UITS

At IU, how do I install the TSM client software in Linux?

To install the Tivoli Storage Manager (TSM) client software in Linux:

  1. Select the appropriate TSM client package from IUware's Linux Utilities Software section.
  2. Read the associated README file, and then download the TSM client package.
  3. Log into your server as the root user.
  4. Move the TSM tarball to /usr/local/src, or another directory of your choice.
  5. Untar the client package as follows, replacing x.x.x.x with the version number of the client software:
      #tar -xvf ./x.x.x.x-TIV-TSMBAC-LinuxX86.tar
  6. If a previous version of TSM is installed, remove it before installing a new version:
      rpm -e TIVsm-BA
      rpm -e TIVsm-API64
      rpm -e TIVsm-API
  7. Enter the following command to install the gskit 32-bit packages:
      rpm -Uvh gskcrypt32-8.x.x.x.linux.x86.rpm
      rpm -Uvh gskssl32-8.x.x.x.linux.x86.rpm
  8. Enter the following commands to install the gskit 64-bit packages:
      rpm -Uvh gskcrypt64-8.x.x.x.linux.x86_64.rpm
      rpm -Uvh gskssl64-8.x.x.x.linux.x86_64.rpm
  9. Install the TSM packages in this order:
      rpm -ivh TIVsm-API.i386.rpm
      rpm -ivh TIVsm-API64.rpm
      rpm -ivh TIVsm-BA.rpm
  10. If you are upgrading TSM from a previous version, run the following command to start the Client Acceptor Daemon:
      /usr/bin/dsmcad &
  11. Confirm that dsmcad started. If not, check dsmwebcl.log for errors:
      ps -ef | grep dsmcad
  12. This completes the upgrade process.

For a new install of TSM, continue with the following:

  1. Change to the TSM client directory:
      cd /opt/tivoli/tsm/client/ba/bin
  2. Copy the sample client system options file to create a working version:
      cp -p ./dsm.sys.smp dsm.sys
  3. Configure the client system options file, using the following example as a reference. See the notes below for important information.
    Servername tsmXX01
    Nodename yourservername
    Domain ALL-LOCAL
    Inclexcl /etc/adsm.inclexcl
    Schedlogname /opt/adsm/dsmsched.log
    Schedlogretention 15 D
    Errorlogname /opt/adsm/dsmerror.log
    Errorlogretention 15 D
    Commmethod TCPIP
    Passwordaccess generate
    Passworddir /etc/security/adsm
    TCPPort 1500
    TCPServeraddress XXXXXXX.XXXX.XXXX.EDU
    Managedservices schedule

    Notes:

    • For the Servername option, use the TSM Server name given to you by the TSM admin, i.e., TSMBL01 or TSMIN01.
    • For the Nodename option, use your server's name, but omit the domain portion of its FQDN.
    • The Domain option specifies the file systems you want to include in the backup. ALL-LOCAL includes all local file systems. Exclude a file system (e.g., /home) as follows:
        Domain ALL-LOCAL -/home 
    • The include/exclude statements in /etc/adsm.inclexcl fine-tune your backup. For best backup speed, exclude files that you would never restore.
    • For an explanation of include/exclude options, go to the IBM Tivoli Storage Manager V6.2 documentation, search for "exclude options", and then click Include and exclude option processing.
    • For the TCPserveraddress option, use the TCPName of the TSM server given to you by the TSM admin, i.e., TSMBL01.UITS.INDIANA.EDU or TSMIN01.UITS.IUPUI.EDU.
  4. Create the client user options file from the template:
      #cp -p dsm.opt.smp dsm.opt
  5. Set permissions on dsm.opt:
      chmod 644 dsm.opt
  6. Configure the client user options file as below. Use the same Servername as in dsm.sys.
    Servername tsmxx01
    Subdir Yes
  7. Create the file to hold the encrypted client password:
      mkdir /etc/security/adsm
  8. Edit /root/.bash_profile to add these lines:
      export DSM_DIR=/opt/tivoli/tsm/client/ba/bin 
      export DSM_LOG=/opt/tivoli/tsm/client/ba/bin 
      export LANG=en_US  
      export LC_CTYPE=en_US 
  9. Your server initiates contacts with the TSM server through port 1500. Enable communications through your server's local firewall and the tcpserveraddress in dsm.sys.
  10. Add this line to /etc/inittab to start dsmcad when your server reboots:
      cad::once:/opt/tivoli/tsm/client/ba/bin/dsmcad >/dev/null 2>&1
  11. At a command line, start dsmcad:
      /usr/bin/dsmcad &
  12. Confirm dsmcad started. If not, check dsmwebcl.log for errors:
      ps -ef | grep dsmcad
  13. To request TSM backup services, see At IU, how do I request Tivoli Storage Manager backup services?
  14. When you receive a TSM password from the TSM administrator:
    1. At /opt/tivoli/tsm/client/ba/bin, type dsmc query schedule to create the encrypted TSM password file for your server.
    2. At the Userid prompt, press the Enter key.
    3. At the Password prompt, type your server's TSM client password, and press the Enter key.
    4. Contact the TSM admins at sav-request@indiana.edu if you have questions, or to tell them your server is ready for backups.
  15. Obtain the SSL CA signed certificate from IUware (Utilities > TSM). The certificate is the same regardless of the TSM server your client backs up to. After you have downloaded the certificate, copy it to the following directory:
      /opt/tivoli/tsm/client/ba/bin
    Set the permissions of the certificate so it is owned by root.root. If you normally permit non-root users the ability to restore their own data, you will need to grant them read access to the dsmcert files by running the following command:
      chmod go+r dsmcert.*
  16. Note: You must provide an arbitrary password, which will be used to encrypt the key database. The password is automatically stored encrypted in the stash file sk (dsmcert.sth). The stash file is used by the TSM client to retrieve the key database password. Use this password to complete the following steps:
    • For a 32-bit Unix/Linux platform, run these commands as root:
      1. cd /opt/tivoli/tsm/client/ba/bin
      2. gsk8capicmd -keydb -create -db dsmcert.kdb -pw password -stash
      3. gsk8capicmd -cert -add -db dsmcert.kdb -pw password -label
        "TSM server Comodo CA Trust" -file
        ComodoAddTrustExternalCARoot.cer -format ascii -trust enable
      Confirm that TSM Server Comodo CA Trust appears in the dsmcert.kdb file by issuing the following command:
        gsk8capicmd -cert -list all -db dsmcert.kdb -stashed
      Then, from the server command line, run the command dsmc q se to ensure you can successfully open a session with the TSM server.
    • For a 64-bit Unix/Linux platform, run these commands as root:
      1. cd /opt/tivoli/tsm/client/ba/bin
      2. gsk8capicmd_64 -keydb -create -db dsmcert.kdb -pw password -stash
      3. gsk8capicmd_64 -cert -add -db dsmcert.kdb -label "TSM server Comodo CA Trust" -file ComodoAddTrustExternalCARoot.cer -stashed -format ascii -trust enable
      Confirm that TSM Server Comodo CA Trust appears in the dsmcert.kdb file by issuing the following command:
        gsk8capicmd_64 -cert -list all -db dsmcert.kdb -stashed
      Then, from the server command line, run the command dsmc q se to ensure you can successfully open a session with the TSM server.
  17. Edit /opt/tivoli/tsm/client/ba/bin/dsm.sys:
    1. Add the following lines:
        SSL YES
        SSLFIPSMODE YES
      Note: For TSM clients running on TSM client versions 6.2.4 and below, or clients running on Mac OS, do not add the SSLFIPSMODE YES option to your dsm.opt or dsm.sys files.
    2. Change TCPPORT 1500 to TCPPORT 1542.
  18. Stop and start the TSM Client Acceptor daemon. If it won't start, see dsmwebcl.log for error messages.
  19. From a command line, run dsmc q se. The output should include a line that looks like "SSL Information.........: TLSv1.1 AES-256".

Note: For more on TSM, see the TSM 6.4 Information Center. In the left pane, click IBM Tivoli Storage Manager backup-archive clients.

This is document axrt in the Knowledge Base.
Last modified on 2015-03-05.

  • Fill out this form to submit your issue to the UITS Support Center.
  • Please note that you must be affiliated with Indiana University to receive support.
  • All fields are required.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.

  • Fill out this form to submit your comment to the IU Knowledge Base.
  • If you are affiliated with Indiana University and need help with a computing problem, please use the I need help with a computing problem section above, or contact your campus Support Center.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.