Installing the Granular Restore remote package

Edit online

From the MMC GUI deployed with the IBM Storage® Protect Plus installation, you can restore Exchange individual mailbox by using granular restore operations from any supported server in your enterprise.

Before you begin

If your machine do not have the following software prerequisites by Microsoft, you must install to use the granular restore feature:
  • Windows PowerShell
  • Microsoft Windows Management Framework
  • Microsoft Visual C++ Redistributable Packages
  • Microsoft .NET Framework
  • Microsoft ReportViewer
  • Microsoft SQL Server System CLR Types
For the supported versions of the software prerequisites, see the hardware and software requirements for IBM Storage Protect Plus for Exchange.

The remote Outlook server and Exchange server must be in the same domain.

About this task

During the process of installing and configuring the granular restore package, you complete the following actions:
  1. Deploy the granular restore package to a remote server that has Microsoft Outlook installed
  2. Configure remote connection between the remote server and Application server
  3. Run the MMC GUI on the remote server

Deploy the granular restore package to a remote server that has Microsoft Outlook installed

The following steps are to be completed for one-time installation. When the granular restore package is installed, you can continue to restore by using granular restore operations at any time.
  1. Copy the granular restore package C:\Program Files\IBM\IBM Storage Protect Plus\tools\exchange\imr from the application server to the remote server where you plan to manage the granular restore operation. For the prerequisites of the remote server, see the hardware and software requirements for IBM Storage Protect Plus for Exchange.
  2. On the remote Outlook server, run the following commands to install the package. These commands assume that you copied to the c:\temp directory directory.
    1. To create installation diagnostics folder:
      mkdir C:\temp\diag
    2. To install MMC GUI and granular restore components:
      C:\temp\imr\install_imr.bat <version>-TIV-TSMEXC-Win.exe <10.1.15> c:\temp remote
      where,

      • <version> is the MMC GUI version.

      • <10.1.15> is the version of IBM Storage Protect Plus that you have.

Configure remote connection between the remote server and Application server

After installing the granular remote package, complete the following steps to configure the remote connection:

  1. Complete the following pre-checks:
    1. Verify that the Windows Firewall allows inbound connections on the remote server.
    2. To enable and verify the group policy delegation option, complete the following steps:
      1. Open gpedit.
      2. Navigate to Computer Settings > Administrative Templates > System > Credentials Delegation.
      3. Enable the Allow Delegating Fresh Credentials setting.
    3. Run the PowerShell console as an Administrator.
  2. To set the hostnames for the remote server and Application server, issue the following command:
    Note: The Application server runs the Exchange server. The remote server performs the granular restore operation and has installed the Microsoft 32-bit Outlook 2016 or later version as the MAPI client.
    $remote_server_host_name = "outlook1.domain.org"
    $app_server_host_name = "exchange1.domain.org"
  3. Enable remote management for the MMC GUI that is deployed with IBM Storage Protect Plus by issuing the following PowerShell command: 
    Enable-PSRemoting -Force
    Depending on your environment, you might be required to add trusted hosts to the Exchange Server and to the server where the MMC GUI is deployed.
    1. Add the Application Server and remote server to the trusted hosts list by issuing the following command on each system:
      Set-Item WSMan:\localhost\Client\TrustedHosts -Value "$remote_server_host_name,$app_server_host_name" -Force -Concatenate
    2. Restart the winrm service by entering the following command:
      Restart-Service winrm
  4. Enable the Windows PowerShell Remoting feature with Credential Security Support Provider (CredSSP) authentication. Complete the following steps:
    1. On the remote server, issue the following command to enable the Windows PowerShell Remoting feature with CredSSP:
      Enable-WsmanCredSsp -Role Client -DelegateComputer $app_server_host_name -Force
    2. On the Application Server that will run the granular restore operation, enter the following command to enable the Windows PowerShell Remoting feature with CredSSP:
      Enable-WsmanCredSsp -Role Server -Force
  5. Verify that the Windows PowerShell Remoting feature is configured by using one of the following methods: Use the Test-WSMan command to test whether the WinRM service is running on the remote computer.
    • On the remote server, issue the following command to verify that the Windows PowerShell Remoting feature is configured correctly:
      Test-WSMan $app_server_host_name
    • On the Application Server, issue the following command to verify that the Windows PowerShell Remoting feature is configured correctly:
      Test-WSMan $remote_server_host_name
  6. Optionally, for additional remote configuration verification, complete the following steps:
    1. Set the credentials object you used. Usually that is a domain administrator: $creds = Get-Credential
    2. On the Application Server and remote server, to verify basic remote connection, issue the following command:
      Invoke-Command -ComputerName $remote_server_host_name -ScriptBlock { pwd } -Credential $creds
      Invoke-Command -ComputerName $app_server_host_name -ScriptBlock { pwd } -Credential $creds
    3. On the Application Server and remote server, issue the following command to verify CredSSP authentication is enabled:
      Invoke-Command -ComputerName $app_server_host_name -ScriptBlock { pwd } -Credential $creds -Authentication CredSsp
      If authentication is not enabled, use the following localhost path and then repeat the step to verify authentication:
      Set-Item "WSMAN:\localhost\service\auth\credssp" -Value "$true"

Run the MMC GUI on the remote server

Complete the following steps to run the MMC GUI on the remote server to restore by using the granular restore operations.

  1. Run the MMC GUI application by issuing the following command:
    C:\Program Files\IBM\IBM Storage Protect Plus\tools\exchange\mmc\FlashCopyManager.exe
  2. To add the Application Server in MMC GUI, complete the following steps:
    1. Click Actions > Manage Computers to open Manage Computers window.
    2. Click the plus-sign icon in Computers panel and enter the Application Server name.
    3. Click Set Account icon and enter user credentials for the Application Server.

      Use the same credentials as used by IBM Storage Protect Plus GUI and navigate to: Manage Protection > Applications > Exchange > Backup > Manage Application Servers > Add Application Server.

  3. To test connection to the Application Server, complete the following steps:
    1. Select Application Server node >, click Test Connection button.
    2. Verify connection status Connected successfully is shown in Message column.
    3. Click OK to close Manage Computers window.