Connecting an IBM Storage Protect server to Data Management

Connecting an existing IBM Storage Protect server to IBM Storage Defender Data Management Service (Data Management) allows you to manage IBM Storage Protect server backups from Data Management along with your other clusters.

About this task

To connect or "claim" an IBM Storage Protect server, complete the procedure to download and install the IBM Storage Defender connection agent. Install the IBM Storage Defender connection agent on the IBM Storage Protect server that you are claiming or on another system that has network connectivity to the IBM Storage Protect server.

Note: The IBM Storage Defender connection agent and the IBM Storage Protect server can run on different systems. It is also supported to connect to a IBM Storage Protect server that is running on a different operating system and platform like AIX®, Power® Linux®, or Windows.

The system where you install the agent must meet the following requirements:

Must be running on a supported operating system:
- Red Hat® Enterprise Linux x86_64, version 8.7 or later RHEL 8 fix packs
- SUSE Linux Enterprise Server x86_64, version 15.0 or later SLES 15 fix packs
The IBM Storage Protect server that you are claiming must be running IBM Storage Protect 8.1.18 or later versions.
Must be able to connect with IBM Storage Defender directly or through an HTTPS proxy.

Procedure

From the hamburger icon on IBM Storage Defender , click Data Management then click Connection agents. The Connections agents page is displayed.

Important: To register an IBM Storage Protect server by using the Defender connection agent, your Data Management user account must have Admin role privileges.
Click Download agent to download the Defender connection agent file to the Downloads directory on your local system.
To install the Defender connection agent, complete the following steps:
1. Extract the file that you downloaded in step 2 by issuing the following command from the terminal:
```
tar -xvf defender-agent-filename-tar.gz
```
  Where defender-agent-filename-tar.gz is the name of the downloaded file.
2. Run the following installation script as sudo by specifying a local user account:
```
sudo ./install-eagle-agent.sh -u <user>
```
  Where, <user> is the name of an existing user account on your local system that will be used to run the Defender connection agent after the agent is installed. Designate a user account that does not have administrator rights for the local system. After the Defender connection agent is installed, the agent will always run as the specified user.
  Note: To specify that the Defender connection agent must use an HTTPS proxy to connect to Data Management, specify the --proxy parameter on the installation script by issuing the following command:
```
sudo ./install-eagle-agent.sh -u user --proxy <https://address:port>
```
Register the IBM Storage Protect server with Data Management by issuing the following dcli server register command.
Remember: Run dcli commands by using the local user account that you specified in step 3.b.
```
/opt/ibm/defender/bin/dcli server register -a <admin_name> -p <password> -d <server_ip_address> -o <port> -n <server_nickname> -t <truststore_password>
```
Where
- <admin_name> is the IBM Storage Protect server administrator name that is used to authorize the server registration to Data Management.
- <password> is the IBM Storage Protect server administrator password.
- <server_ip_address> is the IP address or hostname for the IBM Storage Protect server.
- <port> is the IBM Storage Protect server port number.
- <server_nickname> is a user-specified nickname for the IBM Storage Protect server that will be displayed in Data Management.
- <truststore_password> is the truststore password.
Example: /opt/ibm/defender/bin/dcli server register -a adminA -p myp@ssword -d server1.mycity.mycompany.com -o 1500 -n server1 -t secretpassword
Note: After you register the server with Data Management, a new administrator who is named ibm-eagle-agent-admin is created on the IBM Storage Protect server. This new administrator account has a low level of system privilege and is used by the IBM Storage Defender eagle agent service to retrieve information from the IBM Storage Protect server.
Connect the registered IBM Storage Protect server to Data Management by completing the steps to claim the server:
1. From the IBM Storage Defender page, click All Clusters and navigate to Settings > Access Management.
2. On the Access Management page. Select the Tokens tab.
3. Click the Create button in the upper right corner of the screen.
  The Create Token pop-up window appears with the two following input fields:
  - Name – The Name field is the name of this token. It can be any name you like, for example: SP Server Armonk 001.
  - Type – Change this from DataProtect to IBM Storage Protect. Then click Create , which creates a token.
4. Before closing the Create Token window, copy the token by selecting the copy icon.
5. Register the claim by issuing the dcli claim register command from the terminal, paste the token from previous step:
```
/opt/ibm/defender/bin/dcli claim register --token token-copied-from-previous-step
```
Start the Defender connection agent by issuing the eagle-agent start command:
```
/opt/ibm/defender/bin/dcli eagle-agent start
```
To verify that the IBM Storage Protect server was successfully connected, launch Data Management and navigate to All Clusters > Settings > Clusters. The Cluster Management page is displayed.
If the cluster connection was successful, the Connection column displays a Connected status for the cluster.
Shows up under "cluster management"