October 2017

By Roman Friedman

Implementation Guide

Install IBM Spectrum Protect 8.1 with Microsoft Windows Server 2016 on Hitachi NAS Platform 4060

FeedbackHitachi Vantara welcomes your feedback. Please share your thoughts by sending an email message to SolutionLab@hitachivantara.com. To assist the routing of this message, use the paper number in the subject and the title of this white paper in the text.

Revision History

Revision Changes Date

SL-009-00 Initial release October 27, 2017

Table of ContentsTested Solution Components 2

Solution Implementation 3

Storage Configuration 3

SAN Configuration 3

Network Configuration 3

IBM Spectrum Protect Network Configuration Diagram 3

Install the IBM Spectrum Protect Server 5

Views in IBM Spectrum Protect Operations Center 29

Use Command Line with IBM Spectrum Protect 30

Install the Client to a IBM Spectrum Protect Server 31

1

Install IBM Spectrum Protect 8.1 with Microsoft Windows Server 2016 on Hitachi NAS Platform 4060Implementation Guide

Use this implementation guide to install and configure IBM® Spectrum Protect® Server version 8.1 on Hitachi NAS Platform (HNAS) using the NDMP protocol for NAS storage. This is in a Microsoft® Windows Server® 2016 environment.

This document was written using IBM Spectrum Protect for Windows version 8.1 Installation Guide as a reference.

The procedures described here have been significantly changed since IBM Storage Manager release 7.x. Since it is a new major release, there are many new features.

IBM Spectrum Protect version 8.1 is the next generation of IBM Tivoli® Storage Manager.

Usability improvements in IBM Spectrum Protect v8.1 include updates to Operations Center, a web-based interface for managing your storage environment. Operations Center does the following:

Simplifies the configuration of cloud storage

Provides more options for storage pool conversion

Streamlines the process of authenticating users with a lightweight directory access protocol server

You can grow an IBM Spectrum Protect server to use a 6 TB database. Find the best practices for setting up a storage environment in the data protection solutions section of IBM Knowledge Center and the IBM Spectrum Protect Blueprints.

IBM Spectrum Protect v8.1 provides a more efficient method to move, and securely store, data in the cloud, on object storage and on scalable file systems. Acknowledging the continuing role of tape as a cost-effective backup storage medium, IBM Spectrum Protect v8.1 provides you with new options for moving data to tape and managing data on tape devices.

The intended audience for this implementation guide is anyone deploying this solution. You need to have a working knowledge of the configuration of Microsoft Windows Server, as well as a basic administrative knowledge of the target operating system.

Note — These procedures were developed in a lab environment. Many things affect production environments beyond prediction or duplication in a lab environment. Follow recommended practice by conducting proof-of-concept testing for acceptable results before implementing this solution in your production environment. Test the implementation in a non-production, isolated test environment that otherwise matches your production environment.

1

2

Tested Solution ComponentsTo implement this solution as tested in the lab, you need the hardware components in Table 1 and the software components in Table 2.

TABLE 1. HARDWARE COMPONENTS

Item Description Version

Hitachi NAS Platform 4000 Dual Node Cluster

Firmware 13.1.4428.02

NDMP 4.0

Hitachi Unified Storage 130

LUN provider for Hitachi NAS Platform

2 × 1 TB LUNs RAID-6 (6D+2P)

0985/A-S

Rack optimized server for solutions, 2U single node

CPU 2 Intel Xeon CPU E5-2620 @ 2.10 GHZ

CPU Socket/Core 2/6

Memory 32 GB

HBA Emulex LPe12002-M8 Firmware 11.0.247.8000

IBM System Storage T3200 Tape Library Express

Tape library 3573-TL FW C20/3.20e

Drive 1 Element: 256 ULT3580-HH6 (FC) FW: G9P1

Drive 2 Element: 257 ULT3580-HH6 (FC) FW: G9P1

Drive 2 Element: 258 ULT3580-HH6 (FC) FW: G9P1

Drive 2 Element: 259 ULT3580-HH6 (FC) FW: G9P1

Brocade 6510 Switch SAN Fibre Channel connection 4 × 8 Gb/s ports

FabOS v 7.0.1a

TABLE 2. SOFTWARE COMPONENTS

Item Description Version

IBM Spectrum Protect server Server software Spectrum Protect Server Extended Edition for Microsoft Windows 8.1.1.20170317_1620

Spectrum Protect Operations Center

8.1.1.20170317

Spectrum Protect Backup-Archive Client

8.1.1.20170317_1612

IBM Spectrum Protect client Client software Spectrum Protect 8.1 Client for Microsoft Windows

TSM_V6.3_LIN_CLIENTS.tar.gz

Microsoft Windows Server Operating system for server and client systems

Windows Server 2016 Standard Edition

2

3

Solution ImplementationBefore implementing this solution on network attached storage on network attached storage, complete the following:

Install the target operating system and apply all patches.

Obtain the IBM Spectrum Protect 8.1 extended server edition license.

Configure the Fibre Channel zones that connect the Hitachi NAS Platform clusters and the tape library or tape drives.

Configure the Fibre Channel zones that connect the server running Microsoft Windows Server 2016 and the NAS Platform clusters.

Install and configure NAS Platform with at least one EVS defined and with share or shares assigned.

Storage ConfigurationProvision the Hitachi storage with two 1 TB LUNs. Create and provision similar CIFS shares using Hitachi NAS Platform 4060.

Use Hitachi Storage Navigator Modular 2 to create the following storage space:

2 storage pools configured as RAID 6 (6D+2P)

2 × 1 TB LUNs

1 host group

SAN ConfigurationSAN connectivity using the Fibre Channel protocol provides connectivity between the Fibre Channel port or ports on Hitachi NAS Platform and the IBM TS3200 tape drive. The configuration calls for a SAN-attached Hitachi NAS Platform 4060 using a Brocade 6510 fabric switch.

There is no SAN connectivity between the IBM TSM server and the tape library's robotic control. Direct Fibre Channel connectivity to a library's robotic control is only supported if the robotics are segregated from the tape drive or drives, using something a dedicated path. This configuration has a single zone so that the Hitachi NAS Platform ports had connectivity to all tape drives within the IBM TS3200 tape library. Robotic control passes through Tape Drive 1.

Note — Tape library configurations and capabilities vary by vendor. If you are not using this table library, consult with your vendor when configuring Fibre Channel zoning.

Network ConfigurationEthernet connectivity utilizing the TCP/IP protocol provides the communication path between the following:

IBM Spectrum Protect server and client (1 GbE network)

Hitachi storage and Hitachi NAS Platform 4060 (10 GbE network)

IBM Spectrum Protect Network Configuration DiagramFigure 1 on page 4 shows how the hardware is connected.

3

4

Figure 1

4

5

Install the IBM Spectrum Protect ServerThis is how to install IBM Spectrum Protect server.

Apply Best Practices to the Server InstallationTypically, the hardware configuration and selection have the most significant effect on the performance of an IBM Spectrum Protect solution. Other factors that affect performance are the operating system selection and configuration.

The following is the most important best practice for optimal performance and problem prevention:

Separate the server database, the active log, the archive log, and disk storage pools from each other.

IBM Installation ManagerIBM Spectrum Protect uses IBM Installation Manager. Use this installation program, using remote or local software repositories, to install or update many IBM products.

IBM Installation Manager is installed or upgraded to the version you need when you install IBM Spectrum Protect. It must remain installed on the system to update IBM Spectrum Protect.

Installation directories for the IBM Spectrum Protect server include the following, with each one containing several additional directories:

Server

DB2

Device

Language

Other directories

The default directory that contains server code and licensing is /opt/tivoli/tsm/server/bin.

The DB2 product that is installed as part of the installation of the IBM Spectrum Protect server has the directory structure as documented in DB2 information sources. Protect these directories and files as you do the server directories. The default directory is /opt/tivoli/tsm/db2.or uninstalled later as needed.

Install the Server ComponentsTo install the IBM Spectrum Protect version 8.1 server components, you can use the any of the following:

The installation wizard

The command line in console mode

Silent mode

Using the IBM Spectrum Protect installation software, you can install the following components:

Server

The database (DB2), the global security kit (GSKit) and Oracle Java Runtime Environment (JRE) install automatically when you select the server component.

Server languages

License

5

6

Devices

IBM Spectrum Protect for SAN

Operations Center

If errors occur during the installation process, the errors are recorded in log files that are stored in the IBM Installation Manager logs directory. You can view installation log files from Installation Manager from the File menu, by clicking View Log.

Install IBM Spectrum Protect Server on Microsoft Windows Server 2016.To install IBM Spectrum Protect server on Microsoft Windows Server 2016, do the following.

1. From the Control Panel, view information about the server where you are going to install Spectrum Protect server. Check for the following:

Operating system version

RAM size

Figure 2

6

7

2. Verify that all administrator users have the control policy “Run all administrators in Admin Approval Mode” disabled.

Figure 3 shows the error message you receive if the control policy is enabled.

If not disabled, disable running all administrators in Admin Approval Mode on the User Account Control: Run all administrators in Admin Approval Mode window (Figure 4 on page 9).

Figure 3

7

8

Figure 4

3. From the unzipped package directory, start installation with the install.bat file. The IBM Installation Manager window opens with the progress bar on Install.

8

9

4. When the progress bar moves to Prerequisite, the installation program verifies that all prerequisites are present. If all prerequisites are met (Figure 5), click Next.

Figure 5

5. Accept the default shared resources directory location (Figure 6) by clicking Next.

Figure 6

9

10

6. Click the Create a new package group option, accept the default location for the installation directory, and then click Next (Figure 7).

Figure 7

7. Since this solution uses NDMP devices, click the IBM Spectrum Protect Extended Edition option and then click Next (Figure 8).

Figure 8

10

11

8. When the installation wizard says that the packages are installed (Figure 9), click Finish.

Figure 9

11

12

Configure IBM Spectrum Protect ServerThe configuration wizard opens automatically after finishing the installation (Figure 10).

Figure 10

12

13

To configure IBM Spectrum Protect server, do the following.

1. Create the instance user ID (Figure 11). Type the following and click Next:

Instance — This is name of the new instance you are creating. It can be as simple as Server1.

User ID — It is typical to use this for the user ID: administrator

Password — Create the password for the administrator account.

Figure 11

13

14

2. After the wizard establishes a connection with these user credentials, click Next (Figure 12). This accepts the default instance directory.

Figure 12

3. To create the instance directory from Figure 12, click Yes (Figure 13).

Figure 13

4. Accept the default values and click Next for each step in the wizard.

14

15

5. On the Configuration Summary page (Figure 14), click Next. You can observe the instance being configured.

Figure 14

15

16

Figure 15 shows the instance being configured.

Figure 15

16

17

6. To add a repository, accept the default and click OK (Figure 16).

Figure 16

7. From the IBM Installation Manager window, select the IBM Spectrum Protect Operations Center check box and the Version check box, and then click Next (Figure 17).

Figure 17

17

18

8. To specify the secure communications setting, accept the Secure (https) port value of 11090 and click Next (Figure 18).

Figure 18

9. Click the option for the SP800-131a Compliance Mode based on your network security and click Next. Figure 19 shows clicking the Off option, but your network security may be different.

Figure 19

18

19

10. After the packages are installed, complete the wizard by clicking Finished (Figure 20).

Figure 20

Configure the IBM Spectrum Protect InstanceThis information is taken from IBM Spectrum Protect for Windows Version 8.1.0 Installation Guide, page 51.

After you install IBM Spectrum Protect version 8.1, prepare for the server configuration. Using the configuration wizard is the preferred method of configuring the IBM Spectrum Protect instance.

To configure the IBM Spectrum Protect instance, do the following.

1. Create the directories and user ID for the server instance.

2. Configure a server instance. Select one of the following options:

Use the configuration wizard, the preferred method.

Manually configure the new instance, as follows.

i. Set up your directories and create the IBM Spectrum Protect instance.

ii. Create a new server options file by copying the sample file to set up communications between the server and clients.

iii. To format the database, Issue the follow command: DSMSERV FORMAT

iv. Configure your system for database backup.

3. Configure options to control when database reorganization runs.

4. Start the server instance, if it is not already started.

19

20

5. Register your license.

6. Prepare your system for database backups.

7. Monitor the server.

Configure IBM Spectrum Protect Operations CenterTo configure IBM Spectrum Protect Operations Center, do the following.

1. Start IBM Spectrum Protect Operations Center.

Figure 21

20

21

2. Create and confirm the password for administrator and click Next (Figure 22).

Figure 22

21

22

3. Click these retention values from each list and then click Next (Figure 23):

Status

Alerts stay active

Alerts stay inactive

Closed alerts are retained

Figure 23

22

23

4. For the status, set the at-risk indications for the following and click Configure (Figure 24).

Applications

Virtual machines

Systems

Figure 24

The wizard creates and displays the IBM Spectrum Protect Operation Center configuration (Figure 25 on page 25).

23

24

5. To conclude the Operation Center configuration, click Close.

Figure 25

24

25

6. Verify the installed licenses and the states of each license on the server.

At a command prompt for the server, type the following: query license

Figure 26

25

26

7. Verify that these two services related to IBM Spectrum Protect started and running:

IBM Spectrum Protect Operations Center

Server for IBM Spectrum Protect

From the Start menu in Microsoft Windows Server 2016 , you should see the following links to specific parts of IBM Spectrum Protect software packages (Figure 27).

Figure 27

26

27

8. From the Start menu, click IBM Spectrum Protect Operation Center to start Operation Center (Figure 28).

Figure 28

27

28

9. Log on to IBM Spectrum Protect Operation Center (Figure 29).

Figure 29

28

29

Views in IBM Spectrum Protect Operations CenterThese are the main views in IBM Spectrum Protect Operations Center.

Main Operations Center view (Figure 30)

Figure 30

Servers view (Figure 31)

Figure 31

29

30

Alerts view (Figure 32)

Figure 32

Use Command Line with IBM Spectrum ProtectTo issue commands using the IBM Spectrum Protect command line interface, click the star in the top right corner of any view, and a new Command Builder window opens.

Figure 33

Make sure that Assist on the top right corner is green. This way you have in-line help assistance with all commands supported by software.

30

31

Install the Client to a IBM Spectrum Protect Server To add a client to the IBM Spectrum Protect server, install the client's software package on that client.

This example shows adding a Microsoft Windows Server 2016 client configuration for backup and restore using IBM Spectrum Protect Sever 8.1.

To install client software, do the following.

1. Download the package to client's local directory and extract it.

2. Execute the IBM Spectrum Protect client file (Figure 34).

Figure 34

3. Log on as administrator to IBM Spectrum Protect Operations Center (Figure 35).

Figure 35

31

32

4. Use with Client Configuration wizard.

(1) For Communications Method, click the TCP/IP option (Figure 36).

Figure 36

This causes a Windows Security Alert window to open.

32

33

(2) Verify Windows Firewall settings (Figure 37). Select the check boxes for your security requirements.

Figure 37

33

34

(3) For the Include/Exclude List, click Select All (Figure 38).

Figure 38

34

35

(4) Select the file types for File Exclusion (Figure 39). These are the file types that won’t be backed up.

Figure 39

35

36

(5) Complete the Domain for Backup (Figure 40). This includes the following:

Backup type, such as incremental

Whether to back up all local file systems

The domain list

Figure 40

36

37

(6) To complete the configuration, click Finish (Figure 41).

Figure 41

37

38

5. Add the client to the IBM Spectrum Select server.

(1) Log on to the IBM Spectrum Protect server (Figure 42).

Figure 42

38

39

(2) Start adding the new Microsoft Windows Server client to the IBM Spectrum Protect server by clicking Next (Figure 43).

Figure 43

39

40

(3) Click the option for the Policy Domain and click Next (Figure 44). The example only has one policy domain, Standard. You could have more policies.

Figure 44

(4) Select the schedule for the client's backups and click Next (Figure 45).

Figure 45

40

41

(5) Set alerts about backups results and click Next (Figure 46).

Figure 46

41

42

(6) After adding the client, click Close (Figure 47).

Figure 47

6. Verify the newly configured client is in IBM Spectrum Protect Operations Center (Figure 48).

Figure 48

42

43

Figure 49 shows a configured client in the dashboard of IBM Spectrum Protect Operations Center.

Figure 49

43

For More InformationHitachi Vantara Global Services offers experienced storage consultants, proven methodologies and a comprehensive services portfolio to assist you in implementing Hitachi products and solutions in your environment. For more information, see the Services website.

Live and recorded product demonstrations are available for many Hitachi products. To schedule a live demonstration, contact a sales representative. To view a recorded demonstration, see the Resources website.

Hitachi Vantara Academy provides best-in-class training on Hitachi products, technology, solutions and certifications. Hitachi Data Systems Academy delivers on-demand web-based training (WBT), classroom-based instructor-led training (ILT) and virtual instructor-led training (vILT) courses. For more information, see the Hitachi Data Systems Services Training and Certification website.

For more information about Hitachi products and services, contact your sales representative or channel partner or visit the Hitachi Vantara website.

1

Corporate Headquarters2845 Lafayette StreetSanta Clara, CA 95050-2639 USAwww.HitachiVantara.com community.HitachiVantara.com

Regional Contact InformationAmericas: +1 866 374 5822 or info@hitachivantara.comEurope, Middle East and Africa: +44 (0) 1753 618000 or info.emea@hitachivantara.comAsia Pacific: +852 3189 7900 or hds.marketing.apac@hitachivantara.com

Hitachi Vantara

© Hitachi Vantara Corporation 2017. All rights reserved. HITACHI is a trademark or registered trademark of Hitachi, Ltd. IBM, Spectrum Protect, and Tivoli are trademarks or registered trademarks of International Business Machines Corporation. Microsoft and Windows Server are trademarks or registered trademarks of Microsoft Corporation. All other trademarks, service marks and company names are properties of their respective owners.

Notice: This document is for informational purposes only, and does not set forth any warranty, expressed or implied, concerning any equipment or service offered or to be offered by Hitachi Vantara Corporation.

SL-009-00, October 2017.