Tsm node name and password, Set or reset the node’s password, Enabling backup data encryption for a client – Storix Software SBAdmin TSM Edition Users Guide User Manual

Page 26: Tape for local system backups

Advertising
background image

To add a new client, enter the hostname of the client in the entry field at the top. Note that the hostname you
enter may be a simple hostname (i.e. ariel), a full domain name (goofy.storix.com) or IP Address and must be
known to the

admin system

. Then select any optional features that apply to this client. When you’ve made your

selections, select

Save

to save.

To change an existing client, you may type the client name, or use the arrow button to the left of the field to
select from a list of configured clients. You may then select or deselect optional features, change other entries,
change the TSM password of the client on the server, or remove the client.

TSM Node Name and Password

You must enter the nodename of the client in the

NODEname field. This is the name of the client system as

known to the TSM server. The password of the client will be require if the PASSWORDAccess option of the
TSM server is set to “prompt”, since the password must be provided with each command executed
between the client and server. This password will be stored on the client in a protected file, and in non-
textual form, for use by SBAdmin commands.

Set or Reset the Node’s Password

This screen can also be used to set or reset the password of the node on the server by selecting the

TSM

Server in the drop-down list, and entering a new password in the New PASSWORD field. In this case, you
must also enter the

Current PASSWORD, regardless of the PASSWORDAccess option of the server.

Enabling Backup Data Encryption for a Client

The

Data Encryption option will be enabled only if the Backup Data Encryption Feature is installed. If so,

you may select this button to indicate that data may be encrypted when backing up this client. Any type of
data, for any client type, may be encrypted using 128, 192, or 256-bit AES encryption. Encryption is
configured for specific clients according to the number of clients your encryption license supports. You may
only select this button for the number of clients your encryption license supports.

Enabling data encryption for a client does not cause all backups to be encrypted
automatically. It only designates which clients will support encryption. For clients
that support encryption, the encryption option becomes available when configuring

backup jobs

.


To encrypt data for a client, each client must have at least one configured Encryption Key. The encryption
key must be a 32, 48 or 64-byte hexadecimal number, depending on the number of bits of encryption used.
An encryption key will be given a user-defined Encryption Key ID, and you may have as many Key IDs as
you like. You will later select which Key ID to use when performing a particular backup.

To prevent encryption keys from ever being transmitted across the network, the encryption keys may not be
configured from within the GUI interface, and client keys may not be configured from the admin system.
Instead, you must run the

stkeys command on each client for which encryption is to be used. Refer to

stkeys in the

Commands Reference Guide

, and the

Encrypt data

field in the backup job configuration for

additional information.

Tape for Local System Backups

A client may perform a System Backup to its own direct-attached tape drive, if available. This allows any
client with a tape drive to backup to itself without the use of a server or any network traffic. This tape may
then be used to reinstall this client. You can move the tape or tape drive to a server to make the backup
available to any client, or you can move the tape or tape drive to any other client to allow then to perform a
local system recovery.

Storix System Backup Administrator

26

Version 8.2 TSM Edition User Guide

Advertising