IBM Tivoli Storage Manager for Virtual Environments Version Data Protection for VMware Installation Guide IBM

Transcription

1 IBM Tioli Storage Manager for Virtual Enironments Version Data Protection for VMware Installation Guide IBM

2

3 IBM Tioli Storage Manager for Virtual Enironments Version Data Protection for VMware Installation Guide IBM

4 Note: Before you use this information and the product it supports, read the information in Notices on page 133. Sixth edition (June 2016) This edition applies to ersion 7, release 1, modification 6 of IBM Tioli Storage Manager for Virtual Enironments (product number 5725-A44) and to all subsequent releases and modifications until otherwise indicated in new editions. Copyright IBM Corporation 2011, US Goernment Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

5 Contents About this publication Who should read this publication Publications What's new in Version ii Chapter 1. Installing and upgrading Data Protection for VMware Installable components Data Protection for VMware Sphere GUI... 3 Data Protection for VMware Cloud GUI Tioli Storage Manager recoery agent IBM Data Protection extension Data Protection for VMware command-line interface Tioli Storage Manager file restore interface.. 10 Data moer feature Planning to install Data Protection for VMware.. 11 Installation roadmap Installation scenarios System requirements Required installation permissions Required communication ports VMware Center Serer user priilege requirements Data Protection for VMware GUI registration keys Installing the Data Protection for VMware components Obtaining the Data Protection for VMware installation package Installing the Data Protection for VMware components by using the installation wizard.. 24 Installing the Data Protection for VMware components in silent mode Taking the first steps after you install Data Protection for VMware Upgrading Data Protection for VMware Upgrading Data Protection for VMware Upgrading Data Protection for VMware from Tioli Storage FlashCopy Manager for VMware. 44 Upgrading Data Protection for VMware from Tioli Storage FlashCopy Manager for VMware and Data Protection for VMware Upgrading Data Protection for VMware on a Windows 32-bit system in silent mode Upgrading Data Protection for VMware on a Windows 64-bit system in silent mode Upgrading Data Protection for VMware on a Linux system in silent mode Upgrading the data moer nodes on the Storage Backup Serer Uninstalling Data Protection for VMware Uninstalling Data Protection for VMware on Windows Uninstalling the data moer on Windows Uninstalling Data Protection for VMware with the Windows Installer Uninstalling Data Protection for VMware for a Windows 32-bit system in silent mode Uninstalling Data Protection for VMware for Windows 64-bit system in silent mode Uninstalling Data Protection for VMware a Linux system Chapter 2. Configuring Data Protection for VMware Configuring a new installation with the wizard.. 57 Using the notebook to edit an existing installation 58 Enabling the enironment for file restore operations 59 Setting up file restore operations on Linux Modifying options for file restore operations File restore options Configuring log actiity for file restore operations 63 File restore log actiity options Configuring a data moer node for tagging support 64 Configuring your enironment for full irtual machine instant restore operations Configuring the iscsi software on the ESXi host Installing and configuring applications on the data moer Setting the Recoery Agent connection Configuring a dedicated iscsi network for the ESXi host and data moer Setting up communication with Transport Layer Security Using a third-party certificate Enabling secure communication with the Tioli Storage Manager serer VMware Center Serer user priilege requirements 75 Data Protection for VMware Sphere GUI user roles 78 Data Protection for VMware GUI registration keys 81 Configuring the Tioli Storage Manager recoery agent GUI Locale settings Log file actiity Starting and running serices for Data Protection for VMware Appendix A. Adanced configuration tasks Setting up the Tioli Storage Manager nodes in a Sphere enironment Setting up the data moer nodes in a Sphere enironment Setting up the data moer nodes in a Cloud enironment Configuring the Data Protection for VMware command-line interface in a Sphere enironment. 101 Copyright IBM Corp. 2011, 2016 iii

6 Sphere enironment command-line interface configuration checklist Tape configuration guidelines Manually configuring an iscsi deice on a Linux system Manually configuring an iscsi deice on a Windows system Manually configuring the mount proxy nodes on a Linux system Manually configuring the mount proxy nodes on a remote Windows system Manually configuring multiple client acceptor serices on a Linux system Modifying the VMCLI configuration file Roadmap for implementing an integration solution 128 Appendix D. Accessibility features for the Tioli Storage Manager product family Notices Glossary Index Appendix B. Migrating to an incremental foreer backup strategy. 123 Appendix C. Integrating with Tioli Storage FlashCopy Manager for VMware Comparing solutions i IBM Tioli Storage Manager for Virtual Enironments: Data Protection for VMware Installation Guide

7 About this publication IBM Tioli Storage Manager for Virtual Enironments proides off-host block-leel incremental backup and file recoery and instant restore from a full-vm backup for Windows and Linux guest machines. Block leel incremental backups are aailable when you use IBM Tioli Storage Manager for Virtual Enironments with the Tioli Storage Manager backup-archie client. In addition, protection of Apps and Organization VDCs in a Cloud Director enironment is also aailable. Who should read this publication This publication is intended for users and administrators who want to install and configure IBM Tioli Storage Manager for Virtual Enironments. Oeriew information, user tasks, backup and restore scenarios, command reference, and error messages are documented in the IBM Tioli Storage Manager for Virtual Enironments: Data Protection for VMware User's Guide. Publications The Tioli Storage Manager product family includes IBM Tioli Storage FlashCopy Manager, IBM Tioli Storage Manager for Space Management, IBM Tioli Storage Manager for Databases, and seeral other storage management products from IBM. To iew IBM product documentation, see IBM Knowledge Center. Copyright IBM Corp. 2011, 2016

8 i IBM Tioli Storage Manager for Virtual Enironments: Data Protection for VMware Installation Guide

9 What's new in Version Data Protection for VMwareVersion introduces new features and updates. For a list of new features and updates in this release and preious Version 7 releases, see Data Protection for VMware updates. New and changed information in this product documentation is indicated by a ertical bar () to the left of the change. Copyright IBM Corp. 2011, 2016 ii

10 iii IBM Tioli Storage Manager for Virtual Enironments: Data Protection for VMware Installation Guide

11 Chapter 1. Installing and upgrading Data Protection for VMware Installable components Installation of Data Protection for VMware includes planning, installation, and initial configuration. Data Protection for VMware includes seeral components that you can install to protect your irtual enironment. Depending on the operating system enironment, the following Data Protection for VMware features are aailable for installation: Restriction: Each installation package presents you with a user licensing file (EULA). If you do not accept the file, the installation process stops. Table 1. Aailable Data Protection for VMware features by operating system Component Linux Windows Tioli Storage Manager recoery agent ' ' This component proides irtual mount and instant restore capabilities. Recoery agent command-line interface The command-line interface used for mount operations. Documents Documents include the readme and notices files. Data Protection for VMware enablement file This component enables Tioli Storage Manager to run the following backup types: Periodic incremental VM backup. Full VM incremental-foreer backup. Incremental-foreer-incremental VM backup. This component is required for application protection. If you offload backup workloads, this file must be installed on the Storage Backup Serer. ' ' ' ' ' Copyright IBM Corp. 2011,

12 Table 1. Aailable Data Protection for VMware features by operating system (continued) Component Linux Windows Data Protection for VMware Sphere GUI ' ' This component is a graphical user interface (GUI) that accesses VM data on the VMware Center Serer. The content of the GUI is aailable in three iews: A web browser iew. This iew is accessed in a supported web browser by using the URL for the GUI web serer host. For example: A plug-in iew that integrates with the VMware Sphere Client. This plug-in is accessed as a Center Serer extension in the Solutions and Applications panel of your Center Serer System. The panels and functionality of this iew are the same as offered in the browser iew. Tip: The plug-in iew is not supported in a VMware Sphere 6 enironment. The IBM Data Protection extension iew in the VMware Sphere Web Client. This panels in this iew are uniquely designed to integrate within the web client, but data and commands for this iew are obtained from the same GUI web serer as the other iews. The IBM Data Protection extension proides a subset of the functions that are aailable in the web browser and plug-in iews and some additional functions. Configuration and adanced reporting functions are not offered in this iew. You can specify one or more iews during installation. Data Protection for VMware Cloud GUI When you run the Tioli Storage Manager for Virtual Enironments installation wizard, you must select one of the following enironment protection options: Sphere Protection or Cloud Protection. If you select Cloud Protection, the Data Protection for VMware Cloud GUI is installed. This component is a web-based GUI that protects and manages Apps. It also organizes DCs in a Cloud Director enironment. This component also includes the Data Protection for VMware command-line interface. File restore GUI This component is a web-based GUI that enables you to restore files from a VMware irtual machine backup without administrator assistance. The GUI is installed automatically when the Data Protection for VMware GUI is installed. It is enabled through the configuration wizard. ' 1 ' ' 2 IBM Tioli Storage Manager for Virtual Enironments: Data Protection for VMware Installation Guide

13 Table 1. Aailable Data Protection for VMware features by operating system (continued) Component Linux Windows Data moer The Tioli Storage Manager backup-archie client moes data for Data Protection for VMware. This functionality is referred to as the data moer. The data moer moes data from the irtual enironment to the Tioli Storage Manager serer. When you install the data moer on a serer, the serer can be used as a Storage backup serer. You can install the data moer on the same system as Data Protection for VMware or on another serer. ' ' 1. Although the file restore interface component must be installed and enabled on a Windows system, you can use this interface to restore files on both Windows and Linux guest irtual machines. Data Protection for VMware offloads the backup workload from VMs to a Storage backup serer. To accomplish this task, the backup-archie client V7.1.6 must be installed on the Storage Backup Serer. Data Protection for VMware Sphere GUI The Data Protection for VMware Sphere GUI (Sphere GUI) component is a graphical user interface that accesses VM data on the VMware Center Serer. Oeriew The Data Protection for VMware Sphere GUI is the primary interface from which to complete the following tasks: Initiate or schedule backups of your VMs to a Tioli Storage Manager serer. Initiate a full recoery of your VMs from a Tioli Storage Manager serer. Issue reports about the progress of your tasks, the most recent eents that completed, backup status, and space usage. This information can help you troubleshoot errors that occurred in backup processing. Tip: Information about how to complete tasks with the Sphere GUI is proided in the online help that is installed with the GUI. Click Learn More in any of the GUI windows to open the online help for task assistance. Chapter 1. Installing and upgrading Data Protection for VMware 3

14 IBM Data Protection extension (in VMware Sphere Web Client) Sphere client Data Protection for VMware Sphere GUI plug-in Tioli Storage Manager file restore interface Center Serer Storage API (VADP) Proxy Data Protection for VMware Sphere GUI Data Protection for VMware CLI Web browser Guest machines Host machines (ESX, ESXi) Data moer (Tioli Storage Manager backup-archie client) Tioli Storage Manager Recoery Agent Tioli Storage Manager API Tioli Storage Manager serer VMFS SAN VMDK NAS/local Storage backup serer Datastore Datastore Datastore Figure 1. Data Protection for VMware system components in a VMware Sphere user enironment Requirements The Data Protection for VMware Sphere GUI can be installed on any system that meets the operating system prerequisites. The Sphere GUI resource requirements are minimal as it does not process I/O data transfers. Tip: Installing the Sphere GUI on the Storage Backup Serer is the most common configuration. The Sphere GUI must hae network connectiity to the following systems: Storage Backup Serer Tioli Storage Manager serer Center Serer Storage hierarchy 4 IBM Tioli Storage Manager for Virtual Enironments: Data Protection for VMware Installation Guide

15 In addition, ports for the Derby database (default 1527) and GUI web serer (default 9081) must be aailable. Configuration You can register multiple Sphere GUIs to a single Center Serer. This scenario reduces the number of datacenters (and their VM guest backups) that are managed by a single VMware Sphere GUI. Each plug-in can then manage a subset of the total number of datacenters that are defined on the Center Serer. For each plug-in that is registered to the Center Serer, one Data Protection for VMware package must be installed on a separate host. To update the managed datacenters, go to Configuration > Edit Configuration. In the Plug-in Domain page, reduce the list of datacenters that are managed by the plug-in. Managing a subset of all aailable datacenters reduces the query and processing time that is required by the plug-in to complete operations. When you register multiple Sphere GUIs to a single Center Serer, the following guidelines apply: Each datacenter can be managed by only one installed Sphere GUI. A unique VMCLI node name is required for each installed Sphere GUI. Using unique data moer node names for each installed Sphere GUI simplifies managing the nodes. Accessing the Sphere GUI The Sphere GUI is accessed by the following methods: A plug-in that integrates with the VMware Sphere Client. This plug-in is accessed as a Center Serer extension in the Solutions and Applications panel of your Center Serer system. A stand-alone web browser GUI. This GUI is accessed through a URL bookmark to the GUI web serer, for example: where: hostname is the name of the system where the Data Protection for VMware Sphere GUI is installed port is the port number where the Sphere GUI is accessible through. The default port number is A Sphere Web Client extension that connects to a GUI web serer to access irtual machines in IBM storage (referred to as the data protection extension). The content is a subset of what is proided in the plug-in and web browser GUI. You can specify one or more access methods during installation. Windows The default installation directory is C:\IBM\tioli\tsm\tdpmware\ webserer. Linux The default installation directory is /opt/tioli/tsm/tdpmware/common/ webserer. Chapter 1. Installing and upgrading Data Protection for VMware 5

16 Data Protection for VMware Cloud GUI The Data Protection for VMware Cloud GUI (Cloud GUI) component is a graphical user interface that protects Apps and organization DCs in a Cloud Director enironment. Oeriew The Data Protection for VMware Cloud GUI is the primary interface from which to complete the following tasks: Initiate or schedule incremental foreer backups of specific Apps, or Apps that are contained in an organization DC to the Tioli Storage Manager serer storage. Restore single or multiple Apps. Generate reports to display progress information about tasks and space-usage information about backups. Display information about the progress of tasks, the most recent eents that completed, the backup status of Apps, and space usage. This information can help you troubleshoot errors that occurred in backup processing. Tip: Information about how to complete tasks with the Cloud GUI is proided in the online help that is installed with the GUI. Click Learn More in any of the GUI windows to open the online help for task assistance. 6 IBM Tioli Storage Manager for Virtual Enironments: Data Protection for VMware Installation Guide

17 Data Protection for VMware Cloud GUI Data Protection for VMware CLI GUI web serer Derby Database Tioli Storage Manager serer Cloud Apps Serice VMs DB2 database Sphere VMs Cloud Connector Cloud Data moer (Tioli Storage Manager backup-archie client) Data Protection for VMware Recoery Agent Shield Physical resources Center Storage hierarchy Network DataStores ESXi serers Data moer (Tioli Storage Manager backup-archie client) Data Protection for VMware Recoery Agent Figure 2. Data Protection for VMware system components in a VMware Cloud Director user enironment Accessing the Cloud GUI The Cloud GUI is accessed through a web browser by using the following URL: where: hostname is the name of the system where the Data Protection for VMware Cloud GUI is installed port is the port number where the Cloud GUI is accessible through. The default port number is Windows The default installation directory is C:\IBM\tioli\tsm\tdpmware\ webserer. Linux The default installation directory is /opt/tioli/tsm/tdpmware/common/ webserer. Chapter 1. Installing and upgrading Data Protection for VMware 7

18 Tioli Storage Manager recoery agent Use the recoery agent serice to mount any snapshot olume from the Tioli Storage Manager serer. Oeriew You can iew snapshots locally, with read-only access, on the client system, or use an iscsi protocol to access a snapshot from a remote system. In addition, the recoery agent proides both the instant restore function and protection for in-guest applications. Instant restore enables the olume that is in use to remain aailable while the restore operation proceeds in the background. Application protection enables applications that are installed in a guest irtual machine, such as Microsoft Exchange Serer and Microsoft SQL Serer, to be aailable for backup and restore protection. Important: When you install the recoery agent for the instant restore function, you must also select the deice drier for installation. It is not selected by default. Choosing this option requires a system reboot. The deice drier is not required for application protection. The recoery agent can complete the following tasks from a remote system: Gather information about the data that can be restored, for example: Backed-up VMs. Snapshots aailable for a backed-up irtual machine. Partitions aailable in a specific snapshot. Mount a snapshot as a irtual deice. Proide a list of irtual deices. Remoe a irtual deice. Requirements Windows On Windows systems, you can install the recoery agent GUI, command-line interface, and deice drier. Linux On Linux systems, you can install the recoery agent GUI and deice drier. The command-line interface is not aailable. Accessing the recoery agent Windows You can access the recoery agent from the Start menu: Start > Tioli Storage Manager > Tioli Storage Manager for Virtual Enironments > Tioli Storage Manager recoery agent Windows Alternatiely, you can access the GUI and command-line interface from a command prompt: install_dir\tsm\recoeryagent\mount\recoeryagent.exe -notserice install_dir\tsm\recoeryagent\shell\recoeryagentshell.exe where install_dir is the installation directory. The default is C:\Program Files\Tioli. On Windows 64-bit systems, use Program Files (x86). 8 IBM Tioli Storage Manager for Virtual Enironments: Data Protection for VMware Installation Guide

19 Linux To start the recoery agent, issue the following commands from a command line as root user: cd /opt/tioli/tsm/tdpmware/mount./tdpvmwaremountrestore.sh IBM Data Protection extension The IBM Data Protection extension is a VMware Sphere Web Client extension that proides a iew of the Data Protection for VMware Sphere GUI. Oeriew The IBM Data Protection extension proides a subset of the functions that are aailable in the browser and plug-in iews for the Data Protection for VMware Sphere GUI and some additional functions. Requirement To install the IBM Data Protection extension, you must select the following options when you run the Tioli Storage Manager for Virtual Enironments installation wizard. On the Enironment Protection page of the installation wizard, click Sphere protection. On the GUI information for Sphere protection page, select Enable access to the GUI by a web browser and Register as an Extension in Sphere Web Client. Accessing the data protection extension You can access the extension from the Sphere Web Client. Data Protection for VMware command-line interface The Data Protection for VMware CLI is a full-function command-line interface that is installed with the Data Protection for VMware Sphere GUI. Oeriew You can use the Data Protection for VMware CLI to complete the following tasks: Initiate or schedule backups of your VMs to a Tioli Storage Manager serer. Initiate a full recoery of your VMs, VM files, or VM Disks (VMDKs) from a Tioli Storage Manager serer. View configuration information about the backup database and enironment. Although the Data Protection for VMware Sphere GUI is the primary task interface, the Data Protection for VMware CLI proides a useful secondary interface. For example, the Data Protection for VMware CLI can be used to implement a scheduling mechanism that is different from the one that is implemented by the Data Protection for VMware Sphere GUI. Also, the Data Protection for VMware CLI is useful when you ealuate automation results with scripts. Chapter 1. Installing and upgrading Data Protection for VMware 9

20 Accessing the Data Protection for VMware command-line interface You can access the Data Protection for VMware CLI from a command line. Tioli Storage Manager file restore interface You can restore indiidual files from a VMware irtual machine backup. Oeriew The file restore interface is a web-based interface where you can restore indiidual files from a VM backup. The adantage of this interface is that file, software, and platform owners can restore their own files without prior knowledge of Tioli Storage Manager backup and restore operations. The file restore interface feature is installed when you select the option to protect your data in a Sphere enironment. In the Data Protection for VMware configuration wizard, you must enable the file restore feature for the interface to be aailable. Accessing the Tioli Storage Manager file restore interface To access the file restore interface, open a web browser and enter the URL proided by your administrator. For example: where hostname is the host name of the system where the Data Protection for VMware Sphere GUI is installed. Data moer feature The data moer is a specific backup-archie client node that "moes" data from one system to another. Oeriew In the typical VMware enironment, the data moer node is used to sae irtual machine backups to a data center node. For more information about the data moer, including information about enironments with multiple data moers, see How Tioli Storage Manager nodes are used in a irtual enironment. Accessing the data moer configuration files You can configure the data moer from the Data Protection for VMware Sphere GUI or Data Protection for VMware Cloud GUI. Windows baclient. The default installation directory is C:\Program Files\Tioli\TSM\ Linux The default installation directory is /opt/tioli/tsm/client/ba/bin. 10 IBM Tioli Storage Manager for Virtual Enironments: Data Protection for VMware Installation Guide

21 Planning to install Data Protection for VMware Data Protection for VMware eliminates the impact of running backups on a VM by offloading backup workloads from a VMware ESX or ESXi-based host to a Storage Backup serer. Data Protection for VMware works with the backup-archie client (installed on the Storage Backup serer) to complete full and incremental backups of VMs. The client node that is installed on the Storage Backup serer is called the data moer node. This node "moes" the data to the Tioli Storage Manager serer for storage, and for VM image-leel restore at a later time. Instant restore is aailable at the disk olume leel and full VM leel. In addition, protection of Apps and organization DCs in a Cloud Director enironment is also aailable. Tip: The backup-archie client is a separately licensed component that contains its own user interfaces and documentation. Familiarity with this product and its documentation is necessary in order to adequately integrate a comprehensie plan for protecting your VMs with Data Protection for VMware. Data Protection for VMware for Windows 64-bit includes the data moer feature (backup-archie client). Installation roadmap The following table identifies the steps to complete a successful installation process. Table 2. Installation tasks for new or existing Data Protection for VMware customers Step Task Get started here Check system requirements. Check user permission requirements. Check aailability of required communication ports. Install Data Protection for VMware: Installing Data Protection for VMware by using the installation wizard Installing the Data Protection for VMware components in silent mode on page 29 Upgrade Data Protection for VMware: Upgrade Data Protection for VMware Make sure the system on which Data Protection for VMware is to be installed meets the system requirements. Aoid potential installation errors or delays by using the required user permission leels. Preent installation failure or delays by opening the required communication ports before you attempt to install Data Protection for VMware. Each installation package presents you with a user licensing file (EULA). If you do not accept the file, the installation ends. Chapter 1. Installing and upgrading Data Protection for VMware 11

22 Table 2. Installation tasks for new or existing Data Protection for VMware customers (continued) Step Task Get started here 5 Configuring a new installation with the wizard on page 57 If you are planning to upgrade Data Protection for VMware, depending on the components that are installed, more configuration tasks might be required. See Configure Data Protection for VMware for more details. Use the configuration wizard for an initial configuration. Depending on the features that are installed, more configuration tasks might be required as described in this section. Tip: To assist with planning the quantity of proxy hosts that are required for your specific Data Protection for VMware backup enironment, the following publication is aailable on the Tioli Storage Manager Wiki: Step by Step Guide To Storage Backup Serer (Proxy) Sizing This publication is aailable in the Tioli Storage Manager for Virtual Enironments product section. Installation scenarios Before you install Data Protection for VMware, choose the scenario that best meets the needs of your business. You can install Data Protection for VMware and the data moer by using the GUI or in silent mode: Installing the Data Protection for VMware components by using the installation wizard on page 24 Installing the Data Protection for VMware components in silent mode on page 29 For a list of features and components that are aailable by platform, see Installable components on page 1. Table 3. Installation scenarios Scenario Number Description Tasks that you must complete 1 Use this scenario for a new installation where you want to install Data Protection for VMware and the data moer (backup-archie client) on the same system. Windows You can use the Suite Installer in GUI or silent mode to install both software. Restriction: On Windows 32-bit systems, the only the recoery agent GUI and command line are aailable to install. Linux You can use the Data Protection for VMware and data moer stand-alone installers to install both software in GUI or silent mode. 12 IBM Tioli Storage Manager for Virtual Enironments: Data Protection for VMware Installation Guide

23 Table 3. Installation scenarios (continued) Scenario Number Description Tasks that you must complete 2 Use this scenario for a new installation where you want to install only Data Protection for VMware. Windows You can complete a custom installation by using the Suite Installer or you can use the stand-alone installer to install Data Protection for VMware in GUI or silent mode. Restriction: On Windows 32-bit systems, the only the recoery agent GUI and command line are aailable to install. Linux You must use the Data Protection for VMware stand-alone installer in GUI or silent mode to install Data Protection for VMware. 3 Use this scenario when you want to install only the data moer (backup-archie client) on a system. Windows You can complete a custom installation by using the Suite Installer or you can use the stand-alone installer to install the data moer in GUI or silent mode. Restriction: The data moer is not aailable on Windows 32-bit systems. Linux You must use the data moer stand-alone installer in GUI or silent mode to install the data moer. Tip: You can install the data moer on a different system than the system with Data Protection for VMware to free up resources. System requirements To implement Data Protection for VMware components, your system must meet appropriate system requirements. Software requirements Table 4. Software requirements for Data Protection for VMware. Component Minimal requirement Preferred Operating system Communication protocol Deice driers Other software Important: Details of the software and operating system requirements can change oer time. For current software requirements, see technote Hardware requirements Hardware requirements ary and depend on the following items: Number of protected serers Number of protected olumes Chapter 1. Installing and upgrading Data Protection for VMware 13

24 Data set sizes LAN and SAN connectiity Note: The Tioli Storage Manager recoery agent component does not support operations in a LAN-free enironment. The following table describes the hardware requirements that are needed to install Data Protection for VMware. Table 5. Hardware requirements for Data Protection for VMware. Component Minimal requirement Preferred System Memory Aailable hard disk IntelPentium D 3 GHz Dual Core processor or compatible 2 GB RAM, 2 GB irtual address space 200 MB for 'Documents and Settings' folder Not applicable Not applicable 2 GB NIC Card 1 NIC Mbps 1 NIC - 1 Gbps A Windows proxy host is required for Tioli Storage Manager recoery agent on Linux. This Windows proxy host must hae the Tioli Storage Manager recoery agent installed. Restriction: The following restrictions apply to VMware VMDKs that are inoled in a backup operation: For incremental foreer backup mode, each indiidual VMDK inoled in a backup operation cannot exceed 8 TB. If a VMDK exceeds 8 TB, the backup operation fails. To increase the size of the VMDK to be larger than the default 2 TB, specify the maximum size with the mmaxirtualdisks option. For more information, see Vmmaxirtualdisks. For periodic full backup mode, each indiidual VMDK inoled in a backup operation cannot exceed 2 TB. If a VMDK exceeds 2 TB, the backup operation fails. To preent a failure during either backup mode, you can skip processing the VMDK by specifying mskipmaxirtualdisks yes in the backup-archie client options file. For more information, see Vmskipmaxirtualdisks. File restore prerequisites Before you restore files with the Tioli Storage Manager file restore interface, ensure that your enironment meets the minimum prerequisites. To enable the file restore feature, Data Protection for VMware must be installed on a Windows system. VMware irtual machine prerequisites The following prerequisites apply to the VMware irtual machine that contains the files to be restored: Linux Windows VMware Tools must be installed on the irtual machine. Linux Windows The irtual machine must be running during the file restore operation. 14 IBM Tioli Storage Manager for Virtual Enironments: Data Protection for VMware Installation Guide

25 Windows The irtual machine must belong to the same Windows domain as the data moer system. Windows When a irtual machine is deleted from a Windows domain and then restored later, the irtual machine must rejoin the domain to ensure the domain trust relationship. Do not attempt a file restore from the irtual machine until the domain trust relationship is restored. Windows If the user does not own the file to be restored, the Microsoft Windows Restore Files and Directories priilege must be assigned to the user for that irtual machine. Linux Local user authentication is required for the irtual machine. Authentication is not aailable through Windows domain, Lightweight Directory Access Protocol (LDAP), Kerberos, or other network authentication methods. Linux On a Red Hat Enterprise Linux 6 operating system, the ChallengeResponseAuthentication option in the sshd daemon configuration file (/etc/ssh/sshd_config) must specify YES or be commented out. For example, either of the following statements are alid: ChallengeResponseAuthentication yes #ChallengeResponseAuthentication no Restart the sshd daemon after you modify this option. Data moer prerequisites The data moer system represents a specific backup-archie client that "moes data" from one system to another. Windows The data moer system must belong to the same Windows domain as the irtual machine that contains the files to be restored. Mount proxy prerequisites The mount proxy system represents the Linux or Windows proxy system that accesses the mounted irtual machine disks through an iscsi connection. This system enables the file systems on the mounted irtual machine disks to be accessible as restore points to the Tioli Storage Manager file restore interface. Linux Linux operating systems proide a daemon that actiates Logical Volume Manager (LVM) olume groups as these groups become aailable to the system. Set this daemon on the Linux mount proxy system so that LVM olume groups are not actiated as they become aailable to the system. For detailed information about how to set this daemon, see the appropriate Linux documentation. Linux Windows The Windows mount proxy system and Linux mount proxy system must be on the same subnet. Microsoft Windows domain account prerequisites The following prerequisites apply to Windows domain accounts: Chapter 1. Installing and upgrading Data Protection for VMware 15

26 Windows Windows domain administrator credentials are required to access the network share. An administrator enters these credentials in the Data Protection for VMware Sphere GUI configuration wizard or notebook to enable the enironment for file restore operations. Windows A file owner accesses the remote irtual machine (that contains the files to be restored) with Windows domain user credentials. These credentials are entered in the Tioli Storage Manager file restore interface during login. Domain user credentials erify that the file owner has permission to log in to the remote irtual machine and restore files into the remote irtual machine. These credentials do not require any special permissions. Windows If a file owner uses a Windows domain user account that limits access to specific computers (instead of access to all computers within the domain), ensure that the mount proxy system is included in the list of computers that are accessible to this domain user account. Otherwise, the file owner is unable to log in to the Tioli Storage Manager file restore interface. Tape media prerequisites File restore from tape media is supported. Howeer, recoery of indiidual files generates random read request patterns. As a result, processing might be slow when a sequential-access deice (such as tape media) is used. File restore from disk storage is the preferred method. Consider moing target irtual machine backup data from tape media to disk storage before you attempt a file restore operation. You can do moe data with the Tioli Storage Manager serer MOVE NODEDATA command. You can also run traditional full VM backups regularly. Required installation permissions Before you begin installation, ensure that your user ID contains the required permission leel. About this task Table 6. Users permissions required to install and configure Data Protection for VMware System Windows Linux Required permission Administrator Root Administrator priileges Center Serer Tioli Storage Manager serer Restriction: The serer must be started. The Center Serer role requires the following priileges: Extension > Register extension, Unregister extension, Update extension This new role must be applied to the Center object in the VMware Center Serer hierarchy for the user ID that is specified during installation. Administratie access (System or Unrestricted Policy Domain priilege) 16 IBM Tioli Storage Manager for Virtual Enironments: Data Protection for VMware Installation Guide

27 Required communication ports View a list of communication ports that are required to be open in the firewall when you install Data Protection for VMware. The ports that are identified in the table reflect a typical installation. A typical installation consists of the following components on the same Windows system: Data Protection for VMware GUI serer Storage backup serer (data moer) Windows mount proxy Tioli Storage Manager file restore interface If a non-typical installation is used, more ports might be required. Restriction: The Windows mount proxy and Linux mount proxy must be on the same subnet. Table 7. Required communication ports. This table identifies the ports that are accessed by Data Protection for VMware. TCP Port Initiator: Out-Bound (From Host) Target: In-Bound (To Host) 443 Storage Backup Serer Center Serer (secure HTTP) 443 Data Protection for VMware Sphere GUI Serer Center Serer 443 This setting is required only when the data moer is a Linux system (tcpport) Windows mount proxy Center Serer Storage Backup Serer (proxy) Storage Backup Serer (proxy) Center Serer ESXi hosts ESXi hosts (all protected hosts) Tioli Storage Manager serer Chapter 1. Installing and upgrading Data Protection for VMware 17

28 Table 7. Required communication ports (continued). This table identifies the ports that are accessed by Data Protection for VMware. TCP Port Initiator: Out-Bound (From Host) Target: In-Bound (To Host) 1500 (tcpadminport) 1527 Data Protection for VMware Sphere GUI Serer 1500 (tcpadminport) is non-ssl communication For SSL communication, tcpadminport is the only port that supports SSL communication with the Tioli Storage Manager serer. The correct port number to use for the SSL protocol is typically the alue that is specified by the ssltcpadminport option in the Tioli Storage Manager serer dsmser.opt file. Howeer, if adminonclient no is specified in the dsmser.opt file, then the correct port number to use for the SSL protocol is the alue that is specified by the ssltcpadminport option. The ssltcpadminport option does not hae a default alue. Therefore, the alue must be specified by the user. Tioli Storage Manager serer Internal Derby database (httpport) 1581 (httpport) Tioli Storage Manager serer Data Protection for VMware Sphere GUI serer Storage Backup Serer Backup-archie client scheduler Web client Client Acceptor Daemon Storage Backup Serer 1582, 1583 (webports) 9080 Sphere Client Data Protection for VMware Sphere GUI Serer (HTTP port for access to Center as plug-in) 9081 GUI web serer (HTTPS protocol) 22 SSH default port for the recoery agent Sphere Client Recoery agent 3260 Linux Data Protection for VMware file restore Data Protection for VMware Sphere GUI Serer (secure HTTPS port for access to Center through web browser) Data Protection for VMware Windows "mount" host SSH for Linux recoery agent Data Protection for VMware Windows "mount" host iscsi 18 IBM Tioli Storage Manager for Virtual Enironments: Data Protection for VMware Installation Guide

29 Table 7. Required communication ports (continued). This table identifies the ports that are accessed by Data Protection for VMware. TCP Port Initiator: Out-Bound (From Host) Target: In-Bound (To Host) 3260 iscsi default port for the recoery agent Windows target with Dynamic disk for file restore Data Protection for VMware Windows "mount" host iscsi 135 Windows mount proxy VMware irtual machine that contains the files to be restored with the Tioli Storage Manager file restore interface VMware Center Serer user priilege requirements Certain VMware Center Serer priileges are required to run Data Protection for VMware operations. Center Serer priileges required to install the Sphere Client plug-in or IBM Data Protection extension iew for the Data Protection for VMware Sphere GUI To install the Sphere Client plug-in or IBM Data Protection extension iew for the Data Protection for VMware Sphere GUI, the Sphere user requires the Extension > Register extension, Unregister extension, Update extension priileges. From the VMware Sphere client, you can create a role and add to the role the extension set of associated priileges. You must then assign this role to the Center object in the VMware Center Serer hierarchy for the user ID that you plan to use during the installation process. You must enter this user ID when prompted for the Center user name on the following pages of the Tioli Storage Manager for Virtual Enironments installation wizard: Sphere Client plug-in: Plug-in Registration Center page IBM Data Protection extension: Data Protection for VMware Sphere GUI information page Tip: Alternatiely, rather than creating a specific role for the installation, you can enter the administrator user name when prompted for the Center user name. Center Serer priileges required to protect VMware datacenters with the web-browser or Sphere Client plug-in iew for the Data Protection for VMware Sphere GUI The Center Serer user ID that signs on to the browser or plug-in iews for the Data Protection for VMware Sphere GUI must hae sufficient VMware priileges to iew content for a datacenter that is managed by the GUI. For example, a VMware Sphere enironment contains fie datacenters. A user, jenn, has sufficient priileges for only two of those datacenters. As a result, only those two datacenters where sufficient priileges exist are isible to jenn in the iews. The other three datacenters (where jenn does not hae priileges) are not isible to the user jenn. The VMware Center Serer defines a set of priileges collectiely as a role. A role is applied to an object for a specified user or group to create a priilege. From the VMware Sphere web client, you must create a role with a set of priileges. To Chapter 1. Installing and upgrading Data Protection for VMware 19

30 create a Center Serer role for backup and restore operations, use the VMware Sphere Client Add a Role function. You must assign this role to a user ID for a specified Center Serer or datacenter. If you want to propagate the priileges to all datacenters within the Center, specify the Center Serer and select the propagate to children check box. Otherwise, you can limit the permissions if you assign the role to the required datacenters only with the propagate to children check box selected. Enforcement for the browser and plug-in iew GUIs is at the datacenter leel. The following example shows how to control access to datacenters for two VMware user groups. First, create a role that contains all of the priileges defined in technote The set of priileges in this example are identified by the role named TDPVMwareManage. Group 1 requires access to manage irtual machines for the Primary1_DC and Primary2_DC datacenters. Group 2 requires access to manage irtual machines for the Secondary1_DC and Secondary2_DC datacenters. For Group 1, assign the TDPVMwareManage role to the Primary1_DC and Primary2_DC datacenters. For Group 2, assign the TDPVMwareManage role to the Secondary1_DC and Secondary2_DC datacenters. The users in each VMware user group can use the Data Protection for VMware GUI to manage irtual machines in their respectie datacenters only. Tip: When you create a role, consider adding extra priileges to the role that you might need later to complete other tasks on objects. Center Serer priileges required to use the data moer The Tioli Storage Manager backup-archie client that is installed on the Storage Backup serer (the data moer node) requires the VMCUser and VMCPw options. The VMCUser option specifies the user ID of the Center or ESX serer that you want to back up, restore, or query. The required priileges that are assigned to this user ID (VMCUser) ensure that the client can run operations on the irtual machine and the VMware enironment. This user ID must hae the VMware priileges that are described in technote To create a Center Serer role for backup and restore operations, use the VMware Sphere Client Add a Role function. You must select the propagate to children option when you add priileges for this user ID (VMCUser). In addition, consider adding other priileges to this role for tasks other than backup and restore. For the VMCUser option, enforcement is at the top-leel object. Center Serer priileges required to protect VMware datacenters with theibm Data Protection extension iew for the Data Protection for VMware Sphere GUI The IBM Data Protection extension requires a set of priileges that are separate from the priileges that are required to sign in to the GUI. During the installation the following custom priileges are created for the IBM Data Protection extension: Datacenter > IBM Data Protection Global > IBM Data Protection 20 IBM Tioli Storage Manager for Virtual Enironments: Data Protection for VMware Installation Guide

31 Custom priileges that are required for the IBM Data Protection extension are registered as a separate extension. The priileges extension key is com.ibm.tsm.tdpmware.ibmdataprotection.priileges. These priileges allow the VMware administrator to enable and disable access to IBM Data Protection extension content. Only users with these custom priileges on the required VMware object can access the IBM Data Protection extension content. One IBM Data Protection extension is registered for each Center Serer and is shared by all GUI hosts that are configured to support the Center Serer. From the VMware Sphere web client, you must create a role for users who can complete data protection functions for irtual machines by using the IBM Data Protection extension. For this role, in addition to the standard irtual machine administrator role priileges required by the web client, you must specify the Datacenter > IBM Data Protection priilege. For each datacenter, assign this role for each user or user group where you want to grant permission for the user to manage irtual machines. The Global > IBM Data Protection priilege is required for the user at the Center leel. This priilege allows the user to manage, edit, or clear the connection between the Center Serer and the Data Protection for VMware Sphere GUI web serer. Assign this priilege to administrators that are familiar with the Data Protection for VMware Sphere GUI that protects their respectie Center Serer. Manage your IBM Data Protection extension connections on the extension Connections page. The following example shows how to control access to datacenters for two user groups. Group 1 requires access to manage irtual machines for the NewYork _DC and Boston_DC datacenters. Group 2 requires access to manage irtual machines for the LosAngeles_DC and SanFranciso_DC datacenters. From the VMware Sphere client, create for example the IBMDataProtectManage role, assign the standard irtual machine administrator role priileges and also the Datacenter > IBM Data Protection priilege. For Group 1, assign the IBMDataProtectManage role to the NewYork _DC and Boston_DC datacenters. For Group 2, assign the IBMDataProtectManage role to the LosAngeles_DC and SanFranciso_DC datacenters. The users in each group can use the IBM Data Protection extension in the Sphere web client to manage irtual machines in their respectie datacenters only. Issues related to insufficient permissions When the web browser or Sphere Client plug-in iew user does not hae sufficient permissions for any datacenter, access to the iew is blocked. Instead, the error message GVM2013E is issued to adise that the user is not authorized to access any managed datacenters due to insufficient permissions. Other new messages are also aailable that inform users of issues that result from insufficient permissions. To resole any permissions-related issues, make sure that the user role is set up as described in the preious sections. The user role must hae all priileges that are identified in the Required priileges Center Serer user ID and data moer table, and these priileges must be applied at the datacenter leel with the propagate to children check box. Chapter 1. Installing and upgrading Data Protection for VMware 21