ADSM TSM Network Backup for Windows: Installation

Note added August 21, 2008: The current version of TSM client software for Windows XP, 2003, Vista, and 2008 is TSM Version 5.5.1.1. The versions for Windows 95, Windows 98, Windows Me, and Windows NT (TSM Version 5.1) and Windows 2000 (Version 5.3.4.4) are no longer being supported by IBM. If you need them, you can download them from IBM.

Important Security Problem: We have been informed of a serious security problem with the Tivoli Storage Manager client software, in a part called the Client Acceptor Daemon, CAD. This is a problem in the client software, so you have to fix it; we can not do it for you. And it's mainly a problem with the Mac client, because only on Macs do we recommend running TSM using CAD. However we have heard that some people have set up their Windows machines to use CAD also. If you are such a person, you must upgrade. You should upgrade one way or the other.

There are two kinds of programmers: those who have lost data, and those who will.

UIC maintains a network backup system, called ACCC Distributed Storage Manager, or ADSM for short, which can protect the files on your personal computer or workstation from accidental loss. Use IBM Tivoli Storage Manager client software to make a backup copy of your files across the network, onto the ACCC IBM Tivoli Storage Manager server. Then, if you inadvertently erase a file, if your hard drive fails, or if your laptop is stolen, you can restore your files from the server.

However, the most important aspect of restoring files that you lose is that you must back them up first. This obvious fact is ignored by many people until after a loss occurs and then it is too late.

• To use ADSM while replacing an old machine with a new one
  
  
• To register your netid with the ADSM Server (i.e. obtain an ADSM Node ID)
• To download the latest IBM Tivoli Storage Manager client software
• To generate and download a new dsm.opt configuration file
  
  
• To change your UIC ADSM Password (or any other UIC ACCC password)
  
  
• To view an IBM Tivoli Storage Manager manual in Adobe PDF format

This page describes how to set up the Tivoli Storage Manager client software on your Microsoft Windows personal computer, connect it to the ADSM Server, make an initial full backup, and schedule regular incremental backups. The following page, ADSM Network Backup for Windows: Restoring Files, explains how to restore files should the need arise. This page assumes a moderate, but not extensive, knowledge of Microsoft Windows.

Examples here are from Windows Me using the Version 5.1.6 of the Tivoli Storage Manager client program and Windows 2000 using Version 5.3.4.4 , but other Windows Version 95 and later are quite similar with regard to ADSM. Note that Windows XP Home is not supported by Tivoli Storage Manager.

Version 5.3.4.4 is the newest version and it only supports Windows 2000, XP Pro, and 2003. Other Windows operating systems got left behind at different TSM client software levels, which is why you have to select the correct version for each OS.

1. There are separate versions of the client software for Windows 95, Windows 98, Windows Me, Windows NT, Windows 2000, and Windows XP Pro, and Windows 2003. (Windows XP Home is not supported.) Be sure you get the right one! The installation steps vary somewhat between the different versions of Windows.
2. You need to be logged into an account with administrator permissions to install TSM on Windows NT and higher.
3. FaCT Program machines come partially ready for ADSM Backup -- the Tivoli Storage Manager client program is pre-installed and the automatic backup Scheduler is pre-enabled. You need only perform the configuration steps.
4. If you run into problems at any point during these procedures, please send email with "ADSM" in the subject, to the Client Service Office at consult@uic.edu. Please tell us what step you were working on and provide the complete text of any error messages that you received.

Assuming you are eligible to use the service as outlined above, you will need a netid and an ACCC Common password that allows you to authenticate with Bluestem. If you have an ACCC email account and you know its password, you are all set. If you do not yet have a netid or an ACCC password, get your netid and activate it now.

Click here if you do not yet have a UIC netid.
Click here to activate your netid.

If you haven't already been using ADSM backup, you must register your netid with the ADSM server and get an ADSM password. This provides security for the data backed up from your machine.

1. Click the link below to register your netid with the ADSM Server.
2. A new browser window will open, displaying the ACCC ADSM backup policies. Read them; if you qualify for ADSM backup service, click the I agree with the above provisions button.
3. You will be asked to Bluestem authenticate yourself by entering your UIC netid and ACCC password.
4. You will be asked to choose a new ADSM password. This password is unique to ADSM and is not related to your other passwords.
5. Follow all of the registration instructions, then close the new browser window and continue following the instructions below.

If you haven't already, click here to register your netid with ADSM.
If you already have an ADSM account and if you have forgotten its password or if you have been using Password Generate:
Click here to set a new ADSM password.

Click on the download link below and select your operating system; save the installation file to your desktop.

Click here to download the Tivoli Storage Manager Backup Client Software.

The details of this install are for Version 5.3.4.4 for Windows 2000, XP Pro, and 2003; other versions are similar.

1. You may uninstall any previous versions of ADSM or TSM if you wish, but you don't have to.
   1. Click Start -> Settings -> Control Panel -> Add/Remove Programs
   2. Find "ADSM", "ADSTAR Distributed Storage Manager" or "Tivoli Storage Manager" in the list of programs, highlight it, and click Add/Remove.
   3. Select Remove.
   4. Reboot your computer to complete the removal.
      
      
2. Double-click on .exe file you just downloaded in Step 2 . (Its name will vary.) The setup wizard will guide you through the rest of the installation process.
   
   
3. Location to save files: The first step is to select a location for the expanded installation files. Select a location and click Next >.
   
   
4. Choose Setup Language: After it expands the files, the installer will ask you what language you want it to use for the install. US English is the default. Select the language you want from the drop-down list and click OK.
   
   
5. After a couple of initialization screens, you will see the InstallShield Welcome screen; click Next >.
   
   
6. On the Destination Folder screen, choose the install location for the program; it is best to use
   the default: C:\Program Files\Tivoli\TSM\
   Click Next >.
   
   
7. On the Setup Type screen, select the Typical option. Click Next >.
   
   
8. On the Ready to Install the Program screen, Click Install to begin the installation.
   
   
9. After an installation progress screen, the InstallShield Wizard Completed screen will be displayed. Click Finish.

Do not start the client program yet; we have not finished configuring it for UIC.

Your configuration for the Tivoli Storage Manager Client program will be stored in the file dsm.opt in the folder where you installed the TSM clien, typically C:\Program Files\Tivoli\TSM\baclient\. This file contains your ADSM node ID, the Internet address of our ADSM server, and other information about communication methods and such. We provide a Web page that builds and downloads this file for you.

Note: This process will overwrite any previous copy of your dsm.opt file. If you are an ADSM veteran and have made any customizations to this file, be sure to save a copy before you download the new configuration. You can then use the old file as a guide as you modify your new one.

This step must be performed with Netscape Version 4 or higher, Microsoft Internet Explorer Version 5 or higher, or Mozilla/Firefox Version 1 or higher.

1. Click the link below to download the ADSM configuration file.
   
   
2. A new browser window will open; click Login in this new window.
   
   
3. You will be asked to Bluestem authenticate yourself by entering your UIC netid and password. This must be the netid of the owner of the machine, if you are doing this for somebody else.
   
   
4. Notice the checkbox for Passwordaccess Generate. Check it unless your personal computer is not in a physically secure location; so long as your personal computer is physically secure Passwordaccess Generate will make your use of TSM more easy and more secure. See ADSM Passwords for more information.
   
   
5. Click Download ADSM Configuration File. A standard Windows Save as dialog box will open, prompting you to save your customized dsm.opt ADSM configuration file to your personal computer.
   
   
6. If you are given a choice, download the file directly so that it has this path name, assuming you followed our recommendation to install the Tivoli Storage Manager client program into the default location. (Tip: You can copy and paste if you like.)

   C:\Program Files\Tivoli\TSM\baclient\dsm.opt

   If not, use Windows Explorer to move the dsm.opt file to the ...\baclient\ directory after you download it.
   
   
7. Close the new browser window when the download is complete and continue the instructions in Step 5.

Click here to generate and download dsm.opt ADSM configuration file.

You have just completed installation and configuration of the IBM Tivoli Storage Manager client program on your PC. It has several components, whose use is explained later. While some of these might also have desktop icons, they are located in
Start -> Programs -> Tivoli Storage Manager

Backup Archive GUI

This is the standard, or manually-started backup program, and it is also the program you would use to perform a file restore. This program also has a number of other capabilities, such as changing your ADSM password, and configuring the Automatic Scheduler Client. You may also have an icon on your desktop for this program, which looks like a bank safe.

TSM Scheduler

This is a special version of the backup client program that runs continuously in the background, and backs up any changed or new files for you each evening. This is not configured to run initially, but is set up by the instructions below. It is not located in the Start menu in the usual place. On Windows NT, 2000, and XP it operates as a System Service. On Windows 95, 98, and Me, it is started in the folder:
Start -> Programs -> Start Up
In general, it is a good idea to stop the TSM Scheduler if you are going to run one of the other client programs, for instance to restore a file.

Backup Client Command Line

Has the same capabilities as the Backup Archive GUI program, but in a primitive DOS command line interface. You can use it, but it is much more difficult, so we don't recommend it. However, to restore an entire disk drive, you will need to use it.

Online Information

This gives you access to a local copy of the IBM Tivoli Storage Manager manual for your client version. You can also view this manual on the web, but this local copy on your hard drive will load much faster. You may also have an icon on your desktop for this manual, which looks like a green book.

Now open the TSM client, without making an actual backup yet. Double-click the Backup Client GUI icon on the desktop, or if you do not have one, click
Start -> Programs -> Tivoli Storage Manager -> Backup-Archive GUI

The TSM Login window should show the correct ADSM node name, as configured in your dsm.opt file. If this is not the right node name, click Cancel now, close the client program window, and double-check what is in your file C:\Program Files\Tivoli\TSM\baclient\dsm.opt.

Type your ASDM password and click Login. Note: If you selected Passwordaccess Generate, this should be the last time you will be asked for your ADSM password.

One of three things will happen next:

1. You immediately see the Tivoli Storage Manager main window. This means your registration and password are in order.
   
   

   If you are ready to make your first backup, you can skip straight down to that step below. If not, close this window for now.
   

2. You get the error message Node ID unknown to server. This means either:
   1. this machine is not registered yet, or
   2. you used the wrong netid when you configured your dsm.opt file above.

   If you are certain you typed your netid correctly and you know your ACCC common password, see Step 1 Get your ADSM Node Name and ADSM Password. If the registration web page says you are already registered, record the node name it displays, and go back to double-check your work. The node name from the registration web site must match the node name in file c:\Program Files\Tivoli\TSM\baclient\dsm.opt

   
   
3. It says Please enter your password again. This means your node name is registered OK, but you didn't type your password correctly. Try a second time. If you do not remember your ADSM password but you do know your ACCC common password, can use the ACCC Web Password Utility to set a new ADSM password. If you cannot enter a good password at this point, click Cancel to exit the backup client program.
   

   After you click Cancel, you may see the Tivoli Storage Manager main screen. This does not necessarily mean it worked. Close this instance of the backup client for now.

Your ADSM registration must be complete and if you are not using Password Generate, you must know your ADSM password to perform this step. Tip: This might take several hours. Start this initial full backup as the last thing before you leave at the end of the day and allow it to run overnight. Your future backup runs will only back up new and changed files since the last backup, and so will run much more quickly than this one.

1. Double-click the bank safe Backup Client GUI icon on the Desktop, or if you do not have one, click
   Start > Programs > Tivoli Storage Manager > Backup-Archive GUI
   If you are not using Password Generate, the TSM Login window will prompt you for your password.
   
   
2. You should now see the Tivoli Storage Manager main screen. Click the Backup button.
   
   
   
3. Now you should see this Backup window. (Click the image to enlarge it.) You will be given the choice to make backups of your local, network, RAW (unformatted), or removable drives, and System Objects (your Registry and the like) . Click the small gray box between the "+" and "Local", so that a black check mark appears in it, like in this enlargement of a corner of the window.
   
   Note: Do not click the Network drives box because that will cause a pointless backup of your files on the Novell or NT file server, which are already backed up there.
   
   
4. Click the Backup button, and you should then see this Task List window change as files are backed up. If you have never used ADSM before, all files on your PC will be backed up during this first run, so this may take several hours to complete. Future backup runs will be much shorter incremental backups, which will only copy files that have been created or changed since the previous ADSM backup run.
   
   
   
5. When the backup has completed, you should see the Backup completed dialog box.

That's it for manual backups. You can run a manual backup whenever you please, but read on to learn about the automated backups.

ADSM can be configured to perform an automatic incremental backup each evening after you go home. This automatic backup will create backup copies of any new files you've created or changed since the previous backup. Follow these instructions to enable automatic daily incremental ADSM backups on your PC.

Windows 95, 98, Me, NT Note: The instructions below are for specifically for Windows 2000, XP Pro, and 2003. You will see the most of the same steps, but perhaps in a different order, and some items will not be present. Read all the steps below before starting, so you will not be surprised when things happen in a different order.

1. Open the Backup/Archive GUI client program as you did above when you ran your first manual backup.
2. TSM main window: Click Utilities > Setup Wizard.
3. TSM Client Configuration Wizard screen: Check the box marked Help me configure the TSM Client Scheduler and click Next >.
   
4. On the TSM Scheduler Wizard screen, only the selection for Install a new or additional scheduler should be available to be selected. Select radio button Install a new or additional scheduler and click Next >.
   
   If Update a previously installed scheduler is not grayed out, use the bottom radio button, Remove a previously installed scheduler to delete it and start over.
5. TSM Scheduler name and Location: In the space for the name of the scheduler, type: TSM Scheduler
   Select Local Machine, and be sure to leave the check box for Use the Client Acceptor daemon empty and unchecked.
   Click Next >.
   
6. In the Option file name and location screen, The name of the option file should already be filled in with the correct value, which will typically be: C:\Program Files\Tivoli\TSM\baclient\dsm.opt
   If not, click Browse and find your dsm.opt file. Click Next >.
7. On the TSM Authorization screen, the TSM node name should already be filled in with your registered ADSM node name. Leave the Password space blank.
8. Service Login Options: Windows NT, 2000, XP, 2003 only. For the account, select The System account. For when to start the service, select Automatically when Windows boots. Click Next >.
9. Log file names and Locations: Leave the
   client scheduler log set to: c:\ program files\tivoli\tsm\baclient\dsmsched.log
   and the client error log c:\program files\tivoli\tsm\baclient\dsmerror.log.
   Click Enable event logging checked. Click Next >.
10. Immediate Start Option: Click Yes to start the TSM scheduler immediately. Click Next >.
11. Completing the TSM Client Configuration Wizard: Click Finish.
12. Shutdown and reboot your machine and check to see if the Scheduler automatically starts upon booting as it should (see below).

DO NOT TURN OFF YOUR COMPUTER WHEN YOU LEAVE FOR THE DAY. Your TSM Scheduler will negotiate with the Server to choose a start time for your daily backup. It will be a random time between 5 PM and 5 AM.

A TSM Scheduler window may display during the boot process. If you didn't use the recommended Passwordaccess Generate, you will be prompted in that window to enter your new ADSM password. If you did select Passwordaccess Generate, you may not see anything at all during booting.

After that,

• In Windows 95, 98, or Me, TSM Scheduler will appear as a task on the taskbar at the bottom of the screen.
• In Windows NT, 2000, XP Pro, or 2003, TSM Scheduler will appear as a Started Local Service; check in Start > Programs > Administrative Tools > Services

From now on, do not turn your computer off when you leave for the day. Your TSM Scheduler will negotiate with the server to choose a start time for your daily backup, which will be a random time between 5 PM and 5 AM.

You can verify the results of your backup, see any error messages that occurred, or see when the next scheduled backup will occur, by viewing file dsmsched.log that is located in the same folder where you installed the ADSM backup client, typically C:\Program Files\Tivoli\TSM\baclient\dsmsched.log

Tip: One easy way to do this is to find dsmsched.log in Windows Explorer, double-click it, and when it asks you which program to use to open this type file, select Notepad. After this, double-clicking on it will open the file automatically in Notepad. In Notepad, simply scroll to the bottom of the file to see what is going on, including any error messages, and when it plans to do your next backup. Right-click on dsmsched.log in Windows Explorer and drag it onto your desktop and select Create Shortcut Here to make a convenient desktop icon that will open the log so you can easily check the health of the Scheduler, in one step.

If the Scheduler is running OK, it should be waiting for the next scheduled backup window to start, and the last lines in the dsmsched.log file will look something like this:

2006-10-23 15:10:42 Next operation scheduled:
2006-10-23 15:10:42 ------------------------------------------------------------
2006-10-23 15:10:42 Schedule Name:         DAILYINC
2006-10-23 15:10:42 Action:                Incremental
2006-10-23 15:10:42 Objects:               
2006-10-23 15:10:42 Options:               
2006-10-23 15:10:42 Server Window Start:   17:00:00 on 2006-10-23
2006-10-23 15:10:42 ------------------------------------------------------------
2006-10-23 15:10:42 Command will be executed in 10 hours and 34 minutes.

The TSM Scheduler is normally started each time you boot your computer. However, you may need to stop or restart it at other times, such as to force it to use a newly set password.

The ADSM server requires a password to access your backed-up files. This is to insure that nobody except you can restore them. This password is separate from your other passwords at UIC, such as your password used to read email or authenticate with Bluestem.

There are two ways to change your ADSM password. With either method, you should stop the Automatic Scheduler before changing your password, or else it will fail to start this evening since it will be trying to run its automatic backups using your old password. See the instructions in the section above to stop and restart the TSM Scheduler.

1. Through the Backup Client Program: This only works if you are not using Passwordaccess Generate. Start the Tivoli Storage Manager client program as though you were going to make a manual backup as described above. You will be asked to enter your old ADSM password. Click Utilities and select Change Password. In the popup window, enter your old password again, and enter the new password you want twice.
   
   
2. Through the UIC Password Changing Facility Web Page: The same Web page that you use to set your passwords for all other UIC ACCC computer systems, has a link to a page that can be used to change your ADSM password. Note: If you have more than one ADSM account, the Password Changing Facility will reset your passwords for all your ADSM accounts at once.
   ACCC Web Password Utility

Regardless of which method you use, after you change your password, stop and restart the ADSM Scheduler, so that it will use your new password for its scheduled backups.

ADSM contains an optional feature called "Passwordaccess Generate" that can both increase security, and eliminate the need for you to remember your ADSM password. The way it works is that your password is encrypted and stored in a secret location on your computer. Each time it is needed by either the manual client program, or the automatic scheduler, it is decrypted and sent to the server as though you had typed it in.

Passwordaccess Generate is completely secure -- except for a situation where your PC is not physically secure. An example of a physically secure computer is one in a locked office or a locked suite of offices accessed only by trusted coworkers. An example of a physically insecure PC is a laptop computer, since they are so frequently stolen. Protecting an insecure computer with an overall Windows password can make it secure enough to use Passwordaccess Generate.

To start using Passwordaccess Generate if you have not been using it before, open the Backup Archive GUI program as though you were going to run a manual backup. Click:
Edit > Preferences > Authorization > Password Generate
Now click OK. It will say you must restart the client for the new preferences to take effect. (Note for ADSM old-timers: This procedure is actually editing your dsm.opt configuration file for you, except that it's much easier now.)

To test to be sure it is working properly, close the client program and reopen it. This time it should not ask for your password, which will verify that Passwordaccess Generate is working properly.

Of course, to turn it off, do the same as above, except select Password Prompt.

After you enable Passwordaccess Generate, or after you set a new password using the second method above, you may be prompted for your password one more time -- the next time you use ADSM. After that, you will no longer be prompted for passwords again; Passwordaccess Generate will be operating to store your password for you.

It is possible for Passwordaccess Generate to get out of synchronization. That is, the password stored in your client will no longer match the password stored in the server. You'll know this has happened if it asks you for a password, again. This can happen, for instance,

• if you change your ADSM password by any method,
• if you upgrade to a newer version of the client software,
• if you lose your hard drive and you reinstall the client software from scratch in order to do your big restore,
• it can occasionally happen for no apparent reason at all. (Perhaps a network glitch occurred.)

In all of these cases, to get back into sync and resume Passwordaccess Generate operation, set a new ADSM password using the second (Web) method above, enter that new password once the next time you use ADSM, and then Passwordaccess Generate operation will resume.

Links to a complete set of IBM/Tivoli manuals for ADSM is available in the ADSM Related Links page.

Depending on the options you selected when you installed the client program, you may also have a faster-loading local copy on your PC hard drive, at
Start > Programs > Tivoli Storage Manager > Online Information

The following page explains how to restore files from ADSM backups.