ARCHIVED: At IU, how do I install the TSM client software for Windows?
On this page:
- Downloading and installing the TSM Backup-Archive client
- Configuring TSM on your server
- Configuring SSL for encrypted file transfer
- Checking your installation and configuration
Note: To obtain Tivoli Storage Manager (TSM) backup services for your server, submit the backup request form. When your Department Account Manager approves the request, you will receive an email message from TSM administrators containing the TSM server you've been assigned to, its node name, and a password to complete the installation and configuration of the TSM backup client.
Downloading and installing the TSM Backup-Archive client
- Download the correct package for your version of Windows from IUware.
- Download the SSL CA signed certificate (InCommon External Root CA for TSM Servers) from IUware, which will be needed later during the configuration process.
- Find the
X.X.X.X-TIV-TSMBAC-WinX32/64.exe
application and run it. - Accept the default location setting (
c:\Program Files\Tivoli\TSM
) and click . - In the next window, ensure the default radio button is selected, and click .
- A new window will appear, letting you know the installation has completed successfully. Click , and you are ready to move on to configuration.
Configuring TSM on your server
- Navigate to , and open the GUI.
- From the top toolbar, select the tab, and choose from the submenu.
- Check the top box, , and click .
- Enter the node name provided to you by the TSM Administrators, and click .
- Keep the default selection, , and click .
- Enter either
TSMBL01.UITS.INDIANA.EDU
orTSMIN01.UITS.IUPUI.EDU
as the TSM server name, and keep the port number set to the default. Click . - If you want to exclude certain files that are not needed for normal system recovery, click , and then . To continue without selecting any files, click .
- To exclude certain file types from backups, click the extension(s) you want to skip, and then click . If you want to skip all file types, click and then .
- Leave the Backup Type set to . If you do not need to back up all file systems on your server, uncheck the box and choose the individual file systems from the "domain" box. Once you are done with your selection, click .
- Click
dsm.opt
file was created successfully, click . to accept the settings you entered. Once
you receive notification that the - Navigate to the
c:\Program Files\Tivoli\TSM\baclient
directory. - Locate your
dsm.opt
file, right-click it, and select . Paste the file to your desktop, and open it with Notepad. - Add the following options under the
DOMAIN
option of yourdsm.opt
file:SUBDIR YES MANAGEDSERVICES SCHEDULE PASSWORDACCESS GENERATE
Save the file changes to your desktop with a name of
dsm.opt
. Drag the modifieddsm.opt
file from your desktop to thec:\Program Files\Tivoli\TSM\baclient
directory. When prompted, click . - From the TSM Backup-Archive GUI, click the tab and select .
- Check and click . Another window will open; click again to continue.
- Ensure that the radio button is selected, and then click .
- Keep the default name for the TSM Scheduler service, and ensure is checked. Then click .
- Click to take the default name for the TSM Client Acceptor service.
- Leave the default path to the option file, and click .
- Take the default port number, 1581, for the web client, and click .
- Enter the node name and authentication password supplied to you by the TSM Administrators, ensure is checked, and then click .
- Ensure both and are selected, and click .
- Take the default paths for the Schedule Log and the Error Log files. Make sure is checked, and click .
- Make sure the radio button is selected, and click .
- Click and wait until the Scheduler Wizard has completed. Click , and you will be closed out of the TSM Backup-Archive GUI.
Configuring SSL for encrypted file transfer
- If you did not do so when downloading the TSM Backup-Archive
package, you will need to first obtain the SSL CA signed certificate
(InCommon External Root CA for TSM Servers) from IUware. The
certificate is the same regardless of the TSM server your client backs
up to. After you have downloaded the certificate, copy it to the
following directory:
C:\Program Files\Tivoli\TSM\baclient
Note: You must provide an arbitrary password, which will be used to encrypt the key database. The password is automatically stored encrypted in the stash file (dsmcert.sth
). The stash file is used by the Tivoli Storage Manager client to retrieve the key database password. Use this password to complete the following steps:- For a Windows 32-bit client, open a command-line
window and enter the following:
cd C:\Program Files\Tivoli\TSM\baclient\ set PATH=C:\Program Files\Common Files\Tivoli\TSM\api\gsk8\bin; C:\Program Files\Common Files\Tivoli\TSM\api\gsk8\lib;%PATH% gsk8capicmd -keydb -create -populate -db dsmcert.kdb -pw password -stash gsk8capicmd -cert -add -db dsmcert.kdb -label "TSM Server Comodo CA Trust" -file ComodoAddTrustExternalCARoot.cer -stashed -format ascii -trust enable
Confirm that TSM Server Comodo CA Trust appears in thedsmcert.kdb
file by issuing the following command:gsk8capicmd -cert -list all -db dsmcert.kdb -stashed
Then, from the command prompt, run the commanddsmc q se
to ensure you can successfully open a session with the TSM server. - For a Windows 64-bit client, open a command-line
window and enter the following:
cd \Program Files\Tivoli\TSM\baclient set PATH=C:\Program Files\Common Files\Tivoli\TSM\api64\gsk8\bin; C:\Program Files\Common Files\Tivoli\TSM\api64\gsk8\lib64;%PATH% gsk8capicmd_64 -keydb -create -populate -db dsmcert.kdb -pw password -stash gsk8capicmd_64 -cert -add -db dsmcert.kdb -label "TSM Server Comodo CA Trust" -file ComodoAddTrustExternalCARoot.cer -stashed -format ascii -trust enable
Confirm that TSM Server Comodo CA Trust appears in thedsmcert.kdb
file by issuing the following command:gsk8capicmd_64 -cert -list all -db dsmcert.kdb -stashed
Then, from the command prompt, run the commanddsmc q se
to ensure you can successfully open a session with the TSM server. - From a command-line window, issue the command
notepad C:\Program Files\Tivoli\TSM\baclient\dsm.opt
, and add the following lines:SSL YES SSLFIPSMODE YES
Note: For TSM clients running on TSM client versions 6.2.4 and below, do not add theSSLFIPSMODE YES
option to yourdsm.opt
ordsm.sys
files. ChangeTCPPORT 1500
toTCPPORT 1542
. - Stop and start the TSM Client Acceptor Service. If it won't start,
see
dsmwebcl.log
for error messages.
- For a Windows 32-bit client, open a command-line
window and enter the following:
Checking your installation and configuration
- Navigate to . Scroll down the "Services" window until you find the TSM Client Acceptor and TSM Client Scheduler services. The TSM Client Acceptor service should be started with a Startup Type of Automatic. The TSM Client Scheduler service should not be started and should have a Startup Type of Manual.
- Open your
dsm.opt
file again and ensure that the following options are included:NODENAME (The node name given to you by the TSM Admins) TCPSERVERADDRESS TSMBL01.UITS.INDIANA.EDU or TSMIN01.UITS.IUPUI.EDU DOMAIN \\(servername)\(drive letter to back up)$ SUBDIR YES MANAGEDSERVICES SCHEDULE PASSWORDACCESS GENERATE SSL YES SSLFIPSMODE YES TCPPORT 1542
Note: The
dsm.opt
file for your server may include more options than those listed above, but at the bare minimum your file should include the lines above for the TSM Client service to work properly on your server. - Open the TSM Backup-Archive Command Line, and at the
tsm>
prompt, enter the commandq se
. You should receive a response from TSM like the following:Server Name.............: TSMIN01 Server Type.............: Linux/x86_64 Archive Retain Protect..: "No" Server Version..........: Ver. 6, Rel. 3, Lev. 0.0 Last Access Date........: 03/22/2012 15:26:55 Delete Backup Files.....: "Yes" Delete Archive Files....: "Yes" D...........: "Server Only" Node Name...............: (Your Node Name) User Name...............: SSL Information.........: "TLSv1.1 AES-256"
- If you receive notice of a successful connection like the one shown above, reply to the original email message from the TSM Administrators, and let the administrators know that you are ready to have your server assigned to a backup schedule.
This is document axru in the Knowledge Base.
Last modified on 2018-01-18 16:04:06.