ARCHIVED: At IU, how do I install the TSM client software in Linux?
This content has been archived, and is no longer maintained by Indiana University. Information here may no longer be accurate, and links may no longer be available or reliable.
To install the Tivoli Storage Manager (TSM) client software in Linux:
- Select the appropriate TSM client package from IUware's Linux Utilities Software section.
- Read the associated README file, and then download the TSM client package.
- Log into your server as the root user.
- Move the TSM tarball to
/usr/local/src
, or another directory of your choice. - Untar the client package as follows, replacing
x.x.x.x
with the version number of the client software:#tar -xvf ./x.x.x.x-TIV-TSMBAC-LinuxX86.tar
- If a previous version of TSM is installed, remove it before
installing a new version:
rpm -e TIVsm-BA rpm -e TIVsm-API64 rpm -e TIVsm-API
- Enter the following command to install the gskit 32-bit packages:
rpm -Uvh gskcrypt32-8.x.x.x.linux.x86.rpm rpm -Uvh gskssl32-8.x.x.x.linux.x86.rpm
- Enter the following commands to install the gskit 64-bit packages:
rpm -Uvh gskcrypt64-8.x.x.x.linux.x86_64.rpm rpm -Uvh gskssl64-8.x.x.x.linux.x86_64.rpm
- Install the TSM packages in this order:
rpm -ivh TIVsm-API.i386.rpm rpm -ivh TIVsm-API64.rpm rpm -ivh TIVsm-BA.rpm
- If you are upgrading TSM from a previous version, run the
following command to start the Client Acceptor Daemon:
/usr/bin/dsmcad &
- Confirm that dsmcad started. If not, check
dsmwebcl.log
for errors:ps -ef | grep dsmcad
- This completes the upgrade process.
For a new install of TSM, continue with the following:
- Change to the TSM client directory:
cd /opt/tivoli/tsm/client/ba/bin
- Copy the sample client system options file to create a working
version:
cp -p ./dsm.sys.smp dsm.sys
- Configure the client system options file, using the following
example as a reference. See the notes below for important information.
Servername
tsmXX01
Nodenameyourservername
DomainALL-LOCAL
Inclexcl/etc/adsm.inclexcl
Schedlogname/opt/adsm/dsmsched.log
Schedlogretention15 D
Errorlogname/opt/adsm/dsmerror.log
Errorlogretention15 D
CommmethodTCPIP
Passwordaccessgenerate
Passworddir/etc/security/adsm
TCPPort1500
TCPServeraddressXXXXXXX.XXXX.XXXX.EDU
Managedservicesschedule
Notes:
- For the Servername option, use the TSM Server name given to you by
the TSM admin, i.e.,
TSMBL01
orTSMIN01
. - For the Nodename option, use your server's name, but omit the domain portion of its FQDN.
- The Domain option specifies the file systems you want to include
in the backup.
ALL-LOCAL
includes all local file systems. Exclude a file system (e.g.,/home
) as follows:Domain ALL-LOCAL -/home
- The include/exclude statements in
/etc/adsm.inclexcl
fine-tune your backup. For best backup speed, exclude files that you would never restore. - For an explanation of include/exclude options, go to the IBM Tivoli Storage Manager V6.2 documentation, search for "exclude options", and then click .
- For the TCPserveraddress option, use the TCPName of the TSM server
given to you by the TSM admin, i.e.,
TSMBL01.UITS.INDIANA.EDU
orTSMIN01.UITS.IUPUI.EDU
.
- For the Servername option, use the TSM Server name given to you by
the TSM admin, i.e.,
- Create the client user options file from the template:
#cp -p dsm.opt.smp dsm.opt
- Set permissions on
dsm.opt
:chmod 644 dsm.opt
- Configure the client user options file as below. Use the same
Servername as in
dsm.sys
.Servername
tsmxx01
Subdir Yes - Create the file to hold the encrypted client password:
mkdir /etc/security/adsm
- Edit
/root/.bash_profile
to add these lines:export DSM_DIR=/opt/tivoli/tsm/client/ba/bin export DSM_LOG=/opt/tivoli/tsm/client/ba/bin export LANG=en_US export LC_CTYPE=en_US
- Your server initiates contacts with the TSM server through port
1500. Enable communications through your server's local firewall and
the tcpserveraddress in
dsm.sys
. - Add this line to
/etc/inittab
to start dsmcad when your server reboots:cad::once:/opt/tivoli/tsm/client/ba/bin/dsmcad >/dev/null 2>&1
- At a command line, start dsmcad:
/usr/bin/dsmcad &
- Confirm dsmcad started. If not, check
dsmwebcl.log
for errors:ps -ef | grep dsmcad
- To request TSM backup services, see ARCHIVED: At IU, how do I request Tivoli Storage Manager backup services?
- When you receive a TSM password from the TSM administrator:
- At
/opt/tivoli/tsm/client/ba/bin
, typedsmc query schedule
to create the encrypted TSM password file for your server. - At the
Userid
prompt, press theEnter
key. - At the
Password
prompt, type your server's TSM client password, and press theEnter
key. - Contact the TSM admins at
sav-request@indiana.edu
if you have questions, or to tell them your server is ready for backups.
- At
- Obtain the SSL CA signed certificate from IUware ( >
). The certificate is the same regardless of the TSM
server your client backs up to. After you have downloaded the
certificate, copy it to the following directory:
/opt/tivoli/tsm/client/ba/bin
Set the permissions of the certificate so it is owned byroot.root
. If you normally permit non-root users the ability to restore their own data, you will need to grant them read access to thedsmcert
files by running the following command:chmod go+r dsmcert.*
- Note: You must provide an arbitrary password,
which will be used to encrypt the key database. The password is
automatically stored encrypted in the stash file sk
(
dsmcert.sth
). The stash file is used by the TSM client to retrieve the key database password. Use this password to complete the following steps:- For a 32-bit Unix/Linux platform, run these commands as root:
cd /opt/tivoli/tsm/client/ba/bin
gsk8capicmd -keydb -create -db dsmcert.kdb -pw password -stash
gsk8capicmd -cert -add -db dsmcert.kdb -pw password -label
"TSM server Comodo CA Trust" -file
ComodoAddTrustExternalCARoot.cer -format ascii -trust enable
TSM Server Comodo CA Trust
appears in thedsmcert.kdb
file by issuing the following command:gsk8capicmd -cert -list all -db dsmcert.kdb -stashed
Then, from the server command line, run the commanddsmc q se
to ensure you can successfully open a session with the TSM server. - For a 64-bit Unix/Linux platform, run these commands as root:
cd /opt/tivoli/tsm/client/ba/bin
gsk8capicmd_64 -keydb -create -db dsmcert.kdb -pw password -stash
gsk8capicmd_64 -cert -add -db dsmcert.kdb -label "TSM server Comodo CA Trust" -file ComodoAddTrustExternalCARoot.cer -stashed -format ascii -trust enable
TSM Server Comodo CA Trust
appears in thedsmcert.kdb
file by issuing the following command:gsk8capicmd_64 -cert -list all -db dsmcert.kdb -stashed
Then, from the server command line, run the commanddsmc q se
to ensure you can successfully open a session with the TSM server.
- For a 32-bit Unix/Linux platform, run these commands as root:
- Edit
/opt/tivoli/tsm/client/ba/bin/dsm.sys
:- Add the following lines:
SSL YES SSLFIPSMODE YES
Note: For TSM clients running on TSM client versions 6.2.4 and below, or clients running on Mac OS, do not add theSSLFIPSMODE YES
option to yourdsm.opt
ordsm.sys
files. - Change
TCPPORT 1500
toTCPPORT 1542
.
- Add the following lines:
- Stop and start the TSM Client Acceptor daemon. If it won't start,
see
dsmwebcl.log
for error messages. - From a command line, run
dsmc q se
. The output should include a line that looks like "SSL Information.........: TLSv1.1 AES-256".
Note:
For more on TSM, see the TSM 6.4 Information Center. In the left pane, click .
This is document axrt in the Knowledge Base.
Last modified on 2018-01-18 15:53:57.