Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 Introduction to Oracle Secure Backup

• What Is Oracle Secure Backup?
• Oracle Secure Backup Concepts
  • Oracle Secure Backup Administrative Domains and Hosts
    • Host Roles in an Administrative Domain
    • Host Naming in an Administrative Domain
    • Oracle Secure Backup Host Access Modes
  • Oracle Secure Backup Administrative Domain: Examples
  • Tape Devices
    • Tape Drives
    • Tape Libraries
    • Virtual Tape Libraries
    • Device Names and Attachments
• Oracle Secure Backup Interfaces
• System Requirements for Oracle Secure Backup
  • Disk Space Requirements for Oracle Secure Backup
  • Other System Requirements for Oracle Secure Backup
  • Linux Media Server System Requirement: SCSI Generic Driver
• Acquiring Oracle Secure Backup Installation Media
• Installation and Configuration Overview
• About Upgrade Installations
  • Preparing Administrative Domain Hosts for Upgrade to Release 10.2.0.2

2 Installing Oracle Secure Backup on Linux or UNIX

• Oracle Secure Backup Linux and UNIX Installation Steps
• Prerequisites for Installing Oracle Secure Backup on Linux and UNIX
  • Prerequisites for Installation on Linux
  • Required SCSI Tape Device Parameters on Linux and UNIX
    • Assigning Oracle Secure Backup Logical Unit Numbers to Devices
• Extracting Oracle Secure Backup from OTN Download on Linux or UNIX
• Preparing to Install Oracle Secure Backup on Linux and UNIX
• Creating the Oracle Secure Backup Home
• Loading Oracle Secure Backup Software on Linux or UNIX Using setup Script
• Configuring Installation Parameters in the obparameters File
• Installing Oracle Secure Backup on Linux or UNIX with installob
• Installing or Uninstalling Oracle Secure Backup on AIX
• Running installob Again to Create Device Special Files
• Creating Device Special Files with makedev
  • Linux Attach Points
• Upgrade Installation on Linux or UNIX
• Uninstalling Oracle Secure Backup on Linux or UNIX

3 Installing Oracle Secure Backup on Windows

• Preliminary Steps
• Disabling Removable Storage Service on Windows Media Servers
• Extracting Oracle Secure Backup from OTN Download on Windows
• Running the Oracle Secure Backup Windows Installer
• Configuring Oracle Secure Backup
• Configuring Firewalls for Oracle Secure Backup on Windows
• Upgrade Installation on Windows 32-Bit
• Upgrade Installation on Windows x64
• Uninstalling Oracle Secure Backup on Windows

4 Oracle Secure Backup User Interfaces

• Using Oracle Secure Backup in Enterprise Manager
  • Enabling Oracle Secure Backup Links in Oracle Enterprise Manager
  • Registering an Administrative Server in Oracle Enterprise Manager
  • Accessing the Web Tool from Enterprise Manager
• Using the Oracle Secure Backup Web Tool
  • Starting a Web Tool Session
  • Web Tool Home Page
    • Persistent Page Links
  • Web Tool Configure Page
  • Web Tool Manage Page
  • Web Tool Backup Page
  • Web Tool Restore Page
• Using obtool
  • Displaying Help for Invoking obtool
  • Starting obtool in Interactive Mode
  • Running obtool Commands in Interactive Mode
    • Redirecting obtool Input from Text Files
  • Executing obtool Commands in Noninteractive Mode
    • Running Multiple Commands in Noninteractive Mode
    • Redirecting Input in Noninteractive Mode
  • Ending an obtool Session
  • Starting obtool as a Specific User

5 Administrative Domain Configuration and Management

• Administrative Domain Configuration Overview
  • Administrative Domain Configuration Steps: Outline
• Configuring the Administrative Domain with Hosts
  • About Administrative Domain Host Configuration
  • Viewing the Hosts in the Administrative Domain
  • Adding a Host to the Administrative Domain
  • Adding the Media Server Role to an Administrative Server
  • Adding Backup and Restore Environment Variables to an NDMP Host
  • Configuring Preferred Network Interfaces (PNI)
  • Pinging a Host
  • Viewing or Editing Host Properties
  • Updating a Host
  • Removing a Host
• Adding Tape Devices to an Administrative Domain
  • Tape Device Names
  • About Configuring Tape Drives and Libraries
    • Updating a Tape Device Inventory
  • Displaying the Devices Page
  • Configuring a Tape Library
    • Configuring Automatic Tape Cleaning for a Library
  • Configuring a Tape Drive
  • Automatic Discovery of Tape Devices on NDMP Hosts
  • Adding a Tape Device Attachment
    • Pinging a Device Attachment
    • Displaying Device Attachment Properties
  • Multiple Attachments for SAN-Attached Tape Devices
  • Creating Attach Points for Solaris 10 Fibre Channel Devices
  • Pinging a Tape Device
  • Displaying Device Properties
  • Editing Device Properties

6 Security for Backup Networks

• Backup Network Security Overview
• Planning Security for an Administrative Domain
  • Identifying Assets and Principals
  • Identifying Your Backup Environment Type
    • Single System
    • Data Center
    • Corporate Network
  • Choosing Secure Hosts for the Administrative and Media Servers
  • Determining the Distribution Method of Host Identity Certificates
• Trusted Hosts
• Host Authentication and Communication
  • Identity Certificates and Public Key Cryptography
  • Authenticated SSL Connections
  • Certification Authority
    • Automated and Manual Certificate Provisioning Mode
  • Oracle Wallet
    • Oracle Secure Backup Encryption Wallet
  • Web Server Authentication
  • Revoking a Host Identity Certificate
• Encryption of Data in Transit
• Default Security Configuration
• Configuring Security for the Administrative Domain
  • Providing Certificates for Hosts in the Administrative Domain
    • Configuring the Administrative Server
    • Configuring Media Servers and Clients
  • Setting the Size for Public and Private Keys
    • Setting the Key Size in obparameters
    • Setting the Key Size in the certkeysize Security Policy
    • Setting the Key Size in mkhost
  • Enabling and Disabling SSL for Host Authentication and Communication
• Managing Certificates with obcm
  • Exporting Signed Certificates
  • Importing Signed Certificates

A Oracle Secure Backup Directories and Files

• Oracle Secure Backup Home Directory
• Administrative Server Directories and Files
• Media Server Directories and Files
• Client Host Directories and Files

B Oracle Secure Backup obparameters Installation Parameters

• customized obparameters
• start daemons at boot
• identity certificate key size
• create preauthorized oracle user
• default UNIX user
• default UNIX group
• linux ob dir and solaris64 ob dir
• linux db dir and solaris64 db dir
• linux temp dir and solaris64 temp dir
• linux links and solaris64 links
• ask about ob dir
• default protection
• run obopenssl

C Determining Linux and UNIX SCSI Parameters

• Determining SCSI Device Parameters on Linux
• Determining SCSI Device Parameters on Solaris
  • Probing SCSI Target ID and LUN for Media Devices From Solaris Open Boot PROM
  • Viewing SCSI Bus Name-Instance Parameter Values in Solaris

D Manually Configuring Solaris Drivers

• Installing the Oracle Secure Backup Device Driver Manually
• Uninstalling the Oracle Secure Backup Device Driver Manually

E Oracle Secure Backup and ACSLS

• About ACSLS
• ACSLS and Oracle Secure Backup
• Communicating with ACSLS
• Drive Association
• Volume Loading and Unloading
• Imports and Exports
• Access Controls
• Scratch Pool Management
• Modified Oracle Secure Backup Commands
• Unsupported Oracle Secure Backup Commands
• Installation and Configuration

Glossary

Index