3 Installing Oracle Secure Backup on Windows

This chapter explains how to install Oracle Secure Backup on hosts that run the Windows operating system.

This chapter contains these sections:

3.1 Preliminary Steps

Perform these preliminary steps before you begin installation of Oracle Secure Backup software:

  • Decide which roles to assign the hosts in your network, as described in "Installation and Configuration Overview".

  • Ensure that each host has a network connection and runs TCP/IP.

  • If you are installing Oracle Secure Backup on a media server, then physically attach each tape library and tape drive that you intend to make available for use by Oracle Secure Backup. Restart the media server if required.

  • Disable any system software that scans and opens arbitrary SCSI targets before adding a tape device to an administrative domain. If Oracle Secure Backup has to contend with other system software (such as monitoring software) for access to tape libraries and drives, then unexpected behavior can result.

  • Log on to your host as either the Administrator user or as a user that is a member of the Administrators group.

  • For hosts to be used in the media server role, follow the steps in "Disabling Removable Storage Service on Windows Media Servers" to prevent conflicts between Oracle Secure Backup and other software on your system.

Note:

If you are installing Oracle Secure Backup in an Oracle Real Application Clusters (Oracle RAC) environment, then you must install Oracle Secure Backup on each node in the cluster.

3.2 Disabling Removable Storage Service on Windows Media Servers

The Removable Storage service is used to manage removable media, drives, and libraries. On Windows hosts configured for the media server role, this service must be disabled for the Oracle Secure Backup device driver to correctly control a tape device.

To disable the Removable Storage service:

  1. From the Windows Control Panel, double-click Administrative Tools.

  2. Double-click Services to view the list of services on your host.

  3. Right-click the Removable Storage service and choose Properties.

  4. In the Properties window, if the service is running, then click Stop to stop the service. Set the Startup Type field to Disabled.

  5. Click OK.

3.3 Extracting Oracle Secure Backup from OTN Download on Windows

If you do not have the Oracle Secure Backup distribution CD-ROM, then you must download the installation package as a Zip file from Oracle Technology Network (OTN) and extract it into a directory on your local hard drive.

To download and extract the Oracle Secure Backup installation Zip file on Windows:

  1. Log on to your host as a user with Administrator privileges.

  2. In Windows Explorer, create a temporary folder called osbdownload on a file system with enough free space to hold the downloaded installation file.

  3. Open a Web browser and go to the Oracle Secure Backup Web site on Oracle Technology Network (OTN):

    http://www.oracle.com/technology/products/secure-backup

  4. Click Free Download.

    The Oracle Technology Network Developer License Terms page appears.

  5. Read Export Controls on the Programs and select the Yes, I accept... option.

    Read the Oracle Technology Network Development License Agreement and click I Accept.

    The Oracle Secure Backup Downloads page appears.

  6. Select the Accept License Agreement option, and click the link for the version of Oracle Secure Backup release 10.3 specific to your operating system.

    Note:

    If you have multiple operating systems in your environment, then you must perform multiple downloads of the Oracle Secure Backup release 10.3 software.

  7. The Oracle Secure Backup release 10.3 installation software is compressed. Save it to a temporary directory, and expand it to the osbdownload directory you created in step 2.

You now have all of the files required to install Oracle Secure Backup release 10.3.

3.4 Running the Oracle Secure Backup Windows Installer

Complete the following steps to install Oracle Secure Backup on a Windows host:

Note:

If you are installing Oracle Secure Backup in an Oracle RAC environment, then you must install Oracle Secure Backup on each node in the cluster.

  1. Select one of these install options:

    • If you are installing Oracle Secure Backup from a CD-ROM, then insert the CD-ROM. If AutoPlay is enabled, then the setup.exe program starts automatically and opens the Oracle Secure Backup Setup Wizard.

      If Windows AutoPlay is not enabled, then open the drive containing the installation CD-ROM using Windows Explorer and run the setup.exe program.

    • If you are installing Oracle Secure Backup from an Oracle Technology Network (OTN) download, then run the setup.exe program from the folder into which the download Zip file contents were extracted.

    The Oracle Secure Backup Setup Wizard starts and the Welcome screen appears.

    Description of ob_win22.gif follows
    Description of the illustration ob_win22.gif

  2. Click Next to continue.

    If you have uninstalled Oracle Secure Backup software before beginning this installation, or if you have never installed it on this computer, then the Clean Install page appears.

    Description of ob_win23.gif follows
    Description of the illustration ob_win23.gif

  3. Click Next to continue.

    The Customer Information screen appears.

    Description of ob_win24.gif follows
    Description of the illustration ob_win24.gif

  4. Enter your customer information as follows:

    1. Enter a user name in the User Name field.

    2. Enter the name of your company in the Organization field.

    3. Select one of these options:

      • Anyone who uses this computer

        This option allows anyone who has access to this computer to use Oracle Secure Backup.

      • Only for me

        This option limits use of Oracle Secure Backup to you.

    Click Next to continue.

    The Oracle Secure Backup Setup screen appears.

    Description of ob_win25.gif follows
    Description of the illustration ob_win25.gif

  5. A single host can have multiple roles, which are are additive rather than exclusive. You have the following options when choosing roles:

    • To install the Windows host as client only, click Next and go to step 9.

      Note:

      Every installation of Oracle Secure Backup on Windows includes a client installation.

    • If you want this Windows host to serve as a media server, then select the Configure locally attached media devices option, click Next, and go to step 9.

      Oracle Secure Backup always installs the software required for the media server role. But if you want this Windows host to have the media server role in your Oracle Secure Backup administrative domain, then you must complete the Oracle Secure Backup software installation, configure any tape devices attached to this host, and then add the media server role.

      If you select the Configure locally attached media devices option, then the Oracle Secure Backup Configuration utility enables you to configure the tape devices attached to this computer. If you do not select this option, then the Oracle Secure Backup Configuration utility ignores any attached tape devices.

      See Also:

    • To install the Windows host as an administrative server, click the Administrative Server list and select This feature will be installed on local hard drive.

      Description of ob_win26.gif follows
      Description of the illustration ob_win26.gif

      Selecting this option removes the X from the administrative server icon and includes the administrative server role in the installation.

      Description of ob_win27.gif follows
      Description of the illustration ob_win27.gif

  6. If you plan to perform Oracle Database backup and restore operations with RMAN, then enable the action for Create "oracle" user in the administrative server submenu.

    Description of ob_win28.gif follows
    Description of the illustration ob_win28.gif

    If this option is enabled, then the installer creates an Oracle Secure Backup user called oracle (with the rights of the oracle class) whose purpose is to facilitate Oracle Database backup and restore operations with Recovery Manager (RMAN).

    Description of ob_win29.gif follows
    Description of the illustration ob_win29.gif

    Note:

    • You are required to create the oracle user only if you plan to use Oracle Secure Backup with RMAN.

    • If you intend to use Oracle Secure Backup to perform one-time, RMAN-initiated, or unprivileged backup operations on Windows clients, then you must modify the Oracle Secure Backup admin and oracle users to assign them Windows credentials (a domain, user name and password) that are valid at the client with required privileges after you complete the Oracle Secure Backup installation. Otherwise, Oracle Secure Backup cannot perform the backup operation. This requirement applies regardless of the platform that acts as the administrative server.

    • The installer assigns a random password to the oracle user. In most cases you are not required to change the assigned password, because it is not usually necessary to log in to Oracle Secure Backup using this user account.

    • Before electing to create an Oracle Secure Backup oracle user, be aware that this choice involves a trade-off between convenience and security.

    See Also:

    Oracle Secure Backup Reference for more information about the oracle class

    If you do not plan to use Oracle Secure Backup to back up your databases, then leave the Create "oracle" user option unselected. This is the default.

    In addition to the options described in step 6, you can perform the following actions in the Oracle Secure Backup Setup screen:

    • Click Help for detailed descriptions of the installation options.

    • Click Change to change the destination folder for the installation.

    • Click Space to display the disk space required for the installation.

    Click Next to continue.

    The Oracle Secure Backup Encryption Key Store Password screen appears.

    Description of ob_win30.gif follows
    Description of the illustration ob_win30.gif

  7. Enter a password for the Oracle Secure Backup encryption wallet in the Password for encryption wallet field.

    Enter the password again in the Re-type password for verification field.

    Click Next.

    The Oracle Secure Backup Admin User Password and Email screen appears.

    Description of ob_win31.gif follows
    Description of the illustration ob_win31.gif

  8. Enter a password for the Oracle Secure Backup admin user in the Password for 'admin' user field.

    Enter the password again in the Re-type password for verification field.

    The minimum password length is determined by the minuserpasswordlen security policy. Its value at installation time is 0, which means a null password is permitted. After the installation has completed, you can change this policy to enforce a different minimum password length.

    See Also:

    Oracle Secure Backup Reference for more information on the minuserpasswordlen security policy

    Note:

    Oracle suggests that you choose an administrative user password of at least eight characters in length, containing a mixture of alphabetic and numeric characters. The maximum length is 16 characters.

    The practice of supplying a password in clear text on a command line or in a command script is not recommended by Oracle. It is a security vulnerability. The recommended procedure is to have the user be prompted for the password.

    Enter an e-mail address in the Email address for 'admin' user: field.

    Entering an email address for the admin user enables Oracle Secure Backup to send notifications of important events. Setting this field is optional.

    Note:

    The default from address for e-mails generated by Oracle Secure Backup is SYSTEM@fqdn, where fqdn is the fully qualified domain name of the Oracle Secure Backup administrative server. You can change this default from address after installation. See Oracle Secure Backup Reference for more information.

    Click Next.

    The Ready to Install the Program screen appears.

    Description of ob_win12.gif follows
    Description of the illustration ob_win12.gif

  9. Click Install to start copying files.

    A progress bar appears. When the files are copied the InstallShield Completed screen appears.

    Description of ob_win13.gif follows
    Description of the illustration ob_win13.gif

  10. Click Finish.

    The Oracle Secure Backup software installation on this Windows host is complete. You can now configure this installation, using the Oracle Secure Backup Configuration utility that starts automatically. Instructions on using this utility appear in "Configuring Oracle Secure Backup".

3.5 Configuring Oracle Secure Backup

This section explains how to configure Oracle Secure Backup using the Oracle Secure Backup Configuration utility. This utility starts automatically when you click Finish on the final Installshield Wizard screen during the installation of Oracle Secure Backup.

If you complete this initial configuration and subsequently want to view or change your configuration settings, then you can revisit the Oracle Secure Backup Configuration utility in either of two ways:

  • Select Start > All Programs > Oracle Secure Backup > Oracle Secure Backup Configuration

  • Enter obcfg at the command line

Complete the following steps to configure Oracle Secure Backup on a Windows host:

  1. Start the Oracle Secure Backup Configuration utility.

    Note:

    This step is unnecessary if you are configuring Oracle Secure Backup on a Windows host for the first time, because the Oracle Secure Backup Configuration utility starts automatically after the Oracle Secure Backup software installation process.

    The Oracle Secure Backup Configuration welcome screen appears.

    Description of ob_win14.gif follows
    Description of the illustration ob_win14.gif

  2. Click Next.

    The Oracle Secure Backup Service Startup screen appears.

    Description of ob_win15.gif follows
    Description of the illustration ob_win15.gif

  3. Select one of these modes in which to start the Oracle Secure Backup service:

    • Automatic

      The Oracle Secure Backup service starts automatically when you restart your host.

    • Manual

      The Oracle Secure Backup service must be started manually by a user who is a member of the Administrators group.

    • Disabled

      The Oracle Secure Backup service is disabled.

    Click Next.

    The Oracle Secure Backup Service Logon screen appears.

    Description of ob_win16.gif follows
    Description of the illustration ob_win16.gif

  4. By default, the Oracle Secure Backup service logs on as the Local System account, which is an administrative account. You can select option This Account to specify a different account for the Oracle Secure Backup Service.

    Select one of these options:

    • System Account

      Select this option if you plan to run the Oracle Secure Backup service daemon (and associated subordinate daemons) with full privileges.

    • This Account

      Select this option if you plan to run the Oracle Secure Backup service daemon (and associated subordinate daemons) with the privilege set associated with an existing Windows user account. You must fill in the Windows user account name and password.

      If you choose this option, then you must ensure that the Windows user account you select meets the following criteria:

      • The account you choose must belong to the Backup Operators group.

      • No change in password at login is required of the account.

      • The account must be set so that the password never expires.

      • The account must have backup and restore rights.

      • The account must be able to restore files and directories.

      • The account must be able to log on as a service.

      • The account must be able to act as part of the operating system.

      • The account must be able to increase quotas.

      • The account must be able to replace a process level token.

    Click Next or Finish to proceed. If you are configuring a media server, then proceed to step 5.

    Description of ob_win17.gif follows
    Description of the illustration ob_win17.gif

  5. Select the tape library and tape drive to assign to the Oracle Secure Backup device drivers. After a short delay, the devices are redisplayed with check marks in the first column and an Oracle Secure Backup device name for each of them in the last column. Make a note of the device name assigned to each device. You must have these device names when you set up the devices in Oracle Secure Backup later on.

    Description of ob_win18.gif follows
    Description of the illustration ob_win18.gif

  6. Click Finish.

    When you have performed all of the preceding tasks, Oracle Secure Backup installation and configuration on this host is complete. Repeat this installation and configuration process for each Windows host in your administrative domain.

3.6 Configuring Firewalls for Oracle Secure Backup on Windows

Windows XP Service Pack 2 and Windows Server 2003 contain a built-in Windows Firewall which, in the default configuration, blocks inbound traffic on ports used by Oracle Secure Backup.

If your Windows host is protected by a firewall, then the firewall must be configured to permit Oracle Secure Backup daemons on the host to communicate with the other hosts in your administrative domain. Oracle Secure Backup includes daemon components that listen on port 400, port 10000, and other dynamically assigned ports.

Because the dynamically assigned ports used by Oracle Secure Backup span a broad range of port numbers, your firewall must be configured to allow executables for the Oracle Secure Backup daemons to listen on all ports.

The Oracle Secure Backup Windows installation provides a sample batch script called obfirewallconfig.bat in the bin directory under the Oracle Secure Backup home.

This script contains commands that make the required configuration changes for the Windows Firewall on Windows Server 2003 and Windows XP systems having a single network interface. Review the script to determine whether it is suitable for your environment. You can run the script after the installation completes.

For details on configuration of other firewalls, see the documentation provided by the vendor. You can refer to the sample script for the Windows Firewall to determine the names of executables that need permission to listen on ports.

3.7 Upgrade Installation on Windows 32-Bit

You can upgrade your Windows 32-bit administrative server, media servers, and clients from Oracle Secure Backup release 10.2 to Oracle Secure Backup release 10.3 simply by running the Oracle Secure Backup release 10.3 installer. This is called an upgrade installation. The installer detects the existing installation of Oracle Secure Backup and runs the uninstaller for the previous version automatically before beginning the installation of Oracle Secure Backup release 10.3.

When you upgrade your administrative server from Oracle Secure Backup release 10.2 to Oracle Secure Backup release 10.3, the uninstaller displays the following prompt:

This system was configured as an Oracle Secure Backup Administrative Server.

Oracle Secure Backup creates files specific to this administrative 
domain in the "admin" directory. Would you like to keep these files 
in case you reinstall Oracle Secure Backup? 

If you choose "Delete" all files related to Oracle Secure Backup 
will be removed from this system. If you choose "Keep" the files 
specific to this administrative domain will be retained.

You must choose the Keep option for the admin directory files. Selecting the Delete option causes the installation to be incomplete, and then you must uninstall and reinstall Oracle Secure Backup to complete the installation. If you do not want to save the existing admin directory files, then you must exit the installation, uninstall Oracle Secure Backup release 10.2, and select the Delete option. After you have uninstalled Oracle Secure Backup release 10.2, you can install Oracle Secure Backup release 10.3 by running the Oracle Secure Backup release 10.3 installer.

You can upgrade your Windows 32-bit administrative server and clients from Oracle Secure Backup release 10.1 to Oracle Secure Backup 10.3 with an upgrade installation, so long as the administrative server is not also a media server.

When you upgrade your administrative server from Oracle Secure Backup release 10.1 to Oracle Secure Backup release 10.3, you should select the Keep option to keep the existing configuration of your administrative domain. If you select the Delete option, then the Oracle Secure Backup release 10.3 installation succeeds, but you must to reenter all of your Oracle Secure Backup configuration settings.

An upgrade installation does not successfully upgrade a media server or an administrative server that is also a media server from Oracle Secure Backup release 10.1 to Oracle Secure Backup release 10.3. In this special case, you can use the following procedure:

  1. Uninstall the existing Oracle Secure Backup software.

    See Also:

    "Uninstalling Oracle Secure Backup on Windows"

  2. Select the Keep option if you are upgrading an administrative server that is also a media server.

  3. Restart the host.

  4. Run the Oracle Secure Backup release 10.3 installer.

3.8 Upgrade Installation on Windows x64

Different upgrade installation procedures must be used for Windows x64 than those described in "Upgrade Installation on Windows 32-Bit". You can use the following procedure to upgrade a Windows x64 administrative server or client, so long as the administrative server is not also a media server:

  1. Uninstall the existing Oracle Secure Backup software, selecting the Keep option if you are upgrading an administrative server.

    See Also:

  2. Run the Oracle Secure Backup release 10.3 installer.

You can use the following procedure to upgrade a Windows x64 media server or administrative server that is also a media server:

  1. Uninstall the existing Oracle Secure Backup software, selecting the Keep option if you are upgrading an administrative server that is also a media server.

  2. Restart the host.

  3. Run the Oracle Secure Backup release 10.3 installer.

3.9 Uninstalling Oracle Secure Backup on Windows

Complete the following steps to uninstall Oracle Secure Backup on Windows:

  1. Select Start > All Programs > Oracle Secure Backup > Uninstall Oracle Secure Backup.

    A confirmation dialog appears.

  2. Click Yes to remove Oracle Secure Backup from your computer.

  3. If you configured your host as an administrative server, then an additional window opens asking whether you want to preserve the files specific to your administrative domain. Select one of these options:

    • Click Delete if you do not want to retain the administrative domain files.

    • Click Keep to retain the administrative domain files.

      If you click Keep to retain the administrative domain files, then the configuration of your administrative domain is preserved. This is useful for reinstallation of the Oracle Secure Backup software later.

Oracle Secure Backup is now uninstalled from your host.