Home » Computer Associates Manuals » Computer Software » Computer Associates BABNWUP900NE6 » Manual Viewer

Computer Associates BABNWUP900NE6 Administration Guide - Page 373

Security, Possible Resolutions

UPC - 757943261509

View all Computer Associates BABNWUP900NE6 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 373 highlights

Security Security The following section provides guidance to help you address security-related issues when using BrightStor ARCserve Backup. Because symptoms of security-related issues vary widely, this section includes possible resolutions only. Possible Resolutions The following list of resolutions can help you address security-related issues: ■ Ensure that BrightStor ARCserve Backup has properly authenticated the BrightStor ARCserve Backup System Account. To perform this authentication, run bconfig.exe from the BrightStor ARCserve Backup folder. Clear the "Select Database" and "Password for Backup Server Logon and Administration" check boxes, leaving only "System Account" selected. The account entered is automatically given local Administrator and Backup Operator rights. ■ Ensure that the BrightStor ARCserve Backup folder is shared with: - Administrator-Full Control - ARCserve Backup System Account-Full Control - Backup Operators-Change and Read ■ Ensure that the caroot account for BrightStor ARCserve Backup is set properly. To do so, run bcsconfig.exe from the BrightStor ARCserve Backup folder. Clear the "Select Database" and "System Account" check boxes, leaving only "Password for Backup Server Logon and Administration" selected. Click Next and configure the caroot account accordingly. ■ If you are having general problems understanding what rights your backup account needs to perform storage functions in your environment, consider the following information. If you are backing up only your local BrightStor ARCserve Backup server, the BrightStor ARCserve Backup System account configured at installation has sufficient rights (Administrator and Backup Operator). If you are backing up remote data within your domain (through the Client Agent for Windows or through the network facility of BrightStor ARCserve Backup), your backup account requires additional rights. The following is a general outline of common permissions necessary for a powerful backup account. You can tailor your backup account to match your needs, and some rights may not be required in your environment. Note: Security requirements for storage-related functions are dependent upon the resources accessed. Windows security rules and requirements should be considered at all times. Troubleshooting C-3

Section	Page
Bookshelf	1
Contents	3
Chapter 1: Introducing BrightStor ARCserve Backup	17
Components	17
BrightStor ARCserve Backup Manager	17
BrightStor ARCserve Backup Server	18
Functionality	18
Managers	19
Configuration	20
Wizards	21
Utilities	21
Recover Database Utility	21
Merge Utility	22
Scan Utility	23
Compare Utility	23
Count Utility	24
Copy Utility	24
Purge Utility	24
Report Writer	25
Command Line	25
BrightStor ARCserve Backup Security	25
caroot User Profile	25
Equivalence	26
The System Account	26
caroot, Equivalency, and the System Account	27
Enterprise Level Password Management Utility	27
Centralized Cross-platform Management	28
BrightStor ARCserve Backup Enterprise Module	28
Product Integration	29
BrightStor ARCserve Backup for Laptops & Desktops	29
BrightStor Portal Integration	30
eTrust Antivirus	30
Microsoft Management Console Integration	30
Preferences	31
Global Settings	31
Library Filter	32
Integrating with Unicenter NSM	33
WorldView Integration	33
Requirements	33
Creating Objects and View	33
Working with a Remote Repository	34
Unicenter Notification	35
Managing BrightStor ARCserve Backup with Unicenter	35
Workload Management Integration	35
Backing up and Restoring Virtual Machine Environments	36
Configuration Requirements	36
Backing Up a Guest Operating System	37
Backing Up the Host Operating System	37
Restoring the Guest Operating System	38
Recovering the Host Operating System From a Disaster	38
The cabatch Utility	38
Chapter 2: Planning	39
Assessing Basic Storage Requirements	40
How Big is Your Budget?	40
How Much Data are You Backing Up?	41
How Much Time Do You Have?	41
What is Your Infrastructure Like?	41
Defining Data-transfer Requirements	42
What is Your Basic Data-transfer Requirement?	42
What is the Data-transfer Rate of Your Backup Hardware?	42
SCSI or Fibre Interfaces	42
Tape Drives	43
How Much Network Bandwidth Do You Have?	44
Reconciling Data Transfer Requirements and Resources	45
Widening the Data Path	45
When You Cannot Widen the Data Path	46
Running Storage Operations in Parallel (Multiple Streaming)	49
Defining Storage-capacity Requirements	50
How Much Space Do You Need for Online Recovery Data?	50
How Much Space Do You Need for Backed-up Data?	50
Matching Storage Capacity to Resources	51
Calculating Media Capacity	51
Other Factors Affecting Storage Capacity Calculations	51
Testing Plans and Assumptions	52
Planning for Catastrophe	52
Assessing the Risk	53
Selecting an Off-site Repository	53
Security	53
Accessibility	53
Expense	54
Deciding What to Archive	54
Testing Your Disaster Recovery Plan	54
Sample Calculations	55
Chapter 3: Backing Up Data	63
The Backup Wizard	64
Customizing Your Backup Jobs	64
Selecting the Source	64
Backing Up an Entire Node	65
Creating a Backup Job for an Entire Node	66
Using the Security and Agent Information Dialog	66
Multiple Code Pages	67
Understanding How BrightStor ARCserve Backup Supports Multiple Code Pages	67
Specifying Code Pages	67
Selecting the Destination	67
Wildcard Usage with Tape Library Groups	68
Defining a Schedule	68
Local Options	69
Global Options	71
Virus Options	71
Alert Options	72
Replication Options	73
Media Exporting Options	73
Advanced Options	74
Windows System Options	74
Multiplexing Options	74
Volume Shadow Copy Service	75
Backup Media Options	76
Options for First Backup Media	76
Options for Additional Media	77
Secure Your Backup Data	77
Distinguish Media by Name Only	78
Verification Options	78
Retry Options	79
Operation Options	80
Pre/Post Options	82
Run Command Before Job	82
Run Command After Job	82
Do not run Command if	82
Run Before/After Command As	83
Job Log Options	83
Backup Agent for Open Files	83
Redirecting Local Jobs	84
How Local Job Redirection Works	84
Options and Circumstances Affecting Local Job Redirection	85
Locating Redirected Jobs	85
Multistreaming	86
Multiplexing	87
Features Supported by Multiplexing	88
Submitting a Multiplexing Job	89
Multiplexing Global Options	89
Monitoring the Status of Your Multiplexing Job	90
Verifying the Integrity of Your Multiplexing Data	91
Submitting Jobs	91
Preflight Checks for Your Backups	91
Disaster Recovery	92
Backing Up BrightStor ARCserve Backup for Laptops & Desktops Data	93
Managing Migrated Files	94
Chapter 4: Restoring Data	95
The Restore Wizard	95
The Restore Manager	95
Selecting the Source	96
Multiple Code Pages	97
Specifying Code Pages	97
Selecting the Destination	97
Defining a Schedule	98
Restore Options	99
Backup Media Options	99
Destination Options	99
Operation Options	101
Pre/Post Options	101
Job Log Options	102
Virus Options	102
Alert Options	103
System State Restore Options	104
Restoring BrightStor ARCserve Backup for Laptops & Desktops Data	105
Restoring Migrated Files	105
Chapter 5: Customizing Your Jobs	107
Rotation Schemes	108
GFS Rotation Jobs on File System Devices	109
Media Pool Used	110
Backup Method	110
Rotation Rules	110
Calendar View	111
Exceptions	111
Media	112
Filters	112
Specifying Filter Options	113
Exclude	113
Include	113
Types of Filters	113
File Pattern Filter	113
Directory Filter	113
File Attributes Filter	114
File Modified Filters	114
File Created Filters	114
File Accessed Filters	115
File Size Filters	115
Scheduling	116
Custom Schedule	117
The Job Scheduler Wizard	118
The Job Status Manager	125
Managing Servers and Groups	126
Job Queue	126
Job Status	128
The Last Result Field	128
Backup Job Failure	129
Activity Log	130
Deleting Log Files	131
Scheduling Activity Log Pruning	132
Displaying the Tape Log Tab	133
Job Detail	133
Job Log	133
Job Scripts	134
Saving Scripts	134
Using an Existing Script	134
Job Templates	135
Creating Custom Job Templates	135
Chapter 6: Configuring Devices	137
Configuring a Tape or Optical Library	138
Assigning Devices	138
Assigning a Cleaning Tape and Changing Configuration Details	139
Advanced Settings	140
Configuring a RAID Device	141
Configuring a RAID Level	141
Configuring a RAID Group	141
Configuring a Removable Drive	142
Configuring a Virtual Library	142
Configuring an IBM 3494 Library	143
Configuring a StorageTek ACSLS Library	144
Configuring a File System Device	145
Adding More than One File System Device in a Group	146
Device Commands that are Available for File System Devices	147
Enabling or Disabling Devices (for RSM)	147
Chapter 7: Managing Devices and Media	149
The Device Manager	149
Inserting and Removing Media	150
Scheduling Jobs	150
Maintenance Tasks	151
Formatting Media	151
Erasing Data	152
Retensioning a Tape	153
Compressing Data	153
Ejecting Media	153
Rebuilding Media	153
Library Support	154
Device Management Functions for Libraries	155
Checking Library Slots	155
Loading or Removing Magazines	155
Importing or Exporting Media	156
Cleaning Tape Heads	156
Marking Drives Offline and Online	156
Removable Drive Support	157
Using Removable Media	157
Enabling Removable Drives	157
Formatting Removable Media	157
Configuring Removable Devices	157
Managing Tape Drives Using DLTSage Error Handling	158
Understanding How DLTSage Error Handling Works	158
Curing Tape Drive Errors	159
Media Pools	159
Save Sets and Scratch Sets	160
Serial Number Information	161
GFS Media Pools	161
Maximizing Media in GFS Rotation Jobs	163
The Media Pool Manager	168
The Media Management Administrator (MM Admin)	169
Media Management and Tape Service	169
Terms	170
The MM Admin Interface	170
The MM Admin Toolbar	171
The MM Admin Window	171
The Vault Object	172
The Schedule Object	173
The Vault Criteria Descriptor Object	173
The Rotation Object	174
The Report Object	175
The Find Media in Vault Object	176
The Status Object	176
Reset the Status of Vault Processing	176
The Media Management Process	177
Vaults	178
Creating Vaults	178
Updating Vaults	179
Deleting Vaults	179
Scheduling Tape Volume Movement	179
Creating Schedules	179
Deleting Schedules	180
Selecting Tape Volumes	180
Creating a Vault Criteria Descriptor (VCD)	180
Updating a Vault Criteria Descriptor (VCD)	181
Deleting a Vault Criteria Descriptor (VCD)	181
Defining Retention Policies	181
Creating a Rotation	181
Updating a Rotation	182
Deleting a Rotation	182
Viewing Slot Information	183
Special Tape Volume Movement	184
Finding Media in Vaults	186
The ca_mmo Command	186
Chapter 8: Managing the Database and Reporting	187
The Database Manager	187
Selecting a Database View	188
Changing the Sort Order	189
Pruning Your Database	189
Re-building the SQL Indexes	189
Errors	189
Device Records	190
Last Database Backup Information	190
The Catalog Database	190
Enabling the Catalog Database	191
Enabling Media Pool Maintenance	191
Merge Options	192
Backing Up and Restoring with the Catalog Database	193
Submitting Backup Jobs	193
Submitting a Restore Job	194
Using a Centralized Database	195
Setting up a Central Database	196
Adding Members to a BrightStor ARCserve Backup Central Database	196
Configuring the Job Information Stored in Your Central Database	197
Using the Central Database	198
Using a Remote Database	198
Configuring BrightStor ARCserve Backup to Use MS SQL as Its Database	199
Configuring ODBC Data Source to Enable a Remote Database	200
Choosing a Database Configuration	201
Advanced RAIMA Very Large Database Maintenance	202
VLDB Architecture	202
VLDB Utility Usage Considerations	202
VLDB Maintenance Utilities	203
Using a Microsoft SQL Server Database	204
Installation Considerations	205
Transferring Data from a VLDB Database to a SQL Database	206
SQL Connections	206
Run a Database Consistency Check	206
Logs and Reports	207
The Activity Log	207
The Tape Log	207
The Job Log	208
The Report Manager	208
Working with Reports and Report Manager	208
Standard Reports	209
Custom Reports	209
Report Categories	209
Scheduling Custom Report Jobs	212
Scheduling a Custom Report from Report Manager	213
Scheduling a Custom Report from the Job Scheduler Wizard	213
Creating Custom Reports with Report Writer	213
Generating Reports for Multiple BrightStor ARCserve Backup Servers	215
Running a BAB for Laptops & Desktops Session Details Report	215
Using BrightStor Portal for Reporting	216
The Unicenter Monitoring Agent	217
The Diagnostic Utility	218
Diagnostic Utility Components	218
Creating the Express Mode Report	219
Reviewing the Report	223
Chapter 9: Administering the Backup Server	225
BrightStor ARCserve Backup Engines	225
Engine Status	226
eTrust Antivirus	227
INODIST Utility	227
Updating Virus Signatures	232
Configuring the BrightStor ARCserve Backup Engines	234
Configuring the Job Engine	234
Configuring the Tape Engine	236
Message Log Options	236
General Options	237
Setting an Alternate Log Path Entry	238
Configuring the Database Engine	239
Configuring Alert	240
Log Configuration	241
Additional Server Admin Functions	241
Changing the BrightStor ARCserve Backup System Account	241
Supporting Multiple NIC Cards	242
BrightStor ARCserve Backup Domains	243
Domain Management	244
Configuring Windows-powered NAS and Storage Server 2003 Devices	244
Accessing BrightStor ARCserve Backup through the Windows-powered NAS Device	245
BrightStor ARCserve Backup and Windows-powered NAS Device Configurations	246
Backup Devices Connected Directly to Windows-powered NAS Devices	246
Backup Devices Connected to BrightStor ARCserve Backup Server	247
Backup Devices Shared between BrightStor ARCserve Backup and Windows-powered NAS	247
Working with the Discovery Configuration	248
Understanding Discovery Service	249
IP Subnets/Windows Domains Discovery	249
Configuration Options with the Discovery Configuration	250
Enabling Discovery Using TCP/IP Subnet Sweep	250
Configuring Your Firewall to Optimize Communication	253
Understanding the Ports Configuration File	254
Modifying the Ports Configuration File	255
Additional Resources	256
Examples	258
Considerations	260
Chapter 10: Using the Alert Manager	263
Components	264
The Alert Manager	264
Configuring the Alert Manager	265
Ports	265
Broadcast	265
CA Unicenter TNG	266
Email	267
NT Event Log	269
Pager	269
SMTP	270
SNMP	270
Trouble Ticket	271
Event Priority	271
Testing the Messages	271
Reviewing Alert Activity	272
Appendix A: BrightStor ARCserve Backup Cluster Support	273
Backing Up and Restoring MSCS Nodes	274
Using BrightStor ARCserve Backup on MSCS	275
BrightStor ARCserve Backup Job Failover Capability	275
BrightStor ARCserve Backup High Availability Through Services Failover	276
Manageability through Cluster Resource DLL	276
Installation Requirements for MSCS Cluster	276
Hardware Requirements	276
Software Requirements	277
Installing and Configuring BrightStor ARCserve Backup on a Cluster for Job Failover	277
Installing BrightStor ARCserve Backup	277
Installing on the Private Disks of Cluster Nodes	277
Installing on Shared Disks of Cluster	278
Configuring BrightStor ARCserve Backup for High Availability	280
Registering BrightStor ARCserve Backup with MSCS	280
Registering BrightStor ARCserve Backup Registry Hive for Replication	281
Sharing the BrightStor ARCserve Backup Installation Directory through MSCS	281
Moving Cluster IP Address, Cluster Name, and Shared Disk from the Temporary Group	282
Setting Up Dependencies Between BrightStor ARCserve Backup Groups	282
Bring the BrightStor ARCserve Backup Cluster Group Online	283
Uninstalling BrightStor ARCserve Backup from a Cluster	283
Disaster Protection for MSCS Nodes	284
Backing up and Restoring Applications on MSCS	284
BrightStor ARCserve Backup Cluster Support FAQ	285
Appendix B: Command Line Utilities	287
Available Command Line Utilities	288
Basic Usage, Syntax, and Argument Information	290
Authsetup	290
bab	291
ca_auth	291
ca_backup	295
ca_dbmgr	309
ca_devmgr	313
ca_jobsecmgr	323
ca_log	325
ca_merge	327
ca_mmo	330
ca_restore	333
ca_scan	340
ca_qmgr	344
cabatch	347
CAReports	350
pfc	352
tapecopy	356
tapecomp	368
Appendix C: Troubleshooting	371
Hardware	371
Possible Problems	371
Possible Resolutions	372
Security	373
Possible Resolutions	373
Open File	374
Possible Problems and Resolutions	374
Tape Errors	376
Possible Problems	376
Possible Resolutions	377
Copying the Data to a New Tape	377
Creating a New Backup Tape	377
Discovery Service	377
Possible Problems	377
Possible Resolutions	378

Match case Limit results 1 per page

Security

Troubleshooting

C–3

Security

The following section provides guidance to help you address security-related

issues when using BrightStor ARCserve Backup. Because symptoms of

security-related issues vary widely, this section includes possible resolutions only.

Possible Resolutions

The following list of resolutions can help you address security-related issues:

■

Ensure that BrightStor ARCserve Backup has properly authenticated the

BrightStor ARCserve Backup System Account. To perform this authentication,

run bconfig.exe from the BrightStor ARCserve Backup folder. Clear the “Select

Database” and “Password for Backup Server Logon and Administration”

check boxes, leaving only “System Account” selected. The account entered is

automatically given local Administrator and Backup Operator rights.

■

Ensure that the BrightStor ARCserve Backup folder is shared with:

–

Administrator—Full Control

–

ARCserve Backup System Account—Full Control

–

Backup Operators—Change and Read

■

Ensure that the caroot account for BrightStor ARCserve Backup is set properly.

To do so, run bcsconfig.exe from the BrightStor ARCserve Backup folder.

Clear the “Select Database” and “System Account” check boxes, leaving only

“Password for Backup Server Logon and Administration” selected. Click Next

and configure the caroot account accordingly.

■

If you are having general problems understanding what rights your backup

account needs to perform storage functions in your environment, consider the

following information.

If you are backing up only your local BrightStor ARCserve Backup server, the

BrightStor ARCserve Backup System account configured at installation has

sufficient rights (Administrator and Backup Operator).

If you are backing up remote data within your domain (through the Client

Agent for Windows or through the network facility of BrightStor ARCserve

Backup), your backup account requires additional rights. The following is a

general outline of common permissions necessary for a powerful backup

account. You can tailor your backup account to match your needs, and some

rights may not be required in your environment.

Note:

Security requirements for storage-related functions are dependent upon

the resources accessed. Windows security rules and requirements should be

considered at all times.