgeneratedautomatically.
Thatpasswordisunknowntouserstoenhancesecurity.
Tip:Thepasswordisgeneratedautomaticallyifyoupreviouslysetthepasswordaccessoptiontogenerateintheclientoptionsfile.
vIfanadministratorislockedoutbecauseofpasswordissues,completethefollowingsteps:1.
Toprovidetheadministratorwithaccesstotheserver,issuetheUNLOCKADMINcommand.
Forinstructions,seeUNLOCKADMIN(Unlockanadministrator).
2.
SetanewpasswordbyusingtheUPDATEADMINcommand:updateadminadmin_namenew_passwordforcepwreset=yesChapter16.
Protectingapplications,virtualmachines,andsystems103whereadmin_namespecifiesthenameoftheadministratorandnew_passwordspecifiesthepasswordthatyouassign.
vIfaclientnodeislocked,completethefollowingsteps:1.
Determinewhytheclientnodeislockedandwhetheritmustbeunlocked.
Forexample,iftheclientnodeisdecommissioned,theclientnodeisbeingremovedfromtheproductionenvironment.
Youcannotreversethedecommissionoperation,andtheclientnoderemainslocked.
Aclientnodealsomightbelockediftheclientdataisthesubjectofalegalinvestigation.
2.
Ifyoumustunlockaclientnode,usetheUNLOCKNODEcommand.
Forinstructions,seeUNLOCKNODE(Unlockaclientnode).
3.
GenerateanewpasswordbyissuingtheUPDATENODEcommand:updatenodenode_namenew_passwordforcepwreset=yeswherenode_namespecifiesthenameofthenodeandnew_passwordspecifiesthepasswordthatyouassign.
4.
Informtheclientnodeowneraboutthechangedpassword.
Whentheowneroftheclientnodelogsinwiththespecifiedpassword,anewpasswordisgeneratedautomatically.
Thatpasswordisunknowntouserstoenhancesecurity.
Tip:Thepasswordisgeneratedautomaticallyifyoupreviouslysetthepasswordaccessoptiontogenerateintheclientoptionsfile.
ModifyingthescopeofaclientbackupWhenyousetupclientbackupoperations,thepreferredpracticeistoexcludeobjectsthatyoudonotrequire.
Forexample,youtypicallywanttoexcludetemporaryfilesfromabackupoperation.
AboutthistaskWhenyouexcludeunnecessaryobjectsfrombackupoperations,yougetbettercontroloftheamountofstoragespacethatisrequiredforbackupoperations,andthecostofstorage.
Dependingonyourlicensingpackage,youalsomightbeabletolimitlicensingcosts.
ProcedureHowyoumodifythescopeofbackupoperationsdependsontheproductthatisinstalledontheclientnode:vForabackup-archiveclient,youcancreateaninclude-excludelisttoincludeorexcludeafile,groupsoffiles,ordirectoriesfrombackupoperations.
Tocreateaninclude-excludelist,followtheinstructionsinCreatinganinclude-excludelist.
Toensureconsistentuseofaninclude-excludelistforallclientsofonetype,youcancreateaclientoptionsetontheserverthatcontainstherequiredoptions.
Then,youassigntheclientoptionsettoeachoftheclientsofthesametype.
Fordetails,seeControllingclientoperationsthroughclientoptionsets.
vForabackup-archiveclient,youcanspecifytheobjectstoincludeinanincrementalbackupoperationbyusingthedomainoption.
FollowtheinstructionsinDomainclientoption.
vForotherproducts,todefinewhichobjectsareincludedinandexcludedfrombackupoperations,followtheinstructionsintheproductdocumentation.
104IBMSpectrumProtect:Single-SiteDiskSolutionGuideManagingclientupgradesWhenafixpackorinterimfixbecomesavailableforaclient,youcanupgradetheclienttotakeadvantageofproductimprovements.
Serversandclientscanbeupgradedatdifferenttimesandcanbeatdifferentlevelswithsomerestrictions.
Beforeyoubegin1.
Reviewtheclient/servercompatibilityrequirementsintechnote1053218.
IfyoursolutionincludesserversorclientsatalevelthatisearlierthanV7.
1,reviewtheguidelinestoensurethatclientbackupandarchiveoperationsarenotdisrupted.
2.
VerifysystemrequirementsfortheclientinIBMSpectrumProtectSupportedOperatingSystems.
3.
Ifthesolutionincludesstorageagentsorlibraryclients,reviewtheinformationaboutstorage-agentandlibrary-clientcompatibilitywithserversthatareconfiguredaslibrarymanagers.
Seetechnote1302789.
Ifyouplantoupgradealibrarymanagerandalibraryclient,youmustupgradethelibrarymanagerfirst.
ProcedureToupgradethesoftware,completetheinstructionsthatarelistedinthefollowingtable.
SoftwareLinktoinstructionsIBMSpectrumProtectbackup-archiveclientvUpgradingthebackup-archiveclientIBMSpectrumProtectSnapshotvInstallingandupgradingIBMSpectrumProtectSnapshotforUNIXandLinuxvInstallingandupgradingIBMSpectrumProtectSnapshotforVMwarevInstallingandupgradingIBMSpectrumProtectSnapshotforWindowsIBMSpectrumProtectforDatabasesvUpgradingDataProtectionforSQLServervDataProtectionforOracleinstallationvInstalling,upgrading,andmigratingIBMSpectrumProtectforMail:DataProtectionforMicrosoftExchangeServerIBMSpectrumProtectforEnterpriseResourcePlanningvUpgradingIBMSpectrumProtectforEnterpriseResourcePlanning:DataProtectionforSAPforDB2vUpgradingIBMSpectrumProtectforEnterpriseResourcePlanning:DataProtectionforSAPforOracleIBMSpectrumProtectforMailvInstallationofDataProtectionforIBMDominoonaUNIX,AIX,orLinuxsystem(V7.
1.
0)vInstallationofDataProtectionforIBMDominoonaWindowssystem(V7.
1.
0)vInstalling,upgrading,andmigratingIBMSpectrumProtectforMail:DataProtectionforMicrosoftExchangeServerIBMSpectrumProtectforVirtualEnvironmentsvInstallingandupgradingDataProtectionforVMwarevInstallingDataProtectionforMicrosoftHyper-VChapter16.
Protectingapplications,virtualmachines,andsystems105DecommissioningaclientnodeIfaclientnodeisnolongerrequired,youcanstartaprocesstoremoveitfromtheproductionenvironment.
Forexample,ifaworkstationwasbackingupdatatotheIBMSpectrumProtectserver,buttheworkstationisnolongerused,youcandecommissiontheworkstation.
AboutthistaskWhenyoustartthedecommissionprocess,theserverlockstheclientnodetopreventitfromaccessingtheserver.
Filesthatbelongtotheclientnodearegraduallydeleted,andthentheclientnodeisdeleted.
Youcandecommissionthefollowingtypesofclientnodes:ApplicationclientnodesApplicationclientnodesincludeemailservers,databases,andotherapplications.
Forexample,anyofthefollowingapplicationscanbeanapplicationclientnode:vIBMSpectrumProtectSnapshotvIBMSpectrumProtectforDatabasesvIBMSpectrumProtectforEnterpriseResourcePlanningvIBMSpectrumProtectforMailvIBMSpectrumProtectforVirtualEnvironmentsSystemclientnodesSystemclientnodesincludeworkstations,network-attachedstorage(NAS)fileservers,andAPIclients.
VirtualmachineclientnodesVirtualmachineclientnodesconsistofanindividualguesthostwithinahypervisor.
Eachvirtualmachineisrepresentedasafilespace.
ThesimplestmethodfordecommissioningaclientnodeistousetheOperationsCenter.
Thedecommissionprocessrunsinthebackground.
Iftheclientisconfiguredtoreplicateclientdata,theOperationsCenterautomaticallyremovestheclientfromreplicationonthesourceandtargetreplicationserversbeforeitdecommissionstheclient.
Tip:Alternatively,youcandecommissionaclientnodebyissuingtheDECOMMISSIONNODEorDECOMMISSIONVMcommand.
Youmightwanttousethismethodinthefollowingcases:vToschedulethedecommissionprocessforthefutureortorunaseriesofcommandsbyusingascript,specifythedecommissionprocesstoruninthebackground.
vTomonitorthedecommissionprocessfordebuggingpurposes,specifythedecommissionprocesstorunintheforeground.
Ifyouruntheprocessintheforeground,youmustwaitfortheprocesstobecompletedbeforeyoucontinuewithothertasks.
ProcedureTakeoneofthefollowingactions:vTodecommissionaclientinthebackgroundbyusingtheOperationsCenter,completethefollowingsteps:1.
OntheOperationsCenterOverviewpage,clickClientsandselecttheclient.
106IBMSpectrumProtect:Single-SiteDiskSolutionGuide2.
ClickMore>Decommission.
vTodecommissionaclientnodebyusinganadministrativecommand,takeoneofthefollowingactions:–Todecommissionanapplicationorsystemclientnodeinthebackground,issuetheDECOMMISSIONNODEcommand.
Forexample,iftheclientnodeisnamedAUSTIN,issuethefollowingcommand:decommissionnodeaustin–Todecommissionanapplicationorsystemclientnodeintheforeground,issuetheDECOMMISSIONNODEcommandandspecifythewait=yesparameter.
Forexample,iftheclientnodeisnamedAUSTIN,issuethefollowingcommand:decommissionnodeaustinwait=yes–Todecommissionavirtualmachineinthebackground,issuetheDECOMMISSIONVMcommand.
Forexample,ifthevirtualmachineisnamedAUSTIN,thefilespaceis7,andthefilespacenameisspecifiedbythefilespaceID,issuethefollowingcommand:decommissionvmaustin7nametype=fsidIfthevirtualmachinenameincludesoneormorespaces,enclosethenameindoublequotationmarks.
Forexample:decommissionvm"austin2"7nametype=fsid–Todecommissionavirtualmachineintheforeground,issuetheDECOMMISSIONVMcommandandspecifythewait=yesparameter.
Forexample,issuethefollowingcommand:decommissionvmaustin7nametype=fsidwait=yesIfthevirtualmachinenameincludesoneormorespaces,enclosethenameindoublequotationmarks.
Forexample:decommissionvm"austin2"7nametype=fsidwait=yesWhattodonextWatchforerrormessages,whichmightbedisplayedintheuserinterfaceorinthecommandoutput,immediatelyafteryouruntheprocess.
Youcanverifythattheclientnodeisdecommissioned:1.
OntheOperationsCenterOverviewpage,clickClients.
2.
IntheClientstable,intheAtriskcolumn,reviewthestate:vADECOMMISSIONEDstatespecifiesthatthenodeisdecommissioned.
vAnullvaluespecifiesthatthenodeisnotdecommissioned.
vAPENDINGstatespecifiesthatthenodeisbeingdecommissioned,orthedecommissionprocessfailed.
Tip:Ifyouwanttodeterminethestatusofapendingdecommissionprocess,issuethefollowingcommand:queryprocess3.
Reviewthecommandoutput:vIfstatusisprovidedforthedecommissionprocess,theprocessisinprogress.
Forexample:Chapter16.
Protectingapplications,virtualmachines,andsystems107queryprocessProcessProcessDescriptionProcessStatusNumber3DECOMMISSIONNODENumberofbackupobjectsdeactivatedfornodeNODE1:8objectsdeactivated.
vIfnostatusisprovidedforthedecommissionprocess,andyoudidnotreceiveanerrormessage,theprocessisincomplete.
Aprocesscanbeincompleteiffilesthatareassociatedwiththenodearenotyetdeactivated.
Afterthefilesaredeactivated,runthedecommissionprocessagain.
vIfnostatusisprovidedforthedecommissionprocess,andyoureceiveanerrormessage,theprocessfailed.
Runthedecommissionprocessagain.
Relatedreference:DECOMMISSIONNODE(Decommissionaclientnode)DECOMMISSIONVM(Decommissionavirtualmachine)DeactivatingdatatofreestoragespaceInsomecases,youcandeactivatedatathatisstoredontheIBMSpectrumProtectserver.
Whenyourunthedeactivationprocess,anybackupdatathatwasstoredbeforethespecifieddateandtimeisdeactivatedandwillbedeletedasitexpires.
Inthisway,youcanfreespaceontheserver.
AboutthistaskSomeapplicationclientsalwayssavedatatotheserverasactivebackupdata.
Becauseactivebackupdataisnotmanagedbyinventoryexpirationpolicies,thedataisnotdeletedautomatically,andusesserverstoragespaceindefinitely.
Tofreethestoragespacethatisusedbyobsoletedata,youcandeactivatethedata.
Whenyourunthedeactivationprocess,allactivebackupdatathatwasstoredbeforethespecifieddatebecomesinactive.
Thedataisdeletedasitexpiresandcannotberestored.
ThedeactivationfeatureappliesonlytoapplicationclientsthatprotectOracledatabases.
Procedure1.
FromtheOperationsCenterOverviewpage,clickClients.
2.
IntheClientstable,selectoneormoreclientsandclickMore>CleanUp.
Command-linemethod:DeactivatedatabyusingtheDEACTIVATEDATAcommand.
Relatedreference:DEACTIVATEDATA(Deactivatedataforaclientnode)108IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter17.
ManagingdatastorageManageyourdataforefficiencyandaddsupporteddevicesandmediatotheservertostoreclientdata.
Relatedreference:ComparingstoragepoolsAuditingastoragepoolcontainerAuditastoragepoolcontainertocheckforinconsistenciesbetweendatabaseinformationandacontainerinastoragepool.
AboutthistaskYouauditastoragepoolcontainerinthefollowingsituations:vWhenyouissuetheQUERYDAMAGEDcommandandaproblemisdetectedvWhentheserverdisplaysmessagesaboutdamageddataextentsvYourhardwarereportsanissueanderrormessagesthatareassociatedwiththestoragepoolcontaineraredisplayedProcedure1.
Toauditastoragepoolcontainer,issuetheAUDITCONTAINERcommand.
Forexample,issuethefollowingcommandtoauditacontainer,000000000000076c.
dcf:auditcontainerc:\tsm-storage\07\000000000000076c.
dcf2.
ReviewtheoutputfromtheANR4891Imessageforinformationaboutanydamageddataextents.
WhattodonextIfyoudetectproblemswiththestoragepoolcontainer,youcanrestoredatabasedonyourconfiguration.
IssuetheAUDITCONTAINERcommandandspecifythecontainername.
Relatedreference:AUDITCONTAINER(Verifytheconsistencyofdatabaseinformationforadirectory-containerstoragepool)QUERYDAMAGED(Querydamageddatainadirectory-containerorcloud-containerstoragepool)CopyrightIBMCorp.
1993,2016109ManaginginventorycapacityManagethecapacityofthedatabase,activelog,andarchivelogstoensurethattheinventoryissizedforthetasks,basedonthestatusofthelogs.
BeforeyoubeginTheactiveandarchivelogshavethefollowingcharacteristics:vTheactivelogcanbeamaximumsizeof512GB.
Formoreinformationaboutsizingtheactivelogforyoursystem,seePlanningthestoragearrays.
vThearchivelogsizeislimitedtothesizeofthefilesystemthatitisinstalledon.
Thearchivelogsizeisnotmaintainedatapredefinedsizeliketheactivelog.
Archivelogfilesareautomaticallydeletedaftertheyarenolongerneeded.
Asabestpractice,youcanoptionallycreateanarchivefailoverlogtostorearchivelogfileswhenthearchivelogdirectoryisfull.
ChecktheOperationsCentertodeterminethecomponentoftheinventorythatisfull.
Ensurethatyoustoptheserverbeforeyouincreasethesizeofoneoftheinventorycomponents.
ProcedurevToincreasethesizeofthedatabase,completethefollowingsteps:–Createoneormoredirectoriesforthedatabaseonseparatedrivesorfilesystems.
–IssuetheEXTENDDBSPACEcommandtoaddthedirectoryordirectoriestothedatabase.
ThedirectoriesmustbeaccessibletotheinstanceuserIDofthedatabasemanager.
Bydefault,dataisredistributedacrossalldatabasedirectoriesandspaceisreclaimed.
Tips:-Thetimethatisneededtocompleteredistributionofdataandreclaimingofspaceisvariable,dependingonthesizeofyourdatabase.
Makesurethatyouplanadequately.
-Ensurethatthedirectoriesthatyouspecifyarethesamesizeasexistingdirectoriestoensureaconsistentdegreeofparallelismfordatabaseoperations.
Ifoneormoredirectoriesforthedatabasearesmallerthantheothers,theyreducethepotentialforoptimizedparallelprefetchinganddistributionofthedatabase.
–Haltandrestarttheservertofullyusethenewdirectories.
–Reorganizethedatabaseifnecessary.
Indexandtablereorganizationfortheserverdatabasecanhelptoavoidunexpecteddatabasegrowthandperformanceissues.
Formoreinformationaboutreorganizingthedatabase,seetechnote1683633.
vTodecreasethesizeofthedatabaseforV7.
1serversandlater,issuethefollowingDB2commandsfromtheserverinstancedirectory:Restriction:ThecommandscanincreaseI/Oactivity,andmightaffectserverperformance.
Tominimizeperformanceproblems,waituntilonecommandiscompletedbeforeyouissuethenextcommand.
TheDB2commandscanbeissuedwhentheserverisrunning.
db2connecttotsmdb1db2setschematsmdb1db2ALTERTABLESPACEUSERSPACE1REDUCEMAX110IBMSpectrumProtect:Single-SiteDiskSolutionGuidedb2ALTERTABLESPACEIDXSPACE1REDUCEMAXdb2ALTERTABLESPACELARGEIDXSPACE1REDUCEMAXdb2ALTERTABLESPACELARGESPACE1REDUCEMAXdb2ALTERTABLESPACEREPLTBLSPACE1REDUCEMAXdb2ALTERTABLESPACEREPLIDXSPACE1REDUCEMAXdb2ALTERTABLESPACEARCHOBJDATASPACEREDUCEMAXdb2ALTERTABLESPACEARCHOBJIDXSPACEREDUCEMAXdb2ALTERTABLESPACEBACKOBJDATASPACEREDUCEMAXdb2ALTERTABLESPACEBACKOBJIDXSPACEREDUCEMAXdb2ALTERTABLESPACEBFABFDATASPACEREDUCEMAXdb2ALTERTABLESPACEBFABFIDXSPACEREDUCEMAXdb2ALTERTABLESPACEBFBFEXTDATASPACEREDUCEMAXdb2ALTERTABLESPACEBFBFEXTIDXSPACEREDUCEMAXdb2ALTERTABLESPACEDEDUPTBLSPACE1REDUCEMAXdb2ALTERTABLESPACEDEDUPIDXSPACE1REDUCEMAXdb2ALTERTABLESPACEDEDUPTBLSPACE2REDUCEMAXdb2ALTERTABLESPACEDEDUPIDXSPACE2REDUCEMAXdb2ALTERTABLESPACEDEDUPTBLSPACE3REDUCEMAXdb2ALTERTABLESPACEDEDUPIDXSPACE3REDUCEMAXdb2ALTERTABLESPACEDEDUPTBLSPACE4REDUCEMAXdb2ALTERTABLESPACEDEDUPIDXSPACE4REDUCEMAXdb2ALTERTABLESPACEDEDUPTBLSPACE5REDUCEMAXdb2ALTERTABLESPACEDEDUPIDXSPACE5REDUCEMAXvToincreaseordecreasethesizeoftheactivelog,completethefollowingsteps:1.
Ensurethatthelocationfortheactiveloghasenoughspacefortheincreasedlogsize.
Ifalogmirrorexists,itslocationmustalsohaveenoughspacefortheincreasedlogsize.
2.
Halttheserver.
3.
Inthedsmserv.
optfile,updatetheACTIVELOGSIZEoptiontothenewsizeoftheactivelog,inmegabytes.
ThesizeofanactivelogfileisbasedonthevalueoftheACTIVELOGSIZEoption.
Guidelinesforspacerequirementsareinthefollowingtable:Table17.
HowtoestimatevolumeandfilespacerequirementsACTIVELOGSizeoptionvalueReservethismuchfreespaceintheactivelogdirectory,inadditiontotheACTIVELOGSizespace2GB-128GB5120MB129GB-256GB10240MB257GB-512GB20480MBTochangetheactivelogtoitsmaximumsizeof512GB,enterthefollowingserveroption:activelogsize5242884.
Ifyouplantouseanewactivelogdirectory,updatethedirectorynamethatisspecifiedintheACTIVELOGDIRECTORYserveroption.
ThenewdirectorymustbeemptyandmustbeaccessibletotheuserIDofthedatabasemanager.
5.
Restarttheserver.
vCompressthearchivelogstoreducetheamountofspacethatisrequiredforstorage.
Enabledynamiccompressionofthearchivelogbyissuingthefollowingcommand:setoptarchlogcompressyesRestriction:UsecautionwhenyouenabletheARCHLOGCOMPRESSserveroptiononsystemswithsustainedhighvolumeusageandheavyworkloads.
Enablingthisoptioninthissystemenvironmentcancausedelaysinarchivinglogfilesfromtheactivelogfilesystemtothearchivelogfilesystem.
ThisdelaycancausetheChapter17.
Managingdatastorage111activelogfilesystemtorunoutofspace.
Besuretomonitortheavailablespaceintheactivelogfilesystemafterarchivelogcompressionisenabled.
Iftheactivelogdirectoryfilesystemusagenearsoutofspaceconditions,theARCHLOGCOMPRESSserveroptionmustbedisabled.
YoucanusetheSETOPTcommandtodisablearchivelogcompressionimmediatelywithouthaltingtheserver.
Relatedreference:ACTIVELOGSIZEserveroptionEXTENDDBSPACE(Increasespaceforthedatabase)SETOPT(Setaserveroptionfordynamicupdate)ManagingmemoryandprocessorusageEnsurethatyoumanagememoryrequirementsandprocessorusagetoensurethattheservercancompletedataprocessessuchasbackupanddatadeduplication.
Considertheimpactonperformancewhenyoucompletecertainprocesses.
BeforeyoubeginvEnsurethatyourconfigurationusestherequiredhardwareandsoftware.
Formoreinformation,seeIBMSpectrumProtectSupportedOperatingSystems.
vFormoreinformationaboutmanagingresourcessuchasthedatabaseandrecoverylog,seePlanningthestoragearrays.
vAddmoresystemmemorytodeterminewhetherthereisaperformanceimprovement.
Monitormemoryusageregularlytodeterminewhethermorememoryisrequired.
Procedure1.
Releasememoryfromthefilesystemcachewherepossible.
2.
Tomanagethesystemmemorythatisusedbyeachserveronasystem,usetheDBMEMPERCENTserveroption.
Limitthepercentageofsystemmemorythatcanbeusedbythedatabasemanagerofeachserver.
Ifallserversareequallyimportant,usethesamevalueforeachserver.
Ifoneserverisaproductionserverandotherserversaretestservers,setthevaluefortheproductionservertoahighervaluethanthetestservers.
3.
Settheuserdatalimitandprivatememoryforthedatabasetoensurethatprivatememoryisnotexhausted.
Exhaustingprivatememorycanresultinerrors,lessthanoptimalperformance,andinstability.
TuningscheduledactivitiesSchedulemaintenancetasksdailytoensurethatyoursolutionoperatescorrectly.
Bytuningyoursolution,youmaximizeserverresourcesandeffectivelyusedifferentfunctionsavailablewithinyoursolution.
Procedure1.
Monitorsystemperformanceregularlytoensurethatbackupandmaintenancetasksarecompletingsuccessfully.
Formoreinformationaboutmonitoring,seePart3,"Monitoringasingle-sitedisksolution,"onpage65.
2.
Ifthemonitoringinformationshowsthattheserverworkloadincreased,youmightneedtoreviewtheplanninginformation.
Reviewwhetherthecapacityofthesystemisadequateinthefollowingcases:vThenumberofclientsincreases112IBMSpectrumProtect:Single-SiteDiskSolutionGuidevTheamountofdatathatisbeingbackedupincreasesvTheamountoftimethatisavailableforbackupschanges3.
Determinewhetheryoursolutionhasperformanceissues.
Reviewtheclientschedulestocheckwhethertasksarecompletingwithinthescheduledtimeframe:a.
OntheClientspageoftheOperationsCenter,selecttheclient.
b.
ClickDetails.
c.
FromtheclientSummarypage,reviewtheBackedupandReplicatedactivitytoidentifyanyrisks.
Adjustthetimeandfrequencyofclientbackupoperations,ifnecessary.
4.
Scheduleenoughtimeforthefollowingmaintenancetaskstocompletesuccessfullywithina24-hourperiod:a.
Backupthedatabaseb.
Runexpirationtoremoveclientbackupsandarchivefilecopiesfromserverstorage.
Relatedconcepts:PerformanceRelatedtasks:Deduplicatingdata(V7.
1.
1)Chapter17.
Managingdatastorage113114IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter18.
SecuringtheIBMSpectrumProtectserverSecuretheIBMSpectrumProtectserveranddatabycontrollingaccesstoserversandclientnodes,encryptingdata,andmaintainingsecureaccesslevelsandpasswords.
SecurityconceptsYoucanprotectIBMSpectrumProtectfromsecurityrisksbyusingcommunicationprotocols,securingpasswords,andprovidingdifferentaccesslevelsforadministrators.
TransportLayerSecurityYoucanusetheSecureSocketsLayer(SSL)ortheTransportLayerSecurity(TLS)protocoltoprovidetransportlayersecurityforasecureconnectionbetweenservers,clients,andstorageagents.
Ifyousenddatabetweentheserver,client,andstorageagent,useSSLorTLStoencryptthedata.
Tip:AnyIBMSpectrumProtectdocumentationthatindicates"SSL"orto"selectSSL"appliestoTLS.
SSLisprovidedbytheGlobalSecurityKit(GSKit)thatisinstalledwiththeIBMSpectrumProtectserverthattheserver,client,andstorageagentuse.
Restriction:DonotusetheSSLorTLSprotocolsforcommunicationswithaDB2databaseinstancethatisusedbyanyIBMSpectrumProtectservers.
Eachserver,client,orstorageagentthatenablesSSLmustuseatrustedself-signedcertificateorobtainauniquecertificatethatissignedbyacertificateauthority(CA).
YoucanuseyourowncertificatesorpurchasecertificatesfromaCA.
EithercertificatemustbeinstalledandaddedtothekeydatabaseontheIBMSpectrumProtectserver,client,orstorageagent.
ThecertificateisverifiedbytheSSLclientorserverthatrequestsorinitiatestheSSLcommunication.
SomeCAcertificatesarepreinstalledinthekeydatabases,bydefault.
SSLissetupindependentlyontheIBMSpectrumProtectserver,client,andstorageagent.
AuthoritylevelsWitheachIBMSpectrumProtectserver,differentadministrativeauthoritylevelsareavailablethatdeterminethetasksthatanadministratorcancomplete.
Afterregistration,anadministratormustbegrantedauthoritybybeingassignedoneormoreadministrativeauthoritylevels.
AnadministratorwithsystemauthoritycancompleteanytaskwiththeserverandassignauthoritylevelstootheradministratorsbyusingtheGRANTAUTHORITYcommand.
Administratorswithpolicy,storage,oroperatorauthoritycancompletesubsetsoftasks.
AnadministratorcanregisterotheradministratorIDs,grantlevelsofauthoritytothem,renameIDs,removeIDs,andlockandunlockthemfromtheserver.
CopyrightIBMCorp.
1993,2016115AnadministratorcancontrolaccesstospecificclientnodesforrootuserIDsandnon-rootuserIDs.
Bydefaultanon-rootuserIDcannotbackupdataonthenode.
UsetheUPDATENODEcommandtochangethenodesettingstoenablebackup.
PasswordsBydefault,theserverautomaticallyusespasswordauthentication.
Withpasswordauthentication,allusersmustenterapasswordwhentheyaccesstheserver.
UseLightweightDirectoryAccessProtocol(LDAP)toapplystricterrequirementsforpasswords.
Formoreinformation,seeManagingpasswordsandlogonprocedures(V7.
1.
1).
Table18.
PasswordauthenticationcharacteristicsCharacteristicMoreinformationCase-sensitivityNotcase-sensitive.
Defaultpasswordexpiration90days.
TheexpirationperiodbeginswhenanadministratorIDorclientnodeisfirstregisteredtotheserver.
Ifauser'spasswordisnotchangedwithinthisperiod,theusermustchangethepasswordthenexttimetheyaccesstheserver.
InvalidpasswordattemptsYoucansetalimitonconsecutiveinvalidpasswordattemptsforallclientnodes.
Whenthelimitisexceeded,theserverlocksthenode.
PasswordlengthTheadministratorcanspecifyaminimumpasswordlengththatisrequiredforpasswords.
Relatedtasks:SecuringcommunicationsManagingadministratorsAnadministratorwhohassystemauthoritycancompleteanytaskwiththeIBMSpectrumProtectserver,includingassigningauthoritylevelstootheradministrators.
Tocompletesometasks,youmustbegrantedauthoritybybeingassignedoneormoreauthoritylevels.
116IBMSpectrumProtect:Single-SiteDiskSolutionGuideProcedureCompletethefollowingtaskstomodifyadministratorsettings.
TaskProcedureAddanadministrator.
Toaddanadministrator,ADMIN1,withsystemauthorityandspecifyapassword,completethefollowingsteps:1.
RegistertheadministratorandspecifyPa$#$twOasthepasswordbyissuingthefollowingcommand:registeradminadmin1Pa$#$twO2.
Grantsystemauthoritytotheadministratorbyissuingthefollowingcommand:grantauthorityadmin1classes=systemChangeadministrativeauthority.
Changetheauthoritylevelforanadministrator,ADMIN1.
vGrantsystemauthoritytotheadministratorbyissuingthefollowingcommand:grantauthorityadmin1classes=systemvRevokesystemauthorityfortheadministratorbyissuingthefollowingcommand:revokeauthorityadmin1classes=systemRemoveadministrators.
Removeanadministrator,ADMIN1,fromaccessingtheIBMSpectrumProtectserverbyissuingthefollowingcommand:removeadminadmin1Temporarilypreventaccesstotheserver.
LockorunlockanadministratorbyusingtheLOCKADMINorUNLOCKADMINcommand.
ChangingpasswordrequirementsYoucanchangetheminimumpasswordlimit,passwordlength,passwordexpiration,andenableordisableauthenticationforIBMSpectrumProtect.
AboutthistaskByenforcingpasswordauthenticationandmanagingpasswordrestrictions,youprotectyourdataandyourserversfrompotentialsecurityrisks.
ProcedureCompletethefollowingtaskstochangepasswordrequirementsforIBMSpectrumProtectservers.
Chapter18.
Securingtheserver117Table19.
AuthenticationtasksforIBMSpectrumProtectserversTaskProcedureSetalimitforinvalidpasswordattempts.
1.
OntheServerspageintheOperationsCenter,selecttheserver.
2.
ClickDetails,andthenclickthePropertiestab.
3.
SetthenumberofinvalidattemptsintheInvalidsign-onattemptlimitfield.
Thedefaultvalueatinstallationis0.
Setaminimumlengthforpasswords.
1.
OntheServerspageintheOperationsCenter,selecttheserver.
2.
ClickDetailsandthenclickthePropertiestab.
3.
SetthenumberofcharactersintheMinimumpasswordlengthfield.
Settheexpirationperiodforpasswords.
1.
OntheServerspageintheOperationsCenter,selecttheserver.
2.
ClickDetailsandthenclickthePropertiestab.
3.
SetthenumberofdaysinthePasswordcommonexpirationfield.
Disablepasswordauthentication.
Bydefault,theserverautomaticallyusespasswordauthentication.
Withpasswordauthentication,allusersmustenterapasswordtoaccesstheserver.
Youcandisablepasswordauthenticationonlyforpasswordsthatauthenticatewiththeserver(LOCAL).
Bydisablingpasswordauthentication,youincreasethesecurityriskfortheserver.
Setadefaultauthenticationmethod.
IssuetheSETDEFAULTAUTHENTICATIONcommand.
Forexample,tousetheserverasthedefaultauthenticationmethod,issuethefollowingcommand:setdefaultauthenticationlocalToupdateoneclientnodetoauthenticatewiththeserver,includeAUTHENTICATION=LOCALintheUPDATENODEcommand:updatenodeauthentication=localRelatedconcepts:AuthenticatingIBMSpectrumProtectusersbyusinganLDAPserverManagingpasswordsandlogonprocedures(V7.
1.
1)118IBMSpectrumProtect:Single-SiteDiskSolutionGuideSecuringtheserveronthesystemProtectthesystemwheretheIBMSpectrumProtectserverrunstopreventunauthorizedaccess.
ProcedureEnsurethatunauthorizeduserscannotaccessthedirectoriesfortheserverdatabaseandtheserverinstance.
Keeptheaccesssettingsforthesedirectoriesthatyouconfiguredduringimplementation.
RestrictinguseraccesstotheserverAuthoritylevelsdeterminewhatanadministratorcandowiththeIBMSpectrumProtectserver.
Anadministratorwithsystemauthoritycancompleteanytaskwiththeserver.
Administratorswithpolicy,storage,oroperatorauthoritycancompletesubsetsoftasks.
Procedure1.
AfteryouregisteranadministratorbyusingtheREGISTERADMINcommand,usetheGRANTAUTHORITYcommandtosettheadministrator'sauthoritylevel.
Fordetailsaboutsettingandchangingauthority,see"Managingadministrators"onpage116.
2.
Tocontroltheauthorityofanadministratortocompletesometasks,usethefollowingtwoserveroptions:a.
YoucanselecttheauthoritylevelthatanadministratormusthavetoissueQUERYandSELECTcommandswiththeQUERYAUTHserveroption.
Bydefault,noauthoritylevelisrequired.
Youcanchangetherequirementtooneoftheauthoritylevels,includingsystem.
b.
YoucanspecifythatsystemauthorityisrequiredforcommandsthatcausetheservertowritetoanexternalfilewiththeREQSYSAUTHOUTFILEserveroption.
Bydefault,systemauthorityisrequiredforsuchcommands.
3.
YoucanrestrictdatabackuponaclientnodetoonlyrootuserIDsorauthorizedusers.
Forexample,tolimitbackupstotherootuserID,issuetheREGISTERNODEorUPDATENODEcommandandspecifytheBACKUPINITIATION=rootparameter:updatenodebackupinitiation=rootLimitingaccessthroughportrestrictionsLimitaccesstotheserverbyapplyingportrestrictions.
AboutthistaskYoumightneedtorestrictaccesstospecificservers,basedonyoursecurityrequirements.
TheIBMSpectrumProtectservercanbeconfiguredtolistenonfourTCP/IPports:twoforregularprotocolsandtwofortheTransportLayerSecurity(TLS)protocols.
ProcedureYoucansettheserveroptionstospecifytheportthatyourequire,aslistedinTable20onpage120.
Chapter18.
Securingtheserver119Table20.
ServeroptionsandportaccessServeroptionPortaccessSSLTCPPORTSpecifiestheSSLTCP/IPportaddressforaserver.
Adefaultportvalueisnotavailable.
IftheclientisconfiguredforSSLcommunication,theclientusestheSSLporttocommunicatewiththetargetserverduringfailover.
SSLTCPADMINPORTSpecifiestheportaddressonwhichtheserverTCP/IPcommunicationdriverwaitsforrequestsforSSL-enabledsessions.
Adefaultportvalueisnotavailable.
UsethisoptiontoseparateadministrativeclienttrafficfromregularclienttrafficthatusestheTCPPORTandSSLTCPPORToptions.
TCPPORTSpecifiestheportnumberonwhichtheserverTCP/IPcommunicationdriveristowaitforrequestsforclientsessions.
Thedefaultvalueis1500.
TCPADMINPORTSpecifiestheportnumberonwhichtheserverTCP/IPcommunicationdriveristowaitforrequestsforsessionsotherthanclientsessions.
ThedefaultisthevalueofTCPPORT.
UsethisoptiontoseparateadministrativeclienttrafficfromregularclienttrafficthatusestheTCPPORTandSSLTCPPORToptions.
Relatedreference:"Planningfirewallaccess"onpage23120IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter19.
StoppingandstartingtheserverBeforeyoucompletemaintenanceorreconfigurationtasks,stoptheserver.
Then,starttheserverinmaintenancemode.
Whenyouarefinishedwiththemaintenanceorreconfigurationtasks,restarttheserverinproductionmode.
BeforeyoubeginYoumusthavesystemoroperatorprivilegetostopandstarttheIBMSpectrumProtectserver.
StoppingtheserverBeforeyoustoptheserver,preparethesystembyensuringthatalldatabasebackupoperationsarecompleted,andallotherprocessesandsessionsareended.
Inthisway,youcansafelyshutdowntheserverandensurethatdataisprotected.
AboutthistaskWhenyouissuetheHALTcommandtostoptheserver,thefollowingactionsoccur:vAllprocessesandclientnodesessionsarecanceled.
vAllcurrenttransactionsarestopped.
(Thetransactionswillberolledbackwhentheserverisrestarted.
)ProcedureTopreparethesystemandstoptheserver,completethefollowingsteps:1.
PreventnewclientnodesessionsfromstartingbyissuingtheDISABLESESSIONScommand:disablesessionsall2.
Determinewhetheranyclientnodesessionsorprocessesareinprogressbycompletingthefollowingsteps:a.
OntheOverviewpageoftheOperationsCenter,viewtheActivityareaforthetotalnumbersofprocessesandsessionsthatarecurrentlyactive.
Ifnumbersdiffersignificantlyfromtheusualnumbersthataredisplayedduringyourdailystorage-managementroutine,viewotherstatusindicatorsintheOperationsCentertocheckwhetherthereisaproblem.
b.
ViewthegraphintheActivityareatocomparetheamountofnetworktrafficoverthefollowingperiods:vThecurrentperiod,thatis,themostrecent24-hourperiodvThepreviousperiod,thatis,the24hoursbeforethecurrentperiodIfthegraphforthepreviousperiodrepresentstheexpectedamountoftraffic,significantdifferencesonthegraphforthecurrentperiodmightindicateaproblem.
c.
OntheServerspage,selectaserverforwhichyouwanttoviewprocessesandsessions,andclickDetails.
IftheserverisnotregisteredasahuborspokeserverintheOperationsCenter,obtaininformationaboutprocessesbyusingadministrativecommands.
IssuetheQUERYPROCESScommandtoqueryprocessesandobtaininformationaboutsessionsbyissuingtheQUERYSESSIONcommand.
CopyrightIBMCorp.
1993,20161213.
Waituntiltheclientnodesessionsarecompletedorcancelthem.
Tocancelprocessesandsessions,completethefollowingsteps:vOntheServerspage,selectaserverforwhichyouwanttoviewprocessesandsessions,andclickDetails.
vClicktheActiveTaskstab,andselectoneormoreprocesses,sessions,oracombinationofboththatyouwanttocancel.
vClickCancel.
vIftheserverisnotregisteredasahuborspokeserverintheOperationsCenter,cancelsessionsbyusingadministrativecommands.
IssuetheCANCELSESSIONcommandtocancelasessionandcancelprocessesbyusingtheCANCELPROCESScommand.
Tip:Iftheprocessthatyouwanttocanceliswaitingforatapevolumetobemounted,themountrequestiscanceled.
Forexample,ifyouissueanEXPORT,IMPORT,orMOVEDATAcommand,thecommandmightinitiateaprocessthatrequiresatapevolumetobemounted.
However,ifatapevolumeisbeingmountedbyanautomatedlibrary,thecanceloperationmightnottakeeffectuntilthemountprocessiscomplete.
Dependingonyoursystemenvironment,thiscouldtakeseveralminutes.
4.
StoptheserverbyissuingtheHALTcommand:haltStartingtheserverformaintenanceorreconfigurationtasksBeforeyoubeginservermaintenanceorreconfigurationtasks,starttheserverinmaintenancemode.
Whenyoustarttheserverinmaintenancemode,youdisableoperationsthatmightdisruptyourmaintenanceorreconfigurationtasks.
AboutthistaskStarttheserverinmaintenancemodebyrunningtheDSMSERVutilitywiththeMAINTENANCEparameter.
Thefollowingoperationsaredisabledinmaintenancemode:vAdministrativecommandschedulesvClientschedulesvReclamationofstoragespaceontheservervInventoryexpirationvMigrationofstoragepoolsInaddition,clientsarepreventedfromstartingsessionswiththeserver.
Tips:vYoudonothavetoedittheserveroptionsfile,dsmserv.
opt,tostarttheserverinmaintenancemode.
vWhiletheserverisrunninginmaintenancemode,youcanmanuallystartthestorage-spacereclamation,inventoryexpiration,andstorage-poolmigrationprocesses.
ProcedureTostarttheserverinmaintenancemode,issuethefollowingcommand:dsmservmaintenance122IBMSpectrumProtect:Single-SiteDiskSolutionGuideTip:Toviewavideoaboutstartingtheserverinmaintenancemode,seeStartingaserverinmaintenancemode.
WhattodonextToresumeserveroperationsinproductionmode,completethefollowingsteps:1.
ShutdowntheserverbyissuingtheHALTcommand:halt2.
Starttheserverbyusingthemethodthatyouuseinproductionmode.
Followtheinstructionsforyouroperatingsystem:vStartingtheserverinstancevStartingtheserverinstancevStartingtheserverinstanceOperationsthatweredisabledduringmaintenancemodearereenabled.
Chapter19.
Stoppingandstartingtheserver123124IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter20.
PlanningtoupgradetheserverWhenafixpackorinterimfixbecomesavailable,youcanupgradetheIBMSpectrumProtectservertotakeadvantageofproductimprovements.
Serversandclientscanbeupgradedatdifferenttimes.
Ensurethatyoucompletetheplanningstepsbeforeyouupgradetheserver.
AboutthistaskFollowtheseguidelines:vThepreferredmethodistoupgradetheserverbyusingtheinstallationwizard.
Afteryoustartthewizard,intheIBMInstallationManagerwindow,clicktheUpdateicon;donotclicktheInstallorModifyicon.
vIfupgradesareavailableforboththeservercomponentandtheOperationsCentercomponent,selectthecheckboxestoupgradebothcomponents.
Procedure1.
Reviewthelistoffixpacksandinterimfixes.
Seetechnote1239415.
2.
Reviewproductimprovements,whicharedescribedinreadmefiles.
Tip:WhenyouobtaintheinstallationpackagefilefromtheIBMSpectrumProtectsupportsite,youcanalsoaccessthereadmefile.
3.
Ensurethattheversionthatyouupgradeyourservertoiscompatiblewithothercomponents,suchasclientsandstorageagents.
Seetechnote1053218.
4.
IfyoursolutionincludesserversorclientsatalevelthatisearlierthanV7.
1,reviewtheguidelinestoensurethatclientbackupandarchiveoperationsarenotdisrupted.
Seetechnote1053218.
5.
Reviewtheupgradeinstructions.
Ensurethatyoubackuptheserverdatabase,thedeviceconfigurationinformation,andthevolumehistoryfile.
WhattodonextToinstallafixpackorinterimfix,followtheinstructionsforyouroperatingsystem:vInstallinganIBMSpectrumProtectserverfixpackvInstallinganIBMSpectrumProtectserverfixpackvInstallinganIBMSpectrumProtectserverfixpackRelatedinformation:UpgradeandMigrationProcess-FrequentlyAskedQuestionsCopyrightIBMCorp.
1993,2016125126IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter21.
ImplementingadisasterrecoveryplanImplementadisasterrecoverystrategytorecoveryourapplicationsifadisasteroccursandtoensurehighserveravailability.
AboutthistaskDetermineyourdisasterrecoveryrequirementsbyidentifyingthebusinessprioritiesforclientnoderecovery,thesystemsthatyouusetorecoverdata,andwhetherclientnodeshaveconnectivitytoarecoveryserver.
Usereplicationandstoragepoolprotectiontoprotectdata.
Youmustalsodeterminehowoftendirectory-containerstoragepoolsareprotected.
PreparingforanoutageorsystemupdatePrepareIBMSpectrumProtecttomaintainyoursysteminaconsistentstateduringapoweroutageorsystemupdate.
AboutthistaskEnsurethatyouscheduleactivitiesregularlytomanage,protect,andmaintaintheserver.
Procedure1.
Cancelprocessesandsessionsthatareinprogressbycompletingthefollowingsteps:a.
OntheServerspage,selectaserverforwhichyouwanttoviewprocessesandsessions,andclickDetails.
b.
ClicktheActiveTaskstab,andselectoneormoreprocesses,sessions,oracombinationofboththatyouwanttocancel.
c.
ClickCancel.
2.
StoptheserverbyissuingtheHALTcommand:haltCompletingrecoverydrillsScheduledisasterrecoverydrillstoprepareforauditsthatcertifytherecoverabilityoftheIBMSpectrumProtectserverandtoensurethatdatacanberestoredandoperationscanresumeafteranoutage.
Adrillalsohelpsyouensurethatalldatacanberestoredandoperationsresumedbeforeacriticalsituationoccurs.
AboutthistaskRestrictions:Thefollowingrestrictionsapplytosingle-sitedisksolutions:vYoucanonlyrestorethedatabase.
vYoucannotusereplicationbecauseyoudonothaveatargetserveratarecoverysite.
vYoucannotrecoverfromdamagetostoragepools.
CopyrightIBMCorp.
1993,2016127ProcedureEnsurethatthedatabaseisbackedupbycompletingthefollowingsteps:1.
OntheTSMServerspageoftheOperationsCenter,selecttheserverwhosedatabaseyouwanttobackup.
2.
ClickBackUp,andfollowtheinstructionsintheBackUpServerDatabasewindow.
128IBMSpectrumProtect:Single-SiteDiskSolutionGuideChapter22.
RecoveringfromsystemoutagesForIBMSpectrumProtectsingle-sitedisksolutions,youcanrecovertheinventorylocallyonlyandrestorethedatabasetoprotectyourdata.
ProcedureUseoneofthefollowingmethodstorecoverinventorytoalocalsite,basedonthetypeofinformationthatisbackedup.
Restriction:Becausesingle-sitedisksolutionsdonothaveasecondcopyofthestoragepool,youcannotrestorestoragepools.
Toreviewthearchitectureofdisksolutions,seeSelectinganIBMSpectrumProtectsolution.
Table21.
ScenariosforrecoveringfromadisasterScenarioProcedureYoursystemisinaccessibleandyouwanttolocallyrestoretoanearlierversionbyusingsystemtools.
vUseIBMSpectrumProtecttobackuptheservertoanotherserver.
vUseoperatingsystemtoolstobackupandrestoreyoursystemtoanearlierversion.
Anoutageordisasteroccursandyouwanttorestoreyourdatafrombackedupversionsofthedata.
vTobackupaclient,ontheTSMClientspageoftheOperationsCenter,selecttheclientsthatyouwanttobackup,andclickBackUp.
vOntheTSMServerspageoftheOperationsCenter,selecttheserverwhosedatabaseyouwanttobackup.
ClickBackUp,andfollowtheinstructionsintheBackUpServerDatabasewindow.
Torestoreastoragepoolfromabacked-upversionofthestoragepool,youmustrestorethedatabase.
IssuetheDSMSERVRESTOREDBcommandtorestorethedatabaseandassociatedstoragepoolstoabacked-upversion.
Relatedreference:AUDITCONTAINER(Verifytheconsistencyofdatabaseinformationforadirectory-containerstoragepool)DSMSERVRESTOREDB(Restorethedatabase)CopyrightIBMCorp.
1993,2016129RestoringthedatabaseYoumighthavetorestoretheIBMSpectrumProtectdatabaseafteradisaster.
Youcanrestorethedatabasetothemostcurrentstateortoaspecificpointintime.
Youmusthavefull,incremental,orsnapshotdatabasebackupvolumestorestorethedatabase.
BeforeyoubeginIfthedatabaseandrecoverylogdirectoriesarelost,re-createthembeforeyouissuetheDSMSERVRESTOREDBserverutility.
Forexample,usethefollowingcommands:mkdir/tsmdb001mkdir/tsmdb002mkdir/tsmdb003mkdir/activelogmkdir/archlogmkdir/archfaillogmkdire:\tsm\db001mkdirf:\tsm\db001mkdirg:\tsm\db001mkdirh:\tsm\activelogmkdiri:\tsm\archlogmkdirj:\tsm\archfaillogRestrictions:vTorestorethedatabasetoitslatestversion,youmustlocatethearchivelogdirectory.
Ifyouarecannotlocatethedirectory,youcanrestorethedatabaseonlytoapointintime.
vYoucannotuseSecureSocketsLayer(SSL)fordatabaserestoreoperations.
vIfthereleaselevelofthedatabasebackupisdifferentfromthereleaseleveloftheserverthatisbeingrestored,youcannotrestoretheserverdatabase.
Forexample,ifyouareusingaVersion8.
1serverandyoutrytorestoreaVersion7.
1database,anerroroccurs.
AboutthistaskPoint-in-timerestoreoperationsaretypicallyusedforsituationssuchasdisasterrecoveryortoremovetheeffectsoferrorsthatcancauseinconsistenciesinthedatabase.
Torecoverthedatabasetothetimewhenthedatabasewaslost,recoverthedatabasetoitslatestversion.
ProcedureUsetheDSMSERVRESTOREDBserverutilitytorestorethedatabase.
Dependingontheversionofthedatabasethatyouwanttorestore,chooseoneofthefollowingmethods:vRestoreadatabasetoitslatestversion.
Forexample,usethefollowingcommand:dsmservrestoredbvRestoreadatabasetoapointintime.
Forexample,torestorethedatabasetoabackupseriesthatwascreatedon19April2015,usethefollowingcommand:dsmservrestoredbtodate=04/19/2015130IBMSpectrumProtect:Single-SiteDiskSolutionGuideWhattodonextIfyourestoredthedatabaseanddirectory-containerstoragepoolsexistontheserver,youmustidentifyinconsistenciesbetweenthedatabaseandthefilesystem.
1.
Ifyourestoredthedatabasetoapointintimeandyoudidnotdelayreuseofthedirectory-containerstoragepool,youmustauditallthecontainers.
Toauditallcontainers,issuethefollowingcommand:auditcontainerstgpool2.
Iftheservercannotidentifycontainersonthesystem,completethefollowingstepstodisplayalistofcontainers:a.
Fromanadministrativeclient,issuethefollowingcommand:selectcontainer_namefromcontainersb.
Fromthefilesystem,issuethefollowingcommandforthestoragepooldirectoryonthesourceserver:Tip:Thestoragepooldirectoryisdisplayedinthecommandoutput:[root@source]$ls-lc:\source_stgpooldir\00>dirc.
Comparethecontainersthatarelistedonthefilesystemandtheserver.
d.
IssuetheAUDITCONTAINERcommandandspecifythecontainerthatismissingfromtheserveroutput.
SpecifytheACTION=REMOVEDAMAGEDparametertodeletethecontainer.
e.
Toensurethatthecontainersaredeletedonthefilesystem,reviewthemessagesthataredisplayed.
Chapter22.
Recoveringfromsystemoutages131132IBMSpectrumProtect:Single-SiteDiskSolutionGuidePart5.
AppendixesCopyrightIBMCorp.
1993,2016133134IBMSpectrumProtect:Single-SiteDiskSolutionGuideAppendix.
AccessibilityfeaturesfortheIBMSpectrumProtectproductfamilyAccessibilityfeaturesassistuserswhohaveadisability,suchasrestrictedmobilityorlimitedvision,touseinformationtechnologycontentsuccessfully.
OverviewTheIBMSpectrumProtectfamilyofproductsincludesthefollowingmajoraccessibilityfeatures:vKeyboard-onlyoperationvOperationsthatuseascreenreaderTheIBMSpectrumProtectfamilyofproductsusesthelatestW3CStandard,WAI-ARIA1.
0(www.
w3.
org/TR/wai-aria/),toensurecompliancewithUSSection508(www.
access-board.
gov/guidelines-and-standards/communications-and-it/about-the-section-508-standards/section-508-standards)andWebContentAccessibilityGuidelines(WCAG)2.
0(www.
w3.
org/TR/WCAG20/).
Totakeadvantageofaccessibilityfeatures,usethelatestreleaseofyourscreenreaderandthelatestwebbrowserthatissupportedbytheproduct.
TheproductdocumentationinIBMKnowledgeCenterisenabledforaccessibility.
TheaccessibilityfeaturesofIBMKnowledgeCenteraredescribedintheAccessibilitysectionoftheIBMKnowledgeCenterhelp(www.
ibm.
com/support/knowledgecenter/about/releasenotes.
htmlview=kc#accessibility).
KeyboardnavigationThisproductusesstandardnavigationkeys.
InterfaceinformationUserinterfacesdonothavecontentthatflashes2-55timespersecond.
Webuserinterfacesrelyoncascadingstylesheetstorendercontentproperlyandtoprovideausableexperience.
Theapplicationprovidesanequivalentwayforlow-visionuserstousesystemdisplaysettings,includinghigh-contrastmode.
Youcancontrolfontsizebyusingthedeviceorwebbrowsersettings.
WebuserinterfacesincludeWAI-ARIAnavigationallandmarksthatyoucanusetoquicklynavigatetofunctionalareasintheapplication.
VendorsoftwareTheIBMSpectrumProtectproductfamilyincludescertainvendorsoftwarethatisnotcoveredundertheIBMlicenseagreement.
IBMmakesnorepresentationabouttheaccessibilityfeaturesoftheseproducts.
Contactthevendorforaccessibilityinformationaboutitsproducts.
CopyrightIBMCorp.
1993,2016135RelatedaccessibilityinformationInadditiontostandardIBMhelpdeskandsupportwebsites,IBMhasaTTYtelephoneserviceforusebydeaforhardofhearingcustomerstoaccesssalesandsupportservices:TTYservice800-IBM-3383(800-426-3383)(withinNorthAmerica)FormoreinformationaboutthecommitmentthatIBMhastoaccessibility,seeIBMAccessibility(www.
ibm.
com/able).
136IBMSpectrumProtect:Single-SiteDiskSolutionGuideNoticesThisinformationwasdevelopedforproductsandservicesofferedintheUS.
ThismaterialmightbeavailablefromIBMinotherlanguages.
However,youmayberequiredtoownacopyoftheproductorproductversioninthatlanguageinordertoaccessit.
IBMmaynotoffertheproducts,services,orfeaturesdiscussedinthisdocumentinothercountries.
ConsultyourlocalIBMrepresentativeforinformationontheproductsandservicescurrentlyavailableinyourarea.
AnyreferencetoanIBMproduct,program,orserviceisnotintendedtostateorimplythatonlythatIBMproduct,program,orservicemaybeused.
Anyfunctionallyequivalentproduct,program,orservicethatdoesnotinfringeanyIBMintellectualpropertyrightmaybeusedinstead.
However,itistheuser'sresponsibilitytoevaluateandverifytheoperationofanynon-IBMproduct,program,orservice.
IBMmayhavepatentsorpendingpatentapplicationscoveringsubjectmatterdescribedinthisdocument.
Thefurnishingofthisdocumentdoesnotgrantyouanylicensetothesepatents.
Youcansendlicenseinquiries,inwriting,to:IBMDirectorofLicensingIBMCorporationNorthCastleDrive,MD-NC119Armonk,NY10504-1785USForlicenseinquiriesregardingdouble-bytecharacterset(DBCS)information,contacttheIBMIntellectualPropertyDepartmentinyourcountryorsendinquiries,inwriting,to:IntellectualPropertyLicensingLegalandIntellectualPropertyLawIBMJapanLtd.
19-21,Nihonbashi-Hakozakicho,Chuo-kuTokyo103-8510,JapanINTERNATIONALBUSINESSMACHINESCORPORATIONPROVIDESTHISPUBLICATION"ASIS"WITHOUTWARRANTYOFANYKIND,EITHEREXPRESSORIMPLIED,INCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARRANTIESOFNON-INFRINGEMENT,MERCHANTABILITYORFITNESSFORAPARTICULARPURPOSE.
Somejurisdictionsdonotallowdisclaimerofexpressorimpliedwarrantiesincertaintransactions,therefore,thisstatementmaynotapplytoyou.
Thisinformationcouldincludetechnicalinaccuraciesortypographicalerrors.
Changesareperiodicallymadetotheinformationherein;thesechangeswillbeincorporatedinneweditionsofthepublication.
IBMmaymakeimprovementsand/orchangesintheproduct(s)and/ortheprogram(s)describedinthispublicationatanytimewithoutnotice.
Anyreferencesinthisinformationtonon-IBMwebsitesareprovidedforconvenienceonlyanddonotinanymannerserveasanendorsementofthoseCopyrightIBMCorp.
1993,2016137websites.
ThematerialsatthosewebsitesarenotpartofthematerialsforthisIBMproductanduseofthosewebsitesisatyourownrisk.
IBMmayuseordistributeanyoftheinformationyousupplyinanywayitbelievesappropriatewithoutincurringanyobligationtoyou.
Licenseesofthisprogramwhowishtohaveinformationaboutitforthepurposeofenabling:(i)theexchangeofinformationbetweenindependentlycreatedprogramsandotherprograms(includingthisone)and(ii)themutualuseoftheinformationwhichhasbeenexchanged,shouldcontact:IBMDirectorofLicensingIBMCorporationNorthCastleDrive,MD-NC119Armonk,NY10504-1785USSuchinformationmaybeavailable,subjecttoappropriatetermsandconditions,includinginsomecases,paymentofafee.
ThelicensedprogramdescribedinthisdocumentandalllicensedmaterialavailableforitareprovidedbyIBMundertermsoftheIBMCustomerAgreement,IBMInternationalProgramLicenseAgreementoranyequivalentagreementbetweenus.
Theperformancedatadiscussedhereinispresentedasderivedunderspecificoperatingconditions.
Actualresultsmayvary.
Informationconcerningnon-IBMproductswasobtainedfromthesuppliersofthoseproducts,theirpublishedannouncementsorotherpubliclyavailablesources.
IBMhasnottestedthoseproductsandcannotconfirmtheaccuracyofperformance,compatibilityoranyotherclaimsrelatedtonon-IBMproducts.
Questionsonthecapabilitiesofnon-IBMproductsshouldbeaddressedtothesuppliersofthoseproducts.
Thisinformationcontainsexamplesofdataandreportsusedindailybusinessoperations.
Toillustratethemascompletelyaspossible,theexamplesincludethenamesofindividuals,companies,brands,andproducts.
Allofthesenamesarefictitiousandanysimilaritytothenamesandaddressesusedbyanactualbusinessenterpriseisentirelycoincidental.
COPYRIGHTLICENSE:Thisinformationcontainssampleapplicationprogramsinsourcelanguage,whichillustrateprogrammingtechniquesonvariousoperatingplatforms.
Youmaycopy,modify,anddistributethesesampleprogramsinanyformwithoutpaymenttoIBM,forthepurposesofdeveloping,using,marketingordistributingapplicationprogramsconformingtotheapplicationprogramminginterfacefortheoperatingplatformforwhichthesampleprogramsarewritten.
Theseexampleshavenotbeenthoroughlytestedunderallconditions.
IBM,therefore,cannotguaranteeorimplyreliability,serviceability,orfunctionoftheseprograms.
Thesampleprogramsareprovided"ASIS",withoutwarrantyofanykind.
IBMshallnotbeliableforanydamagesarisingoutofyouruseofthesampleprograms.
138IBMSpectrumProtect:Single-SiteDiskSolutionGuideEachcopyoranyportionofthesesampleprogramsoranyderivativeworkmustincludeacopyrightnoticeasfollows:(yourcompanyname)(year).
PortionsofthiscodearederivedfromIBMCorp.
SamplePrograms.
CopyrightIBMCorp.
_entertheyearoryears_.
TrademarksIBM,theIBMlogo,andibm.
comaretrademarksorregisteredtrademarksofInternationalBusinessMachinesCorp.
,registeredinmanyjurisdictionsworldwide.
OtherproductandservicenamesmightbetrademarksofIBMorothercompanies.
AcurrentlistofIBMtrademarksisavailableontheWebat"Copyrightandtrademarkinformation"atwww.
ibm.
com/legal/copytrade.
shtml.
AdobeisaregisteredtrademarkofAdobeSystemsIncorporatedintheUnitedStates,and/orothercountries.
LinearTape-Open,LTO,andUltriumaretrademarksofHP,IBMCorp.
andQuantumintheU.
S.
andothercountries.
IntelandItaniumaretrademarksorregisteredtrademarksofIntelCorporationoritssubsidiariesintheUnitedStatesandothercountries.
LinuxisaregisteredtrademarkofLinusTorvaldsintheUnitedStates,othercountries,orboth.
Microsoft,Windows,andWindowsNTaretrademarksofMicrosoftCorporationintheUnitedStates,othercountries,orboth.
JavaandallJava-basedtrademarksandlogosaretrademarksorregisteredtrademarksofOracleand/oritsaffiliates.
SoftLayerisaregisteredtrademarkofSoftLayer,Inc.
,anIBMCompany.
UNIXisaregisteredtrademarkofTheOpenGroupintheUnitedStatesandothercountries.
TermsandconditionsforproductdocumentationPermissionsfortheuseofthesepublicationsaregrantedsubjecttothefollowingtermsandconditions.
ApplicabilityThesetermsandconditionsareinadditiontoanytermsofusefortheIBMwebsite.
PersonaluseYoumayreproducethesepublicationsforyourpersonal,noncommercialuseprovidedthatallproprietarynoticesarepreserved.
Youmaynotdistribute,displayormakederivativeworkofthesepublications,oranyportionthereof,withouttheexpressconsentofIBM.
CommercialuseYoumayreproduce,distributeanddisplaythesepublicationssolelywithinyourenterpriseprovidedthatallproprietarynoticesarepreserved.
Youmaynotmakederivativeworksofthesepublications,orreproduce,distributeordisplaythesepublicationsoranyportionthereofoutsideyourenterprise,withouttheexpressconsentofIBM.
Notices139RightsExceptasexpresslygrantedinthispermission,nootherpermissions,licensesorrightsaregranted,eitherexpressorimplied,tothepublicationsoranyinformation,data,softwareorotherintellectualpropertycontainedtherein.
IBMreservestherighttowithdrawthepermissionsgrantedhereinwhenever,initsdiscretion,theuseofthepublicationsisdetrimentaltoitsinterestor,asdeterminedbyIBM,theaboveinstructionsarenotbeingproperlyfollowed.
Youmaynotdownload,exportorre-exportthisinformationexceptinfullcompliancewithallapplicablelawsandregulations,includingallUnitedStatesexportlawsandregulations.
IBMMAKESNOGUARANTEEABOUTTHECONTENTOFTHESEPUBLICATIONS.
THEPUBLICATIONSAREPROVIDED"AS-IS"ANDWITHOUTWARRANTYOFANYKIND,EITHEREXPRESSEDORIMPLIED,INCLUDINGBUTNOTLIMITEDTOIMPLIEDWARRANTIESOFMERCHANTABILITY,NON-INFRINGEMENT,ANDFITNESSFORAPARTICULARPURPOSE.
PrivacypolicyconsiderationsIBMSoftwareproducts,includingsoftwareasaservicesolutions,("SoftwareOfferings")mayusecookiesorothertechnologiestocollectproductusageinformation,tohelpimprovetheenduserexperience,totailorinteractionswiththeenduser,orforotherpurposes.
InmanycasesnopersonallyidentifiableinformationiscollectedbytheSoftwareOfferings.
SomeofourSoftwareOfferingscanhelpenableyoutocollectpersonallyidentifiableinformation.
IfthisSoftwareOfferingusescookiestocollectpersonallyidentifiableinformation,specificinformationaboutthisoffering'suseofcookiesissetforthbelow.
ThisSoftwareOfferingdoesnotusecookiesorothertechnologiestocollectpersonallyidentifiableinformation.
IftheconfigurationsdeployedforthisSoftwareOfferingprovideyouascustomertheabilitytocollectpersonallyidentifiableinformationfromendusersviacookiesandothertechnologies,youshouldseekyourownlegaladviceaboutanylawsapplicabletosuchdatacollection,includinganyrequirementsfornoticeandconsent.
Formoreinformationabouttheuseofvarioustechnologies,includingcookies,forthesepurposes,seeIBM'sPrivacyPolicyathttp://www.
ibm.
com/privacyandIBM'sOnlinePrivacyStatementathttp://www.
ibm.
com/privacy/detailsinthesectionentitled"Cookies,WebBeaconsandOtherTechnologies,"andthe"IBMSoftwareProductsandSoftware-as-a-ServicePrivacyStatement"athttp://www.
ibm.
com/software/info/product-privacy.
140IBMSpectrumProtect:Single-SiteDiskSolutionGuideGlossaryAglossaryisavailablewithtermsanddefinitionsfortheIBMSpectrumProtectfamilyofproducts.
SeetheIBMSpectrumProtectglossary.
ToviewglossariesforotherIBMproducts,seeIBMTerminology.
CopyrightIBMCorp.
1993,2016141142IBMSpectrumProtect:Single-SiteDiskSolutionGuideIndexAAboutthispublicationvaccesslimit119serveroptions119accessibilityfeatures135activelogcapacity110archivelogcapacity110archiveoperationsscheduling94specifyingrules91AUDITCONTAINER109auditstoragepool109authoritylevel117Bback-endcapacitylicensing77backupoperationsmodifyingscope104scheduling94specifyingrules91Cclientacceptorconfiguring98restarting102stopping102clientmanagementserviceconfigureOperationsCentertouse62installing60verifyinstallation60clientnodesdecommissioning106removingfromproduction106client/servercommunicationsconfiguring100clientsadding89assigntoschedules59configuring59,96configuringtorunscheduledoperations98connectingtoserver95defineschedules58installing59,96managingoperations101protecting89register59registering95selectingsoftware90upgrading105commandsHALT121configurationchanging102clients96configuringclients59spokeserver83Ddailychecklistofmonitoringtasks67datadeactivating108datadeduplicationconfigure55datarecovery127strategy127dataretentionrulesdefine55databasecapacity110databaserestore130deactivationprocessbackupdata108decommissionprocessclientnode106disability135DSMSERVRESTOREDB130Eemailreportsconfiguring79errorlogsevaluating101Ffilesystems[preparing,AIXserversystems39planningfor9preparing,Linuxserversystems40preparing,Windowsserversystems41firewall22,23firewallsconfiguringcommunicationsthrough100front-endcapacitylicensing77GgraphicalwizardprerequisiteRPMfiles44Hhaltingserver121hardwarerequirements5hubserverchanging86restoretopreconfiguredstate86IIBMKnowledgeCentervIBMSpectrumProtectdirectoriesplanningfor9CopyrightIBMCorp.
1993,2016143implementationtestoperations63initialconfigurationwizardconfigure85installationclients96installingclients59installingIBMSpectrumProtectAIXsystems43Linuxsystems43Windowssystems44installingtheoperatingsystemAIXserversystems27Linuxserversystems29Windowsserversystems34inventorycapacity110issuesdiagnosing65Kkeyboard135KnowledgeCentervLLDAPpasswordrequirements117licensecomplianceverifying77Mmaintenancedefineschedule56maintenancemodestartserver121maintenancetasksscheduling112starttheserverinmaintenancemode122managingaccesslevels119administrators117authority117managingsecurity115memoryrequirementsmanaging112monitoringdailychecklist67goals65periodicchecklist71tasksdailychecklist67periodicchecklist71multipathI/OconfigureforAIXsystems35configureforLinuxsystems36configureforWindowssystems37OoperatingsysteminstallonAIXserversystems27installonLinuxserversystems29operatingsystem(continued)installonWindowsserversystems34security119OperationsCenterconfigure51restoretopreconfiguredstate86securecommunications52spokeserver83webserver84optionssetforserver48outageprepare127PpasswordrequirementsLDAP117passwordschanging117resetting103periodicchecklistofmonitoringtasks71planningsolutionssingle-sitedisk1planningworksheet9policiesediting93specifying91viewing92policydomainsspecifying91privilegeclasssystemprivilege117processorusage112processorvalueunit(PVU)licensing77productlicenseregister54publicationsvRreconfigurationtasksstarttheserverinmaintenancemode122recoverlocalinventory129recoverydisasterrecovery127strategy127recoverydrill127registrationclients95reportsemailconfiguring79restrictinguseraccess119RPMfilesinstallforgraphicalwizard44rulesediting93specifyingbackupandarchiveoperations91viewing92144IBMSpectrumProtect:Single-SiteDiskSolutionGuideSscheduledactivitiestuning112schedulesbackupandarchiveoperations94securecommunicationsconfigurewithSSLandTLS50security115serverconfigure47createuserIDfor38definemaintenanceschedule56determinesizeof3planupgrade125setoptions48startinmaintenancemode121stop121serversstartinmaintenancemode122shuttingdownserver121single-sitedisksolutionplanningfor1softwareselecting90softwarerequirements6solutionexpanding89spokeserveradding83remove84spokeserversrestoretopreconfiguredstate86SSL50startingservermaintenancemode121statusreportsobtaining79stoppingserver121storageplanningfor19storageconfigurationplanningfor9storagehardwareconfigure27storagepoolsauditingcontainers109storagespacereleasing108systemoutagerecoverfrom129systemrequirements5hardware5systemstatustracking79systemupdateprepare127TTLS50troubleshooting65administratorIDs103errorsinclientoperations101lockedclientnodes103troubleshooting(continued)passwordissues103Uupgradeserver125userIDcreateforserver38Wwebserverstart84stop84Index145146IBMSpectrumProtect:Single-SiteDiskSolutionGuideIBMProductNumber:5725-W985725-W995725-X15PrintedinUSA