Determining the IBM Storage Protect password method

Edit online

Specify how Data Protection for SAP manages the IBM Storage Protect™ password. There are three options.

About this task

There are three methods of password handling:
No password is required

No authentication is completed on the IBM Storage Protect server. Each user that is connected to the backup server can access IBM Storage Protect data without a password. This method is advised only if adequate security measures are established.

For example, no password might be acceptable when the IBM Storage Protect is only used for SAP, and authentication and authorization is done at the operating system level. This scenario is valid when no other clients are registered to the IBM Storage Protect.

Manual handling of password

A password is required for each connection to the IBM Storage Protect server. In this method, Data Protection for SAP stores the encrypted password in its configuration files.

While the password does not expire and is not changed on the IBM Storage Protect server, Data Protection for SAP automatically uses the stored password when it connects to IBM Storage Protect. This method provides password security and can be set up easily. Whenever the password expires or is changed, the new password must be set with this command: 

backom -c password [-x]
(UNIX™ or Linux™): 
backint -p full path to UTL file/initSID.utl -f password
(Windows™): 
backint -p full path to UTL file\initSID.utl -f password
On Windows, the path can also be specified in UNC notation (for example: -p \\SERVER_A\dpsap\initSID.utl. However, the password updates must be synchronized on the IBM Storage Protect server with the update node command. These steps must also be repeated whenever the IBM Storage Protect password expires. Therefore, this method must be used only during installation or testing, and a long password expiration period must be specified. Manual password handling is not advised for production operations.
If you are setting the password to be automated (such as in a script), enter this command: 
backom -e path/initSID.utl -c password
serverA:nodeA:passwordA serverB:nodeB:passwordB [-x]
 backom -e full path/initSID.utl
    -c password  serverA:nodeA:passwordA serverB:nodeB:passwordB [-x]
where passwordA is the password for IBM Storage Protect node nodeA on IBM Storage Protect server serverA.
Note:
  1. The interactive password prompt is omitted only if the passwords for all server stanzas in the.utl file are specified.
  2. There is a potential security risk when you record IBM Storage Protect passwords in a script.
Automatic handling of password

A password is required for each connection to the IBM Storage Protect server. After the first connection, the password is managed by IBM Storage Protect. The IBM Storage Protect client stores the current password locally. When the password expires, the password is changed and stored automatically.

If you schedule your backups or restore from a system user different from the database owner, you must grant access permissions to your data files on disk for this user. Specify the IBM Storage Protect password in use before you start by using Data Protection for SAP to connect to the server. Whenever the password is changed manually on the IBM Storage Protect server, again connect to the server and update the password with the command update node. Use the following command for automatic password handling: 
backom -c password [-x]
This method is advised for an automated production environment.
Automatic handling of password

A password is required for each connection to the IBM Storage Protect server. After the first connection, the password is managed by IBM Storage Protect. The IBM Storage Protect client stores the current password locally. When the password expires, the password is changed and stored automatically. If you are planning to use Oracle RMAN and schedule your backups or restores from a system user different from the database owner, you must grant access permissions to your data files on disk for this user.

You must specify the IBM Storage Protect password currently being used by using Data Protection for SAP to connect to the server. Whenever the password is changed manually on the IBM Storage Protect server, use the update node command to update the password. Use the following command for automatic password handling:

(UNIX or Linux): 
backint -p full path to UTL file/initSID.utl -f password
This method is advised for an automated production environment.
Windows: 
backint -p full path to UTL file\initSID.utl -f password
On Windows, the path can also be specified in UNC notation (for example: -p \\SERVER_A\dpsap\initSID.utl
Automatic handling of password
A password is required for each connection to the IBM Storage Protect server. After the first connection, the password is managed by IBM Storage Protect. The IBM Storage Protect client stores the current password locally. When the password expires, the password is changed and stored automatically.