ARCHIVED: At IU, how do I install the TSM client software for Windows?

On this page:


Note: To obtain Tivoli Storage Manager (TSM) backup services for your server, submit the backup request form. When your Department Account Manager approves the request, you will receive an email message from TSM administrators containing the TSM server you've been assigned to, its node name, and a password to complete the installation and configuration of the TSM backup client.

Downloading and installing the TSM Backup-Archive client

  1. Download the correct package for your version of Windows from IUware.
  2. Download the SSL CA signed certificate (InCommon External Root CA for TSM Servers) from IUware, which will be needed later during the configuration process.
  3. Find the X.X.X.X-TIV-TSMBAC-WinX32/64.exe application and run it.
  4. Accept the default location setting (c:\Program Files\Tivoli\TSM) and click Next.
  5. In the next window, ensure the default radio button Typical is selected, and click Next.
  6. A new window will appear, letting you know the installation has completed successfully. Click Finish, and you are ready to move on to configuration.

Back to top

Configuring TSM on your server

  1. Navigate to Start > Programs > Tivoli Storage Manager > Backup Archive GUI, and open the GUI.
  2. From the top toolbar, select the Utilities tab, and choose Setup Wizard from the submenu.
  3. Check the top box, Help me configure the TSM Client Options File, and click Next.
  4. Enter the node name provided to you by the TSM Administrators, and click Next.
  5. Keep the default selection, TCP/IP, and click Next.
  6. Enter either TSMBL01.UITS.INDIANA.EDU or TSMIN01.UITS.IUPUI.EDU as the TSM server name, and keep the port number set to the default. Click Next.
  7. If you want to exclude certain files that are not needed for normal system recovery, click Select All, and then Next. To continue without selecting any files, click Next.
  8. To exclude certain file types from backups, click the extension(s) you want to skip, and then click Next. If you want to skip all file types, click Select All and then Next.
  9. Leave the Backup Type set to Incremental. If you do not need to back up all file systems on your server, uncheck the all local box and choose the individual file systems from the "domain" box. Once you are done with your selection, click Next.
  10. Click Apply to accept the settings you entered. Once you receive notification that the dsm.opt file was created successfully, click Finish.
  11. Navigate to the c:\Program Files\Tivoli\TSM\baclient directory.
  12. Locate your dsm.opt file, right-click it, and select Copy. Paste the file to your desktop, and open it with Notepad.
  13. Add the following options under the DOMAIN option of your dsm.opt file:
      SUBDIR YES
      MANAGEDSERVICES SCHEDULE
      PASSWORDACCESS GENERATE

    Save the file changes to your desktop with a name of dsm.opt. Drag the modified dsm.opt file from your desktop to the c:\Program Files\Tivoli\TSM\baclient directory. When prompted, click Move and Replace.

  14. From the TSM Backup-Archive GUI, click the Utilities tab and select Setup Wizard.
  15. Check Help me configure the TSM Client Scheduler and click Next. Another window will open; click Next again to continue.
  16. Ensure that the Install a new or additional scheduler radio button is selected, and then click Next.
  17. Keep the default name for the TSM Scheduler service, and ensure Use the Client Acceptor daemon (CAD) is checked. Then click Next.
  18. Click Next to take the default name for the TSM Client Acceptor service.
  19. Leave the default path to the option file, and click Next.
  20. Take the default port number, 1581, for the web client, and click Next.
  21. Enter the node name and authentication password supplied to you by the TSM Administrators, ensure Contact the TSM Server to validate password is checked, and then click Next.
  22. Ensure both System account and Automatically when Windows boots are selected, and click Next.
  23. Take the default paths for the Schedule Log and the Error Log files. Make sure Enable event logging is checked, and click Next.
  24. Make sure the Yes radio button is selected, and click Next.
  25. Click Apply and wait until the Scheduler Wizard has completed. Click Finish, and you will be closed out of the TSM Backup-Archive GUI.

Back to top

Configuring SSL for encrypted file transfer

  1. If you did not do so when downloading the TSM Backup-Archive package, you will need to first obtain the SSL CA signed certificate (InCommon External Root CA for TSM Servers) from IUware. The certificate is the same regardless of the TSM server your client backs up to. After you have downloaded the certificate, copy it to the following directory:
      C:\Program Files\Tivoli\TSM\baclient 
    Note: You must provide an arbitrary password, which will be used to encrypt the key database. The password is automatically stored encrypted in the stash file (dsmcert.sth). The stash file is used by the Tivoli Storage Manager client to retrieve the key database password. Use this password to complete the following steps:
    • For a Windows 32-bit client, open a command-line window and enter the following:
        cd C:\Program Files\Tivoli\TSM\baclient\ 
      
        set PATH=C:\Program Files\Common Files\Tivoli\TSM\api\gsk8\bin;
        C:\Program Files\Common Files\Tivoli\TSM\api\gsk8\lib;%PATH%
      
        gsk8capicmd -keydb -create -populate -db dsmcert.kdb -pw password
        -stash
      
        gsk8capicmd -cert -add -db dsmcert.kdb -label "TSM Server Comodo CA
        Trust" -file ComodoAddTrustExternalCARoot.cer -stashed -format ascii
        -trust enable
      Confirm that TSM Server Comodo CA Trust appears in the dsmcert.kdb file by issuing the following command:
        gsk8capicmd -cert -list all -db dsmcert.kdb -stashed 
      Then, from the command prompt, run the command dsmc q se to ensure you can successfully open a session with the TSM server.
    • For a Windows 64-bit client, open a command-line window and enter the following:
        cd \Program Files\Tivoli\TSM\baclient 
      
        set PATH=C:\Program Files\Common Files\Tivoli\TSM\api64\gsk8\bin;
        C:\Program Files\Common Files\Tivoli\TSM\api64\gsk8\lib64;%PATH% 
      
        gsk8capicmd_64 -keydb -create -populate -db dsmcert.kdb -pw password -stash 
      
        gsk8capicmd_64 -cert -add -db dsmcert.kdb -label "TSM Server Comodo
        CA Trust" -file ComodoAddTrustExternalCARoot.cer -stashed -format
        ascii -trust enable
      
      Confirm that TSM Server Comodo CA Trust appears in the dsmcert.kdb file by issuing the following command:
        gsk8capicmd_64 -cert -list all -db dsmcert.kdb -stashed
      
      Then, from the command prompt, run the command dsmc q se to ensure you can successfully open a session with the TSM server.
    • From a command-line window, issue the command notepad C:\Program Files\Tivoli\TSM\baclient\dsm.opt, and add the following lines:
        SSL YES 
        SSLFIPSMODE YES
      Note: For TSM clients running on TSM client versions 6.2.4 and below, do not add the SSLFIPSMODE YES option to your dsm.opt or dsm.sys files. Change TCPPORT 1500 to TCPPORT 1542.
    • Stop and start the TSM Client Acceptor Service. If it won't start, see dsmwebcl.log for error messages.

Back to top

Checking your installation and configuration

  1. Navigate to Start > Control Panel > Administrative Tools > Services. Scroll down the "Services" window until you find the TSM Client Acceptor and TSM Client Scheduler services. The TSM Client Acceptor service should be started with a Startup Type of Automatic. The TSM Client Scheduler service should not be started and should have a Startup Type of Manual.
  2. Open your dsm.opt file again and ensure that the following options are included:
    NODENAME         (The node name given to you by the TSM Admins)
    TCPSERVERADDRESS TSMBL01.UITS.INDIANA.EDU or TSMIN01.UITS.IUPUI.EDU
    DOMAIN \\(servername)\(drive letter to back up)$
    SUBDIR YES
    MANAGEDSERVICES SCHEDULE
    PASSWORDACCESS GENERATE
    SSL YES
    SSLFIPSMODE YES
    TCPPORT 1542

    Note: The dsm.opt file for your server may include more options than those listed above, but at the bare minimum your file should include the lines above for the TSM Client service to work properly on your server.

  3. Open the TSM Backup-Archive Command Line, and at the tsm> prompt, enter the command q se. You should receive a response from TSM like the following:
    Server Name.............: TSMIN01
    Server Type.............: Linux/x86_64
    Archive Retain Protect..: "No"
    Server Version..........: Ver. 6, Rel. 3, Lev. 0.0
    Last Access Date........: 03/22/2012 15:26:55
    Delete Backup Files.....: "Yes"
    Delete Archive Files....: "Yes"
    D...........: "Server Only"
    
    Node Name...............: (Your Node Name)
    User Name...............:
    SSL Information.........: "TLSv1.1 AES-256"
  4. If you receive notice of a successful connection like the one shown above, reply to the original email message from the TSM Administrators, and let the administrators know that you are ready to have your server assigned to a backup schedule.

Back to top

Note:
For more on TSM, see the TSM 6.4 Information Center. In the left pane, click IBM Tivoli Storage Manager backup-archive clients.

This is document axru in the Knowledge Base.
Last modified on 2016-12-13 10:57:28.

  • Fill out this form to submit your issue to the UITS Support Center.
  • Please note that you must be affiliated with Indiana University to receive support.
  • All fields are required.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.

  • Fill out this form to submit your comment to the IU Knowledge Base.
  • If you are affiliated with Indiana University and need help with a computing problem, please use the I need help with a computing problem section above, or contact your campus Support Center.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.