IT13759: RECOVERY AGENT SSL CONFIGURATION DOCUMENTATION UPDATE NEEDED

Download Information: Version 8.1.0 IBM Spectrum Protectâ„¢ for Virtual Environments

APAR status

• Closed as fixed if next.

Error description

• The documentation needs to be updated to include specific
  Recovery Agent steps to enable SSL communication.
  
  Tivoli Storage Manager Versions Affected: All supported
  versions on Windows of
  Tivoli Storage Manager for Virtual Environments - Data
  Protection for VMware
  Tivoli Storage Manager for Virtual Environments - Data
  Protection for Hyper-V
  
  Initial Impact: Low
  
  Additional Keywords: Spectrum Protect RA filelevel TLS security
  encryption restore
  

Local fix

• To enable SSL communication for the Recovery Agent, follow
  these steps :
  
  1. In the server option file, specified the following options :
      ssltls12 yes
      ssltcpport <chosen SSL port>
  2. Ensure the client is configured accordingly to use SSL as
     described in the manual :
     "Tivoli Storage Manager -> Clients -> Configuring
      backup-archive clients -> Configure the Tivoli Storage
      Manager client -> Configuring Tivoli Storage Manager
      client/server communication with Secure Sockets Layer"
  3. Copy the following files from
    "C:\Program Files (x86)\Common Files\Tivoli\TSM\api\gsk8\bin"
    to directory "c:\windows\system32" :
      cert256.arm
      dsmcert.crl
      dsmcert.kdb
      dsmcert.rdb
      dsmcert.sth
  4. Located the file fb.opt in "c:\windows\system32" and add the
     following options:
      SSL yes
      ssldisablelegacytls yes -> this enables the use of ONLY
                                 TLS12
      TCPPORT  <chosen SSL port> -> same SSL port that was set on
                                    the server during step 1
  5. Set the right same ssl port in the configuration files of the
     Recovery agent:
  C:\ProgramData\Tivoli\TSM\RecoveryAgent\mount\RecoveryAgent.conf
      [Recently used]
      TSM hostname=<server hostname>
      TSM port=<chosen SSL port>
  C:\ProgramData\Tivoli\TSM\RecoveryAgent\mount\RecoveryAgentDMNod
  es.conf
      [<server hostname>:<chosen SSL port>]
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Tivoli Storage Manager for Virtual Environments Data     *
  * Protection for VMware Installation Guide V7.1.3, V7.1.4, and *
  * V7.1.6                                                       *
  *                                                              *
  * IBM Tivoli Storage Manager for Virtual Environments Data     *
  * Protection for Microsoft Hyper-V Installation and User's     *
  * Guide V7.1.3                                                 *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR description.                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

Temporary fix

Comments

• If there is a next release of Tivoli Storage Manager after 7.1,
  this APAR will be fixed in that next release
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

• R71W PSY

     UP