Вы находитесь на странице: 1из 484

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

D57258GC10

Edition 1.0

March 2009

Part Number

use only. D57258GC10 Edition 1.0 March 2009 Part Number ® Oracle Database 11 g : Oracle

®

Oracle Database 11g: Oracle Secure Backup

Volume I Student Guide

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Author

Maria Billings

Technical Contributors and Reviewers

Christian Bauwens

Donna Cooksey

Gerlinde Frenzen

Steven Fried

Donna Keesling

Isabelle Marchand

Judy Panock

Branislav Valny

Editor

Raj Kumar

Graphic Designer

Satish Bettegowda

Publisher

Syed Ali

Nita Brozowski

Copyright © 2009, Oracle. All rights reserved.

Disclaimer

This document contains proprietary information and is protected by copyright and other intellectual property laws. You may copy and print this document solely for your own use in an Oracle training course. The document may not be modified or altered in any way. Except where your use constitutes "fair use" under copyright law, you may not use, share, download, upload, copy, print, display, perform, reproduce, publish, license, post, transmit, or distribute this document in whole or in part without the express authorization of Oracle.

The information contained in this document is subject to change without notice. If you find any problems in the document, please report them in writing to: Oracle University, 500 Oracle Parkway, Redwood Shores, California 94065 USA. This document is not warranted to be error-free.

Restricted Rights Notice

If this documentation is delivered to the United States Government or anyone using the documentation on behalf of the United States Government, the following notice is applicable:

U.S. GOVERNMENT RIGHTS The U.S. Government’s rights to use, modify, reproduce, release, perform, display, or disclose these training materials are restricted by the terms of the applicable Oracle license agreement and/or the applicable U.S. Government contract.

Trademark Notice

Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Contents

Preface

I Introduction to Oracle Database 11g: Oracle Secure Backup Objectives I-2

Course Objectives

Suggested Schedule

The Product in Context

I-3

I-4

I-5

Your Learning Aids

Oracle Secure Backup Documentation

Additional Resources

I-6

I-8

I-7

1 Oracle Secure Backup Overview Objectives 1-2 What Is Oracle Secure Backup?

1-3

Oracle Secure Backup Tape Backup Management

Tape Management and Integration with Oracle Products

The Integration Advantage

Client/Server Architecture Host Roles Oracle Secure Backup Architecture

Oracle Secure Backup for Centralized Tape Backup Management

Typical SAN Environment

Oracle Secure Backup Interface Options

Media Concepts: Overview

Backup Pieces and Backup Images

RMAN and Oracle Secure Backup Overview

Oracle Secure Backup Media Family

1-4

1-5

1-6

1-7

1-8

1-11

1-13

1-12

1-14

1-16

1-15

Tape Drives and Libraries

1-17

Virtual Tape Library (VTL)

1-19

Managing Data to Be Protected

Securing Data and Access to the Backup Domain Quiz 1-22

Why Use Oracle Secure Backup? Summary 1-27

1-20

1-26

1-21

iii

1-9

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

2 Installing Oracle Secure Backup Objectives 2-2 Performing Preinstallation Tasks

2-3

Installation and Configuration of the Administrative Domain Quiz 2-5

Performing Installation Tasks

Administrative Server Installation: Example

Wizard-Based Installation on Windows

Oracle Secure Backup Interfaces

Oracle Secure Backup Web Tool Home Page

Common Obtool Commands

Quiz 2-20 Summary 2-23 Practice 2 Overview: Installing and Configuring Oracle Secure Backup

2-4

2-9

2-10

2-16

2-17

2-18

2-19

3 Securing Domain and Data Objectives 3-2 Managing User Access Control

3-3

Predefined Classes and User Rights

Configuring Oracle Secure Backup Users

Oracle Secure Backup User: OS Permissions Preauthorization 3-11

Preauthorizing Access

3-4

3-7

3-12

3-9

2-24

Assigning Windows Account Information Quiz 3-14 Authentication 3-16 Leveraging Oracle Security Technology

Assigning Windows Account Information Quiz 3-14 Authentication 3-16 Leveraging Oracle Security Technology

3-13

3-17

Administrative Server Certificate Authority (CA)

Oracle Wallets for OSB Intradomain Communication

Encrypted Backups to Tape

Oracle Secure Backup Encryption

Configuring Host Encryption Policies

3-19

3-23

3-24

3-25

3-21

Using OSB Encryption Keys Transient Backup Encryption

Using OSB Encryption Keys Transient Backup Encryption

3-26

3-27

Comparing OSB and RMAN Encryption Quiz 3-30 Summary 3-34 Practice 3 Overview:

Configuring OSB Security

3-35

3-29

4 Configuring RMAN for Oracle Secure Backup

iv

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Objectives 4-2 Oracle Database Disk and Tape Backup Solution

Backing Up the Flash Recovery Area to Tape

Defining Retention for RMAN Backups

RMAN and Oracle Secure Backup Basic Process Flow

Integration with Enterprise Manager

Configuring the Administrative Server in EM

Oracle Secure Backup Administrative Server Page

RMAN Database Backup to Tape

Recovery Settings Backup Settings

Database Backup Storage Selector Defining Database Storage Selectors

Media Families and RMAN

4-3

4-4

4-5

4-7

4-8

4-9

4-10

4-13

4-15

4-11

4-12

4-16

4-6

Media Management Expiration Policies for Automated Tape Recycling

4-17

RMAN and Oracle Secure Backup Media Management Expiration

4-19

Troubleshooting Technique Quiz 4-21 Summary 4-25 Practice 4 Overview:

4-20

Configuring RMAN for OSB

4-26

5 Performing RMAN Backups and Restores Objectives 5-2

 

Scheduling Backups with EM

5-3

 

Oracle-Suggested Backup

5-4

RMAN and OSB Process Flow

5-7

 

Oracle Secure Backup Jobs

5-8

RMAN and Oracle Secure Backup Job Execution

5-9

 

Managing Database Tape Backups

5-10

Performing Database Recovery

5-12

 

RMAN Automatic Failover to Previous Backup

5-13

 

Quiz 5-14 Summary 5-16 Practice 5 Overview: Performing OSB-Encrypted Backup and Restore

5-17

6 Backing Up File-System Data with Oracle Secure Backup Objectives 6-2

Backing Up OS File Systems with Oracle Secure Backup

6-3

v

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

File-System Backups

Managing Media Families

6-4

6-5

Dataset Examples

6-6

Creating Datasets

6-9

Configuring Backup Windows Creating Backup Schedules

Creating Backup Triggers

Previewing a Backup Trigger

Creating On-Demand Backup Requests

6-11

6-13

6-14

6-16

6-17

Submitting Backup Requests

6-19

Reviewing Jobs

6-20

Quiz 6-21 Summary 6-24 Practice 6 Overview:

 

Backing up File-System Data

6-25

7 Restoring File-System Backups with Oracle Secure Backup Objectives 7-2 Browsing the Catalog for

File-System Backup Data

Restoring File-System Data

Restoring File-System Files with Oracle Secure Backup

The Restore Page

7-3

7-4

7-6

7-5

Listing All File-System Backups of a Client Creating a Catalog-Based Restore Request

Listing All File-System Backups of a Client Creating a Catalog-Based Restore Request

7-7

7-8

Submitting Restore Requests

7-12

Quiz 7-13 Summary 7-16 Practice 7 Overview: Restoring File-System Data

7-17

8 Managing Your Oracle Secure Backup Domain Objectives 8-2

Oracle Secure Backup Processes: Daemons

8-3

Managing Common Daemon Operations Quiz 8-6

8-5

Managing Defaults and Policies

8-7

Configuring Oracle Secure Backup Policies

8-8

Oracle Secure Backup: Backup Metadata Catalogs

8-9

Oracle Secure Backup: Directory Structure

8-11

Backing Up the Catalog

8-12

Manual Catalog Backup

8-13

vi

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Quiz 8-14 Summary 8-16 Practice 8 Overview: Performing a Preconfigured OSB Catalog Backup

9 Managing the OSB Infrastructure Objectives 9-2

Managing Clients

Adding Media Servers

NAS Devices

Adding NDMP Media Servers

Adding Devices

Discovering Devices on NDMP Hosts

Managing Devices

Tape Library Properties Tape Drive Properties

Managing Volumes

Quiz 9-16 Summary 9-27 Practice 9 Overview: Viewing OSB Management Tasks

9-3

9-4

9-6

9-7

9-8

9-10

9-11

9-14

9-12

9-13

9-28

10 Configuring and Using Tape Vaulting Objectives 10-2

Overview of Vaulting

Configuring a New Vaulting Environment

Defining Media Storage Locations

10-3

10-6

10-5

Defining Rotation Policies and Rules

10-7

Defining Rotation Policies and Rules

10-8

Associating a Media Family with a Rotation Policy

Using the Vaulting Environment

Scheduling a Location Scan Viewing Scan Control Jobs

Executing a Media Movement Job

10-11

10-12

10-13

10-14

10-9

Viewing Vaulting Reports

10-15

Troubleshooting Vaulting

10-16

Recovery Manager and Vaulting

Recalling a Tape Volume

Quiz 10-19 Summary 10-22 Practice 10 Overview: Configuring and Using Tape Vaulting

10-17

10-18

11 Configuring Tape Duplication

vii

10-23

8-17

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Objectives 11-2 Media Management

11-3

Overview of Tape Duplication Tape Duplication and Vaulting Tape Duplication and Migration

Overview of Tape Duplication Tape Duplication and Vaulting Tape Duplication and Migration
Overview of Tape Duplication Tape Duplication and Vaulting Tape Duplication and Migration

11-4

11-5

11-6

Configuring and Using Volume Duplication

Configuring a Duplication Environment Defining Volume Duplication Policies

Associating a Duplication Policy with a Media Family

Scheduling Volume Duplication

11-12

Quiz 11-13 Summary 11-15 Practice 11 Overview:

Viewing Media Life Cycle Demonstration

Executing Jobs

11-7

11-8

11-9

11-11

11-16

11-10

12 Tuning Oracle Secure Backup Objectives 12-2

Tuning Hardware

Tuning RMAN and Oracle Secure Backup

Tuning RMAN Software

Performance Factors

Tuning Oracle Secure Backup

Results of Tuning

Scalability of the Overall System Quiz 12-14 Summary 12-18

12-3

12-6

12-8

12-11

12-12

12-13

12-4

Appendix A

Appendix B

Oracle Secure Backup: Additional Topics

Objectives B-2 Encrypted Backups to Tape

.

B-3

Creating RMAN Encrypted Backups

B-4

Using Transparent Mode Encryption

B-5

Using Password Mode Encryption

B-7

Using Dual Mode Encryption Restoring Encrypted Backups

Using Dual Mode Encryption Restoring Encrypted Backups

B-8

B-9

Performing Encrypted Recovery

Comparing RMAN and OSB Encryption

Oracle Secure Backup Jobs

B-10

B-14

B-11

viii

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Managing Jobs

Viewing Job Properties and Transcripts

Troubleshooting Jobs

Suspending and Resuming Job Dispatching

Job Summaries

Displaying Log Files and Transcripts Summary B-25

B-16

B-18

B-20

B-23

B-24

B-21

Appendix C

Oracle Secure Backup Additional Installation Topics

Topics C-2 Windows Installation: Overview

Oracle Secure Backup InstallShield Wizard

Oracle Secure Backup Service Startup

Service Logon and SCSI Devices

Oracle Secure Backup Installed Files

Installed Files for Host Role: Administrative Server

Installed Files for Host Role: Media Server

Installed Files for Host Role: Client

Verifying Your Installation

Removing Oracle Secure Backup

Summary C-20

C-3

C-4

C-7

C-9

C-8

C-15

C-16

C-18

C-17

C-13

Appendix D

Glossary

Index

ix

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Preface

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Profile Before You Begin This Course

Before you begin this course, you should be able to perform database backup and restore operations in Enterprise Manager at least equivalent to the level of the Oracle Database 11g: Administration Workshop I course, ideally equivalent to the level of the Oracle Database 11g: Administration Workshop II course. How This Course Is Organized

Oracle Database 11g: Oracle Secure Backup is an instructor-led course featuring lectures and hands-on exercises. Online demonstrations and written practice sessions reinforce the concepts and skills that are introduced.

Preface - 3

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Related Publications Oracle Publications

Title

Part Number

Oracle Secure Backup Installation and Configuration Guide, Release 10.2

E05408-02

Oracle Secure Backup Administrator’s Guide, Release 10.2

E05407-02

Oracle Secure Backup Reference, Release 10.2

E05410-02

Oracle Secure Backup Migration Guide, Release 10.2

E05409-01

Oracle Secure Backup Readme, Release 10.2

E05411-05

Oracle Secure Backup Licensing Information, Release 10.2

E10310-02

Additional Publications

• System release bulletins

• Installation and user’s guides

read.me files

• International Oracle User’s Group (IOUG) articles

Oracle Magazine

Preface - 4

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Typographic Conventions

The following two lists explain Oracle University typographical conventions for words that appear within regular text or within code samples.

1. Typographic Conventions for Words Within Regular Text

Convention

Object or Term

Example

Courier New

User input; commands; column, table, and

Use the SELECT command to view information stored in the LAST_NAME column of the EMPLOYEES table.

schema names; functions;

Enter 300.

PL/SQL objects; paths

Log in as scott

Initial cap

Triggers; user interface object

Assign a When-Validate-Item trigger to the ORD block.

names, such as button names

Click the Cancel button.

Italic

Titles of courses and manuals;

For more information on the subject see Oracle SQL Reference Manual

emphasized words or phrases;

Do not save changes to the database.

placeholders or variables

Enter hostname, where hostname is the host on which the password is to be changed.

Quotation marks

Lesson or module titles referenced within a course

This subject is covered in Lesson 3, “Working with Objects.”

Preface - 5

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Typographic Conventions (continued)

2. Typographic Conventions for Words Within Code Samples

Convention

Object or Term

Example

Uppercase

Commands,

SELECT employee_id

functions

FROM employees;

Lowercase,

Syntax variables

CREATE ROLE role;

italic

Initial cap Forms triggers

Form module: ORD Trigger level: S_ITEM.QUANTITY item Trigger name: When-Validate-Item .

.

.

Lowercase

Column names,

table names,

. OG_ACTIVATE_LAYER

.

.

.

.

SELECT last_name

filenames,

(OG_GET_LAYER ('prod_pie_layer'))

PL/SQL objects

.

 

FROM

employees;

Bold

Text that must

CREATE

USER scott

be entered by a user

IDENTIFIED BY tiger;

Preface - 6

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Introduction to Oracle Database 11 g : Oracle Secure Backup Copyright © 2009, Oracle. All

Introduction to Oracle Database 11g:

Oracle Secure Backup

Introduction to Oracle Database 11 g : Oracle Secure Backup Copyright © 2009, Oracle. All rights

Copyright © 2009, Oracle. All rights reserved.

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Objectives

After completing this lesson, you should be able to describe:

The overall course objectives

The product in context

Your learning aids

course objectives • The product in context • Your learning aids Copyright © 2009, Oracle. All

Copyright © 2009, Oracle. All rights reserved.

Oracle Database 11 g: Oracle Secure Backup

I - 2

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Course Objectives

After completing this course, you should be able to:

Install and manage Oracle Secure Backup (OSB)

Use Oracle Secure Backup and Recovery Manager (RMAN) to create Oracle Database backup and restore operations

Use Oracle Secure Backup to create file-system backup and restore operations

Manage the OSB environment:

Back up the OSB catalog

Manage OSB domain: Add client

Manage tape media (vaulting and duplication)

Tune OSB

Add client – Manage tape media (vaulting and duplication) – Tune OSB Copyright © 2009, Oracle.

Copyright © 2009, Oracle. All rights reserved.

Oracle Database 11 g: Oracle Secure Backup

I - 3

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Suggested Schedule

Topic

Overview, Installation and Configuration

Database Backup and Restore

File System Backup and Restore

OSB Management (Core Tasks)

Advanced OSB Management (Tape Vaulting, Duplication and Tuning)

Lessons

Day

1, 2, 3, 4

1

5

1

6, 7

2

8, 9

2

10, 11, 12

2

1, 2, 3, 4 1 5 1 6, 7 2 8, 9 2 10, 11, 12

Copyright © 2009, Oracle. All rights reserved.

Suggested Schedule

The lessons in this guide are arranged in the order in which you will probably study them in the class. If your instructor teaches the class in the sequence in which the lessons are printed in this guide, the class should run approximately as shown in the schedule. Your instructor, however, may vary the sequence of the lessons for a number of reasons, including:

• Customizing material for a specific audience

• Splitting topics, such as backup and restore of the database

• Maximizing the use of course resources (such as hardware and software)

Oracle Database 11 g: Oracle Secure Backup

I - 4

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

The Product in Context

The Product in Context Copyright © 2009, Oracle. All rights reserved.
The Product in Context Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

The Product in Context Oracle Secure Backup is a product in the “High Availability” group of database options. It has its own release cycle and version number, for example, Oracle Secure Backup 10.2 is the correct version for Oracle Database 11g (Release 1). Oracle Secure Backup provides the fastest, most efficient Oracle database backups to tape, as well as heterogeneous file system protection.

Oracle Database 11 g: Oracle Secure Backup

I - 5

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Your Learning Aids

Related material:

Oracle by Example (OBE): OTN > Oracle Database 11g > Availability > Oracle Secure Backup

Installing and Configuring Oracle Secure Backup 10.2

Performing Encrypted Backups with Oracle Secure Backup

10.2

Configuring Policy-Based Media Management with Oracle Secure Backup 10.2

Viewlets or demonstrations accessible from the product home page:

Media Lifecycle Management

Backup Encryption to Tape

And more to come

Lifecycle Management – Backup Encryption to Tape – And more to come Copyright © 2009, Oracle.

Copyright © 2009, Oracle. All rights reserved.

Your Learning Aids:

OBEs show you step-by-step how to perform a specific task. They do not discuss why you need to perform a task. It is assumed that you have your own technical environment to follow along. Viewlets or demonstrations are generally a series of screenshots, displaying how a specific task is accomplished.

Oracle Database 11 g: Oracle Secure Backup

I - 6

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Oracle Secure Backup Documentation

Oracle Secure Backup Installation and Configuration Guide

Oracle Secure Backup Administrator’s Guide

Oracle Secure Backup Reference

Oracle Secure Backup Migration Guide

Oracle Secure Backup Readme

Oracle Secure Backup Licensing Information

Secure Backup Readme • Oracle Secure Backup Licensing Information Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

Oracle Database 11 g: Oracle Secure Backup

I - 7

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Additional Resources

To continue your learning:

Oracle Secure Backup home page

http://www.oracle.com/technology/products/secure-backup

High Availability home page

http://www.oracle.com/technology/deploy/availability

Oracle University (OU)

http://education.oracle.com

Oracle Technology Network (OTN)

http://www.oracle.com/technology

Oracle by Example (OBE)

http://www.oracle.com/technology/obe

My Oracle Support: OracleMetaLink

http://metalink.oracle.com

• My Oracle Support: Oracle MetaLink http://metalink.oracle.com Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

Additional Resources Product home pages on OTN provide you with a variety of information, which can include the latest product updates, white papers, FAQs, and so on. Oracle University offers different formats to best suit your needs:

• Instructor-Led inClass Training

• Live Web Class

• Self-Study CD-ROMs

Oracle Technology Network is a free resource with information about the core Oracle software products, including database and development tools. You can have access to:

• Technology centers

• Oracle Community, including user groups

• Software downloads and code samples, and much more

My Oracle Support: Access to My Oracle Support is included as part of your annual support maintenance fees. In addition to the most up-to-date technical information available, My Oracle Support gives you access to:

• Service requests (SRs)

• Certification matrixes

• Technical forums monitored by Oracle experts

• Software patches

• Bug reports

Oracle Database 11 g: Oracle Secure Backup

I - 8

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Oracle Secure Backup Overview Copyright © 2009, Oracle. All rights reserved.

Oracle Secure Backup Overview

Oracle Secure Backup Overview Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Objectives

After completing this lesson, you should be able to:

Describe how Oracle Secure Backup complements the Oracle backup and recovery options

Define Oracle Secure Backup terminology

Describe Oracle Secure Backup interface options

Describe backup management features of Oracle Secure Backup

options • Describe backup management feat ures of Oracle Secure Backup Copyright © 2009, Oracle. All
options • Describe backup management feat ures of Oracle Secure Backup Copyright © 2009, Oracle. All

Copyright © 2009, Oracle. All rights reserved.

For More Information

• http://www.oracle.com/technology/deploy/availability

• http://www.oracle.com/technology/products/secure-backup

Oracle Secure Backup Administrator’s Guide

Oracle Secure Backup Reference

Oracle Database 11g: Oracle Secure Backup

1 - 2

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

What Is Oracle Secure Backup?

Centralized tape backup management software:

Managing data protection for diverse, distributed servers and tape devices

Client/server architecture for backing up and restoring data locally or over the LAN, WAN, or SAN

Oracle Secure Backup features:

Tape backup management for entire Oracle environment, including file systems and the Oracle database

Policy-based backup management

Secure data protection and interdomain communication

Effective media and device management

Broad tape device and platform support

media and device management – Broad tape device and platform support Copyright © 2009, Oracle. All

Copyright © 2009, Oracle. All rights reserved.

What Is Oracle Secure Backup? Oracle Secure Backup is centralized tape management software. It enables reliable data protection to tape, and supports the major tape drives and libraries in SAN, Gigabit Ethernet (GbE), and SCSI environments. Oracle Secure Backup enables you to do the following:

• Back up and restore data using a variety of machine architectures.

• Access local and remote file systems and devices from any location in a network without using Network File System (NFS) or Common Internet File System (CIFS) protocols.

• Back up to and restore from Oracle Cluster File System (OCFS) on Linux and Windows

• Use wildcards and exclusion lists to specify what you want to back up.

• Control secondary storage-based data recording format and compression.

• Duplex database backups (back up the same files to multiple devices). Each data stream automatically goes to a separate device.

• Perform full, incremental, or differential backups.

• Maintain security and limit the users who are authorized to perform data management operations.

• Support most popular tape drives and libraries.

Oracle Database 11g: Oracle Secure Backup

1 - 3

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Oracle Secure Backup Tape Backup Management

Oracle databases File-system data UNIX Linux Integration with Windows NAS RMAN
Oracle databases
File-system data
UNIX
Linux
Integration with
Windows
NAS
RMAN
data UNIX Linux Integration with Windows NAS RMAN Oracle Secure Backup Centralized tape backup system Tape
data UNIX Linux Integration with Windows NAS RMAN Oracle Secure Backup Centralized tape backup system Tape
Oracle Secure Backup
Oracle Secure Backup
Oracle Secure Backup

Oracle Secure Backup

Oracle Secure Backup
Centralized tape backup system
Centralized tape backup system
Centralized tape backup system

Centralized tape backup system

Centralized tape backup system
Oracle Secure Backup Centralized tape backup system
Oracle Secure Backup Centralized tape backup system
Oracle Secure Backup Centralized tape backup system
Oracle Secure Backup Centralized tape backup system
Oracle Secure Backup Centralized tape backup system
RMAN Oracle Secure Backup Centralized tape backup system Tape • Highest levels of tape data protection
RMAN Oracle Secure Backup Centralized tape backup system Tape • Highest levels of tape data protection
RMAN Oracle Secure Backup Centralized tape backup system Tape • Highest levels of tape data protection
RMAN Oracle Secure Backup Centralized tape backup system Tape • Highest levels of tape data protection
RMAN Oracle Secure Backup Centralized tape backup system Tape • Highest levels of tape data protection

Tape

Highest levels of tape data protection at the lowest cost

Fastest, most efficient Oracle database tape backup

Protection of entire Oracle environment including Oracle application files

Oracle integrated product

including Oracle application files • Oracle integrated product Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

Oracle Secure Backup Tape Backup Management Business background: The increased demands on the enterprise backup infrastructure require more rigorous service-level agreements for backup windows and restoration time, while achieving reliable data protection within budget. The tape technology meets this challenge by offering high-speed devices and high-capacity media with a throughput similar to that of a disk (generally, at a high cost). Oracle Secure Backup addresses this issue by providing centralized tape backup management for the Oracle database and file systems in mixed, diverse environments, thus reducing the cost and complexity of tape backup and restoration. The graphic shows that Oracle databases are integrated via RMAN with Oracle Secure Backup (OSB) and that UNIX, Linux, Windows and Network Attached Storage (NAS) directly use OSB.

Oracle Database 11g: Oracle Secure Backup

1 - 4

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Tape Management and Integration with Oracle Products

Oracle Beehive configuration files

with Oracle Products Oracle Beehive configuration files Oracle Secure Backup and restore Oracle Application Server

Oracle Secure

Backup and restore

Oracle Application Server configuration files

Oracle database:

Version Oracle9i and later

Real Application Clusters

Backup
Backup

Centralized

tape backup

management

Clusters Backup Centralized tape backup management Tape library File-system data: • Oracle home

Tape

library

Centralized tape backup management Tape library File-system data: • Oracle home installations •

File-system data:

Oracle home installations

Other nondatabase data

data: • Oracle home installations • Other nondatabase data Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

Tape Management and Integration with Oracle Products Some of the many options available for protecting your Oracle data are backing up solely to disk, backing up to disk as a staging area for tape backups, or backing up directly to tape. Disk backup and restore operations are generally faster than the equivalent tape operations. However, tape backups provide some advantages for long-term backup requirements, such as off-site storage and portability, which allow you to move backups from one data center to another. Oracle Secure Backup provides tape backup management for all your files relating to Oracle products, including:

• Oracle database backups stored on tape through integration with Recovery Manager

• Seamless support of Oracle Real Application Clusters (RAC)

• Support for Oracle Cluster File System (OCFS) and Automatic Storage Management (ASM)

• Central administration of distributed clients and media servers including:

- Oracle Application Server

- Oracle Collaboration Suite

- Oracle home and binaries

Note: Oracle Secure Backup has its own release cycle and version numbers; for example, Oracle Secure Backup 10.2 is the correct version for Oracle Database 11g (Release 1).

Oracle Database 11g: Oracle Secure Backup

1 - 5

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

The Integration Advantage

Key benefits of RMAN and Oracle Secure Backup integration:

Exclusive support of RMAN backup encryption to tape

Faster, more reliable database backups to tape

Single technical support resource, expediting problem resolution

Enterprise Manager integration exclusive to OSB

Familiar interface for Oracle customers, reducing any learning curves associated with other products

Management of the entire Oracle database backup and recovery from disk (Flash Recovery Area) to tape

Advanced, effective security based on proven Oracle technology

tape • Advanced, effective security based on proven Oracle technology Copyright © 2009, Oracle. All rights

Copyright © 2009, Oracle. All rights reserved.

The Integration Advantage This slide summarizes key benefits of RMAN and Oracle Secure Backup integration over other third-party media management libraries. Details about the security technology are:

• Secure Sockets Layer (SSL) implementation

• Embedded Oracle wallets

Oracle Database 11g: Oracle Secure Backup

1 - 6

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Client/Server Architecture Host Roles

N

E

T

W

O

R

K

Client/Server Architecture Host Roles N E T W O R K Administrative server Oracle Secure Backup
Client/Server Architecture Host Roles N E T W O R K Administrative server Oracle Secure Backup
Client/Server Architecture Host Roles N E T W O R K Administrative server Oracle Secure Backup

Administrative

server

Oracle Secure Backup catalog

W O R K Administrative server Oracle Secure Backup catalog Data to backup Media server Client
W O R K Administrative server Oracle Secure Backup catalog Data to backup Media server Client

Data to

backup

Media

server

Client

Administrative server

Maintains configuration settings and backup history catalog

Media server

Transfers data to or from attached devices

Client

Contains data to be backed up

or from attached devices • Client – Contains data to be backed up Copyright © 2009,

Copyright © 2009, Oracle. All rights reserved.

Client/Server Architecture Host Roles To configure Oracle Secure Backup, you must define an administrative domain. An administrative domain is a group of machines on your network that you manage as a common

unit to perform backup and restore operations. An administrative domain has one administrative server, one or more clients, and one or more media servers.

• The administrative server is a machine in your administrative domain that contains a full installation of the Oracle Secure Backup software. This host maintains the backup catalog files and other files for configuration settings and administrative data. The administrative server runs the scheduler, which starts and monitors jobs within the administrative domain. You need one administrative server for each administrative domain at your site. To configure an administrative server, choose an administrative server installation when installing Oracle Secure Backup on the host.

• A media server is a machine that has one or more secondary storage devices, such as a tape library, connected to it. A media server transfers data to and from its attached storage devices. During installation, you can configure multiple secondary storage devices on media servers.

• A client is a machine whose locally accessed data is backed up by Oracle Secure Backup. Most of the machines defined within the administrative domain are clients.

Oracle Database 11g: Oracle Secure Backup

1 - 7

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Oracle Secure Backup Architecture

Client Administrative server obscheduled observiced observiced obhttpd
Client
Administrative server
obscheduled
observiced
observiced
obhttpd
server obscheduled observiced observiced obhttpd Media server observiced Copyright © 2009, Oracle. All

Media server

observiced
observiced
obscheduled observiced observiced obhttpd Media server observiced Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

Oracle Secure Backup Architecture The Oracle Secure Backup Architecture includes:

• Oracle Secure Backup catalog, a directory structure with host-specific subdirectories. This means the contents vary depending on the roles you assign to the host. An administrative server has the central catalog with configuration and metadata.

• Daemons (or services), which are processes, that run in the background and perform OSB operations on behalf of an application Some daemons run continually; others run only to perform specific work and then exit when the work is completed. The Oracle Secure Backup daemons actively participate in managing backup and restore operations:

obscheduled daemon: This daemon initiates scheduled events and manages jobs.

observiced daemon: On the administrative server, this daemon runs jobs (such as backup and restore operations) at the request of the obscheduled daemon.

Apache Web server daemon (obhttpd): This daemon provides the Web tool GUI for Oracle Secure Backup.

Oracle Database 11g: Oracle Secure Backup

1 - 8

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Oracle Secure Backup for Centralized Tape Backup Management

UNIX or Linux N A S Windows Heterogeneous clients backed up over the network Oracle

UNIX or

Linux

NAS

Windows

UNIX or Linux N A S Windows Heterogeneous clients backed up over the network Oracle Secure

Heterogeneous clients backed up over the network

Oracle Secure Backup administrative server

LAN Media servers locally backed up Oracle Database Tape Library
LAN
Media
servers
locally
backed up
Oracle
Database
Tape
Library

Oracle Secure Backup Administrative Domain

OSB Cloud module
OSB Cloud
module
Library Oracle Secure Backup Administrative Domain OSB Cloud module Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

Oracle Secure Backup for Centralized Tape Backup Management The Oracle Secure Backup software offers centralized backup management of heterogeneous clients and servers by storing the backup and configuration data in a central repository called the Oracle Secure Backup administrative server. The administrative server contains a consolidated backup catalog, providing a single location for managing backup policies, scheduling backups for multiple platforms, and managing local and remote tape devices. The configured machines and devices managed by an administrative server make up the Oracle Secure Backup administrative domain, as shown in the slide. The Oracle Secure Backup tape management system minimizes the complexity of managing diverse architectures by offering:

• Flexible tape device configuration with options for single- and multihosted tape libraries

• Support for major tape libraries and tape drives in GbE and SCSI environments

• Client/server architecture providing centralized administration of distributed media servers over a local area network (LAN) or wide area network (WAN)

Oracle Database 11g: Oracle Secure Backup

1 - 9

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Oracle Secure Backup for Centralized Tape Backup Management (continued) The Storage Cloud enables users to take advantage of the virtually unlimited pool of computing resources and storage over the Internet (the Cloud). Unlike the traditional IT setup, users have little insight or control over the underlying infrastructure. Their interaction with the Cloud is primarily governed through an abstracted interface provided by the Cloud vendor. The Cloud is essentially disk storage. With the Oracle Secure Backup Cloud module, it is possible to send the local disk backups of the Oracle database directly to a storage cloud for off-site storage purposes. Amazon S3 is the first Cloud vendor that Oracle has partnered with, to enable database backup in the Cloud. This functionality may be extended to more Cloud platforms or vendors in the future. Backup and recovery from the Cloud is performed by RMAN. OSB 10.2 cannot back up to disk. So, OSB 10.2 does not have an explicit integration with the Cloud. RMAN backup encryption and advanced compression technologies may be used for Cloud backup strategies.

Oracle Database 11g: Oracle Secure Backup

1 - 10

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Typical SAN Environment

LAN

Administrative server SAN Fibre Oracle connectivity Database
Administrative
server
SAN
Fibre
Oracle
connectivity
Database

Tape devices

Oracle Secure Backup:

Dynamically shares tape drives attached to the Storage Area Network (SAN)

Manages any resource contention

to the Storage Area Network (SAN) • Manages any resource contention Copyright © 2009, Oracle. All

Copyright © 2009, Oracle. All rights reserved.

Typical SAN Environment Oracle Secure Backup supports Storage Area Network (SAN) environments. The slide depicts a typical SAN environment where one or more servers are attached to the SAN along with one or more tape devices. Each of the tape devices attached to the SAN appears local to the servers using SAN. Clients within the administrative domain are backed up over the network to the tape devices on the configured media servers. Oracle Secure Backup automatically manages resource contention for tape drives within the SAN. During a backup or restore operation, a server engages a tape drive, thereby making it temporarily unavailable to other servers. When the operation completes, the tape drive is again available for use by any of the servers using SAN, as permitted by your configuration. When configuring tape devices, you are asked to configure attachments, where each attachment describes a data path between the host and the device itself. A device must have at least one attachment. In a SAN environment, a tape device may have multiple attachments, one for each host that can access the device. The Fibre fabric and switches within the SAN are transparent to Oracle Secure Backup. Therefore, SAN interoperability becomes important at the hardware level. When configuring a SAN, it is recommended to confirm that the hardware components have been tested and certified to work together.

Oracle Database 11g: Oracle Secure Backup

1 - 11

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Oracle Secure Backup Interface Options EM Web tool Oracle RMAN Secure obtool SBT Backup Database
Oracle Secure Backup Interface Options
EM
Web tool
Oracle
RMAN
Secure
obtool
SBT
Backup
Database
File-system
operations
operations
Secure obtool SBT Backup Database File-system operations operations Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

Oracle Secure Backup Interface Options As shown in the slide, you can access Oracle Secure Backup in four different ways depending on what you want to do:

• Enterprise Manager provides a graphical interface to Oracle Secure Backup for users who elect to perform database backup and restore operations through integration with RMAN. You can also perform administrative tasks such as managing media and devices within the Oracle Secure Backup administrative domain. The Enterprise Manager console includes a link to the Oracle Secure Backup Web tool for performing file-system backup and restore operations.

• Use RMAN to back up your databases directly to tape. RMAN can be accessed either through the RMAN executable or through EM. RMAN communicates with Oracle Secure Backup through the system backup to tape (SBT) interface.

• The Web tool is a GUI application that enables you to configure administrative domains, manage operations, browse the backup catalog, and back up and restore data. It provides a graphical and interactive interface to access the obtool utility. You should use this interface when making backups of file-system data.

• The obtool utility provides a command-line interface to Oracle Secure Backup. This interface gives you the same functionalities as the GUI interface.

Oracle Database 11g: Oracle Secure Backup

1 - 12

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Media Concepts: Overview

Media family Volume set Volume Volume Backup image Product of a backup operation Product of
Media family
Volume set
Volume
Volume
Backup image
Product of a backup operation
Product of a
backup operation
Physical tape
Physical tape
Set of tapes containing backup images

Set of volumes with common characteristics

containing backup images Set of volumes with common characteristics Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

Media Concepts: Overview Oracle Secure Backup organizes the backups it creates in a simple hierarchy, which comprises the following logical concepts:

• A “backup image” is the product of a backup operation. A backup image is a file that consists of one or more backup sections. A backup image can be contained within a single volume or it can span multiple volumes. The part of a backup image that fits on a single volume is called a “backup section.”

• A “volume” is a single unit of media such as an LTO-3 tape. It can store many backup images.

• A “volume set” is a group of one or more volumes that contain a complete backup image.

• A “media family” is a named classification of volumes that share some common attributes, such as the volume naming method, the policies used for writing data to volumes, and the length of time volumes are retained in the media family. When you back up files using Oracle Secure Backup, you generate a volume set that has some common characteristics defined by the media family that you have associated with your backup operation.

Oracle Database 11g: Oracle Secure Backup

1 - 13

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Backup Pieces and Backup Images

RMAN backup set Oracle RMAN RMAN database backup … backup files piece piece Backup Backup
RMAN backup set
Oracle
RMAN
RMAN
database
backup
backup
files
piece
piece
Backup
Backup
image
image
Oracle Secure Backup images
piece piece Backup Backup image image Oracle Secure Backup images Copyright © 2009, Oracle. All rights

Copyright © 2009, Oracle. All rights reserved.

Backup Pieces and Backup Images The backup of an Oracle database, created by RMAN, results in a backup set (an RMAN- specific logical structure), which contains at least one backup piece (an RMAN-specific physical file containing the backed up data). Oracle Secure Backup backs up and maintains backup metadata for each RMAN backup piece written to tape within its own catalog. You can browse backup pieces with the obtool command- line or Oracle Secure Backup Web tool. Note: Use RMAN for the management of RMAN backup pieces. If you manage the backup pieces stored on tape by using Oracle Secure Backup utilities instead of RMAN, the Oracle Secure Backup catalog and the RMAN repository can become unsynchronized. The best practice is for backup pieces to be updated through RMAN, not manually by the use of Oracle Secure Backup.

Oracle Database 11g: Oracle Secure Backup

1 - 14

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

RMAN and Oracle Secure Backup Overview

OS RMAN OSB Library BACKUP AS COPY Media family Data file 1 Image Backup copy
OS
RMAN
OSB
Library
BACKUP
AS COPY
Media family
Data file 1
Image
Backup
copy
image
Volume set
BACKUP AS
BACKUPSET
Volume
Volume
Volume
Data file 2
Backup
Backup
Backup
Backup
piece
image
image
image
(filesperset
3)
section
section
section
Backup
image
Volume
Volume
Volume
Data file 3
Backup
Backup
Backup
Backup
piece
image
image
image
section
section
section
Backup
image
Data file 4
Backup set
Media family
.
.
.
File-system
Backup
image
Data file 4 Backup set Media family . . . File-system Backup image Copyright © 2009,

Copyright © 2009, Oracle. All rights reserved.

RMAN and Oracle Secure Backup Overview This slide combines the previously discussed concepts into one overview. On the left side it shows data files on the OS level, how they relate to RMAN image copies and backup pieces, and how these relate to OSB backup images. File-system files, which of course do not have and RMAN equivalent, relate directly to OSB backup images. The right side depicts that OSB backup images are stored as backup image section on a volume, within a volume set, which belongs to a media family in a tape library.

Oracle Database 11g: Oracle Secure Backup

1 - 15

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Oracle Secure Backup Media Family

A named classification of volumes that share the same:

Volume identification sequence

Write-allowed period

Expiration policy (either content- or time-managed)

Used to classify and characterize backup types

Commonly associated with backup levels, which generally correspond to retention times, such as:

Full

Incremental

Archive log

to retention times, such as: – Full – Incremental – Archive log Copyright © 2009, Oracle.

Copyright © 2009, Oracle. All rights reserved.

Oracle Secure Backup Media Family

Media families provide a way to establish write periods and retention policies for data backed up

to various kinds of tapes. You can, for example, establish a media family for all of your backups

that remain on-site, a separate media family for your backups that are to be stored off-site.

A media family is a classification of backup media that share the same:

Volume identification sequence: The volume ID consists of a fixed portion, followed by a sequence number assigned and updated by Oracle Secure Backup. When you create a media family, you specify how to generate volume IDs that become part of the volume label.

Write window: The beginning of the write window is the time at which Oracle Secure Backup first writes to a volume in the volume set. The write window is a user-specified time interval that applies to all volumes in the set. Oracle Secure Backup continues to append backups to the volume set until the end of this interval. When the write window closes, Oracle Secure Backup does not allow further updates to the volume set until it expires or is relabeled, reused, unlabeled, or overwritten.

Expiration policy: When a volume set expires, Oracle Secure Backup automatically considers each volume in the set eligible to be overwritten. A media family is either content managed (default) or time managed. These two policies are mutually exclusive.

Oracle Database 11g: Oracle Secure Backup

1 - 16

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Tape Drives and Libraries

mainlib

Tape library robotics move tapes between drives and slots. Tape library Robotic control Barcode reader
Tape library
robotics move
tapes between
drives and slots.
Tape library
Robotic control
Barcode reader
scans labels on
cartridges.
maintd1
maintd2
Type of tape drive
refers to its tape
format such as
LTO-3 or
Storage elements
(slots) store
tapes.
maintd3
SDLT600.

Device connectivity varies by device:

SCSI, Fibre, and iSCSI

SDLT600. Device connectivity varies by device: SCSI, Fibre, and iSCSI Copyright © 2009, Oracle. All rights

Copyright © 2009, Oracle. All rights reserved.

Tape Drives and Libraries Oracle Secure Backup maintains information about secondary storage devices, tape libraries, and tape drives, so they can be used for local and network backup and restore operations. These devices are easily configured during the installation process, or a new device can be easily added to an existing Oracle Secure Backup environment. Each tape drive and tape library is uniquely identified within an Oracle Secure Backup administrative domain by a user-defined name (for example, mainlib and maintd1). Because Oracle Secure Backup manages tape drive operations, it must explicitly be able to identify the tape drive as well as understand if the tape drive is housed within a tape library. Oracle Secure Backup must further determine which tape slots (storage elements) are available for storing tapes when they are not loaded in a tape drive. Before you can use tape drives or tape libraries with Oracle Secure Backup, you must add the device to the administrative domain. Oracle Secure Backup maintains a distinction between a device and the means by which the device is connected to a host. Each device you configure can have one or more attachments, where each attachment describes a data path between a host and the device itself. Most often, an attachment includes the identity of a host plus a UNIX device special file name, a Windows device name, or NAS device name. In rare cases, additional information is needed to complete the attachment definition.

Oracle Database 11g: Oracle Secure Backup

1 - 17

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Tape Drives and Libraries (continued) A Fibre channel–attached tape drive or tape library often has multiple attachments, one for each host that can directly access it. When a device is attached to multiple hosts, Oracle Secure Backup automatically manages contention for the device so that only one host is permitted access to it at any time. For example, SAN-attached devices often have multiple attachments, one for each host that has local access to the device through its Fibre channel interface.

Oracle Database 11g: Oracle Secure Backup

1 - 18

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Virtual Tape Library (VTL)

Providing the performance advantages of disk backup

Disk appliances, emulating tape libraries and drives

Most popular virtual tape libraries supported by Oracle Secure Backup See “Tape Device” compatibility guide on Oracle Technology Network)

Increasingly adopted into IT environments

Seamless deployment without changing backup infrastructure

Flexible configuration with user-defined options for number and type of tape emulation

Attached to the network or servers, depending on the manufacturer

• Attached to the network or servers, depending on the manufacturer Copyright © 2009, Oracle. All

Copyright © 2009, Oracle. All rights reserved.

Virtual Tape Library (VTL) A virtual tape library leverages traditional tape backup with disk technology to create an optimized backup and recovery infrastructure. Tape emulation software on the disk appliance emulates popular tape devices and formats. Because VTLs identify themselves as tape equipment, for the backup software, they appear identical to the actual tape device that is emulated. VTLs offer the performance advantages of disk backup and they may be seamlessly deployed in a system environment, without changing the backup infrastructure. Note: In this class (where physical tape devices are not available), you use virtual test devices to practice Oracle Secure Backup operations. These virtual test devices are not supported in production use and are different from the commercially sold VTLs. For a list of supported VTLs, refer to Certify on My Oracle Support.

Oracle Database 11g: Oracle Secure Backup

1 - 19

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Managing Data to Be Protected

 

Oracle Database

File-System Data

Defining what data to back up

RMAN backup sets

User-defined datasets:

based on hosts, files, or directories

Backup options

Use RMAN backup levels: full and incremental

Multilevel backups: full, incremental, or off-site

Frequency of backups

Recurring or immediate backups scheduled using Enterprise Manager

Flexible date/time calendar– based scheduling On-demand backups

Flexible date/time calendar– based scheduling On-demand backups Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

Managing Data to Be Protected Managing the backup infrastructure of file-system data and Oracle database data is easily administered with Oracle Secure Backup and RMAN. Defining what data to back up is conceptually similar for file-system and database data. Both require that you, the user, define what to include in the backup. For the database, you use the RMAN backups sets created using RMAN or Enterprise Manager. For file systems, Oracle Secure Backup uses “datasets.” Use the Oracle Secure Backup Web tool to define file-system datasets. After defining what data to back up, you must determine what type of backup is most appropriate to meet your backup and restore requirements. Oracle Secure Backup offers multiple backup levels for file-system backups including full backup levels, multiple incremental levels, and an off-site backup level. The off-site level is actually a full backup performed without interfering with any incremental backup strategies. Oracle Secure Backup also provides flexible scheduling options that enable you to determine ongoing backup schedules based on the day and time granularity. For the Oracle database, RMAN offers full and incremental backup levels that are backed up to tape by Oracle Secure Backup. After you have defined what, how, and how often to back up your data through scheduling, Oracle Secure Backup can automatically implement your backup schedules, only requiring manual intervention for hardware errors or media needs.

Oracle Database 11g: Oracle Secure Backup

1 - 20

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Securing Data and Access to the Backup Domain

User-level access control

Users assigned to a set of privileges, called classes

Consistent user identity mapping OS privileges to Oracle Secure Backup user, called preauthorized access

Host authentication

Two-way server authentication

Encryption

Oracle Secure Backup encryption for data in transport and on tape

For database backups: choice of RMAN and OSB encryption

For file-system backups: OSB encryption

of RMAN and OSB encryption – For file-system backups: OSB encryption Copyright © 2009, Oracle. All

Copyright © 2009, Oracle. All rights reserved.

Securing Data and Access to the Backup Domain Access Control To access the Oracle Secure Backup software, you must enter a username and password or use preauthorization. Each Oracle Secure Backup user is assigned to a class, which defines the actions that are permitted for that user. Host Authentication All hosts in the administrative domain use SSL and X.509 certificates for identity verification and authentication. Sensitive data is encrypted before transmittal over the network. The Web server requires a signed X.509 certificate and associated public and private keys to establish an SSL connection with a client browser. The X.509 certificate for the Web server is self-signed by the installation script when you install OSB on the administrative server. Note: Currently, the Network Data Management Protocol (NDMP) does not include a mechanism to accommodate the negotiation of an SSL connection to NDMP filers. Encryption For your database backups, you have a choice of RMAN and OSB encryption; for your file- system backups, use OSB encryption.

Oracle Database 11g: Oracle Secure Backup

1 - 21

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Quiz

The best way to manage Oracle backup pieces when your configuration includes Oracle Secure Backup (OSB) is with:

1. OSB

2. RMAN

3. OSB or RMAN

4. RMAN or SQL

Backup (OSB) is with: 1. OSB 2. RMAN 3. OSB or RMAN 4. RMAN or SQL

Copyright © 2009, Oracle. All rights reserved.

Answers: 2

Oracle Database 11g: Oracle Secure Backup

1 - 22

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Quiz

Which interfaces may be used to back up and restore file- system data:

1. obtool

2. RMAN

3. Enterprise Manager

4. Web tool

system data: 1. obtool 2. RMAN 3. Enterprise Manager 4. Web tool Copyright © 2009, Oracle.

Copyright © 2009, Oracle. All rights reserved.

Answers: 1, 4

Oracle Database 11g: Oracle Secure Backup

1 - 23

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Quiz

During a backup or restore operation, a server engages a tape drive; but the tape drive is available at the same time for use by any of the servers on the SAN as permitted by your configuration.

1. True

2. False

servers on the SAN as permitted by your configuration. 1. True 2. False Copyright © 2009,

Copyright © 2009, Oracle. All rights reserved.

Answers: 2

Oracle Database 11g: Oracle Secure Backup

1 - 24

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Quiz

Which of the following statements is true? - You can assign to a single host:

1. The role of administrative server

2. The role of media server

3. The role of OSB client

4. All three roles

The role of media server 3. The role of OSB client 4. All three roles Copyright

Copyright © 2009, Oracle. All rights reserved.

Answers: 1, 2, 3, 4

Oracle Database 11g: Oracle Secure Backup

1 - 25

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Why Use Oracle Secure Backup?

Intelligent integration with RMAN delivering the best performance and security for database backups

Backup encryption performed with Oracle database

Faster, smaller backups protecting only used blocks

Scalable, low-cost per-tape drive pricing

Substantial cost savings over the competition

Unlimited clients, servers, and NAS

Single technical support resource for entire backup solution expedites problem resolution

Reliable, centralized backup management for entire Oracle environment

• Reliable, centralized backup management for entire Oracle environment Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

Why Use Oracle Secure Backup?

• Since Oracle 8.0, RMAN is the recommended backup utility for the Oracle database. It is known for reliable, automated, online protection of data to disk, and is integrated with numerous third-party media management products for backups to tape. Oracle Secure Backup provides an alternative to expensive, third-party tape backup utilities by providing the media management layer for RMAN tape utilization.

• Oracle Secure Backup increases customer return on investment by providing end-to-end tape data protection for your Oracle environment at a fraction of the cost of other tape products.

• Oracle Secure Backup exclusively provides RMAN encrypted backup to tape.

• To deliver the fastest database tape backup, Oracle Secure Backup backs up only used blocks (from Oracle Database 10.2.0.2 and later). This process makes the backups faster and smaller, which also saves space on tape.

• Oracle Secure Backup (as part of the Oracle technology stack) offers a single-vendor technical resource for complete Oracle database protection. The Oracle Secure Backup installation automatically links the SBT libraries for RMAN tape backups.

Oracle Database 11g: Oracle Secure Backup

1 - 26

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Summary

In this lesson, you should have learned how to:

Describe how Oracle Secure Backup complements the Oracle backup and recovery options

Define Oracle Secure Backup terminology

Describe Oracle Secure Backup interface options

Describe backup management features of Oracle Secure Backup

options • Describe backup management feat ures of Oracle Secure Backup Copyright © 2009, Oracle. All

Copyright © 2009, Oracle. All rights reserved.

Oracle Database 11g: Oracle Secure Backup

1 - 27

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Installing Oracle Secure Backup Copyright © 2009, Oracle. All rights reserved.

Installing Oracle Secure Backup

Installing Oracle Secure Backup Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Objectives

After completing this lesson, you should be able to:

Decide on the structure of your administrative domain

Perform preinstallation tasks

Install Oracle Secure Backup on Linux

Perform preinstallation tasks • Install Oracle Secure Backup on Linux Copyright © 2009, Oracle. All rights

Copyright © 2009, Oracle. All rights reserved.

For More Information

Oracle Secure Backup Installation and Configuration Guide

• For supported tape devices, see http://www.oracle.com/technology/products/secure-backup.

• For supported Web browser, platform and NAS devices, see Oracle’s certification matrix on My Oracle Support.

Oracle Database 11 g: Oracle Secure Backup

2 - 2

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Performing Preinstallation Tasks

Confirm that your planned environment is supported.

Tape device support matrix on OTN

Platform support on Certify on metalink.oracle.com

Plan disk space for Oracle Secure Backup.

Obtain Oracle Secure Backup software via OTN download or CD.

Plan your administrative domain-that is, determine which host will be the administrative server, which the media server(s) and which the client(s).

Obtain SCSI device information (UNIX and Linux).

which the client(s). • Obtain SCSI device information (UNIX and Linux). Copyright © 2009, Oracle. All

Copyright © 2009, Oracle. All rights reserved.

Performing Preinstallation Tasks There is no required sequence between the preinstallation tasks.

Check the supported device list on OTN to confirm that your environment is supported:

• Platform support by host role

• Tape library and tape drive support

• Connectivity support

Each host that participates in an Oracle Secure Backup administrative domain must have a network connection and run TCP/IP. Oracle Secure Backup uses this protocol for all inter- and intra-server communication between its own and other system components. Each appliance that employs a closed operating system, such as Network Attached Storage (NAS) and tape servers, is backed up using NDMP. This protocol enables Oracle Secure Backup to access primary and secondary storage controlled by the appliance. Each host that participates in an Oracle Secure Backup administrative domain must also have some preconfigured way to resolve a host name to an IP address. Most systems use one of the name resolution mechanisms: Domain Name Service (DNS), Network Information Service (NIS), Windows Internet Name Service (WINS), or a local hosts file to do this. Oracle Secure Backup does not require a specific mechanism. Oracle Secure Backup requires only that, upon presenting the underlying system software with an IP address you have configured, it obtains an IP address corresponding to that name.

Oracle Database 11 g: Oracle Secure Backup

2 - 3

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Installation and Configuration of the Administrative Domain

The graphic makes a distinction between the original software

OTN
OTN
CD-ROM
CD-ROM

installation, which includes the mandatory configuration of the administrative server, and later configurations of media and

client host roles. It

also shows that tape drives and libraries can

2. Configure addi tional hosts and tape devices

2. Configure additional hosts and

tape devices

can 2. Configure addi tional hosts and tape devices Tape drives and libraries 1. Software installation
can 2. Configure addi tional hosts and tape devices Tape drives and libraries 1. Software installation
Tape drives and libraries
Tape drives
and libraries
1. Software

1. Software

installation

installation
1. Software installation
1. Software installation
1. Software installation
1. Software installation
1. Software installation

be added at any point in time.

1. Software installation be added at any point in time. Administrative server Media Client server Media
Administrative server Media Client server
Administrative
server
Media
Client
server
Media Client server
Media
Client
server
time. Administrative server Media Client server Media Client server Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

Installation and Configuration of the Administrative Domain The installation and configuration of your administrative domain includes the following:

• Install the Oracle Secure Backup software itself on each of your hosts except NDMP-enabled hosts such as NAS filers.

• Define your administrative domain on the administrative server. This step involves defining all media servers, clients, and NAS filers.

• When installing a media server, Oracle Secure Backup device attachments are created as part of the device driver installation process. These attachments are used during the device definition. Make the administrative server aware of the tape devices that exist in your administrative domain. On each defined media servers, you configure the directly attached SCSI and Fibre Channel devices (tape libraries and tape drives). If you use a NAS filer with attached tape libraries and tape drives, you can use Oracle Secure Backup commands to discover these devices; this allows Oracle Secure Backup to recognize and communicate with the NAS- attached devices.

Oracle Database 11 g: Oracle Secure Backup

2 - 4

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Quiz

The host that you use to initiate and manage backup and restore jobs should have the role of administrative server.

1. True

2. False

jobs should have the role of administrative server. 1. True 2. False Copyright © 2009, Oracle.

Copyright © 2009, Oracle. All rights reserved.

Answers: 1

Oracle Database 11 g: Oracle Secure Backup

2 - 5

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Quiz

You have hosts in your network with data that needs to be backed up. Assign these hosts the role of:

1. Administrative server

2. OSB client

3. Media server

the role of: 1. Administrative server 2. OSB client 3. Media server Copyright © 2009, Oracle.

Copyright © 2009, Oracle. All rights reserved.

Answers: 2

Oracle Database 11 g: Oracle Secure Backup

2 - 6

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Quiz

You should assign hosts, which have tape or other secondary storage devices attached to them, the role of media server.

1. True

2. False

devices attached to them, the role of media server . 1. True 2. False Copyright ©

Copyright © 2009, Oracle. All rights reserved.

Answers: 1

Oracle Database 11 g: Oracle Secure Backup

2 - 7

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Quiz

A single host can NEVER serve all roles.

1. True

2. False

Quiz A single host can NEVER serve all roles . 1. True 2. False Copyright ©

Copyright © 2009, Oracle. All rights reserved.

Answers: 2

Oracle Database 11 g: Oracle Secure Backup

2 - 8

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Performing Installation Tasks

1. Log in as the root user.

2. Create an Oracle Secure Backup home directory.

3. Change your directory to the <OSB_Home> directory.

4. Run the setup program from your <OSB_Home> directory and respond to the prompts.

[stage] $ su Password:

[stage]# mkdir -p /usr/local/oracle/backup [stage]# cd /usr/local/oracle/backup [backup]# /stage/osb_installmedia/setup

cd /usr/local/oracle/backup [backup]# /stage/osb_installmedia/setup Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

Performing Installation Tasks The recommended directory for installing the Oracle Secure Backup software is /usr/local/oracle/backup. You can install the software in a different directory, if desired. However, then the printed and online documentation for Oracle Secure Backup may not agree with your actual commands, output, and GUI screens. For users new to Oracle Secure Backup, this can add an unwanted layer of confusion. In this course, you use the default directory /usr/local/oracle/backup as OSB_Home.

Note: There is no default “OSB_Home” environment variable, which is used to refer to this directory, unlike the ORACLE_HOME variable used with Oracle Database installations. After your OSB_Home directory is created, change your current directory to the OSB_Home directory, and execute the setup program from your staging area, which in this example is the /stage/osb_installmedia directory. If you use your CD-ROM drive as your staging area, use a command similar to /cdrom/cdrom0/setup. In the slide example, a stage directory is used instead of a CD-ROM drive.

Oracle Database 11 g: Oracle Secure Backup

2 - 9

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Administrative Server Installation: Example

Welcome to Oracle's setup program for Oracle Secure Backup. This program loads Oracle Secure Backup software from the CD- ROM to a filesystem directory of your choosing.

This CD-ROM contains Oracle Secure Backup version

10.2.0.2.0_linux32.

Please wait a moment while I learn about this host

---------------------

1. Linux32 administrative server, media server, client

---------------------

done.

Loading Oracle Secure Backup installation tools

Loading linux32 administrative server, media server, client done.

done.

---------------------

Loading of Oracle Secure Backup software from CD-ROM is complete. You may unmount and remove the CD-ROM.

Would you like to continue Oracle Secure Backup installation with 'installob' now? (The Oracle Secure Backup Installation Guide contains complete information about installob.) Please answer 'yes' or 'no' [yes]: no

about installob.) Please answer 'yes' or 'no' [yes]: no Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

Administrative Server Installation: Example As you can see, Oracle Secure Backup analyzes the host on which you start the installation, then it loads the relevant software. installob is the primary installation script for Oracle Secure Backup. It can be called in a stand- alone fashion by invoking the installob shell script.

Oracle Database 11 g: Oracle Secure Backup

2 - 10

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Administrative Server Installation: Example

Welcome to installob, Oracle Secure Backup's UNIX installation program.

It installs Oracle Secure Backup onto one or more UNIX or Linux systems on your network. (Install Oracle Secure Backup for Windows using the CD-ROM from which you loaded this software.)

For most questions, a default answer appears enclosed in square brackets. Press Enter to select this answer.

Please wait a few seconds while I learn about this machine done.

Have you already reviewed and customized install/obparameters for your Oracle Secure Backup installation [yes]? no Would you like to do this now [yes]? no

---------------------

no Would you like to do this now [yes]? no --------------------- Copyright © 2009, Oracle. All

Copyright © 2009, Oracle. All rights reserved.

Administrative Server Installation: Example (continued) The obparameters file is preconfigured. If you wish a default installation, answer no, once, to the question about customizing this file.

If you wish to customize it, then you can use a text editor to edit the obparameters file in the /usr/local/oracle/backup/install/ directory (referred to as the OSB_Home/install directory). Various parameters are defined that you can configure to meet the needs of your business. For example, you can modify parameters for:

• Automatic startup at boot time of the observiced daemon

• Automatic creation of an Oracle Secure Backup user, called oracle, that is assigned the oracle class, and preauthenticated to be used by RMAN

• Default certificate key size

Oracle Database 11 g: Oracle Secure Backup

2 - 11

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Administrative Server Installation: Example

Oracle Secure Backup is not yet installed on this machine.

Oracle Secure Backup's Web server has been loaded, but is not yet configured.

You can install this host one of three ways:

(a)

administrative server (the host will also be able to act as a media server or

client)

(b)

media server (the host will also be able to act as a client)

(c)

client

If you are not sure which way to install, please refer to the Oracle Secure Backup Installation Guide. (a,b or c) [a]? a

refer to the Oracle Secure Backup Installation Guide. (a,b or c) [a]? a Copyright © 2009,

Copyright © 2009, Oracle. All rights reserved.

Administrative Server Installation: Example (continued) Specify the role for this server. If you install Oracle Secure Backup for first time on a specific network, then you should begin with an administrative server installation. By default, the administrative server is also configured as a client.

Oracle Database 11 g: Oracle Secure Backup

2 - 12

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Administrative Server Installation: Example

Beginning the installation. This will take just a minute and will produce several lines of informational output.

Installing Oracle Secure Backup on edvmr1p0 (Linux version

2.6.9-67.0.7.0.1.ELxenU)

You must now enter a password for the Oracle Secure Backup encryption key store. Oracle suggests you choose a password of at least 8 characters in length, containing a mixture of alphabetic and numeric characters.

Please enter the key store password:key_password <<not echoed>>

Re-type password for verification:key_password <<not echoed >>

password for verification: key_password <<not echoed >> Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

Administrative Server Installation: Example (continued) Choose a password for the Oracle Secure Backup encryption key store, which follows your security strategies. (Do not forget this password). Note: In this class, simple and easy to remember passwords (oracle) are used to avoid detracting from the purpose of the exercise. In real development and production environments, use strong passwords that follow the guidelines in Oracle Database Security Guide and the Oracle Secure Backup Administrator’s Guide.

Oracle Database 11 g: Oracle Secure Backup

2 - 13

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Administrative Server Installation: Example

You must now enter a password for the Oracle Secure Backup 'admin' user. Oracle suggests you choose a password of at least 8 characters in length, containing a mixture of alphabetic and numeric characters. Please enter the admin password:admin_password << not echoed >> Re-type password for verification:admin_password <<not echoed>>

You should now enter an email address for the Oracle Secure Backup 'admin‘ user. Oracle Secure Backup uses this email address to send job summary reports and to notify the user when a job requires input. If you leave this blank, you can set it later using the obtool's 'chuser' command.

Please enter the admin email address:

'chuser' command. Please enter the admin email address: Copyright © 2009, Oracle. All rights reserved.

Copyright © 2009, Oracle. All rights reserved.

Administrative Server Installation: Example (continued) Choose a password for the admin user, which follows your security strategies. If you know the email of the admin user you can enter it as well.

During the software installation, you see the actions that are performed. For example:

generating links for admin installation with Web server updating /etc/ld.so.conf checking Oracle Secure Backup's configuration file (/etc/obconfig) setting Oracle Secure Backup directory to /usr/local/oracle/backup in /etc/obconfig setting local database directory to /usr/etc/ob in /etc/obconfig setting temp directory to /usr/tmp in /etc/obconfig setting administrative directory to /usr/local/oracle/backup/admin in /etc/obconfig protecting the Oracle Secure Backup directory creating /etc/rc.d/init.d/observiced activating observiced via chkconfig initializing the administrative domain

If you wish to see the daemons or background processes, enter the following after the installation:

# ps -a |grep ob

13760

pts/0

00:00:00 observiced

13772

pts/0

00:00:00 obscheduled

Oracle Database 11 g: Oracle Secure Backup

2 - 14

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Administrative Server Installation: Example

*********************** N O T E ************************ On Linux systems Oracle recommends that you answer no to the next two questions. The preferred mode of operation on Linux systems is to use the /dev/sg devices for attach points as described in the 'ReadMe‘ and in the 'Installation and Configuration Guide'.

Is edvmr1p0 connected to any tape libraries that you'd like to use with Oracle Secure Backup [no]? no

Is edvmr1p0 connected to any tape drives that you'd like to use with Oracle Secure Backup [no]? no Installation summary:

Installation Host

OS

Driver

OS Move

Reboot

Mode

Name

Name Installed? Required? Req?

admin

edvmr1p0 Linux no

no

no

Oracle Secure Backup is now ready for your use.

Linux no no no Oracle Secure Backup is now ready for your use. Copyright © 2009,

Copyright © 2009, Oracle. All rights reserved.

Administrative Server Installation: Example (continued) After the Oracle Secure Backup software has been installed, you are asked if you want to configure any tape libraries or tape drives that might be attached to the current host. As suggested in the NOTE on the slide, you should answer no to both questions and follow the methods recommended in the Oracle Secure Backup Installation Guide. After the software installation completes, an installation summary appears.

Oracle Database 11 g: Oracle Secure Backup

2 - 15

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Wizard-Based Installation on Windows

There are 3 Windows screenshots on this slide, showing: – the Oracle Secure Backup welcome
There are 3 Windows screenshots on this slide, showing:
– the Oracle Secure Backup welcome page
– the setup page, on which you choose which host roles to install, and
– the admin user password and email page
host roles to install, and – the admin user password and email page Copyright © 2009,

Copyright © 2009, Oracle. All rights reserved.

Wizard-Based Installation on Windows Start your Windows installation by running the setup.exe program. This activates the InstallShield wizard. Answer the questions of the InstallShield wizard, such as your customer information, your server role definition, your predefined Oracle user, passwords for the admin user and the encryption key store, and other questions needed to complete the installation on a Windows server. During the installation process, the Oracle Secure Backup Setup wizard copies all Oracle Secure Backup files to the local host and generates Windows Registry entries. The default directory on Windows is C:\Program Files\Oracle\Backup\, which is different from the recommended UNIX directory of usr/local/oracle/backup.

Oracle Database 11 g: Oracle Secure Backup

2 - 16

These eKit materials are to be used ONLY by you for the express purpose SELF STUDY. SHARING THE FILE IS STRICTLY PROHIBITED.

Oracle University and (Oracle Corporation) use only.

Oracle Secure Backup Interfaces