Configuring self-contained application protection

Configuring self-contained application protection requires the Tivoli® Storage Manager backup-archive client GUI.

1. In the Tivoli Storage Manager backup-archive client GUI, click Edit > Client preferences > VM Backup and specify the VMware Virtual Center or ESX Server host, user, and password information.
2. Click Apply and exit the backup-archive client GUI.
3. Add INCLUDE.VMTSMVSS vmname to either the client options file dsm.opt or the client system options file (dsm.sys). To prevent SQL server logs from being truncated when a data mover node backs up a VM that runs a SQL server, append this statement to the options file:

   INCLUDE.VMTSMVSS vmname OPTions=KEEPSqllog

4. On the command line, type dsmc set password -type=vmguest vmguestname AdminID AdminPswd to store the guest VM password. The following minimum permissions are required for AdminID AdminPswd:
   For Microsoft SQL Server:

   • Backup rights: Users with the db_backupoperator database role are granted to run the self-contained application data backup. If the user is a member of the SQL Server sysadmin fixed server role, the user can back up any databases of Microsoft SQL Server instance. The user can also back up the databases for which the user is the owner and does not have backup rights to a specific database. The guest VM user must have permission to create Volume Shadow Copies and to truncate SQL Server logs.
   • Restore rights: If the database exists, the user can perform the restore if the user is a member of the dbcreator fixed server role, or if the user is the database owner. Users with Microsoft SQL Server sysadmin fixed server role, have rights to restore a database from any backup sets. For other users, the situation depends on whether the database exists.
   For Microsoft Exchange Server:

   • Backup rights:
     • Microsoft Exchange Server 2003: Membership in the Domain backup operators group.
     • Microsoft Exchange Server 2007: Membership in the local Backup Operators group, or membership in the local Administrator group.
     • Microsoft Exchange Server 2010: Organization Management permissions (membership in the management role group, Organization Management).
   • Restore rights:
     • Microsoft Exchange Server 2003: Full Exchange Administrator Role.
     • Microsoft Exchange Server 2007: Exchange Organization Administrator role (required for storage group creation).
     • Microsoft Exchange Server 2010: Organization Management permissions (membership in the management role group, Organization Management).
   In addition to these requirements, User Account Control (UAC) must be disabled in Microsoft Windows 2008 and Microsoft Windows 2012. After the UAC is disabled, the Windows system must be restarted for the change to take effect.
5. Back up the VM by issuing the dsmc backup vm command.