· 2018-04-17 · IBM Resiliency Orchestration Contents ©IBM Corporation 2017, 2018 3 Contents 1 Installation Overview

Installation Guide

Version 7.2 SP4

IBM Resiliency Orchestration Contents

©IBM Corporation 2017, 2018 2

DISCLAIMER

IBM believes that the information in this publication is accurate as of its publication date. The

information is subject to change without notice.

COPYRIGHT

©IBM Corporation 2017, 2018. All Rights Reserved.

Printed April 2018.

Use, copy, and distribution of any IBM software described in this publication needs an

applicable software license.

No part of this product or document may be reproduced, stored in a retrieval system, or

transmitted, in any form by any means, electronic, mechanical, photocopy, recording, or

otherwise, without prior written authorization of IBM Corporation and its licensers, if any.



Contents

1 Installation Overview .............................................................................................................. 17

1.1 Introduction .................................................................................................................................... 17

1.2 Software Package Components ........................................................................................................ 17

1.2.1 Resiliency Orchestration Server .......................................................................................................... 17

1.2.2 IBM Resiliency Orchestration Site Controller (Agent Node) ............................................................... 17

1.2.3 Advanced Reporter .............................................................................................................................. 18

1.2.4 IBM Resiliency Orchestration Agents .................................................................................................. 18

1.2.5 IBM Resiliency Orchestration Resiliency File Replicator (SFR) ............................................................ 18

1.3 Downloading the Software Package ................................................................................................. 19

1.3.1 Software Versions ................................................................................................................................ 19

1.3.2 Software Package ................................................................................................................................ 19

1.4 Scope of this Document ................................................................................................................... 20

2 System Requirements .............................................................................................................. 21

2.1 System Requirements for the Resiliency Orchestration Server .......................................................... 21

2.2 System Requirements for Site Controller .......................................................................................... 22

2.2.1 Introduction to the Site Controller ...................................................................................................... 22

2.2.2 Hosted Location of the Site Controller ................................................................................................ 22

2.2.3 Site Controller Types Supported ......................................................................................................... 23

2.2.4 System requirements for Linux based Site Controller ......................................................................... 23

2.2.5 System requirements for Windows based Site Controller .................................................................. 24

2.2.6 System requirements for Site Controller with Local Agents ............................................................... 24

2.2.7 System requirements for Installing Advanced Reporter ..................................................................... 25

2.2.8 System requirements for Installing Local Agents ................................................................................ 25

2.2.9 System requirements for Installing Resiliency File Replicator (SFR) ................................................... 25

3 Prerequisites ........................................................................................................................... 26

3.1 GPL Dependencies for IBM Resiliency Orchestration ......................................................................... 26

3.2 Supported OS and features .............................................................................................................. 26

3.2.1 Supported versions of MariaDB and Tomcat ...................................................................................... 26

3.2.2 Supported OS for Resiliency Orchestration and SC ............................................................................. 27

3.2.3 Supported OS Versions for Agents ...................................................................................................... 27

3.2.4 Supported Browsers ............................................................................................................................ 28

4 Preparing the Resiliency Orchestration Server ......................................................................... 30

4.1 Server Hardware ............................................................................................................................. 30

4.2 Installation of the RHEL OS .............................................................................................................. 30

4.3 Installation of MariaDB .................................................................................................................... 30

4.4 Installing Tomcat ............................................................................................................................. 30

4.5 Configuring MariaDB ....................................................................................................................... 30

4.5.1 Preset Users for MariaDB .................................................................................................................... 31

4.5.2 Creating New Users in MariaDB .......................................................................................................... 31



5 Installing the Resiliency Orchestration application software .................................................... 32

5.1 Prerequisites for installation of the Resiliency Orchestration application software ............................ 32

5.2 Mode of installing the Resiliency Orchestration application software ............................................... 32

5.3 Installation of Resiliency Orchestration application server in Graphical Mode ................................... 33

5.4 Post Installation Steps ..................................................................................................................... 44

6 Installing IBM Resiliency Orchestration Server on Linux Cluster in the Graphical Mode ............. 46

6.1 System Requirements ...................................................................................................................... 46

6.2 Installation of Resiliency Orchestration Server ................................................................................. 46

6.2.1 Installation of Linux Enterprise Server OS ........................................................................................... 47

6.2.2 Installation of Linux Cluster ................................................................................................................. 47

6.2.3 Additional Settings for Linux Installation............................................................................................. 47

6.2.4 Installation of IBM Resiliency Orchestration Server Platform on Linux Cluster Nodes ....................... 48

6.2.5 Post-Installations of IBM Resiliency Orchestration Server Platform on Linux Cluster ........................ 48

6.2.6 Installation of Resiliency Orchestration Server Software .................................................................... 48

6.3 Starting and Stopping Resiliency Orchestration Server ...................................................................... 49

6.4 Configuring Linux Cluster ................................................................................................................. 49

6.4.1 Linux Cluster Checking the Application Status by Exit Code ............................................................... 50

6.4.2 Linux Cluster Administration ............................................................................................................... 51

7 Installing the IBM Resiliency Orchestration Server on Linux in the Silent Mode ........................ 52

7.1 Editing the Properties File ................................................................................................................ 52

7.1.1 PanacesServerInstaller.properties file ................................................................................................. 52

7.1.2 PanacesAgentsInstaller.properties file ................................................................................................ 53

8 Configuring Resiliency Orchestration Server ............................................................................. 56

8.1 Configuring Resiliency Orchestration application to use the MariaDB ............................................... 56

8.2 Configuring Resiliency Orchestration with different MariaDB user password .................................... 57

8.3 Server (OS) Hardening ..................................................................................................................... 57

8.4 Running the SecurityUserInjection script .......................................................................................... 58

8.5 Configuring Resiliency Orchestration for Optimal Performance ......................................................... 58

8.6 Configuration Changes in Tomcat ..................................................................................................... 60

8.7 Port Forwarding .............................................................................................................................. 62

8.7.1 Prerequisites for Port Forwarding ....................................................................................................... 62

8.7.2 Configuring ActiveMQ Broker to support Port Forwarding................................................................. 63

8.7.3 Configuration ....................................................................................................................................... 64

8.7.4 HTTP configuration (/etc/httpd/conf/httpd.conf): ............................................................................. 64

8.7.5 SSL configuration (/etc/httpd/conf.d/ssl.conf) ................................................................................... 66

8.7.6 Server Certificate ................................................................................................................................. 66

8.8 Steps to Enable Compression in Tomcat Server ................................................................................ 67

8.9 Configuring Current Events .............................................................................................................. 68

8.9.1 Logs Retention ..................................................................................................................................... 68

8.9.2 Fetch Logs ............................................................................................................................................ 69

8.10 Troubleshooting Proxy Errors ........................................................................................................... 69



8.10.1 Preset Users for Resiliency File Replicator (SFR) ................................................................................. 69

8.11 Configuring Resiliency Orchestration application to use the Resiliency File Replicator ....................... 69

8.12 Localizing the IBM Resiliency Orchestration Application for languages other than English ................. 70

8.12.1 Prerequisites ........................................................................................................................................ 70

8.12.2 Configuring the OS and VNC console .................................................................................................. 70

8.12.3 Configuring the MariaDB ..................................................................................................................... 71

8.12.4 Configuring the Resiliency Orchestration Server properties ............................................................... 72

8.12.5 Post configuration steps ...................................................................................................................... 72

8.13 Configuring Resiliency Orchestration Server and Site Controller for Secured communication by using the ActiveMQ Broker ....................................................................................................................... 73

8.13.1 Changing the Default Passwords for the Roles: Admin, Producer, and Consumer ............................. 73

8.13.2 Replacing the Encrypted Passwords in the credentials-enc.properties file..................... 77

8.13.3 Changing the Default Passwords in the Resiliency Orchestration and Site Controller Configurations78

8.13.4 Locating the Encrypted Passwords ...................................................................................................... 80

8.13.5 Accessing ActiveMQ Console............................................................................................................... 80

8.14 Viewing the HTML Dashboard .......................................................................................................... 80

9 Starting and Stopping Resiliency Orchestration Server ............................................................. 81

9.1.1 Starting Resiliency Orchestration Server ............................................................................................. 81

9.1.2 Starting Resiliency Orchestration Server in Recover Mode ................................................................ 81

9.1.3 Stopping Resiliency Orchestration Server ........................................................................................... 81

9.1.4 Restarting Resiliency Orchestration Server ......................................................................................... 81

9.1.5 Checking Resiliency Orchestration Server Status ................................................................................ 81

9.1.6 Resiliency Orchestration Server Remote Services ............................................................................... 81

9.1.7 Checking Resiliency Orchestration Server Available Modes ............................................................... 82

10 Installing Agent Node Server or Site Controller on Linux........................................................... 83

10.1 Installation Overview ...................................................................................................................... 83

10.2 Client Browser Prerequisite ............................................................................................................. 83

10.3 Ports Used by Linux Based Site Controller ........................................................................................ 83

10.4 Prerequisites ................................................................................................................................... 83

10.5 Installing Site Controller in GUI Mode in Linux .................................................................................. 83

10.6 Installing Site Controller in Silent Mode in Linux ............................................................................... 89

10.6.1 Editing Properties File .......................................................................................................................... 90

10.6.2 Agent Node Silent Mode Installation .................................................................................................. 91

10.6.3 Post Installation Steps after you install the Site Controller in Linux ................................................... 91

10.6.4 Patch Update for Site Controller ......................................................................................................... 92

10.6.5 Starting Agent Node Manually ............................................................................................................ 92

10.6.6 Stopping Agent Node Manually ........................................................................................................... 93

10.7 Uninstalling Site Controller .............................................................................................................. 93

10.7.1 Uninstalling Agent Node in GUI Mode ................................................................................................ 93

10.7.2 Uninstalling Agent Node in Silent Mode ............................................................................................. 95

11 Installing Agent Node Server or Site Controller in MS Windows ............................................... 96



11.1 Installation Overview ...................................................................................................................... 96

11.2 Installation and Services .................................................................................................................. 96

11.3 Client Browser Prerequisite ............................................................................................................. 96

11.4 Ports Used by Windows Based Site Controller .................................................................................. 96

11.5 Prerequisites ................................................................................................................................... 97

11.6 Installing Site Controller in GUI Mode in Windows ........................................................................... 97

11.7 Installing Site Controller in Windows in Silent Mode ...................................................................... 102

11.7.1 Editing Properties File ........................................................................................................................ 103

11.8 Post Installation Steps after you install the Site Controller in Windows ........................................... 104

11.9 Starting or Stopping Site Controller Manually ................................................................................. 105

11.9.1 Using the Windows Command Prompt ............................................................................................. 105

11.9.2 Using the Windows GUI ..................................................................................................................... 106

11.10 Configuring End Points and Site Controller to use the PowerShell framework ........................... 106

11.11 Uninstalling Site Controller ...................................................................................................... 107

11.11.1 Uninstalling Site Controller in GUI Mode .................................................................................. 107

11.11.2 Uninstalling Agent Node in Silent Mode ................................................................................... 108

12 Installing Agents on MS Windows Server ............................................................................... 109

12.1 Prerequisites for Installing Resiliency Orchestration Agents ............................................................ 109

12.2 MS Windows Server Requirements ................................................................................................ 109

12.3 Installation of supported JRE ......................................................................................................... 110

12.4 Host Machines with Virtual IP Address ........................................................................................... 110

12.5 Specific Prerequisites ..................................................................................................................... 110

12.5.1 MSSQL Agent ..................................................................................................................................... 110

12.5.2 Oracle Agent ...................................................................................................................................... 111

12.6 Installation of Agents .................................................................................................................... 111

12.7 Debugging Agent Installation on Windows Server .......................................................................... 121

12.8 Starting and Stopping of Agent Services on Windows Server ........................................................... 121

13 Installing Agents on Solaris Server ......................................................................................... 123


13.2 Solaris Server Requirements .......................................................................................................... 123



13.5 HA Configuration ........................................................................................................................... 134

13.6 Debugging Agent Installation on Solaris Server ............................................................................... 134

13.7 Starting and Stopping Agents on Solaris Server .............................................................................. 135

13.7.1 Solaris OS Agent................................................................................................................................. 135

13.7.2 PFR Agent .......................................................................................................................................... 135

13.7.3 Sybase Agent ..................................................................................................................................... 135

13.7.4 SRS Agent ........................................................................................................................................... 136

13.7.5 Oracle Agent ...................................................................................................................................... 136

13.7.6 TrueCopy ........................................................................................................................................... 136



13.7.7 Listing the Running Agents ................................................................................................................ 136

14 Installing Agents on Linux Server ........................................................................................... 137


14.2 To change Nat IP configuration after installation or to troubleshoot Nat IP, refer to Troubleshooting HA Configuration ........................................................................................................................... 143

14.3 Debugging Agent Installation on Linux Server ................................................................................. 147

14.4 Starting and Stopping Agents on Linux Server ................................................................................ 147

14.4.1 Linux OS Agent ................................................................................................................................... 148

14.4.2 PFR Agent .......................................................................................................................................... 148

14.4.3 Oracle Agent ...................................................................................................................................... 148

14.4.4 Oracle Data Guard Agent ................................................................................................................... 148

14.4.5 PostgreSQL Agent .............................................................................................................................. 149

14.4.6 Listing the Agents that are Running .................................................................................................. 149

15 Installing Agents on HPUX Server ........................................................................................... 150


15.2 To change Nat IP configuration after installation or to trouble shoot refer Troubleshooting for HA Configuration ................................................................................................................................ 157

15.3 Debugging Agent Installation on HPUX Server ................................................................................ 161

15.4 Starting and Stopping Agents on HPUX Server ................................................................................ 161

15.4.1 HPUX OS Agent .................................................................................................................................. 161

15.4.2 PFR Agent .......................................................................................................................................... 162

15.4.3 Oracle Agent ...................................................................................................................................... 162




16.2 AIX Server Requirements ............................................................................................................... 163



16.5 To change Nat IP configuration after installation or to troubleshoot refer Troubleshooting HA Configuration ................................................................................................................................ 169

16.6 Starting and Stopping of Agents on AIX Server ............................................................................... 172

16.6.1 AIX OS Agent ...................................................................................................................................... 172

16.6.2 PFR Agent .......................................................................................................................................... 172

16.6.3 Oracle Agent ...................................................................................................................................... 172



17 Installing Resiliency Orchestration Advanced Reporter .......................................................... 174

17.1 Prerequisite .................................................................................................................................. 174

17.2 Installing Advanced Reporter in GUI Mode ..................................................................................... 174

17.3 Configuring Openreports ............................................................................................................... 178

17.4 Installing the Advanced Reporter in Silent Mode ............................................................................ 179



17.4.1 Editing Properties File ........................................................................................................................ 179

17.4.2 Installing Resiliency Orchestration Advanced Reporter on Linux ..................................................... 180

18 Installing IBM Resiliency Orchestration Server OVA ............................................................... 181

18.1 Minimum System Requirements .................................................................................................... 181

18.2 Assumptions ................................................................................................................................. 181

18.3 Installing Resiliency Orchestration Server Virtual Appliance for VMWare ........................................ 181

18.3.1 Prerequisites ...................................................................................................................................... 181

18.4 Installation Procedure ................................................................................................................... 181

19 Installing Resiliency Orchestration Site Dashboard ................................................................. 183

19.1 Prerequisites ................................................................................................................................. 183

19.2 GUI Mode Installation of Resiliency Orchestration Site Dashboard .................................................. 183

20.1 Editing Properties File .................................................................................................................... 188

20.1.1 PanacesServerInstaller.properties file ............................................................................................... 188

20.1.2 PanacesAgentsInstaller.properties file .............................................................................................. 190

21 Installing Resiliency Orchestration Agent Server in Silent Mode ............................................. 192

21.1 Installing Agent Server in Silent Mode on Windows System ............................................................ 192

21.2 Starting Silent Mode Installation on Solaris/Linux/HPUX/AIX Servers ............................................. 192

21.3 Vault Configuration ....................................................................................................................... 192

22 Installing the Resiliency Orchestration Agent Server in Silent Mode ....................................... 194

22.1 Installing Agent Server on Windows in the Silent Mode .................................................................. 194

22.2 Installing Agent Server on Solaris, Linux, HPUX, or AIX in the Silent Mode ....................................... 194

22.3 Vault Configuration ....................................................................................................................... 195

22.4 Post Upgrade Tasks ....................................................................................................................... 195

22.5 Server Memory Management ........................................................................................................ 196

22.6 Backup and Fallback Plan ............................................................................................................... 196

22.6.1 Backup Plan ....................................................................................................................................... 196

22.6.2 Fallback Plan ...................................................................................................................................... 197

23 Upgrading the Resiliency Orchestration Advanced Reporter .................................................. 198

24 Upgrading Resiliency Orchestration Agents ............................................................................ 199

24.1 Prerequisites ................................................................................................................................. 199

24.2 Resiliency Orchestration Agent Upgrade [Optional] ........................................................................ 199

24.3 Upgrading Agents on Linux Server .................................................................................................. 199

24.3.1 Prerequisites before upgrading agents on Linux Server ................................................................... 199

24.3.2 Limitations ......................................................................................................................................... 200

24.3.3 Upgrading Agents on Linux Server in GUI mode ............................................................................... 200

25 Upgrading Resiliency Orchestration Agents Using Silent Mode Installation ............................. 211

25.1 Prerequisites before upgrading agents on AIX Server...................................................................... 211

25.2 Limitations .................................................................................................................................... 211

25.3 Editing Properties File .................................................................................................................... 211

25.3.1 PanacesAgentsInstaller.properties file: ............................................................................................. 211



25.4 Upgrading Agents in Silent Mode on Windows ............................................................................... 213

25.5 Upgrading Agents in Silent Mode on Solaris, Linux, HPUX, AIX Servers ............................................ 213

26 Installing Third-party Software .............................................................................................. 214

26.1 Red Hat Enterprise Linux (RHEL) Versions ....................................................................................... 214

26.1.1 RHEL 5.6 (32-Bit) ................................................................................................................................ 214

26.1.2 RHEL 5.5 (64-Bit) ................................................................................................................................ 214

26.1.3 RHEL 5.7 (64-Bit) ................................................................................................................................ 214

26.1.4 RHEL 6.X (64-Bit) ................................................................................................................................ 214

26.1.5 RHEL 7.X (64-Bit) ................................................................................................................................ 215

26.2 Advanced Interactive eXecutive (AIX) ............................................................................................. 215

26.3 HPUX 64-Bit Itanium ...................................................................................................................... 215

26.4 HPUX 64-Bit Parisac ....................................................................................................................... 215

26.5 Solaris_Sparc ................................................................................................................................. 216

26.6 Solaris_Intel .................................................................................................................................. 216

27 Uninstalling Resiliency Orchestration Agent Node .................................................................. 217

28 Uninstalling Resiliency Orchestration Server .......................................................................... 219

28.1 Uninstalling by using the Silent Mode ............................................................................................ 219

28.2 Uninstalling by using the GUI ......................................................................................................... 219

28.3 Uninstalling by using the Command Prompt ................................................................................... 222

29 Uninstalling of Agents ........................................................................................................... 224

29.1 Agents on Windows ....................................................................................................................... 224

29.2 Agents on Solaris ........................................................................................................................... 224

29.3 Agents on Linux ............................................................................................................................. 225

29.4 Agents on HPUX ............................................................................................................................ 225

29.5 Agents on AIX ................................................................................................................................ 225

30.1 Prerequisites ................................................................................................................................. 226

30.2 Overview ...................................................................................................................................... 226

30.3 Installing OS Command Processor .................................................................................................. 227

30.3.1 Extracting Installation File ................................................................................................................. 227

30.3.2 Authorizing APF for TCMD, ZCMD, GCMD, and XCMD ...................................................................... 228

30.3.3 Defining Userid SANOVI to RACF/Other Security Program ............................................................... 229

30.4 Verifying Sz/OS CP (Command Processor) Install ............................................................................ 229

31 Migrating the Resiliency Orchestration Server ....................................................................... 232

31.1 Migrating to new Server with Same IP ........................................................................................... 232

31.2 Migrating to new Server with New IP ............................................................................................. 234

32 Troubleshooting .................................................................................................................... 237

32.1 Resiliency Orchestration Start Fails with Error ActiveMQ Failed to Start .......................................... 237

32.1.1 Resolution .......................................................................................................................................... 237

32.2 Subsystem Discovery Failing for Oracle Solution ............................................................................. 237

32.2.1 Resolution .......................................................................................................................................... 237



32.3 Agent Not Starting on Windows Server .......................................................................................... 237

32.3.1 IBM Resiliency File Replicator Service ............................................................................................... 238

32.3.2 PFR Agent .......................................................................................................................................... 238

32.3.3 MSSQL Agent For MSSQL 2005 .......................................................................................................... 238

32.3.4 Windows OS Agent ............................................................................................................................ 239

32.4 Agent Not Stating on Solaris Server ................................................................................................ 239

32.4.1 Sybase Agent ..................................................................................................................................... 239


32.4.3 PFR Agent .......................................................................................................................................... 240

32.4.4 Solaris OS Agent................................................................................................................................. 240

32.4.5 SRS Agent ........................................................................................................................................... 240

32.5 Agent Not Stating on Linux Server .................................................................................................. 240

32.5.1 Sanovi IBM Resiliency File Replicator Service.................................................................................... 241

32.5.2 PFR Agent .......................................................................................................................................... 241

32.5.3 Linux OS Agent ................................................................................................................................... 241

32.6 Agent Not Starting on AIX Server ................................................................................................... 241


32.6.2 PFR Agent .......................................................................................................................................... 242

32.6.3 AIX OS Agent ...................................................................................................................................... 242

32.7 Agent Not Starting on HPUX Server ................................................................................................ 242


32.7.2 PFR Agent .......................................................................................................................................... 243

32.7.3 HPUX OS Agent .................................................................................................................................. 243

32.8 HA Configuration ........................................................................................................................... 243

32.9 NAT IP ........................................................................................................................................... 243

32.9.1 CFG file for NAT IP ............................................................................................................................. 244

32.10 Web Browser Displays Certificate Error .................................................................................... 244

32.11 Server/Advanced Reporter Installation Fails with UnsatisfiedLinkError ..................................... 245

32.12 Port Forwarding ...................................................................................................................... 245

32.12.1 Verify Firewall Status ................................................................................................................. 245

32.12.2 Add Exception to Firewall .......................................................................................................... 245

32.12.3 Open Ports ................................................................................................................................. 246

32.13 Create Server Certificate and Server Private Key Reference ...................................................... 246

32.14 Analyse HTTPD Logs ................................................................................................................ 246

32.15 Install httpd, SSL Packages ....................................................................................................... 247

32.15.1 Download/Mount the Operating System ISO ........................................................................... 247

32.15.2 Install the httpd, SSL Packages .................................................................................................. 247

33 License Information ............................................................................................................... 248

33.1 GPL License Information ................................................................................................................ 248

IBM Resiliency Orchestration List of Figures


List of Figures

Figure 1: IBM Resiliency Orchestration Installer ............................................................................................. 34

Figure 2: IBM Resiliency Orchestration Server Installation - MySQL root password ...................................... 34

Figure 3: IBM Resiliency Orchestration Server Installation - Tomcat Home................................................... 35

Figure 4: IBM Resiliency Orchestration Server Installation - Introduction ..................................................... 36

Figure 5: IBM Resiliency Orchestration Server Installation – License Agreement .......................................... 36

Figure 6: IBM Resiliency Orchestration Server Installation - Choose Install Folder........................................ 37

Figure 7: IBM Resiliency Orchestration Server Installation – Sanovi User Account ....................................... 38

Figure 8: IBM Resiliency Orchestration Server Installation – User Management System .............................. 38

Figure 9: IBM Resiliency Orchestration Server Installation - Pre-Installation Summary ................................ 39

Figure 10: IBM Resiliency Orchestration Server Installation - Installing IBM Resiliency Orchestration Server ................................................................................................................................................... 40

Figure 11: IBM Resiliency Orchestration Server Installation - Confirmation message ................................... 40

Figure 12: IBM Resiliency Orchestration Server Installation - Advanced User Server Details 1 ..................... 41

Figure 13: IBM Resiliency Orchestration Server Installation - Advanced User Server Details 2 ..................... 42

Figure 14: IBM Resiliency Orchestration Server Installation - Support User Account .................................... 42

Figure 15: IBM Resiliency Orchestration Server Installation - System Configuration ..................................... 43

Figure 16: IBM Resiliency Orchestration Server Installation - Installation Completed................................... 44

Figure 17: IBM Resiliency Orchestration Agent Node Installer ...................................................................... 84

Figure 18: IBM Resiliency Orchestration Agent Node Installation on Linux - Introduction ............................ 85

Figure 19: IBM Resiliency Orchestration Agent Node Installation on Linux - Choose Install Folder .............. 85

Figure 20: IBM Resiliency Orchestration Agent Node Installation on Linux – IBM Resiliency Orchestration Agent Node IP Address Configuration ................................................................................................. 86

Figure 21: IBM Resiliency Orchestration Agent Node Installation on Linux - Pre-Installation Summary ....... 87

Figure 22: IBM Resiliency Orchestration Agent Node Installation on Linux - Installing IBM Resiliency Orchestration Agent Node .................................................................................................................. 88

Figure 23: IBM Resiliency Orchestration Agent Node Installation on Linux - Starting IBM Resiliency Orchestration Agent Node .................................................................................................................. 88

Figure 24: IBM Resiliency Orchestration Agent Node Installation on Linux - Installation Completed ........... 89

Figure 25: Uninstall IBM Resiliency Orchestration Agent Node ..................................................................... 94

Figure 26: Uninstall Complete Screen ............................................................................................................. 94

Figure 27: IBM Resiliency Orchestration Agent Node Installer on Windows ................................................. 98

Figure 28: IBM Resiliency Orchestration Agent Node Installation on Windows - Introduction ..................... 98

Figure 29: IBM Resiliency Orchestration Agent Node Installation on Windows- Choose Install Folder ........ 99

Figure 30: IBM Resiliency Orchestration Agent Node Installation on Windows – IBM Resiliency Orchestration Agent Node IP Address Configuration........................................................................ 100

Figure 31: IBM Resiliency Orchestration Agent Node Installation on Windows - Pre-Installation Summary100

Figure 32: IBM Resiliency Orchestration Agent Node Installation on Windows - Installing IBM Resiliency Orchestration Agent Node ................................................................................................................ 101

Figure 33: IBM Resiliency Orchestration Agent Node Installation on Windows - Starting IBM Resiliency Orchestration Agent Node ................................................................................................................ 102

Figure 34: IBM Resiliency Orchestration Agent Node Installation on Windows - Installation Completed .. 102



Figure 35: Uninstall IBM Resiliency Orchestration Agent Node ................................................................... 107

Figure 36: Uninstall Complete Screen ........................................................................................................... 108

Figure 37: IBM Resiliency Orchestration Agent Installer .............................................................................. 112

Figure 38: IBM Resiliency Orchestration Agents Installation on Windows Server - Introduction ................ 113

Figure 39: IBM Resiliency Orchestration Agents Installation on Windows Server - Choose Install Folder .. 113

Figure 40: IBM Resiliency Orchestration Agents Installation on Windows Server - Choose Agents - Windows ............................................................................................................................................ 114

Figure 41: IBM Resiliency Orchestration Agents Installation on Windows Server - Choose Shortcut Folder115

Figure 42: IBM Resiliency Orchestration Agents Installation on Windows Server - Agent Configuration ... 116

Figure 43: IBM Resiliency Orchestration Agents Installation on Windows Server - IBM Resiliency Orchestration IP Address Configuration ............................................................................................ 117

Figure 44: IBM Resiliency Orchestration Site Controller IP Address Configuration on Windows server ..... 117

Figure 45: IBM Resiliency Orchestration Agents Installation on Windows Server - Pre-Installation Summary ............................................................................................................................................ 118

Figure 46: IBM Resiliency Orchestration Agents Installation on Windows Server - Installing IBM Resiliency Orchestration Agents......................................................................................................................... 118

Figure 47: IBM Resiliency Orchestration Agents Installation on Windows Server - Starting Agents ........... 119

Figure 48: IBM Resiliency Orchestration Agents Installation on Windows Server - Install Complete .......... 120


Figure 50: IBM Resiliency Orchestration Agents Installation on Solaris Server - Introduction .................... 126

Figure 51: IBM Resiliency Orchestration Agents Installation on Solaris Server - Choose Install Folder ....... 126

Figure 52: IBM Resiliency Orchestration Agents Installation on Solaris Server - Choose Agents - Solaris ... 127

Figure 53: IBM Resiliency Orchestration Agents Installation on Solaris Server - Choose Link Folder .......... 128

Figure 54: IBM Resiliency Orchestration Agents Installation on Solaris Server - Agent Configuration ........ 128

Figure 55: IBM Resiliency Orchestration Agents Installation on Solaris Server - Agent Configuration ........ 129

Figure 56: IBM Resiliency Orchestration Agents Installation on Solaris Server - IBM Resiliency Orchestration IP Address Configuration ............................................................................................ 130

Figure 57: IBM Resiliency Orchestration Site Controller IP Address Configuration on Solaris Server .......... 131

Figure 58: IBM Resiliency Orchestration Agents Installation on Solaris Server - Pre-Installation Summary 132

Figure 59: IBM Resiliency Orchestration Agents Installation on Solaris Server - Installing IBM Resiliency Orchestration Agents......................................................................................................................... 132

Figure 60: IBM Resiliency Orchestration Agents Installation on Solaris Server - Starting Agents ................ 133

Figure 61: IBM Resiliency Orchestration Agents Installation on Solaris Server - Install Complete .............. 134


Figure 63: IBM Resiliency Orchestration Agents Installation on Linux Server - Introduction....................... 138

Figure 64: IBM Resiliency Orchestration Agents Installation on Linux Server - Choose Install Folder ......... 139

Figure 65: IBM Resiliency Orchestration Agents Installation on Linux Server - Choose Agents - Linux ....... 140

Figure 66: IBM Resiliency Orchestration Agents Installation on Linux Server - Choose Link Folder ............ 140

Figure 67: IBM Resiliency Orchestration Agents Installation on Linux Server - Agent Configuration .......... 141



Figure 70: IBM Resiliency Orchestration Agents Installation on Linux Server - IBM Resiliency Orchestration IP Address Configuration ............................................................................................ 143



Figure 71: IBM Resiliency Orchestration Site Controller IP Address Configuration on Linux server ............ 144

Figure 72: IBM Resiliency Orchestration Agents Installation on Linux Server - Pre - Installation screen ..... 145

Figure 73: IBM Resiliency Orchestration Agents Installation on Linux Server - Installing IBM Resiliency Orchestration Agents......................................................................................................................... 145

Figure 74: IBM Resiliency Orchestration Agents Installation on Linux Server - Starting Agents .................. 146

Figure 75: IBM Resiliency Orchestration Agents Installation on Linux Server - Install Complete ................ 147


Figure 77: IBM Resiliency Orchestration Agents Installation on HPUX Server - Introduction ...................... 152

Figure 78: IBM Resiliency Orchestration Agents Installation on HPUX Server - Choose Install Folder ........ 153

Figure 79: IBM Resiliency Orchestration Agents Installation on HPUX Server - Choose Agents - HPUX ...... 153

Figure 80: IBM Resiliency Orchestration Agents Installation on HPUX Server - Choose Link Folder ........... 154

Figure 81: IBM Resiliency Orchestration Agents Installation on HPUX Server - Agent Configuration ......... 155



Figure 84: IBM Resiliency Orchestration Agents Installation on HPUX Server - IBM Resiliency Orchestration IP Address configuration ............................................................................................ 157

Figure 85: IBM Resiliency Orchestration Site Controller IP Address Configuration on HPUX server ........... 158

Figure 86: IBM Resiliency Orchestration Agents Installation on HPUX Server - Pre-Installation Summary . 159

Figure 87: IBM Resiliency Orchestration Agents Installation on HPUX Server - Installing IBM Resiliency Orchestration Agents......................................................................................................................... 159

Figure 88: IBM Resiliency Orchestration Agents Installation on HPUX Server - Starting Agents ................. 160

Figure 89: IBM Resiliency Orchestration Agents Installation on HPUX Server - Install Complete ................ 161


Figure 91: IBM Resiliency Orchestration Agents Installation on AIX Server - Introduction .......................... 165

Figure 92: IBM Resiliency Orchestration Agents Installation on AIX Server - Choose Install Folder ............ 166

Figure 93: IBM Resiliency Orchestration Agents Installation on AIX Server - Choose Agents - AIX ............. 166

Figure 94: IBM Resiliency Orchestration Agents Installation on AIX Server - Choose Link Folder ............... 167

Figure 95: IBM Resiliency Orchestration Agents Installation on AIX Server - Agent Configuration ............. 168

Figure 96: IBM Resiliency Orchestration Agents Installation on AIX Server - Agent Configuration ............. 169

Figure 97: IBM Resiliency Orchestration Agents Installation on AIX Server - IBM Resiliency Orchestration IP Address configuration ................................................................................................................... 170

Figure 98: IBM Resiliency Orchestration Site Controller IP Address Configuration on AIX server ............... 171

Figure 99: IBM Resiliency Orchestration Agents Installation on AIX Server - Pre-Installation Summary ..... 171

Figure 100: IBM Resiliency Orchestration Advanced Reporter Installer ...................................................... 175

Figure 101: IBM Resiliency Orchestration Advanced Reporter Installation - Tomcat Path .......................... 176

Figure 102: IBM Resiliency Orchestration Advanced Reporter Installation - Introduction .......................... 176

Figure 103: IBM Resiliency Orchestration Advanced Reporter Installation - Pre-Installation Summary ..... 177

Figure 104: IBM Resiliency Orchestration Site Dashboard Introduction ...................................................... 184

Figure 105: IBM Resiliency Orchestration Site Dashboard - MySQL root password .................................... 184

Figure 106: IBM Resiliency Orchestration Site Dashboard – Choose Tomcat Home .................................... 185

Figure 107: IBM Resiliency Orchestration Site Dashboard – IP address ....................................................... 185

Figure 108: IBM Resiliency Orchestration Site Dashboard – Google Apis Key ............................................. 186



Figure 109: IBM Resiliency Orchestration – Pre-Installation Summary ........................................................ 186

Figure 110: IBM Resiliency Orchestration - Installing Site Dashboard ......................................................... 187

Figure 111: IBM Resiliency Orchestration Site Dashboard – Installation Completed .................................. 187

Figure 112: Upgrade IBM Resiliency Orchestration Advance Reporter - Metadata Refresh Screen for Advanced Reporter ............................................................................................................................ 198

Figure 113: Upgrade Agents on Linux Server - Introduction ........................................................................ 201

Figure 114: Upgrade Agents on Linux Server - Choose Install Folder ........................................................... 201

Figure 115: Upgrade Agents on Linux Server - Choose Install Set ................................................................ 202

Figure 116: Upgrade Agents on Linux Server - Choose Agents - Linux ......................................................... 203

Figure 117: Upgrade Agents on Linux Server - Choose Link Folder .............................................................. 204

Figure 118: Upgrade Agents on Linux Server - Agent Configuration ............................................................ 205

Figure 119: Upgrade Agents on Linux Server - Agent Configuration ............................................................ 206

Figure 120: Upgrade Agents on Linux Server – NAT IP Address Configuration ............................................ 206

Figure 121: Upgrade Agents on Linux Server – Site Controller Configuration ............................................. 207

Figure 122: Upgrade Agents on Linux Server - Pre-Installation Summary .................................................... 208

Figure 123: Upgrade Agents on Linux Server - Installing IBM Resiliency Orchestration Agents .................. 208

Figure 124: Upgrade Agents on Linux Server - Starting Agents .................................................................... 209

Figure 125: Upgrade Agents on Linux Server - Upgrade Complete .............................................................. 210

Figure 126: Uninstall IBM Resiliency Orchestration Agent Node ................................................................. 217

Figure 127: Uninstall Complete screen ......................................................................................................... 218

Figure 128: Uninstall IBM Resiliency Orchestration Server – Introduction screen ...................................... 220

Figure 129: Uninstall IBM Resiliency Orchestration Server – Uninstalling… screen ..................................... 221

Figure 130: Uninstall IBM Resiliency Orchestration Server – Uninstall Complete screen ............................ 222

Figure 131: Uninstall Complete screen ......................................................................................................... 224

Figure 132: Resiliency Orchestration Workflow ........................................................................................... 227

Figure 133: SzCPIVP....................................................................................................................................... 230

IBM Resiliency Orchestration List of Tables


List of Tables

Table 1. Java tools available in Resiliency Orchestration server package ...................................................... 19

Table 2. System requirements for Resiliency Orchestration server ............................................................... 21

Table 3. System requirements for the Linux based Site Controller ................................................................ 23

Table 4. System requirements for the Linux based co-hosted Site Controller ............................................... 23

Table 5. System requirements for the Windows based Site Controller ......................................................... 24

Table 6. System requirements for Site Controller with Local Agents ............................................................. 24

Table 7. Prerequisites...................................................................................................................................... 26

Table 8. Supported versions of MariaDB and Tomcat .................................................................................... 26

Table 9. Supported OS for Resiliency Orchestration and SC ........................................................................... 27

Table 10. Supported Remote Agents in the Resiliency Orchestration............................................................ 27

Table 11. Configuring Resiliency Orchestration server for optimal performance .......................................... 58

IBM Resiliency Orchestration Preface


Preface

The IBM Resiliency Orchestration Installation Guide provides concepts and procedures to

install the Resiliency Orchestration product. This guide is intended for administrators

responsible for installing, configuring and maintaining the product.

Note

The company name IBM and IBM Corporation are used interchangeably. ‘Sanovi Cloud

Continuity’ and ‘Resiliency Orchestration’ terms used in this document refer to and stand

for the ‚IBM Resiliency Orchestration Application‛. The terminologies Site Controller and

Agent Node are used interchangeably.

Purpose

The Installation Guide helps you to install the Resiliency Orchestration application and its

components, by providing you with instructions and detailed procedures.

Audience

This manual is for administrators who are responsible for installation, configuration and

uninstallation of Resiliency Orchestration Software and its services.

IBM Resiliency Orchestration Installation Guide


1 Installation Overview

1.1 Introduction

The IBM Resiliency Orchestration is an industry leading software product for managing the Enterprise Business Continuity Processes by providing a comprehensive Disaster Recovery (DR) solution. The IBM Resiliency Orchestration automates DR workflows by inter-operating with several industry leading Databases, Replications, and Cluster Products.

The Resiliency Orchestration application supports a wide range of operating systems, databases and their replication schemas that you can choose from to customize your disaster recovery solution for your specific business requirements.

1.2 Software Package Components

Find information about the components in the IBM Resiliency Orchestration Software Package that you can choose to install. For downloading instructions,

see Downloading the Software Package.

1.2.1 Resiliency Orchestration Server

The Resiliency Orchestration Server contains the application binaries that set up the Resiliency Orchestration GUI, the Resiliency Orchestration Remote Agents, the Resiliency Orchestration Web Services, the associated libraries, and other application files. The Server component part of the IBM Resiliency Orchestration product is to be installed on a server hardware.

Before you install the Resiliency Orchestration Server, you must prepare the server hardware with supported RHEL operating system and then install the MariaDB database software.

Note

This is a mandatory software that you must download and install as part of the IBM

Resiliency Orchestration DR Solution.

1.2.2 IBM Resiliency Orchestration Site Controller (Agent Node)

The Agent Node also called as the Site Controller (SC), hosts the necessary or applicable Agents to manage the Endpoints remotely. The Site Controller manages the Agents for Resiliency Orchestration by optimizing the communication between an Agent and the Resiliency Orchestration Server.

The SC augments by acting as a gateway for the set of agents for communicating with the Resiliency Orchestration Server.

Note

This is a mandatory software that you must download and install as part of the IBM

Resiliency Orchestration DR Solution.



1.2.3 Advanced Reporter

Advanced Reports module is a powerful, flexible, and easy to use reporting solution that provides browser based, parameter driven, dynamic report generation and flexible report scheduling capabilities.

Advanced Reports supports a variety of open source reporting engines, including JasperReports, JFreeReport, JXLS, and Eclipse BIRT,these are used to provide support a wide range of reporting requirements and capabilities. Advanced Reports also supports QueryReports and ChartReports, easy to create SQL based reports that do not require a predefined report definition.

Note

This is an optional feature software that you can download and install to use the

Advanced Reports feature in the IBM Resiliency Orchestration GUI.

1.2.4 IBM Resiliency Orchestration Agents

The Agents play a vital role in monitoring and managing the Endpoints and the applications on the Endpoints. The Resiliency Orchestration Agents are specifically designed to manage applications, components, datasets, and the protection or replication schemas that are hosted on the Production or Primary Endpoints. The same Agents are used to manage the DR Endpoints too. The Agents are collectively managed by the Resiliency Orchestration Site Controller.

If the Agents are installed in the Endpoint hardware, then they are called as Local Agents (the agents are Local to the PR or DR Endpoint). If the Agents are installed in the node where the Resiliency Orchestration Server is installed, then they are called as Remote Agents (the agents are remote to the PR or DR Endpoint).

Note

This is an optional software that you can download and install if you want to install

Agents as Local Agents, in the IBM Resiliency Orchestration DR Solution.

1.2.5 IBM Resiliency Orchestration Resiliency File Replicator (SFR)

The Resiliency File Replicator (SFR) is an enterprise replication software developed by IBM. The Resiliency File Replicator can be used to replicate data (files and directories) across hosts connected within Local or Remote locations. It works with both Local Area Network (LAN) and Wide Area Network (WAN). It can transfer files between any network-shared drives and across heterogeneous platforms. Resiliency File Replicator supports one-to-one, one-to-many, and many-to-one configurations.

Note

This is an optional software provided as a free-of-charge software that you can download

and install if you want to use this application for File Replication.



1.3 Downloading the Software Package

1.3.1 Software Versions

1.3.1.1 Licensed Version

You can download the licensed versions of the Resiliency Orchestration software

that is available on the IBM Passport Advantage (PA) Portal. (https://www-

01.ibm.com/software/passportadvantage/)

1.3.1.2 Software Fixes and Updates

You can also download the Resiliency Orchestration software Fixes and Updates

that are available on the IBM Fix Central Portal. (https://www-

945.ibm.com/support/fixcentral/)

1.3.2 Software Package

The Resiliency Orchestration Software package contains the following components:

a) IBM Resiliency Orchestration Server (Server)

b) IBM Resiliency Orchestration Site Controller (Agent Node)

c) Advanced Reporter Services (Advanced Reporter)

d) IBM Resiliency Orchestration Agents (Agents)

e) IBM Resiliency File Replicator (SFR)

Note:

The name in brackets, indicates the name used in the software package. Ensure to

choose the version of the Service or Fix Pack you want to download and then, select all or

the components you want, for that version to download.

1.3.2.1 Java tools available in the Resiliency Orchestration Server Package

Find information about the versions of Java Tools that are available for your use,

contained in the Resiliency Orchestration Server package, as listed in Table 1.

Table 1. Java tools available in Resiliency Orchestration server package

Java Tools OS Version Remarks

j2re_1.8.0_131 Windows 2008, Windows 2012

j2re_1.8.0_131 HPUX

j2re_1.8.0_131 Solaris 10

j2re_1.8.0_131 AIX 7

j2re_1.8.0_131 Linux 5.0, 6.0 Enterprise Server

Edition

Used to install the

Database Agent System

j2re_1.8.0_131 Linux 6.0 Enterprise Server Edition Used to install the IBM

Resiliency Orchestration

Server System

https://www-01.ibm.com/software/passportadvantage/

https://www-945.ibm.com/support/fixcentral/



1.4 Scope of this Document

The IBM Resiliency Orchestration Installation Guide provides the installation and configuration procedures for the following components that are available in the Software Package:

a) IBM Resiliency Orchestration Server

b) IBM Resiliency Orchestration Site Controller

c) Advanced Reporter Services (Advanced Reporter)

d) IBM Resiliency Orchestration Agents (Agents)

Note:

The Installation procedures for the IBM Resiliency File Replicator (SFR) is not

documented in this document. For the installation procedures for the SFR, refer to

the IBM Resiliency File Replicator Installation Guide V 7.2.

For the procedures to upgrade to the latest versions of the IBM Resiliency

Orchestration Application software and its components, refer to the IBM Resiliency

Orchestration Upgrade Guide V 7.2.



2 System Requirements

Find information about the minimum system requirements to install the different software components in the Resiliency Orchestration package.

1. System requirements for Resiliency Orchestration Server. For details, see

System Requirements for the Resiliency Orchestration Server.

1. System requirements for Site Controller. For details, see System

Requirements for Site Controller.

2. System requirements for installing the Advanced Reporter. For details, see

System requirements for Installing Advanced Reporter.

3. System requirements for installing the Local Agents. For details, see System

requirements for Installing Local Agents.

4. System requirements for installing the SFR. For details, see System

requirements for Installing .

2.1 System Requirements for the Resiliency Orchestration Server

Find information about the system requirements for the Resiliency Orchestration Server (DRM) and the Resiliency Orchestration HA Server.

The system requirements are defined based on the number of Endpoints, which needs to be managed. An Endpoint is the server used for production irrespective of physical or logical sites it spans. It can be a VM, a hypervisor, a server running applications or softwares, and requires to be protected.

The system requirements for Resiliency Orchestration and Resiliency

Orchestration HA are shown in Table 2.

Attention

The operational limit for managing the Production Endpoints by a single Administrator is

observed to be 200. If the number of Production Endpoints managed by a single

Administrator exceeds 500, under standard test conditions, it has been observed that

there is a time delay in the loading of the Resiliency Orchestration GUI.

Table 2. System requirements for Resiliency Orchestration server

Number of Production Endpoints Managed

Resiliency Orchestration Server Memory

Resiliency Orchestration Server Cores (CPU Intel Xeon 2.27GHz)

Resiliency Orchestration Server Disk Partition Recommendation

100 8 GB 4 /opt: 50 GB (For Resiliency

Orchestration Binaries)

/opt/$DRM$/var/log: 100 GB (Debug 200 8 GB 6

500 16 GB 8



Number of Production Endpoints Managed

Resiliency Orchestration Server Memory

Resiliency Orchestration Server Cores (CPU Intel Xeon 2.27GHz)

Resiliency Orchestration Server Disk Partition Recommendation

logs of Resiliency Orchestration/DRM)

/var: 100 GB (Maria DB Volume)

/backup: 100 GB (Maria DB Backup)

/boot: 2 GB

/swap: 2 times the RAM size



/opt/$DRM$/var/log: 200 GB (Debug

logs of Resiliency Orchestration/DRM)


/backup: 200 GB (Maria DB Backup)

/boot: 2 GB


1200 32 GB 8

1500 32 GB 8

2000 32 GB 8

2500 64 GB 12

3000 64 GB 12

Ensure that in your primary (PR) infrastructure including storage and network (for example, RAID protected storage, dual network interfaces, and so on) there is no single point of failure.

2.2 System Requirements for Site Controller

2.2.1 Introduction to the Site Controller

Site Controller is mandatory for production deployments of Resiliency Orchestration. Site Controller is a facilitator between agents and Resiliency Orchestration server, when Site Controller goes down, agents are not available and hence no monitoring and the management of DR is compromised for the Endpoints managed by that Site Controller until the SC is up.

Site controller can manage its agents, when Site Controller is installed within LAN, it helps in reducing the bandwidth usage as the communication over WAN to Resiliency Orchestration Server is greatly reduced.

2.2.2 Hosted Location of the Site Controller

You can install the Site Controller in the following locations:

a) Co-hosted with the Resiliency Orchestration. The SC is installed in the same hardware in which the Resiliency Orchestration server is installed. You must use the Linux based Site Controller for installation if you are co-hosting the SC along with the Resiliency Orchestration.

b) Hosted independently of the Resiliency Orchestration. The SC is installed in a separate server and its location is independent of the Resiliency Orchestration server location. You can use either the Linux based or Windows based Site Controller for installation if you are hosting the SC independently of the Resiliency Orchestration.



2.2.3 Site Controller Types Supported

The following types of Site Controllers are available as supported for installation based on the OS platforms on which the SC can be installed.

a) Linux based Site Controller with only Remote Agents supported. For details,

see System requirements for Linux based Site Controller.

b) Windows based Site Controller with only Remote Agents supported. For

details, see System requirements for Windows based Site Controller.

c) System requirements for Site Controller with only Local Agents supported.

For details, see System requirements for Site Controller with Local Agents.

2.2.4 System requirements for Linux based Site Controller

The system requirements for the Linux based Site Controller on which only

Remote Agents are deployed is shown in Table 3 and the system requirements

for the co-hosted Site Controller in a Linux server is shown in Table 4.

Table 3. System requirements for the Linux based Site Controller

Number of Remote Agents Managed

Resiliency Orchestration Site Controller Memory

Resiliency Orchestration Site Controller Cores (CPU Intel Xeon 2.27 GHz)

Minimum Disk Partition Requirements for Resiliency Orchestration Site Controller



/opt/$Agents$/remote: 200 GB

/var: 50 GB

/boot: 2 GB


100 16 GB 2

375 64 GB 4

750 128 GB 4

Table 4. System requirements for the Linux based co-hosted Site

Controller

Number of Endpoints Managed




100 24 GB 6 Cores /opt: 100 GB (For Resiliency


/opt/$DRM$/var/log: 300 GB (Debug logs of Resiliency Orchestration/DRM)


/boot: 2 GB

/opt: 200 GB

&EAMSROOT/remote: 100 GB


200 40 GB 8 Cores



Important

You must decide whether to install the Linux based Site Controller as co-hosted with the

Resiliency Orchestration depending on the following criteria:

Number of Production Endpoints that you intend to deploy now.

Number of Production Endpoints that you intend to deploy in the near future.

Cost of additional hardware for deploying the Site Controller independent of the

Resiliency Orchestration.

If you intend to scale-up the Resiliency Orchestration application server, then the

scaling-up of the co-hosted site controller may not be feasible and you must deploy

the Site Controller on a separate server.

You must configure the Resiliency Orchestration application server for two different

IPs, one for the Resiliency Orchestration application and one for the co-hosted Site

Controller.

Ensure that you are considering the system requirements for the combined

requirements for the Resiliency Orchestration application and the co-hosted Site

Controller, when both Resiliency Orchestration and SC Services are deployed

together.

2.2.5 System requirements for Windows based Site Controller

The system requirements for the Windows based Site Controller on which only

remote agents are deployed is shown in Table 5.

Table 5. System requirements for the Windows based Site Controller

Number of Remote Agents Managed




50 8 GB 2 Ensure that a minimum of 300

GB is available in the partition

where you want to install the

Site Controller.

100 16 GB 2

2.2.6 System requirements for Site Controller with Local Agents

The system requirements for the Windows based Site Controller on which only

local agents are deployed on the endpoint, is shown in Table 6.

Table 6. System requirements for Site Controller with Local Agents

Number of Local Agents Managed


Resiliency Orchestration Site Controller Cores (CPU Intel Xeon 2.27GHz)

Resiliency Orchestration Site Controller Disk Partition Recommendation



Number of Local Agents Managed


Resiliency Orchestration Site Controller Cores (CPU Intel Xeon 2.27GHz)

Resiliency Orchestration Site Controller Disk Partition Recommendation




(optional but recommended)

/var: 50 GB

/boot: 2 GB


200 8 GB 4

500 8 GB 4




(optional but recommended)

/var: 50 GB

/boot: 2 GB


2.2.7 System requirements for Installing Advanced Reporter

Find the minimum system requirements for installing the IBM Resiliency Orchestration Advanced Reporter software.

The Advanced Reporter software to be installed on the Resiliency Orchestration Server requires 256 MB memory and 10 GB disk space.

2.2.8 System requirements for Installing Local Agents

Find the minimum system requirements for installing the Resiliency Orchestration Agents on the Endpoints as Local Agents.

Agents to be installed on the Endpoint require 256 MB memory and 10 GB disk space.

2.2.9 System requirements for Installing Resiliency File Replicator

(SFR)

Find the minimum system requirements for installing the optional software, IBM Resiliency File Replicator (SFR) on the Endpoints.

The SFR application to be installed on the Endpoint requires 1.25 GB memory and 10 GB disk space.



3 Prerequisites

Before you proceed to downloading and installing the IBM Resiliency Orchestration Software, ensure that you have read and complied with the prerequisites.

Table 7. Prerequisites

Prerequisite Mandatory (Yes or No)

Remarks

Installing the GPL Dependencies

Yes Before you install the Resiliency Orchestration server, you must install the GPL Licenses.

Installing the MariaDB Yes Before you install the Resiliency Orchestration server, you must install the MariaDB and configure it.

Installing the Tomcat Yes Before you install the Resiliency Orchestration server, you must install the Tomcat and configure it.

3.1 GPL Dependencies for IBM Resiliency Orchestration

Based on the features, download the GPL dependent binaries from this link: GPL

dependent binaries (https://sourceforge.net/projects/gnu-utils/files/binaries/)

before you install the Resiliency Orchestration.

You must complete the steps mentioned in Installing Third-party Software.

For more information about the GPL licenses, see GPL License Information.

3.2 Supported OS and features

3.2.1 Supported versions of MariaDB and Tomcat

Find information about the versions and OS supported for the MariaDB and

Tomcat, as shown in Table 8.

Table 8. Supported versions of MariaDB and Tomcat

Description Version OS

MariaDB 10.1.19 RHEL 7.1, or Later

Tomcat 7.0.55 RHEL 7.1, or Later

https://sourceforge.net/projects/gnu-utils/files/binaries/




3.2.2 Supported OS for Resiliency Orchestration and SC

Find information about the OS supported for the IBM Resiliency Orchestration

application and the Site Controller, as shown in Table 9.

Table 9. Supported OS for Resiliency Orchestration and SC

Description OS

Resiliency Orchestration (DRM) RHEL 7.1, RHEL 7.3, or Later

Resiliency Orchestration (DRM) - HA RHEL 7.1, RHEL 7.3, or Later

Linux based Site Controller, when co-

hosted with Resiliency Orchestration or

independently of the Resiliency

Orchestration

RHEL 7.3, or Later

Windows based Site Controller, when

hosted independently of the Resiliency

Orchestration

Windows 2008 Standard Edition

Windows 2012 Standard Edition

3.2.3 Supported OS Versions for Agents

Find information about the IBM Resiliency Orchestration Agents and the details of their supported versions of OS and databases. Ensure that the versions of the

supported OS shown for the Agent in Table 10 matches with your system, for the

Agent to function correctly.

Table 10. Supported Remote Agents in the Resiliency Orchestration

Agent Platform Version of Database or Application

Supported on OS Version

DB2 Agent Intel

AMD

DB2 9.x AIX 6.x

AIX 7.x

Windows

Linux

EMC SRDF Agent Intel

AMD

Sun/Sparc

Symmetrix CLI

(SYMCLI) Version:

V7.3.0.1 (Edit Level:

1214)

Solaris 10

Solaris 11

Window 2003

Hitachi

Replication Agent

SUN/Sparc

PA-RISC

Sybase ASE 15.x Solaris 10

Solaris 11

AIX 6.x, AIX 7.x

IBM Global Mirror

using OS Agent

SUN/Sparc

AIX

IBM DSCLI Version

6.6.0.345

Solaris 10

AIX 5

MS Exchange

Agent

Intel Not Applicable Windows 2016

MS SQL Agent Intel

AMD

MSSQL 2008,

MSSQL 2012

Windows 2016

Windows 2012 Enterprise

Edition



Agent Platform Version of Database or Application

Supported on OS Version

MSSQL Agent Intel

AMD

MSSQL 2005

MSSQL 2008

MSSQL 2012

Windows 2016


Edition

MySQL Agent Intel MySQL 5.5 RHEL 6.x

Oracle Agent Intel

AMD

Sun/Sparc

AIX

Oracle 10g

Oracle 11g

Solaris 10, Solaris 11,

Windows 2016,

Windows 2012 Standard

Edition, Windows 2012

Enterprise Edition

AIX 6.x, AIX 7.x

HP-UX 11i

RHEL 5.x, 6.x, 7.x

Oracle Dataguard Intel

AMD

SUN/Sparc

PA-RISC

Oracle 10g

Oracle 11g

Solaris 10, Solaris 11

Windows 2016


Edition

AIX 6.x

HP-UX 11i

RHEL 5, RHEL 6, RHEL 7

OS Agent Intel

AMD

SUN/Sparc

PA-RISC

Not Applicable Solaris 10, Solaris 11

Windows 2016


Edition,

AIX6.x

HP-UX 11i

RHEL 5, RHEL 6, RHEL 7

PostgreSQL Agent Intel PostgreSQL 9.2 RHEL 5.6

SRS Agent SUN/Sparc

PA-RISC

Sybase 15 with

embedded RSSD

Solaris 10, Solaris 11

AIX 6.x, AIX 7.x

Sybase Agent SUN/ Sparc

PA-RISC

Sybase ASE 15.x Solaris 10, Solaris 11

AIX 6.*

3.2.4 Supported Browsers

Browser OS Version Remarks

Firefox 46.x, and above

Google Chrome 52.x , and above

Windows 7

Windows 8

Note



IBM Resiliency Orchestration GUI does not support multiple tabs or multiple windows for

pages that require user inputs such as Discovery or configuration for single logged on

session and Group assignment for a particular user.



4 Preparing the Resiliency Orchestration Server

4.1 Server Hardware

Evaluate the number of Servers you want to set up to host the Resiliency Orchestration applications, Site Controllers, Resiliency Orchestration Agents, Resiliency Orchestration Database, and Browser.

For determining your system requirements, see the details under System

Requirements.

Proceed to install the RHEL OS, Resiliency Orchestration Database, and Tomcat on the Server, where you intend to install the Resiliency Orchestration Application software.

4.2 Installation of the RHEL OS

You must install the RHEL Server OS on the Server on which you want to install the Resiliency Orchestration application software.

1. Refer to the Linux OS Installation procedures from the official RHEL website, for the instructions for downloading and installing the Linux OS.

2. Install the Linux Enterprise Server OS and ensure to set the following conditions during the installation:

Set up the partitions for the different binaries as indicated in the system requirements section. For details, see System Requirements for the Resiliency Orchestration Server.

Do not set up the Firewall. Select the No Firewall option, during the installation.

4.3 Installation of MariaDB

Download and install the MariaDB that is the Resiliency Orchestration Database. For information about installing MariaDB, refer to the MariaDB 10.1.19 documentation available from the MariaDB website (https://downloads.mariadb.org/mariadb/10.1.19/).

Note: If MySQL is upgraded to MariaDB, run the following command.

sudo mysql_upgrade

4.4 Installing Tomcat

Download and install the Tomcat. For information about installing Tomcat, refer to the Tomcat Apache website (https://tomcat.apache.org/download-70.cgi).

4.5 Configuring MariaDB

Configure the MariaDB for the following settings:

https://downloads.mariadb.org/mariadb/10.1.19/


https://tomcat.apache.org/download-70.cgi



Preset Users for MariaDB

Creating New Users for the MariaDB

4.5.1 Preset Users for MariaDB

IBM Resiliency Orchestration uses MariaDB for persistence. During the installation of the Resiliency Orchestration application software, the following MariaDB user is created with all privileges:

panaces

The Resiliency Orchestration application software is configured to use the

panaces User for accessing the MariaDB, until you change the user in the

MariaDB. Ensure to change the Preset User to a User of your choice.

4.5.2 Creating New Users in MariaDB

Create new Users and credentials in the MariaDB. Ensure that new Users are set up with all privileges. For instructions about creating a new user in the MariaDB, refer to the MariaDB User Guide on the MariaDB website (https://downloads.mariadb.org/mariadb/10.1.19/).

Note

Ensure to select the document for the version of the supported MariaDB you installed.

You must use the created User credentials to replace the Resiliency Orchestration preset User credentials in the Resiliency Orchestration application files at the time of configuring the installed Resiliency Orchestration application.




5 Installing the Resiliency Orchestration application software

You can install the IBM Resiliency Orchestration application software on a Linux machine and on a machine in a Linux Cluster.

5.1 Prerequisites for installation of the Resiliency Orchestration application software

1. You must have completed the following installations:

Installation of Linux Enterprise Server OS

Installation of the MariaDB (MariaDB V10.1.19 on RHEL 7.3; MariaDB V10.1.16 on RHEL 7.1)

Installation of the Tomcat Server

2. You must have root or root equivalent privileges to install IBM Resiliency Orchestration application server.

3. Edit the file /etc/sysconfig/selinux to include the option

SELINUX=permissive.

4. Check /etc/hosts file to ascertain if the localhost alias exists or not. If it

does not exist, add the localhost alias, and the IP address of the IBM Resiliency Orchestration application server. For example:

<ip-address><localhost> <hostname>

5. If you need to use the vault integration feature of the product, confirm that the following required vault integration library files from your vault vendor are available:

j2ssh-core-0.2.9.jar

javapasswordsdk.jar

edmz-par-api.jar

6. You must have downloaded the Resiliency Orchestration application software. For details on the software package and downloading procedures, see

Software Package Components and Downloading the Software Package.

5.2 Mode of installing the Resiliency Orchestration application software

You can install the IBM Resiliency Orchestration Software by using any of the following methods:

Graphical Mode

Graphical mode installation is an interactive, GUI-based method for installing IBM Resiliency Orchestration Software. You can use the Graphical mode for installing the Resiliency Orchestration application software on: Linux, Windows, Solaris, HPUX and AIX platforms.



Silent Mode

Silent mode installation is a non-interactive method of installing IBM Resiliency Orchestration Software. This method requires the use of .properties file for selecting the installation options. It is supported on Linux, Solaris, HPUX and AIX platforms.

5.3 Installation of Resiliency Orchestration application server in Graphical Mode

This Resiliency Orchestration application software is packaged into an image file called install.bin in the Server Package. The package contains all the binaries and other software packages to install and run the IBM Resiliency Orchestration application.

This software installation involves installing IBM Resiliency Orchestration server binaries, BCS modules, IBM Resiliency Orchestration server agents, and other software binaries.

1. Execute the following command, depending on the version of the RHEL OS:

sh install.bin

or

./install.bin

Note

Java will be installed automatically after execution of this command.

2. After extracting the files from the install.bin, IBM Resiliency Orchestration Server installation starts with the following screen. A progress bar at the bottom of the screen indicates the loading of the installer.



Figure 1: IBM Resiliency Orchestration Installer

3. After displaying the IBM Resiliency Orchestration installer screen, the MariaDB 10.1.19 root password window is displayed.

Figure 2: IBM Resiliency Orchestration Server Installation - MySQL root

password

4. Enter the password for the MariaDB 10.1.19 root user.

5. Click Next. The Tomcat Home window is displayed (Version 7.0.55)



Figure 3: IBM Resiliency Orchestration Server Installation - Tomcat Home

6. Click Choose… to browse and select the location of Tomcat. When Tomcat is located and then selected, the path appears in the Please Choose a Folder: box in Tomcat Home screen. $TOMCAT_HOME or {TOMCAT_HOME} placeholder will use the specified folder, for example, /opt/softwares/tomcat7.

7. Click Next, the Introduction window is displayed.



Figure 4: IBM Resiliency Orchestration Server Installation -

Introduction

8. Click Next. The License Agreement window will be displayed as shown in the following figure:

Figure 5: IBM Resiliency Orchestration Server Installation – License

Agreement

9. Click the appropriate option button after perusal of the License Agreement. The options are:

Option Button Description

I accept the terms of the

License Agreement

Click this option button for acceptance of the

License Agreement.

I do NOT accept the terms

of the License Agreement

Click this option button for rejection of the License

Agreement and then click Next. A pop-up is shown

which allows the user to either Accept the License

Agreement or to Quit.

10. Click Next to proceed with the installation. The Choose Install Folder window is displayed.



Figure 6: IBM Resiliency Orchestration Server Installation - Choose

Install Folder

11. Select a path to install the software by clicking Choose. $EAMSROOT or {EAMSROOT}placeholder that is referred in this document will point to this folder. Click on Next button.



Figure 7: IBM Resiliency Orchestration Server Installation – Sanovi User

Account

12. Click Next. The User Management System window is displayed.

Figure 8: IBM Resiliency Orchestration Server Installation – User

Management System

13. Select the appropriate User Management System type. The two options are: Basic User Management System and Advanced User Management System.

14. Click Next. The Pre-Installation Summary window is displayed.



Figure 9: IBM Resiliency Orchestration Server Installation - Pre-

Installation Summary

15. Go through the pre-installation summary to verify the inputs provided. If you want to change the inputs, click Previous and modify.

16. Click Install. The Installing IBM Resiliency Orchestration Server window is displayed.



Figure 10: IBM Resiliency Orchestration Server Installation - Installing

IBM Resiliency Orchestration Server

17. IBM Resiliency Orchestration Server Installation automatically uploads the IBM Resiliency Orchestration schema. If it already exists, a dialog box is displayed as shown below, that confirms if you want to drop the existing IBM Resiliency Orchestration schema and replace it through installer.


Confirmation message

18. Click No to continue the installation with the existing schema. Click Refresh to drop and recreate the IBM Resiliency Orchestration schema.

Note

To replace the database schema manually, type the following command:

# sudo mysqldump –u root –-databases panaces pfr –R –-triggers -p >

backup_file_name.sql

# Drop the existing databases if they already exist

sudo mysqladmin –u root drop panaces

sudo mysqladmin –u root drop pfr

# sudo mysql -u root < $EAMSROOT/lib/mysql_schema_InnoDB.sql

# sudo mysql -u root < $EAMSROOT/lib/pfr.sql

# sudo $EAMSROOT/installconfig/importTemplateEvents.sh

19. The Advanced User Server Details screen will be displayed if Advanced User Management System was selected in Step 15. Select the server type



and provide the required details for connecting to the external server, as shown in the following two figures.

Figure 12: IBM Resiliency Orchestration Server Installation - Advanced

User Server Details 1



Figure 13: IBM Resiliency Orchestration Server Installation - Advanced

User Server Details 2

20. Click Next. The Support User Account window is displayed.

Figure 14: IBM Resiliency Orchestration Server Installation - Support

User Account

21. A user account with user name support is created for use by IBM Resiliency Orchestration Server. Enter the password for this account in the Password box. Reenter the password in the Confirm Password box

Note

For invalid passwords, a dialog box displays an error message.

22. Click Next. Once the metadata information is created by the installer, the IBM Resiliency Orchestration server will configure the system with events and events correlation template definitions.



Figure 15: IBM Resiliency Orchestration Server Installation - System

Configuration

23. Click Next. In case you get a warning message saying ―Unable to find configuration file (my.cnf)‖, than update max allowed packet to 16MB in my.cnf configuration file and restart the mysql service.

24. Click Next. The Installation Completed window is displayed, indicating successful installation.




Installation Completed

25. Click Done to complete the installation process.

5.4 Post Installation Steps

1. Download the ThirdPartyJSLib.zip file from the link GPL dependent binaries (https://sourceforge.net/projects/gnu-utils/files/binaries/).

2. Extract the ThirdPartyJSLib.zip file to /tmp.

3. Copy /tmp/ThirdPartyJSLib/*.* to the $TOMCAT_HOME/webapps/PanacesGUI/scripts/ folder.

4. Remove /tmp/ThirdPartyJSLib*.*

5. Add all the vault integration library files to the following locations:

{TOMCAT_HOME}/webapps/PanacesGUI/WEB-INF/lib

{TOMCAT_HOME}//webapps/PanacesGUI/pages/classes/lib

{TOMCAT_HOME}//webapps/userPortal/WEB-INF/lib

{TOMCAT_HOME}//webapps/userPortal/pages/classes/lib

{EAMSROOT}/agents/vault/{yourVaultName}/lib

{EAMSROOT}/lib

Note



You need to set the execute (770) and Tomcat user group permissions for the vault

integration library files in the TOMCAT_HOME locations.

You need to set the execute (770) and Panaces user group permissions for the vault

integration library files in the EAMSROOT locations.

6. If you would like to use the Cisco UCS Director (Unified Computing System Director) integration feature of the product, procure the following library files and replace at the respective locations:

{EAMSROOT}/lib/ucsd-oa-annotations.jar

{EAMSROOT}/lib/ucsd-oa-api.jar

{EAMSROOT}/lib/ucsd-rest-api-sdk-v2.ja

{EAMSROOT}/lib/cuic-sdk-v2-0.jar

{EAMSROOT}/lib/inframgr.jar

7. Run the following scripts:

Goto $EAMSROOT/bin

sudo ./SecurityUserInjection.sh

8. Start the Resiliency Orchestration Services. See Starting and Stopping

Resiliency Orchestration Server.



6 Installing IBM Resiliency Orchestration Server on Linux Cluster in the Graphical

Mode

This chapter outlines the procedures for installing IBM Resiliency Orchestration server on Linux Cluster.

6.1 System Requirements

For the system requirements for installing IBM Resiliency Orchestration server on Linux Cluster.

Note

Ensure that IBM Resiliency Orchestration Server installation location is on the shared

volume. This is the location of the installed software as explained in the sections below.

6.2 Installation of Resiliency Orchestration Server

IBM Resiliency Orchestration server software is installed on a dedicated Linux server as the IBM Resiliency Orchestration Master. The server software requires the IBM Resiliency Orchestration Server Platform package and MariaDB software to be installed on the same server.

The cluster management system features data integrity and application availability, using redundant hardware, shared disk storage, power management, robust cluster communication and application failover mechanisms.

Perform the following steps on the dedicated Linux server to install and setup the IBM Resiliency Orchestration Master Server:

1. Install the Linux Enterprise Server OS (RHEL 7.1 or 7.3).

2. Install Linux Cluster with these configurations: DLM mode, GFS Shared file system with a minimum of 30 GB, IP service and script service for MariaDB, and IBM Resiliency Orchestration.

3. Install the MariaDB 10.1.19 (for RHEL 7.3) standard software and MariaDB 10.1.16 (for RHEL 7.1). The MariaDB 10.1.19 database should be in the shared disk.

4. Install the IBM Resiliency Orchestration Server Software.

5. Set up the environment.

Note

Refer to Step 5 under Installation of IBM Resiliency Orchestration Server Platform

on Linux Cluster Nodes to set up the environment.

Follow the sections given below to complete the IBM Resiliency Orchestration Server installation.



6.2.1 Installation of Linux Enterprise Server OS

1. Install the Linux Enterprise Server OS without firewall settings and MariaDB database package.

IBM Resiliency Orchestration uses the following ports:

For accessing the Resiliency Orchestration GUI - ports 8443

For communication among the Resiliency Orchestration and Site Controller, and Agents – ports 42443 and 45443

Important:

Ensure to allow the required ports when configuring the Firewall at the Operating System

level.

2. Allow the software to install the packages selected by default and choose all packages available under ‗Development‘ list, and make sure that "Postgre SQL Database and MariaDB Database" are not selected under ‗Server‘ list. Do not click ―Details‖ hyperlink to make further selections.

3. Edit the file /etc/sysconfig/selinux to include the option "SELINUX=permissive".

4. Check /etc/hosts file to ascertain if localhost alias exists or not. If it doesn‘t exist, add the localhost alias, and the IP address of the IBM Resiliency Orchestration Server system.

For Example: 127.0.0.1 localhost localhost

<ip-address> <localhost> <hostname>

6.2.2 Installation of Linux Cluster

Install Linux Cluster version 1.9.43 with DLM Mode for GFS shared volume and IP service. To install and configure Linux cluster refer to the following documents:

RED HAT Cluster suite rh-cs-en-4 and rh-gfs-en-6_1 from RED HAT

6.2.3 Additional Settings for Linux Installation

1. Open a terminal, log in as root and issue the following command, whenever the system is rebooted.:

# /sbin/sysctl -w net.ipv4.tcp_retries2=4

2. To avoid this, perform the following steps:

Open the ‗conf‘ file by issuing the following command:

vi /etc/sysctl.conf

Add the following statement and save it:

edit /etc/sysctl.conf with “net.ipv4.tcp_retries2=4” at the end of the

file.

3. Reboot the system.



6.2.4 Installation of IBM Resiliency Orchestration Server Platform on

Linux Cluster Nodes

Use the ―clusvcadm‖ utility to relocate user services between cluster nodes for installation, and perform the following steps to install IBM Resiliency Orchestration Server platform on two cluster nodes, for example, it can be Cluster Node A and Cluster Node B.

1. Create a directory titled ‗mysql‘ in <shared cluster volume> by issuing the following command, only if it does not exist:

cd /<shared volume>

mkdir mysql

2. Create Soft link for ‗Mysql‘ Database folder by issuing the following command:

cd /var/lib

ln –s <shared Cluster Volume>/mysql /mysql

3. Create ‗panaces‘ folder under the shared volume. To create it, run following command at the shared volume:

mkdir <shared volume> /panaces

4. Once ―panaces‖ link is created, check for its existence with the following command:

ls panaces (or) ls

5. Set up environment variable EAMSROOT to /opt/panaces at command line:

export EAMSROOT=/opt/panaces

6.2.5 Post-Installations of IBM Resiliency Orchestration Server Platform on Linux Cluster

Use the ―clusvcadm‖ utility to relocate cluster to a cluster node, for example, Cluster Node A, and perform the following steps:

1. Start MariaDB services whenever the system is rebooted by issuing the following command:

# /etc/init/mysql start &

2. Check whether you are able to log in to MariaDB as root, using the following command:

# mysql -u root

6.2.6 Installation of Resiliency Orchestration Server Software

For the procedure to install IBM Resiliency Orchestration Server software, refer to the section Installation of Resiliency Orchestration Server:



6.3 Starting and Stopping Resiliency Orchestration Server

For the procedures to start and stop IBM Resiliency Orchestration server, see Starting and Stopping Resiliency Orchestration Server.

6.4 Configuring Linux Cluster

The following information applies to Red Hat Linux Enterprise Linux 5.0 Server edition.

In Linux Cluster, configure MariaDB and IBM Resiliency Orchestration application startup files as script files for application failover. Linux Cluster will start and stop the application from these script files.

To configure MariaDB and IBM Resiliency Orchestration applications on the cluster, create the following scripts files on /opt/panaces/bin folder.

Create Mysqlbat.sh file for MariaDB Server and type the following code:

start()

{

sh /etc/init.d/mysql start

}

stop()

{

sh /etc/init.d/mysql stop

}

status()

{

mysqladmin status

}

if [ "#1" = "start" ] ; then

start

elif [ "#1" = "stop" ] ; then

stop

elif [ "#1" = "status" ] ; then

status

fi



6.4.1 Linux Cluster Checking the Application Status by Exit Code

For IBM Resiliency Orchestration Linux cluster integration, add the following exit code value in installation folder/panaces/bin/panaces.sh file.

Find the status() function in panaces file. Add exit 9 as given in the code below:

status()

{ add the following case in Panaces Binary

panaces_running

if [ #? = 0 ] ; then

echo "Panaces server is not running"

exit 9

else

echo "Panaces server is running"

fi

tomcat_running

if [ #? = 0 ] ; then

echo "Tomcat server is not running"

exit 9

else

echo "Tomcat server is running"

fi

}

A sample Cluster Configuration is given below:

<resources>

<clusterfs device="/dev/sdb1" force_unmount="1" fstype="gfs"

mountpoint="/panacs" name="mygfs" options=""/>

<ip address="<IP>" monitor_link="1"/>

<script file="/opt/panaces/bin/panaces.sh" name="Panaces"/>

<script file="/opt/panaces/bin/mysqlbat.sh" name="mysql"/

</resources>

Note



After the installation is complete, relocate the cluster and test the application’s function

from both the servers.

6.4.2 Linux Cluster Administration

For Linux cluster administration, refer to Red Hat Linux Documentation



7 Installing the IBM Resiliency Orchestration Server on Linux in the

Silent Mode

When you install IBM Resiliency Orchestration in Silent mode, the installation program uses the .properties file for server (PanacesServerInstaller.properties) as well as agents (PanacesAgentsInstaller.properties), to determine which installation options should be implemented. Therefore, before you can run the installation program in Silent mode, you must edit the respective properties file in which you specify the installation options that you want to invoke, while performing the IBM Resiliency Orchestration Server and Agents installation.

7.1 Editing the Properties File

Perform the following steps to edit the properties files.

1. Download the Binaries and properties files from the IBM Passport Advantage site to a location on the intended Resiliency Orchestration server, Assuming binary file and property files are available in /opt/Server and the logged in user has sudo permissions equivalent to root

2. Open the properties file by using the following command:

cd /opt/Server

sudo vi PanacesServerInstaller.properties

3. Modify the respective properties file for the key words shown in the following tables, to reflect your configuration.

7.1.1 PanacesServerInstaller.properties file

The following table describes the keywords in the PanacesServerInstaller.properties file.

Key word Description

INSTALLER_UI Displays the mode of installation as “silent”.

MODIFY_SYSTEM_FILES=1 It modifies system files, i.e.

/etc/hosts,/etc/sysconfig/selinux,

/etc/sysctl.conf

KEYSTORE_FILE_PATH Add the keystore path.

For example:

/opt/panaces/installconfig/keystore/sanovi.key

store

USER_INSTALL_DIR Enter the default path for the directory to

install the IBM Resiliency Orchestration Server

software.(default path is /opt/panaces/ )

REFRESH_EXISTING_SCHEMA When the Schema Refresh option is chosen,




the old schema which is already available in

the system will be refreshed.Default is 0, if set

to 0 the schema will not be refreshed and

when set to 1 schema will be refreshed/reset.

STOP_IBM_RESILIENCY_ORCHESTR

ATION_AND_UNINSTALL

If set to 1, it will stop the running services and

uninstall.

If set to 0, the services will be running and the

uninstaller will quit. The logs will be available

in the \temp directory.

MariaDB_ROOT_PASSWORD Enter the password to connect to the MariaDB

database.

Note: If password is not present, keep the

field empty.

USER_MANAGEMENT_MODE Basic ADVANCED

ADVANCED_SERVER_TYPE NA LDAP or AD

Default: AD

ADVANCED_SERVER_URL NA Enter the Advanced Server URL of

AD/ LDAP Server

ADVANCED_SERVER_DOMAIN NA The Server Domain is applicable

only to AD.

Note: we should not enter domain

for LDAP

DIRECTORY_USERNAME NA Enter the User name for reading

the external system for AD/LDAP

server.

DIRECTORY_PASSWORD NA Enter the Password for reading

the external system for AD/ LDAP

server.

SEARCH_BASE_FOR_READING_ROL

ES

NA Enter the searchbase string for

AD/ LDAP server.

LICENSE_ACCEPTED Enter the value “TRUE” Otherwise, the

Installation will display an error message as

EULA is not accepted.

SUPPORT_USER_PASSWORD Enter the password for support user(default

=Drmsupport123$).

TOMCAT_HOME Enter the Tomcat Installation directory path.

7.1.2 PanacesAgentsInstaller.properties file

The following table describes the keywords in the

PanacesAgentsInstaller.properties file.

Keyword Description




Keyword Description

MSSQL_AGENT_WINDOWS_CHK

Sanovi File replicator _AGENT_CHK

SYBASE_AGENT_SOL_CHK

SRS_AGENT_CHK

ORACLE_AGENT_CHK

ORACLE_DATA_GUARD_AGENT_CHK

TRUE_COPY_AGENT_CHK

SRDF_AGENT_CHK

HPXP_AGENT_CHK

DB2_AGENT_CHK

POSTGRES_AGENT_CHK

Enter 1 to install the agent.

Enter 0 to not install the agent.

USER_INPUT_RESULT_JAR_MSSQL Enter the full path of the directory where the

MSSQL Jar files have been installed.

For example: On Windows, the location of the

Jar files would be C:\Program Files\Microsoft

SQL Server 2000 or 2005 Driver for JDBC\lib

USER_INPUT_ORACLE_HOME Enter the full path of the directory where the

Oracle is installed.

USER_INPUT_RESULT_JAR_ORA Enter the full path of the directory where the

Oracle Jar files have been installed.

Usually it is $ORACLE_HOME/jdbc/lib

USER_INPUT_RESULT_JLIB_ORA Enter the full path of directory where jar

libraray files are located. Usually it is

$ORACLE_HOME/jlib

USER_INPUT_RESULT_JAR_SYBASE Enter the full path of the directory where the

Sybase Jar files have been installed.

For example: <sybase installation

path>/jConnect-5_5/classes.

USER_INPUT_RESULT_SYBASE_LOG

IN

Enter the Sybase Admin login ID.

USER_INPUT_RESULT_PRIMARY_PA

NACES_SERVER_IP

Enter the IP address of the primary server.

USER_INPUT_RESULT_SECONDARY_

PANACES_SERVER_IP

Enter the IP address of the secondary server.

PANACES_AGENT_NODE_ADDRESS Enter the IP address of IBM Resiliency

Orchestration Agent.

REG_PANACES_CLASSPATH Displays the IBM Resiliency Orchestration

classpath. By default, the following classpath

is displyed:

lax.nl.env.PANACES_CLASSPATH

USER_INPUT_RESULT_DB2DIR Enter DB2 installation path

USER_INPUT_RESULT_DB2_INSTAN

CEUSER

Enter DB2 instance username



Keyword Description

USER_INSTALL_DIR The full pathname for the directory in which

you want to install the agent software.

AGENTS_START_YES Enter 1 if you want to start the agents

automatically after the IBM Resiliency

Orchestration installation.

Enter 0 if you want to start the agents

manually.

Refer to the Starting and Stopping of Agents

in the respective Installation of Agents chapter

in this guide for more information.

USER_INPUT_RESULT_POSTGRES_L

OGIN

By default, "postgres" will be pre-filled as the

login ID.

USER_INPUT_RESULT_NAT_IP NAT IP Address

USER_INPUT_RESULT_SITE_CONTR

OLLER_IP

Enter Site Controller IP address.

CHOSEN_INSTALL_SET= Enter Upgrade

Note

This is used only during Upgrade

1. Execute the following command to start the installation.

sudo /opt/Server/install.bin –f

/opt/Server/PanacesServerInstaller.properties

2. Follow the Post Installation Steps.

Note

Restart the Resiliency Orchestration server after updating the parameters in the above

table



8 Configuring Resiliency Orchestration Server

You can configure the Resiliency Orchestration application server for the following mandatory and optional features:

Mandatory Features

Configuring Resiliency Orchestration application to use the MariaDB

Server (OS) Hardening

Running the SecurityUserInjection script

Optional Features

Configuring Resiliency Orchestration for Optimal Performance

Configuring Resiliency Orchestration to use the Resiliency File Replicator (SFR)

8.1 Configuring Resiliency Orchestration application to use the MariaDB

The Resiliency Orchestration application software is installed with a preset User credentials for accessing the MariaDB. You can configure IBM Resiliency Orchestration application software to use a different MariaDB user credentials.

You must first set up a new user credentials after installing the MariaDB. For

instructions, see Creating New Users in MariaDB. Ensure that the new user you

create in the MariaDB is set up with all privileges.

To configure the Resiliency Orchestration application software for the new MariaDB user, complete the following steps:

1. Navigate to the directory where the Resiliency Orchestration application software is installed, by entering the following command at the command prompt:

# cd installconfig

2. In this directory, enter the following command at the command prompt to display the properties file for the Resiliency Orchestration application:

# vi panaces.properties file

3. In the panaces.properties file change the preset value for the parameter

panaces.mysql.username, to the new user name that you created in the

MariaDB. The preset parameter for the MariaDB user is set as panaces.

panaces.mysql.username = <new mariadb user>

4. Save and close the panaces.properties file.



8.2 Configuring Resiliency Orchestration with different MariaDB user password

When password(s) for the MariaDB users are changed, perform the following steps to configure IBM Resiliency Orchestration with the new password.

1. Navigate to user installation directory (where IBM Resiliency Orchestration Server is installed). To navigate to the bin directory, enter the following command at the command prompt:

# cd bin

2. To provide MariaDB user password for Resiliency Orchestration Server, run the following command:

# sudo ./changeDBPassword.sh panaces.mysql.password

3. Upon running the above command, you will be prompted to provide the password. Provide the password and press 'enter'. Password(s) provided will be encrypted and saved into panaces.properties file.

8.3 Server (OS) Hardening

Complete the following steps to harden the Resiliency Orchestration server:

Note

$EAMSROOT will point to the Resiliency Orchestration installation directory. For

Example: /opt/panaces/ is the $EAMSROOT.

1. Set the password for IBM user

passwd sanovi

2. Change to bin directory

cd $EAMSROOT/bin

3. Execute the script to secure the server

./serverHardening.sh

4. Reboot the server to take effect of changes for server hardening with the following command

reboot

5. Since the root user is disabled, Login using sanovi user

6. Change directory by entering the following command:

cd $EAMSROOT

As the server is hardened now, you must prefix sudo for all commands you

run subsequently. For Example, to start Resiliency Orchestration services, you can run the following command:



sudo ./panaces start

7. Run the SecurityUserInjection script. For instructions, see Running the

SecurityUserInjection script.

Important

If the Server Hardening script has been executed and permission level changed in

$EAMSROOT/* or $TOMCAT_HOME/* by any new folders or files created such as by

advanced reporter, birt, and so on, you must execute SecurityUserInjection.sh script.

8.4 Running the SecurityUserInjection script

After the Server OS is hardened the first time, whenever you edit or add files or folders in the Resiliency Orchestration application software you must ensure that you run the SecurityUserInjection script.

Complete the following steps to run the SecurityUserInjection script:

1. Go to $EAMSROOT/bin/

2. Run the following command:

sudo SecurityUserInjection.sh

8.5 Configuring Resiliency Orchestration for Optimal Performance

Depending on the expected number of groups that will be supported by IBM Resiliency Orchestration Software, Java maximum heap memory limit parameter needs to be specified. It is defined in the variable named DRM_SERVER_JVM_MEM, which is located at starting lines of the Resiliency Orchestration startup script named panaces available under $EAMSROOT/bin/. Default value of this variable is set to -Xmx2048m.

Update the following parameters shown in Table 11 for optimal performance

depending on the expected number of recovery groups for your installation:

Table 11. Configuring Resiliency Orchestration server for optimal

performance

No. of Recovery Groups

File Name and Path Parameters Value

250 $EAMSROOT/installconfig/pan

aces.properties

panaces.mysql.maxconnection 500

$EAMSROOT/installconfig/pan

aces.properties

panaces.acp.server.concurrentReq

uestProcessCount

500

/etc/my.cnf max_connections 500

500 $EAMSROOT/installconfig/pan

aces.properties

panaces.mysql.maxconnection 1000



No. of Recovery Groups

File Name and Path Parameters Value

$EAMSROOT/installconfig/pan

aces.properties

panaces.acp.server.concurrentReq

uestProcessCount

1000

/etc/my.cnf max_connections 1000

The panaces.acp.server.concurrentRequestProcessCount parameter is to set the number of threads that process the messages from agents.

The panaces.mysql.maxconnection parameter is to set the number of open mysql connections to DB.

For an optimal performance, you can set the number of processes for Resiliency Orchestration at a value equal to 10000. You can set this limit in /etc/security/limits.conf file. Edit this file by altering or appending the following to set the limit:

root soft nproc 10240

root hard nproc 10240

root soft nofile 20480

root hard nofile 20480

After making these changes, restart the Resiliency Orchestration application server. For instructions to start the Resiliency Orchestration server, see .

Note

By default, IBM Resiliency Orchestration Server and Agents communication is secure

with TLS using TLSv1.2 protocol.

Resiliency Orchestration also provides support for lower communication protocols: SSL and NONSECURE for communication between Resiliency Orchestration Server and Agents.

The property panaces.acp.communicationType in

<EAMS_ROOT>/installconfig/panaces.properties is used to set the

communication protocol between Resiliency Orchestration Server and Agents.

You need to configure the Resiliency Orchestration Server and Agents to use the same communication type.

Resiliency

Orchestration

Server

New Local Agents Old Local Agents

SECURE SECURE SECURE

NONSECURE NONSECURE NONSECURE



SECUREWITHTLS SECUREWITHTLS (TLS1.2) SECUREWITHTLS

(TLS1.0)

The Resiliency Orchestration Server supports backward compatibility for old agents. If the Resiliency Orchestration Server is configured with SECUREWITHTLS, the user needs to configure old agents also with SECUREWITHTLS and TLS1.0 protocol is used for communication with old agents. If the configuration change is performed, the user needs to restart the old agents. If the old agents are upgraded to newer versions, the TLS1.2 protocol is used for communication.

Some properties enables the user to choose a specific protocol and cipher. If no specific protocol is mentioned, Resiliency Orchestration Server will accept TLSv1.2, TLSv1.1, and TLSv1.0 connections as follows:

panaces.acp.communicationTLSProtocolVersion = TLSv1.2,TLSv1.1,TLSv1

If no specific cipher is mentioned, a default cipher is used to encrypt and decrypt the data over Resiliency Orchestration Agent communication as follows:

panaces.acp.communicationTLSCipher = default

8.6 Configuration Changes in Tomcat

The following are the steps to enable secure mode of GUI access (also redirects nonsecure access to secure access):

1. Get the KEYSTORE file with the password.

The default Sanovi KEYSTORE file/Password(Certificate) is shipped with product.

To use a Customer certificate, get the KEYSTORE file and password from customer.

2. Open server.xml using, sudo vi $TOMCAT_HOME/conf/server.xml

3. Add/edit the below connectors with the following details to update the file: (Assuming EAMSROOT as /opt/panaces)

Use the following details for nonsecure to secure redirection configuration:

<Connector executor="tomcatThreadPool"

port="8080" protocol="HTTP/1.1"

connectionTimeout="20000"

redirectPort="8443" compression="on"

compressionMinSize="2048"

nocompressionUserAgents="gozilla, traviata"

compressableMimeType="text/html,text/xml,text/plain,text/css,t

ext/javascri

pt,text/json,application/x-

javascript,application/javascript,application/json"/>

<Connector port="8443"

protocol="org.apache.coyote.http11.Http11NioProtocol"



SLEnabled="true"

maxThreads="150" scheme="https" secure="true"

minSpareThreads="25" maxSpareThreads="75"

enableLookups="false" disableUploadTimeout="true"

clientAuth="false" sslEnabledProtocols="TLSv1"

keystoreFile="/opt/panaces/installconfig/keystore/sanovi.keyst

ore"

keystorePass="^vMkT%678#4-06Gjue672Kwo95dzg" compression="on"


nocompressionUserAgents="gozilla,traviata"


ext/javascri



Use the following details for default port configuration:

Note

The default port configuration requires the tomcat services to be started with root

user.

<Connector executor="tomcatThreadPool"

port="80" protocol="HTTP/1.1"

connectionTimeout="20000"

redirectPort="443" compression="on"


nocompressionUserAgents="gozilla, traviata"


ext/javascri



<Connector port="443"

protocol="org.apache.coyote.http11.Http11NioProtocol"

SSLEnabled="true"

maxThreads="150" scheme="https" secure="true"

minSpareThreads="25" maxSpareThreads="75"

enableLookups="false" disableUploadTimeout="true"

clientAuth="false" sslEnabledProtocols="TLSv1"

keystoreFile="/opt/panaces/installconfig/keystore/sanovi.keyst

ore"

keystorePass="^vMkT%678#4-06Gjue672Kwo95dzg" compression="on"


nocompressionUserAgents="gozilla,traviata"


ext/javascri



4. Open $TOMCAT_HOME/webapps/PanacesGUI/WEB-INF/web.xml



Search for servlet-mapping --- at /app/*. The searched content displays the following snippet:

<servlet-mapping>

<servlet-name>spring</servlet-name>

<url-pattern>/app/*</url-pattern>

</servlet-mapping>

Add the following content after </servlet-mapping>

<security-constraint>

<web-resource-collection>

<web-resource-name>Entire Application</web-resource-name>

<url-pattern>/*</url-pattern>

</web-resource-collection>

<user-data-constraint>

<transport-guarantee>CONFIDENTIAL</transport-guarantee>

</user-data-constraint>

</security-constraint>

Restart the Resiliency Orchestration services , with the following command:

sudo $EAMSROOT/bin/panaces restart

Port number is not required in the URL while accessing Resiliency Orchestration GUI and IBM Resiliency File Replicator GUI through browser.

For Example: If the user enters in weburl as http:// <Resiliency Orchestration IP>/PanacesGUI, it auto redirects the web url to https:// =<Resiliency Orchestration IP>/PanacesGUI

8.7 Port Forwarding

IBM Resiliency Orchestration uses the following ports:

8443: The port 8443 needs to be opened for secure GUI access

22: The port 22 needs to be opened for communicating with Low touch agent

80: The port 80 needs to be opened for HTTP for IBM upgrade assist

42443 and 45443: The ports 42443 and 45443, need to be opened for secured communication amongst Resiliency Orchestration server, Site Controller, and Agents.

You can reduce the number of open ports by using the following Port forwarding procedures.

8.7.1 Prerequisites for Port Forwarding

The following are prerequisites for port forwarding:

Httpd service. Apache service should be installed

https://192.168.20.15/PanacesGUI

https://192.168.20.15/PanacesGUI



Server Certificate

SSLCertificateKeyFile

http modules: Mod_ssl, mod_proxy, mod_proxy_http

8.7.2 Configuring ActiveMQ Broker to support Port Forwarding

To configure the ActiveMQ Broker to support the Port Forwarding, complete the following tasks:

Enabling HTTPS Transport Connector

Importing HTTPD Certificate

Configuring Site Controller for Port Forwarding

8.7.2.1 Enabling HTTPS Transport Connector

1. Go to the <Resiliency Orchestration installation path>/tools/apache-activemq-5.13.2/conf/ folder and open the files activemq-security.xml and activemq.xml

2. Uncomment the line starting with the string <transportConnector name="https"

Note

For https port forwarding, the host name of the server in which Site Controller is installed

should not have special characters.

8.7.2.2 Importing HTTPD Certificate

You need to perform the following steps for importing httpd certificate:

1. Copy the SSL server certificate, which is used in the httpd configuration section, to a folder.

2. Run the following command to import httpd certificate to /opt/panaces/installconfig/keystore/panacesACP.truststore:

keytool -import -alias "panacesacp_keystore" -file <httpd certificate,

which is copied in the folder> -keystore

$EAMSROOT\installconfig\keystore\panacesACP.trustStore

3. Enter the default password: uyts637KHDS337$%

Note

It is recommended that the users should create own truststore and keystore and use it as

corresponding values for the truststore and keystore. The users should also create own

password.

8.7.2.3 Configuring Site Controller for Port Forwarding

You need to perform the following steps for setting up the Site Controller to communicate with the Resiliency Orchestration on the HTTPS port:

Replacing the Port and Protocol attributes in the Sitecontroller.cfg file

Go to: ${EAMSROOT}/installconfig/



Open the Sitecontroller.cfg file

Update the Port and Protocol attributes as shown in the following example:

MQ_RO_CONNECTION_PROTOCOL=https

MQ_RO_CONNECTION_PORT=43443

Save the Sitecontroller.cfg file

8.7.3 Configuration

This section describes port forwarding from secure https (443) to the following ports:

Resiliency Orchestration server secure tomcat secure port 8443

Resiliency Orchestration server nonsecure tomcat port 8080

Resiliency Orchestration features using other ports 8082

ActiveMQ Broker feature that uses port 43443

ActiveMQ Admin Console that uses port 8162 (optional)

You must perform the following steps for enabling port forwarding:

8.7.4 HTTP configuration (/etc/httpd/conf/httpd.conf):

The user needs to perform the following http configuration:

1. Run the following command to enable proxy_module, proxy_http_module, and mod_ssl module in /etc/httpd/conf/httpd.conf folder of Apache web server.

LoadModule proxy_module modules/mod_proxy.so

LoadModule proxy_http_module

modules/mod_proxy_http.so

LoadModule ssl_module modules/mod_ssl.so

2. Run the following command to provide the path to refer to the ssl.conf file.

Include conf.d/ssl.conf

3. In SSL, specify the following details so that Port 443 should be listening.

Listen 443 ssl

Listen 80

4. The user needs to provide the following proxy configuration and forward the configuration.

ProxyRequests Off

# Control Client Access



<Proxy https://<IP:8443/>Order Deny,Allow

Allow from all

</Proxy>

# Set TCP/IP network buffer size for better throughput (bytes)

ProxyReceiveBufferSize 4096

ServerName localhost

ProxyPass /PanacesGUI https://<IP>:8443/PanacesGUI

ProxyPassReverse /PanacesGUI https://<IP>:8443/PanacesGUI

ProxyPass /rmi http://<IP>:8081/rmi

ProxyPassReverse /rmi http://<IP>:8081/rmi

ProxyPass /rmi http://<IP>:80/rmi

ProxyPassReverse /rmi http://<IP>:80/rmi

ProxyPass /IBMRODashboard https://<IP>:8443/IBMRODashboard

ProxyPassReverse /IBMRODashboard https://<IP>:8443/IBMRODashboard

ProxyPass /cdrm-ws http://<IP>:8080/cdrm-ws

ProxyPassReverse /cdrm-ws http://<IP>:8080/cdrm-ws

ProxyPass /rest http://<IP>:8082/rest

ProxyPassReverse /rest http://<IP>:8082/restote

ProxyPass /admin https://<IP>/admin

ProxyPassReverse /admin https://<IP>/admin

ProxyPass /MQB https://<IP>:43443/MQB

ProxyPassReverse /MQB https://<IP>:43443/MQB

Timeout 2400

ProxyTimeout 2400

ProxyBadHeader Ignore

ServerRoot "/etc/httpd"

https://192.168.2.25:8162/admin

https://192.168.2.25:8162/admin



Note: The user needs to perform this configuration, if required. For Example: If the

requirement is Site Dashboard, the user needs to add IBMRODashboard proxy

entries.

8.7.5 SSL configuration (/etc/httpd/conf.d/ssl.conf)

The user needs to provide the following configurations for SSL (specified in bold are configured, you need to specify the certificate and key path as per customer environment):

Comment 443 port https port: The user needs to provide the following details to configure SSL for listening to 443 https port.

#Listen 443 https

8.7.6 Server Certificate

The user needs to specify SSLCertificateFile at a PEM encoded certificate. If the certificate is encrypted, the server prompts for a pass phrase.

Note

A kill-HUP will prompt again. A new certificate can be generated using the genkey(1)

command.

The user needs to provide the following details to configure SSL server certificate.

SSLCertificateFile /etc/pki/tls/certs/localhost.crt

For Example: You need to provide the following details to configure SSL server certificate in Resiliency Orchestration server.

SSLCertificateFile /opt/tomcat7/conf/ibm.crt

Server Private Key: If the key is not combined with the certificate, you need to specify the key file.

Note

If you have a RSA and a DSA private key, you can configure the keys in parallel to also

allow the use of DSA ciphers, and so on.

The user needs to provide the following details to configure SSL server private key:

SSLCertificateKeyFile /etc/pki/tls/private/localhost.key

For Example: You need to provide the following details to configure SSL server private key in Resiliency Orchestration server.

SSLCertificateKeyFile /opt/tomcat7/conf/ibm.key

Enable/Disable SSL for this virtual host: The user needs to provide the following details to enable/disable SSL for the virtual host.



SSLEngine on

SSLProxyEngine on

SSLProxyVerify none

SSLProxyCheckPeerCN off

SSLProxyCheckPeerName off

SSL Protocol support: The user needs to provide the following details for SSL protocol support:

List the enable protocol levels with which clients will be able to connect.

Disable SSLv2 access by default.

Uncomment the following command to Disable all, enable requried

#SSLProtocol –ALL +TLSv1 +TLSv1.1 +TLSv1.2

Enable all, disable required as shown in the following command.

SSLProtocol all -SSLv2 -SSLv3

Inter-Process Session Cache: You need to provide the mechanism to use and then the expiring timeout (in seconds) to configure the SSL session cache as shown in the following snippet:

# SSLSessionCache shmcb:/run/httpd/sslcache(512000)

SSLSessionCache dbm:/run/httpd/sslcache

SSLSessionCacheTimeout 300

8.8 Steps to Enable Compression in Tomcat Server

Below tag in the server.xml enables compression.

Note

Compression will be enabled if the file size is more than 2KB.

Connector port=“8080” maxHttpHeaderSize=“8192”

maxThreads=“150” minSpareThreads=“25” maxSpareThreads=“75”

enableLookups=“false” redirectPort=“8443” acceptCount=“100”

compressionMinSize=“2048”

compression=“on”

compressableMimeType=“text/html,text/xml,text/plain,text/css,

text/javascript,text/json,application/x-javascript,

application/javascript,application/json”

connectionTimeout=“20000” disableUploadTimeout=“true”

URIEncoding=“utf-8” />

<Connector port=“8443” maxHttpHeaderSize=“8192”


enableLookups=“false” disableUploadTimeout=“true”



acceptCount=“100” scheme=“https” secure=“true”

compressionMinSize=“2048”

compression=“on”




client{uth=“false” sslEnabledProtocols=“TLSv1”

keystoreFile="/opt/panaces/installconfig/keystore/sanovi.keystore"

keystorePass="^vMkT%678#4-06Gjue672Kwo95dzg"/>

Note

To change security constraint in web.xml, user have to wait till war is extracted in the first

start.

8.9 Configuring Current Events

User can view more/less events by changing the value of "sanovi.events.displayDuration.hours" in $EAMSROOT/installconfig/panaces.properties file. If this parameter is not specified or invalid integer is specified, then it will be defaulted to 120hrs. Specifying zero might result in no events or very few events occurred within a past few seconds to be shown. It should be noted that changing this parameter will also affect the number of events shown in "Monitor->Continuity" listing page. User is expected to use "Event Reports" if he wants to see history of events for a longer duration (say months) as supposed to increasing this parameter. Changing this value does not require a server restart and this value will be taken when the next refresh of the page happens.

Something here The aging period can be configured by editing/adding "sanovi.closeEventsInDays" property in $EAMSROOT/installconfig/panaces.properties file. The value for this property should be a numeric value representing number of days. If this property is not specified or invalid value is provided, the System default it to 5 days. Specifying zero will disable automatic Closure of events. Altering this property does not require restart of Resiliency Orchestration Server.

8.9.1 Logs Retention

Server logs and Site Controller logs are written at $EAMSROOT/var/log and for the remote agent logs in Site Controller are written at $EAMSROOT/remote/var/log

The logs retention will be default set to 7 days, however this can configurable.

For Resiliency Orchestration Server and Site Controller to configure the log retention update the purge.server.logfiles parameter in $EAMSROOT/installconfig/panaces.properties

For remote agents in Site Controller to configure the log retention update the purge.server.logfiles parameter in $EAMSROOT/remote/installconfig/panaces.properties.



8.9.2 Fetch Logs

When the panaces is running with nonroot, the system logs will not be fetched until read permission is granted for the nonroot user. The nonroot user, by default, does not have read permission for the system logs (/var/log/messages and so on).

8.10 Troubleshooting Proxy Errors

Issue: Once the port forwarding configuration done, while accessing application with https://<IP>/PanacesGUI (which means accessing with default secure port) you may get the following error:

The proxy server could not handle the request GET /PanacesGUI/

Reason: Error during SSL Handshake with remote server‖

Resolution: The SSL handshake issue will come if remote server certificate

name validation fails or the keystore certificate expires, So update the ssl.conf

file with parameters “SSLProxyCheckPeerName off” and “SSLProxyCheckPeerCN off”

Assuming the keystore for the tomcat is not expired, if expired as a workaround

set “SSLProxyCheckPeerExpire off” however, it is recommended to renew the tomcat keystore certificate.

Once set , restart the httpd service using the command: sudo systemctl restart httpd

8.10.1 Preset Users for Resiliency File Replicator (SFR)

During the installation of the Resiliency Orchestration application software, the following Resiliency File Replicator (SFR) user is created with all privileges:

pfrdmin

The Resiliency Orchestration application software is configured to use the

pfradmin User for accessing the Resiliency File Replicator, until you change the

user in the Resiliency File Replicator.

8.11 Configuring Resiliency Orchestration application to use the Resiliency File Replicator

The Resiliency Orchestration application software is installed with a preset User credentials for accessing the Resiliency File Replicator. You can configure IBM Resiliency Orchestration application software to use a different Resiliency File Replicator user credentials.

You must first set up a new user credentials after installing the Resiliency File Replicator. Ensure that the new user you create in the Resiliency File Replicator is set up with all privileges.

To configure the Resiliency Orchestration application software for the new Resiliency File Replicator user, complete the following steps:



1. Navigate to the directory where the Resiliency Orchestration application software is installed, by entering the following command at the command prompt:

# cd installconfig

2. In this directory, enter the following command at the command prompt to display the properties file for the Resiliency Orchestration application:

# vi panaces.properties file

3. In the panaces.properties file change the preset value for the parameter

panaces.mysql.username, to the new user name that you created in the

Resiliency File Replicator. The preset parameter for the Resiliency File

Replicator user is set as pfradmin.

panaces.mysql.username = <new pfr user>

4. Save and close the panaces.properties file.

8.12 Localizing the IBM Resiliency Orchestration Application for languages other than English

You can configure the IBM Resiliency Orchestration components such as the OS, Console, and MariaDB for displaying and storing text in languages other than English.

For example, if you are using the IBM Resiliency Orchestration application installed with Japanese as the language of operation, and you want the interface to display text you enter in Japanese, store data into the MariaDB in Japanese, search for and display records from the MariaDB in Japanese, you must configure the IBM Resiliency Orchestration application as instructed in the following sections.

Configure the OS and VNC console

Configure the MariaDB

Configure the Resiliency Orchestration Server properties

8.12.1 Prerequisites

You must stop all processes in the IBM Resiliency Orchestration application before you continue with the following procedure.

8.12.2 Configuring the OS and VNC console

Note:

You must have SuperAdmin privileges to do this task.

To configure the OS and VNC Console, complete the following steps:

1. Locate and open the .bash_profile file from the path: /root

2. Add the following text:



export LANG=ja_JP.UTF-8

3. Save the .bash_profile file

4. Enter the following command:

~/.bash_profile

5. To verify if the changes are implemented in the IBM Resiliency Orchestration application, enter the following command:

$ locale

6. The options for the language set (ja_JP.UTF-8) is displayed for the various parameters, as shown in the sample screenshot.

7. Proceed to configuring the MariaDB.

8.12.3 Configuring the MariaDB

Note:

You must have SuperAdmin privileges to do this task.

To configure the MariaDB, complete the following steps:

1. Locate and open the my.cnf file from the path: /etc/my.cnf

2. Add utf8 as the default character set under the following sections in the

my.cnf file:

[client]

default-character-set=utf8

[mysql]

default-character-set=utf8



[mysqld]

datadir=/var/lib/mysql

socket=/var/lib/mysql/mysql.sock

user=mysql

character-set-server=utf8

3. Save and close the my.cnf file.

4. Proceed to configuring the Resiliency Orchestration Server properties.

8.12.4 Configuring the Resiliency Orchestration Server properties

Note: You must have SuperAdmin privileges to do this task.

To configure the Resiliency Orchestration Server properties (server.xml file), complete the following steps:

1. After logging in the IBM Resiliency Orchestration server using Putty, locate

the server.xml file in the path: $TOMCAT_HOME/conf

2. Open the server.xml file by entering the following command:

sudo vi $TOMCAT_HOME/conf/server.xml

3. Add the following configuration for the Connector Port (8443)

4. Add URIEncoding=―utf-8‖ after the last entry under the <Connector port=―8443‖ >

The following is an example with the URI encoding added:

<Connector port=“8443” maxHttpHeaderSize=“8192”


enableLookups=“false” disableUploadTimeout=“true”

acceptCount=“100” scheme=“https” secure=“true”

compressionMinSize=“2048” compression=“on”




client{uth=“false” sslEnabledProtocols=“TLSv1”

keystoreFile="/opt/panaces/installconfig/keystore/sanovi.keystore"

keystorePass="^vMkT%678#4-06Gjue672Kwo95dzg" URIEncoding=“utf-8” />

5. Save and close the server.xml file.

8.12.5 Post configuration steps

1. Restart the MySQL service by entering the following command:

$ service mysql restart



2. Restart the IBM Resiliency Orchestration services by entering the following command:


8.13 Configuring Resiliency Orchestration Server and Site Controller for Secured communication by using the ActiveMQ Broker

After the installation of the IBM Resiliency Orchestration Server and the Site Controller (SC), you must complete the procedures described in this section to enable secured communication between the Resiliency Orchestration and the Site Controller by using the ActiveMQ Broker feature. This feature is enabled in the IBM Resiliency Orchestration application from the version R7.2.3.1.

The Resiliency Orchestration provides you with Default Passwords for the following Roles:

Admin – Is the User with roles of an Admin who can view the status of messages and change the message priorities on the ActiveMQ Broker.

Producer – Is the Server with an authority to post messages on the ActiveMQ Broker.

Consumer - Is the Server with an authority to listen to the messages posted on the ActiveMQ Broker.

Important:

o Ensure to change the default passwords in the IBM Resiliency Orchestration

application after downloading the Service Pack (R7.2.3.1) from the IBM Passport

Advantage Portal.

o Changing the passwords or customizing the passwords will ensure that the secure

communication between the IBM Resiliency Orchestration application and the

Site Controller in your infrastructure will be contained to within your organization

and prevent querries from unauthorized Users.

Perform the following procedures in sequence to ensure that you have set up the ActiveMQ Broker for the secured communication between the IBM Resiliency Orchestration application and the Site Controller.

8.13.1 Changing the Default Passwords for the Roles: Admin, Producer, and Consumer

Important:

The Default Passwords for the Roles (Producer and Consumer) must be changed for

both the IBM Resiliency Orchestration Server and the Site Controller Server and on

the ActiveMQ Broker (on both the IBM Resiliency Orchestration Server and the Site

Controller Server). This is to ensure that both (Resiliency Orchestration and SC) can

function as the Producer and Consumer and the ActiveMQ Broker recognizes the

Producer and Consumer Roles.



In the normal set of communication between the IBM Resiliency Orchestration Server

and the Site Controller Server, following are the roles that are performed:

IBM Resiliency Orchestration will function as the Producer when the messages are

generated by the Resiliency Orchestration and the Site Controller will function as the

Consumer for the same messages, by receiving them.

Site Controller will function as the Producer when the messages are generated by the

SC and the IBM Resiliency Orchestration will function as the Consumer for the same

messages, by receiving them.

The ActiveMQ Broker functions as the mediator (on both the Resiliency Orchestration

and SC) for receiving and posting messages, recognizing the Producer and Consumer

and allowing the messages to flow to the authentic sender or receiver.

1. Generating encrypted custom passwords. Encrypted Custom Passwords must be generated for the Admin, Producer and Consumer Roles defined for the

2. Replacing the encrypted custom passwords in the related properties files.

See the following sections for the procedures:

Changing the Default Admin Password

Changing the Default Passwords for the ActiveMQ Broker

Changing the Default Passwords in the Resiliency Orchestration and Site Controller Configurations

8.13.1.1 Changing the Default Admin Password

Complete the following steps to change the default passwords that the IBM Resiliency Orchestration application provides.

1. Changing the Default Admin Password

The default Admin Password is Adw1np@s51S3cRt$ and is located in the

jetty-realm.properties file.

Choose a custom password.

Note:

Ensure to choose a password that has a minimum of 20 alpha-numeric

characters. Supported characters are: Capital Alphabets (A-Z), Lower

Alphabets (a-z), Numbers (0-9). Special characters are not allowed.

Proceed to encrypting the custom password. Go to the Next Step.

2. Encrypting the New Admin Password

The custom or new password must be encrypted. To encrypt the new password, go to the following location:

$EAMSROOT/lib

Run the following command:

java -cp jetty-util-9.3.9.v20160517.jar org.eclipse.jetty.util.security.Password admin <New Password>



The new encrypted password is displayed as shown in the following example:

CRYPT:PASSWORD

Proceed to replacing the encrypted custom password in the properties file.

3. Replacing the Encrypted Password in the jetty-realm.properties file

Go to: /opt/panaces/tools/apache-activemq-5.13.2/conf/

Open the jetty-realm.properties file

Under the section:

# username: password [,rolename ...]

Update the new encrypted password as shown in the following example:

admin: CRYPT:PASSWORD, admin

Remove the Line that has the following value:

user: user, user

Go to the Next Step.

4. Proceed to changing the Default passwords for the Resiliency Orchestration Server ActiveMQ Broker. For instructions, see Changing the Default Passwords for the ActiveMQ Broker.

8.13.1.2 Changing the Default Passwords for the ActiveMQ Broker

Complete the following steps to change the default Producer and Consumer passwords that the provided for the ActiveMQ Broker in the Resiliency Orchestration and the SC Servers.

1. Changing the Default Producer and Consumer Passwords

The default Producer and Consumer Passwords are located in the credentials-enc.properties file in the Resiliency Orchestration and the SC Servers.

Choose a custom password. Ensure that you create custom passwords for the following types:

producer_ro custom password

consumer_ro_custom password

producer_sc_custom password

consumer_sc_custom password

Note:

Ensure to choose a password that has a minimum of 20 alpha-numeric

characters. Supported characters are: Capital Alphabets (A-Z), Lower

Alphabets (a-z), Numbers (0-9). Special characters are not allowed.

Proceed to encrypting the custom password.

2. Encrypting the New Passwords



The custom or new passwords for both the Producer and Consumer roles for the Resiliency Orchestration and the SC, must be encrypted.

Encrypting passwords for the Resiliency Orchestration ActiveMQ

To encrypt the new passwords, go to the following location in the Resiliency Orchestration Server:

${EAMSROOT}/tools/apache-activemq-5.13.2/bin

To encrypt the custom Producer password for the Resiliency Orchestration, run the following command:

./activemq encrypt --password activemq --input <producer_ro custom password>


(Producer_RO Encrypted Password)

To encrypt the custom Consumer password, run the following command:

./activemq encrypt --password activemq --input <consumer_ro custom password>


(Consumer_RO Encrypted Password)

3. Encrypting passwords for the SC ActiveMQ

To encrypt the new passwords, go to the following location in the SC Server:

${EAMSROOT}/tools/apache-activemq-5.13.2/bin

To encrypt the custom Producer password for the SC, run the following command:

./activemq encrypt --password activemq --input <producer_sc custom password>


(Producer_SC Encrypted Password)


./activemq encrypt --password activemq --input <consumer_sc custom password>


(Consumer_SC Encrypted Password)

Ensure that you have encrypted the custom passwords and have noted them as shown in the following example:



producer_ro custom password - encrypted as - Producer_RO Encrypted

Password

consumer_ro_custom password - encrypted as - Consumer_RO Encrypted

Password

producer_sc_custom password - encrypted as - Producer_SC Encrypted

Password

consumer_sc_custom password - encrypted as - Consumer_SC Encrypted

Password

Important:

Ensure that you use the same custom passwords for encryption and replacing in the

Resiliency Orchestration and SC configurations file, detailed in Changing the Default

Passwords in the Resiliency Orchestration and Site Controller Configurations.

Proceed to replacing the encrypted custom password in the properties file. Go to the Next Step.

8.13.2 Replacing the Encrypted Passwords in the credentials-

enc.properties file

8.13.2.1 Replacing Encrypted passwords for the Resiliency Orchestration

ActiveMQ

Go to the following location in the Resiliency Orchestration Server: /opt/panaces/tools/apache-activemq-5.13.2/conf/

Open the credentials-enc.properties file

Update the encrypted passwords as shown in the following example:

producer.password=ENC(Producer_RO Encrypted Password)

consumer.password=ENC(Consumer_RO Encrypted Password)

8.13.2.2 Replacing Encrypted passwords for the SC ActiveMQ

Go to the following location in the SC Server: /opt/panaces/tools/apache-activemq-5.13.2/conf/

Open the credentials-enc.properties file


producer.password=ENC(Producer_SC Encrypted Password)

consumer.password=ENC(Consumer_SC Encrypted Password)

Proceed to changing the Default passwords in the Resiliency Orchestration and Site Controller Configurations. For instructions, see Changing the Default Passwords in the Resiliency Orchestration and Site Controller Configurations.



8.13.3 Changing the Default Passwords in the Resiliency Orchestration

and Site Controller Configurations

Complete the following steps to change the default Producer and Consumer passwords that are provided for the Resiliency Orchestration and SC in their corresponding configuration files.

8.13.3.1 Changing the Default and updating Configurations for the Resiliency

Orchestration

1. The default Producer and Consumer Passwords are located in the panaces.properties file.

Use the custom passwords that you used to encrypt for the Resiliency Orchestration and SC in Changing the Default Passwords for the ActiveMQ Broker, as shown in the following example:

producer_ro custom password

consumer_ro_custom password



The custom or new passwords for both the Producer and Consumer roles, must be encrypted. To encrypt the new passwords, go to the following location in the Resiliency Orchestration Server:

${EAMSROOT}/tools/bin/

To encrypt the custom Producer password, run the following command:

./Encryptor.sh <producer custom password>


(Producer Encrypted Password)


./Encryptor.sh <consumer custom password>


(Consumer Encrypted Password)


3. Replacing the Encrypted Passwords in the panaces.properties file


Open the panaces.properties file


MQ_SC_BROKER_PRODUCER_USERNAME=producer

MQ_SC_BROKER_PRODUCER_PASSWORD=(Producer Encrypted Password)



MQ_RO_BROKER_CONSUMER_USERNAME=consumer

MQ_RO_BROKER_CONSUMER_PASSWORD=(Consumer Encrypted Password)

8.13.3.2 Changing the Default and updating Configurations for the SC

1. The default Producer and Consumer Passwords are located in the Sitecontroller.cfg file.

Use the custom passwords that you used to encrypt for the Resiliency Orchestration and SC in Changing the Default Passwords for the ActiveMQ Broker, as shown in the following example:

producer_sc_custom password

consumer_sc_custom password



The custom or new passwords for both the Producer and Consumer roles, must be encrypted. To encrypt the new passwords, go to the following location in the SC Server:

${EAMSROOT}/tools/bin/

To encrypt the custom Producer password, run the following command:

./Encryptor.sh <producer custom password>


(Producer Encrypted Password)


./Encryptor.sh <consumer custom password>


(Consumer Encrypted Password)


3. Replacing the Encrypted Passwords in the Sitecontroller.cfg file


Open the Sitecontroller.cfg file


MQ_RO_BROKER_PRODUCER_USERNAME=producer

MQ_RO_BROKER_PRODUCER_PASSWORD=(Producer Encrypted Password)

MQ_SC_BROKER_CONSUMER_USERNAME=consumer

MQ_SC_BROKER_CONSUMER_PASSWORD=(Consumer Encrypted Password)



8.13.4 Locating the Encrypted Passwords

You can find the log of all Passwords that you have encrypted in the Encryptor.log file.

To locate the Encryptor.log file go to:

/opt/panaces/var/log/

Open the Encryptor.log file.

8.13.5 Accessing ActiveMQ Console

You can access the ActiveMQ Console to view the messages that are queued in the ActiveMQ Brokers on either the Resiliency Orchestration or the SC servers. As an Admin User, you can also set or change the priorities of the messages on the ActiveMQ Broker.

To Access the ActiveMQ Console, use the following IP:

https://<HOSTIP>:8162/

Where:

Host IP is the IP of the Resiliency Orchestration Server or the SC Server depending on which ActiveMQ Broker you want to access

8162 is the port that is used to view the messages on the ActiveMQ Broker.

8.14 Viewing the HTML Dashboard

You can access or switch between the Flex Dashboard (that is enabled by default) and the HTML Dashboard by using the following URLs for the Manager Dashboard and the Operational Dashboard:

a) Manager Dashboard:

http://<Resiliency Orchestration IP>:8080/PanacesGUI/flex/SanoviDashboard.jsp [Flex]

http://< Resiliency Orchestration IP >:8080/PanacesGUI/flex/SanoviDashboardPlain.jsp [HTML]

b) Operational Dashboard:

http://< Resiliency Orchestration IP >:8080/PanacesGUI/flex/OperationalDashboard.jsp [Flex]

http://< Resiliency Orchestration IP >:8080/PanacesGUI/flex/OperationalDashboardPlain.jsp [HTML]



9 Starting and Stopping Resiliency Orchestration Server

9.1.1 Starting Resiliency Orchestration Server

To start the IBM Resiliency Orchestration Server, perform the following steps:

1. Open a terminal using sanovi user

2. Enter the following command at the command prompt:

sudo $EAMSROOT/bin/panaces start

Starting IBM Resiliency Orchestration Server for the first time takes five minutes to register its components. IBM Resiliency Orchestration GUI operation will be available after the component registration. Wait till the GUI becomes available to you.

9.1.2 Starting Resiliency Orchestration Server in Recover Mode

The user needs to perform the following steps to start IBM Resiliency Orchestration Server in recover mode:



sudo $EAMSROOT/bin/panaces recover

9.1.3 Stopping Resiliency Orchestration Server



sudo $EAMSROOT/bin/panaces stop

9.1.4 Restarting Resiliency Orchestration Server

To restart the IBM Resiliency Orchestration Server, perform the following steps:




9.1.5 Checking Resiliency Orchestration Server Status



sudo $EAMSROOT/bin/panaces status

9.1.6 Resiliency Orchestration Server Remote Services

The user needs to confirm that remote services are running with panaces user



3. If the services are not running with panaces user, run the following script to stop the services:

sudo ./invokeAgentCommand.sh <agent script> stop <IP> LINUXSERVER

4. The user needs to run the following script to start remote services:

sudo ./invokeAgentCommand.sh <agent script> start <IP> LINUXSERVER

Note

The invokeAgentCommand.sh script is available at EAMSROOT/bin

9.1.7 Checking Resiliency Orchestration Server Available Modes

You need to perform the following steps to check the available modes of IBM Resiliency Orchestration Server:



sudo $EAMSROOT/bin/panaces help

This command will display the following options:

start: Start the IBM Resiliency Orchestration server and Tomcat server

restart: Restart the IBM Resiliency Orchestration server and Tomcat server

stop: Stop the IBM Resiliency Orchestration server and Tomcat server

recover: Starts the IBM Resiliency Orchestration server in recovery mode with Tomcat server

status: Shows whether IBM Resiliency Orchestration Server and Tomcat is running or not

help: Shows this help

debug: Runs Tomcat and IBM Resiliency Orchestration, with remote debugging enabled (To debug Tomcat, connect to port 8000. To debug IBM Resiliency Orchestration, connect to port 8001)

Note

Do not stop IBM Resiliency Orchestration Server immediately after starting as this

might not stop Tomcat, or event registration may not happen properly.



10 Installing Agent Node Server or Site Controller on Linux

10.1 Installation Overview

Site Controller Software has the following components for installation:

Agent Node Server GUI mode installation

Agent Node Server Silent mode installation

10.2 Client Browser Prerequisite

Browser OS Version/Patch Remarks

Firefox 26 and

above and Google

chrome 32 and

above

MS Windows 7 and MS Windows 8, MS

Windows 2012

10.3 Ports Used by Linux Based Site Controller

The following default port is used in the communication protocol:

Port Description

8162, 42443 and

45443

For communication between Site Controller and IBM Resiliency

Orchestration Server, Agents.

10.4 Prerequisites

Based on the features, download the GPL dependent binaries from this link GPL dependent binaries prior to Site Controller installation. Refer to IBM Resiliency Orchestration Installation Guide.

You can perform the following method to install Site Controller:

Graphical Mode: Graphical mode installation is an interactive, GUI-based method for installing Site Controller. It is supported on Linux platform.

Silent Mode: Silent mode installation is a non-interactive method of installing Site Controller. This method requires the use of properties file for selecting installation options. It is supported on Linux.

10.5 Installing Site Controller in GUI Mode in Linux

This section describes the procedure to install the Agent Node Server on Linux (RHEL 7.x). Additional steps that you must perform are also included within.

Note





You must have root or root equivalent privileges to install Agent Node. The Site Controller

and Agent Node services are installed when the installation file is executed.

To install Agent Node, perform the following steps:

1. Download the Agent Node binaries from the given ftp path.

2. Execute the following command (use whichever is applicable):

sh SiteController.bin (or) ./SiteController.bin at the command prompt to

run Agent Node installer.

Note

The user needs a free space of approximately 700 MB in the server where the Site

Controller needs to be installed, prior to executing the above command.

3. If the command to run the Agent Node installer is executed, Agent Node installation starts with the screen as shown in the following figure:

Note

If the RHEL version is not 5.0 ES/AS and 6.0, or 7.x, a warning message will be displayed

on the screen. However, the user can continue with the installation.

Figure 17: IBM Resiliency Orchestration Agent Node Installer

4. After displaying the IBM Resiliency Orchestration Agent Node Installer screen, the Introduction window is displayed as shown in the following figure:



Figure 18: IBM Resiliency Orchestration Agent Node Installation on Linux

- Introduction

5. Click Next. The Choose Install Folder window is displayed.


- Choose Install Folder

6. Select a path to install the software by clicking Choose. Alternatively, you can click Restore Default Folder to restore the default path. The default path



is /opt/panaces. It is recommended that you use the default path, which is displayed.

7. Click Next. The IBM Resiliency Orchestration Agent Node IP Address Configuration window is displayed.


– IBM Resiliency Orchestration Agent Node IP Address Configuration

8. Enter the IP addresses of the primary and secondary IBM Resiliency Orchestration servers, and IBM Resiliency Orchestration Agent Node Address. In a nonNAT environment, NAT IP address field should be left blank.

Note

In NAT environment, Primary and secondary IBM Resiliency Orchestration server public

IP should be provided. Agent node address should be the public IP and NAT IP address

should be the private IP of the server where you are installing.

To change NAT IP configuration after installation or to troubleshoot, refer to NAT IP of the Troubleshooting chapter in Resiliency Orchestration Installation Guide.





- Pre-Installation Summary

10. Verify the inputs provided. If you want to change the inputs, click Previous and modify the details.

11. Click Install. The Installing IBM Resiliency Orchestration Agent Node window is displayed.




- Installing IBM Resiliency Orchestration Agent Node

12. Once the installation is complete, the Starting IBM Resiliency Orchestration Agent Node window is displayed.


- Starting IBM Resiliency Orchestration Agent Node

13. On the Starting IBM Resiliency Orchestration Agents Node window, perform either of the following:

Click Yes to start the agent services automatically.

Click No to start the agent services manually.

Note

The best practice is not to change the default value displayed on the Starting IBM

Resiliency Orchestration Agent Node window.

14. Click Next. The Installation Completed window is displayed indicating successful installation.




- Installation Completed


Note

When the installation is carried on silent mode or GUI mode, restart with a Putty session.

16. Post installation, add the following properties in /opt/panaces/installconfig/SiteController.cfg file:

MAX_SC_CONNECTION_REQUEST_HANDLING_SIZE=50

Note:

Determine the number of agents that will connect to the site controller. Set

MAX_SC_CONNECTION_REQUEST_HANDLING_SIZE to 1.5 times the number of agents.

For example, for 100 agents set MAX_SC_CONNECTION_REQUEST_HANDLING_SIZE to

150.

17. Start the Agent Node manually.

10.6 Installing Site Controller in Silent Mode in Linux

In silent mode installation method, the installation program reads the settings for your configuration from the properties file prior to installation. The installation program does not display any configuration options during the installation process.

The following sections describe how to install Agent Node server using the installation program in silent mode on Linux platforms. It is assumed that user have acquired the installation program and properties file from the FTP server.



Note

Confirm that the hardware and software configuration required for Site Controller

installation is in place.

10.6.1 Editing Properties File

When installing Agent Node in silent mode, the installation program uses the properties file for server (PanacesAgentNodeInstaller.properties) to determine which installation options should be implemented. You need to edit the respective properties file in which you specify the installation options that you want to invoke, while performing the Agents installation and then you can run the installation program in silent mode. Perform the following steps to edit the properties files.

1. Get the files from the FTP server and copy properties files by running the following command:

cp AgentNode/PanacesAgentNodeInstaller.properties /tmp

cp AgentNode/SiteController.bin /tmp


vi /tmp/ PanacesAgentNodeInstaller.properties


PanacesAgentNodeInstaller.properties file: The following table displays the description of corresponding keywords.

Keyword Description

INSTALLER_UI Displays the mode of installation as ―silent‖.

MODIFY_SYSTEM_FILES=1

It modifies the following system files:


/etc/sysctl.conf

USER_INSTALL_DIR

Enter the path for the directory to install the

Site Controller Server software (default path

is /opt/panaces/ )

USER_INPUT_RESULT_PRIMARY_

PANACES_SERVER_IP Enter the IP address of the primary server.

USER_INPUT_RESULT_SECONDAR

Y_PANACES_SERVER_IP

Enter the IP address of the secondary

server.

PANACES_AGENT_NODE_ADDRES

S Enter the IP address of Local machine.



Keyword Description

USER_INPUT_RESULT_SITE_CONT

ROLLER_IP=

Enter the IP address of Site Controller

Agent.

AGENTNODE_START_YES


automatically after the installation.

Enter 0 if you want to start the agent

manually.

4. Proceed to the Post installation procedure. For instructions, see .

10.6.2 Agent Node Silent Mode Installation

The following section provides steps to install Agent Node in silent mode on Linux server.

/tmp/SiteController.bin –f /tmp/PanacesAgentNodeInstaller.properties

Note

In silent mode, uninstallation does not check whether services are running or not. The

user needs to make sure that services are stopped before uninstallation in silent mode.

10.6.3 Post Installation Steps after you install the Site Controller in Linux

1. In Site Controller installation folder, perform the following steps:

Go to the location: $EAMSROOT/installconfig/

Open the SiteController.cfg file

Add the following property:


Note:




150.

2. Enter the value of the ACP keystore in the \installconfig\SiteController.cfg file.

For Example: panaces.acp.keystore=

Note

The value of the ACP keystore will be the path where ACP key store exists, which means

<Site controller installation folder>\installconfig\keystore\panacesACP.keystore. Enter

the path with a \\ for file separator, for example,

c:\\Sitecontroller\\installconfig\\keystore\\panacesACP.keystore



3. Enter the path of the truststore in the same SiteController.cfg file.

For Example: panaces.acp.truststore=

Note

This value of the ACP truststore will be the path where ACP trust store exists, which

means <Site controller installation folder>\installconfig\keystore\

panacesACP.truststore. Enter the path with a \\ for file separator, for example,

c:\\Sitecontroller\\installconfig\\keystore\\ panacesACP.truststore

Ensure to create your own truststore and keystore and use them as the corresponding values for the truststore and keystore.

10.6.4 Patch Update for Site Controller

Perform the following steps to apply the patch in Site Controller:

1. Log in to the Resiliency Orchestration Server and perform the following steps:

a. Go to $EAMSROOT (assume /opt/panaces is EAMSROOT).

b. Download UpdateEAMSROOT.sh from Fix Central to $EAMSROOT/bin.

c. Edit the parameter currentPath in UpdateEAMSROOT.sh with

/opt/panaces.

d. Run the following command to create tar ball.

e. sudo tar -cvf DRM_AllFiles_Patch.tar lib/* work/* scripts/* agents/* bin/*

installconfig/* templates/* bin/*

f. Copy the DRM_AllFiles_Patch.tar to the Site Controller EAMSROOT

path.

2. Log in to Site Controller and perform the following steps:

a. Go to EAMSROOT path ( assume /opt/SiteController is EAMSROOT)

b. Run the following command to extract the tar and retain the old files.

tar --keep-old-files -xvf DRM_AllFiles_Patch.tar

c. Go to $EAMSROOT/bin

d. Run the following command.

sudo ./SecurityUserInjection.sh

e. Run the following command to update scripts from Site Controller EAMSROOT.

sh UpdateEAMSROOT.sh <SiteController EAMSROOT>

10.6.5 Starting Agent Node Manually

User can start the Site Controller manually by logging in to Agent Node server and performing the following steps:

1. Enter in the $EAMSROOT/bin folder.



2. Run the following command to start Site Controller.

sh SiteController.sh start

or

./SiteController.sh start

Run the following command to start Agent Node.

sh LinuxOSAgent.sh start

or

./LinuxOSAgent.sh start

10.6.6 Stopping Agent Node Manually

User can stop the Site Controller manually by logging in to Agent Node server and performing the following steps:


2. Run the following command to stop Site Controller.

sh SiteController.sh stop

or ./SiteController.sh stop

3. Run the following command to stop Agent Node.

sh LinuxOSAgent.sh stop

or ./LinuxOSAgent.sh stop

10.7 Uninstalling Site Controller

This section describes the procedure to uninstall Site Controller in GUI mode and Silent mode.

10.7.1 Uninstalling Agent Node in GUI Mode

Perform the following steps to uninstall Agent Node in GUI mode:

1. Enter in the <$EAMSROOT>/UninstallerData folder.

2. Click the Uninstall_IBM_Resiliency_Orchestration_Agent_Node file. The Uninstall IBM Resiliency Orchestration Agent Node window displays, as shown in the following figure.



Figure 25: Uninstall IBM Resiliency Orchestration Agent Node

3. Click Uninstall.

4. The uninstallation process begins and lasts for a few seconds. When the process is complete, the following window is displayed.

Figure 26: Uninstall Complete Screen

5. Click Done to close this window.



10.7.2 Uninstalling Agent Node in Silent Mode

Perform the following steps to uninstall Agent Node in silent mode:

1. Enter in the <$EAMSROOT>/UninstallerData folder.

2. Run the following command to uninstall Site Controller.

sh Uninstall_IBM_Resiliency_Orchestration_Agent_Node

or ./ Uninstall_IBM_Resiliency_Orchestration_Agent_Node



11 Installing Agent Node Server or Site Controller in MS Windows

11.1 Installation Overview

Site Controller Software has the following components for installation:

Agent Node Server GUI mode installation (Graphical Mode: Graphical mode installation is an interactive, GUI-based method for installing Site Controller. It is supported on Linux platform.)

Agent Node Server Silent mode installation (Silent Mode: Silent mode installation is a noninteractive method of installing Site Controller. This method requires the use of properties file for selecting installation options. It is supported on Linux.)

11.2 Installation and Services

Perform installations and services in the following order:

1. Install the IBM Resiliency Orchestration

2. Installation of Site Controller by using either the GUI mode or Silent mode

3. Configuring Agents to use PowerShell framework

4. Start Site Controller

5. Start Agent Node on Site Controller

11.3 Client Browser Prerequisite

Browser OS Version/Patch

Firefox 26 and

above and Google

chrome 32 and

above

MS Windows 7 and MS Windows 8, MS

Windows 2012

11.4 Ports Used by Windows Based Site Controller

The following ports are used in the communication protocol.

Port Description

5985 For HTTP communication between the Agents and Windows

based Site Controller

5986 For HTTPS (secure) communication between the Agents and

Windows based Site Controller

8162, 42443 For communication between the Windows based Site Controller



and the IBM Resiliency Orchestration Server

11.5 Prerequisites

Based on the features, download the GPL dependent binaries from this link GPL dependent binaries prior to Site Controller installation. Refer to IBM Resiliency Orchestration Installation Guide.

You can perform the following method to install Site Controller:

11.6 Installing Site Controller in GUI Mode in Windows

This section describes the procedure to install the Agent Node Server on MS Windows. Additional steps that you must perform are also included within.

Note

You must have root or root equivalent privileges to install Agent Node. The Site Controller

and Agent Node services are installed when the installation file is executed.

To install Agent Node, perform the following steps:

1. Download the Agent Node binaries from the given ftp path.

2. Files are available in the zipped format in the AgentNode folder.

3. Right-click on SiteController.exe and then, select the option Run as administrator.

Note

The user needs a free space of approximately 700 MB in the server where the Site

Controller needs to be installed, prior to executing the above command.

4. If the command to run the Agent Node installer is executed, Agent Node installation starts with the screen as shown in the following figure:





Figure 27: IBM Resiliency Orchestration Agent Node Installer on Windows

5. After displaying the IBM Resiliency Orchestration Agent Node Installer screen, the Introduction window is displayed as shown in the following figure:

Figure 28: IBM Resiliency Orchestration Agent Node Installation on

Windows - Introduction

6. Click Next. The Choose Install Folder window is displayed.




Windows- Choose Install Folder

7. Select a path to install the software by clicking Choose. Alternatively, you can click Restore Default Folder to restore the default path. The default path is $EAMSROOT. It is recommended that you use the default path, which is displayed.

8. Click Next. The IBM Resiliency Orchestration Agent Node IP Address Configuration window is displayed.




Windows – IBM Resiliency Orchestration Agent Node IP Address

Configuration

9. Enter the IP addresses of the primary and secondary IBM Resiliency Orchestration servers, and IBM Resiliency Orchestration Agent Node Address. In a nonNAT environment, NAT IP address field should be left blank.

Note

In NAT environment, Primary and secondary IBM Resiliency Orchestration server public

IP should be provided. Agent node address should be the public IP and NAT IP address

should be the private IP of the server where you are installing.

To change NAT IP configuration after installation or to troubleshoot, refer to NAT IP of the Troubleshooting chapter in Resiliency Orchestration Installation Guide.



Windows - Pre-Installation Summary

11. Verify the inputs provided. If you want to change the inputs, click Previous and modify the details.

12. Click Install. The Installing IBM Resiliency Orchestration Agent Node window is displayed.




Windows - Installing IBM Resiliency Orchestration Agent Node

13. Once the installation is complete, the Starting IBM Resiliency Orchestration Agent Node window is displayed.




Windows - Starting IBM Resiliency Orchestration Agent Node

14. On the Starting IBM Resiliency Orchestration Agents Node window, perform either of the following:



Note

There are some post installation steps so, choose No.

15. Click Next. The Installation Completed window is displayed indicating successful installation.


Windows - Installation Completed


Note

When the installation is carried on silent mode or GUI mode, restart with a Putty session.

17. Proceed to the Post installation procedure. For instructions, see Post Installation Steps after you install the Site Controller in Windows.

11.7 Installing Site Controller in Windows in Silent Mode

In silent mode installation method, the installation program reads the settings for your configuration from the properties file prior to installation. The installation program does not display any configuration options during the installation process.



The following sections describe how to install Agent Node server using the installation program in silent mode on Linux platforms. It is assumed that user have acquired the installation program and properties file from the FTP server.

Note

Confirm that the hardware and software configuration required for Site Controller

installation is in place.


When installing Agent Node in silent mode, the installation program uses the properties file for server (PanacesAgentNodeInstaller.properties) to determine which installation options should be implemented. You need to edit the respective properties file in which you specify the installation options that you want to invoke, while performing the Agents installation and then you can run the installation program in silent mode.

Perform the following steps to edit the properties files.

1. Get the files from the FTP server and copy properties files by running the following command:

cp AgentNode/PanacesAgentNodeInstaller.properties /tmp

cp AgentNode/SiteController.exe /tmp


vi /tmp/ PanacesAgentNodeInstaller.properties


PanacesAgentNodeInstaller.properties file:

Keyword Description

INSTALLER_UI Displays the mode of installation as ―silent‖.

MODIFY_SYSTEM_FILES=1

It modifies the following system files:


/etc/sysctl.conf

USER_INSTALL_DIR

Enter the path for the directory to install the

Site Controller Server software (default path

is /opt/panaces/ )

USER_INPUT_RESULT_PRIMARY_

PANACES_SERVER_IP Enter the IP address of the primary server.

USER_INPUT_RESULT_SECONDAR

Y_PANACES_SERVER_IP


server.



Keyword Description

PANACES_AGENT_NODE_ADDRES

S Enter the IP address of Local machine.

USER_INPUT_RESULT_SITE_CONT

ROLLER_IP=

Enter the IP address of Site Controller

Agent.

AGENTNODE_START_YES


automatically after the installation.

Enter 0 if you want to start the agent

manually. Set this property to manual as

there are some post installation steps.

4. Proceed to the Post installation procedure. For instructions, see Post Installation Steps after you install the Site Controller in Windows.

11.8 Post Installation Steps after you install the Site Controller in Windows

1. In Site Controller installation folder, perform the following steps:

a. Go to the location: $EAMSROOT/installconfig/

b. Open the SiteController.cfg file

c. Add the following property:


Note:




150.

2. Enter the value of the ACP keystore in the \installconfig\SiteController.cfg file.

For Example: panaces.acp.keystore=

Note

The value of the ACP keystore will be the path where ACP key store exists, which means

<Site controller installation folder>\installconfig\keystore\panacesACP.keystore. Enter

the path with a \\ for file separator, for example,

c:\\Sitecontroller\\installconfig\\keystore\\panacesACP.keystore

3. Enter the path of the truststore in the same SiteController.cfg file.

For Example: panaces.acp.truststore=

Note



This value of the ACP truststore will be the path where ACP trust store exists, which

means <Site controller installation folder>\installconfig\keystore\

panacesACP.truststore. Enter the path with a \\ for file separator, for example,

c:\\Sitecontroller\\installconfig\\keystore\\ panacesACP.truststore

Ensure to create your own truststore and keystore and use them as the corresponding values for the truststore and keystore.

11.9 Starting or Stopping Site Controller Manually

User can start, stop or view the status of the Site Controller manually by using the following methods:

Windows Command Prompt

Windows GUI

11.9.1 Using the Windows Command Prompt

You can start, stop, or view the status of the Site Controller by using the Windows Command Prompt.

11.9.1.1 Starting the Site Controller by using Windows Command Prompt

Complete the following steps to Start the Site Controller:

1. Log into the Site Controller Server.


3. To Start the Site Controller, run the following commands:

$EAMSROOT/bin>ActiveMQ.bat start

$EAMSROOT/bin>SiteController.bat start

$EAMSROOT/bin>WindowsOSAgent.bat start

11.9.1.2 Stopping the Site Controller by using Windows Command Prompt

Complete the following steps to Stop the Site Controller:



3. To Stop the Site Controller, run the following commands:

$EAMSROOT/bin>WindowsOSAgent.bat stop

$EAMSROOT/bin>SiteController.bat stop

$EAMSROOT/bin>ActiveMQ.bat stop

11.9.1.3 Viewing the Status of the Site Controller by using Windows Command

Prompt

Complete the following steps to View the Status of the Site Controller:




2. Enter in the $EAMSROOT/bin folder

3. To Start the Site Controller, run the following commands:

$EAMSROOT/bin>SiteController.bat status

$EAMSROOT/bin>ActiveMQ.bat status

$EAMSROOT/bin>WindowsOSAgent.bat status

11.9.2 Using the Windows GUI

You can start or stop the Site Controller by using the Windows GUI.

11.9.2.1 Starting the Site Controller by using the GUI

Complete the following steps to Start the Site Controller:

1. Click Start from Windows Task Bar

2. Click Run, and then, enter Services.msc in the Search Bar.

3. Press Enter.

4. Look for the service IBM RO ActiveMQ and select it. Right-click to see the options, navigate and then, click Start.

5. Look for the service IBM RO SiteController and select it. Right-click to see the options, navigate and then, click Start.

6. Look for the service IBM RO WindowsOSAgent and select it. Right-click to see the options, navigate and then, click Start.

11.9.2.2 Stopping the Site Controller by using the GUI

Complete the following steps to Stop the Site Controller:

1. Click Start from Windows Task Bar

2. Click Run, and then, enter Services.msc in the Search Bar.

3. Press Enter.

4. Look for the service IBM RO WindowsOSAgent and select it. Right-click to see the options, navigate and then, click Stop.

5. Look for the service IBM RO SiteController and select it. Right-click to see the options, navigate and then, click Stop.

6. Look for the service IBM RO ActiveMQ and select it. Right-click to see the options, navigate and then, click Stop.

11.10 Configuring End Points and Site Controller to use the PowerShell framework

Ensure to complete the following steps to enable PowerShell framework, on all the systems that have the Agents installed and on the systems that function as the Windows End Points (PR, DR, and Site Controller).

1. From the Start menu on your Windows system, enter PowerShell.



2. From the listed programs, navigate to Windows PowerShell and right-click and then, select Run as administrator.

3. In the Windows PowerShell command prompt, enter the following commands:

Enable-PSRemoting –Force

Set-Item wsman:\localhost\client\trustedhosts *

Restart-Service WinRM

11.11 Uninstalling Site Controller

This section describes the procedure to uninstall Site Controller in GUI mode and Silent mode.

11.11.1 Uninstalling Site Controller in GUI Mode

Perform the following steps to uninstall Agent Node in GUI mode:

1. Navigate to the location: $EAMSROOT\Bin and click UninstallerSiteController.bat

2. Navigate to the location: $EAMSROOT\UninstallerData

3. Select Uninstall IBM Resiliency Orchestration SiteController.exe, right-click, and then, select Run as administrator.

4. The Uninstall IBM Resiliency Orchestration Agent Node window displays, as shown in the following figure:


5. Click Uninstall.




Figure 36: Uninstall Complete Screen


11.11.2 Uninstalling Agent Node in Silent Mode

Perform the following steps to uninstall Agent Node in silent mode:

1. From the command prompt, go to the location: $EAMSROOT\Bin

2. Run the UninstallerSiteController.bat file

3. Run the following command to uninstall Site Controller.

$EAMSROOT\UninstallerData>Uninstall IBM Resiliency Orchestration SiteController.exe



12 Installing Agents on MS Windows Server

The agent software is packaged into multiple installation packages IBM Passport Advantage site. It contains all the binaries and packages to run the IBM Resiliency Orchestration agent software. This software installation involves installing the appropriate agent software.

Note

MS Windows OS Agent is automatically installed during installation of agents. IBM

Resiliency File Replicator is automatically installed during installation of IBM Resiliency

File Replicator Agent.

12.1 Prerequisites for Installing Resiliency Orchestration Agents

IBM Resiliency Orchestration Agent Software packages are available for each supported application, protection software and operating system. These agents are installed on the servers involved in the Disaster Recovery solution. The installer installs the IBM Resiliency Orchestration Agent Platform package, required for the agent software installation, on the same server. This installation is done automatically during agent installation. Ensure that you have local system administrative privilege during the installation.

For the installer to install the IBM Resiliency Orchestration Agent Platform package on MS Windows successfully, the following prerequisites must be fulfilled.

Note

Restarting MS Windows server may be required in certain cases and so, plan the

downtime of the MS Windows server where the agents are getting installed.

12.2 MS Windows Server Requirements

The server participating in the DR infrastructure needs to incorporate the following requirements:

a) Hardware / Software Requirements: The following are the Windows Server Hardware / Software requirements:

The server must have a minimum of 2 GB RAM.

C drive should have additional 10GB disk size for Agent Software

b) Logs Directory: There must be enough disk space allocated on the server to hold MSSQL transaction logs for up to 5 business days. Take the assistance of the consultant to create the directory size appropriately. This directory can reside on either direct attached storage, or external attached storage.

For Example: Assume that a log of 2MB is generated every 10 minutes. Then, 1.5GB of log

device size.



The replication of database dump, from primary server to remote server and vice versa, may be done manually either on tapes, or any other backup device. It is assumed that the server is configured with appropriate backup software to do the same. If the database dump size is small, the replication may be performed on WAN/LAN itself. In this case, backup software is not required.

If required, reboot the server after successfully completing the following operations:

12.3 Installation of supported JRE

For information on the supported JRE, refer to GPL Dependencies for Resiliency Orchestration under Pre-requisites of Section 1.

12.4 Host Machines with Virtual IP Address

If there is a virtual IP address for the host, or if the host is part of an OS Cluster,

add the entry PANACES_AGENT_NODE_ADDRESS=<IP Address of the Node> in

$EAMSROOT\installconfig\PanacesAgentGeneric.cfg. Using this entry, IBM Resiliency Orchestration Server will always communicate to all agents on this IP address. This could be the Virtual IP or the original IP assigned to the interface.

12.5 Specific Prerequisites

The following are the prerequisites for specific agents; ensure that these prerequisites are met before starting the agents‘ installation.

12.5.1 MSSQL Agent

If you have MSSQL 2000 installed, download the following MSSQL 2000 Jar Files from Microsoft site and put them in the %EAMSROOT%\lib folder.

Mssqlserver.jar

Msutil.jar

Msbase.jar

On Windows, after downloading the jar files, update the CLASSPATH in the System variables with the details of the downloaded jar files (An example for the jar file path: C:\Program Files\Microsoft SQL Server 2000 Driver for JDBC\lib). MSSQL Agent can be installed only after the CLASSPATH has been updated with the jar files.

If you have the MSSQL 2005 already installed, download the following MSSQL 2005 Jar File from Microsoft site and put them in the %EAMSROOT%\lib folder.

sqljdbc.jar

On Windows, after downloading the jar files, update the CLASSPATH in the System variables with the details of the downloaded jar files (An example for the jar file path: C:\Program Files\Microsoft SQL Server 2005 Driver for JDBC\lib). MSSQL Agent can be installed only after the CLASSPATH has been updated with the jar files.



12.5.2 Oracle Agent

Download following JDBC jar files for Oracle Agents and place them in the %ORACLE_ HOME%\jdbc\lib directory:

nls_charset12.jar

ojdbc14.jar

Oracle DG Agent

Download following JDBC jar files for Oracle Agents and place them in the %ORACLE_ HOME%\jdbc\lib directory:

nls_charset12.jar

ojdbc14.jar

Note

If there are some agents already installed and the user tries to install additional agents,

the installer will not continue with the installation. Install the additional agents in a

different location.

Important:

As a part of every agent installation, the OS agent will be installed automatically without

any user input. During the installation process, there will be an option to start the

installed agents automatically. These additional agents should not be started

automatically from the installer option, since the installer will start the new OS agent

also. After the installation is completed, the additional agent can be started from the

services panel.

12.6 Installation of Agents

This section outlines the steps to install all agents on Windows server. Additional steps that you must perform for specific agents are also included within.

Note

You must have administrator, root or equivalent privileges to install IBM Resiliency

Orchestration Agents.

To install the agents, perform the following steps:

1. Download the Agent Installer executable files from the IBM Passport Advantage site.

2. Files are available in the zipped format in the Agents folder. Extract Files from WindowsDRMAgents.zip for 32-bit Windows Operating Systems and Windows64DRMAgents.zip for 64-bit Windows Operating Systems.

3. Go to the extracted folder and double click the install.exe file.

Note

Following are the limitations for installing IBM Resiliency Orchestration Agents on

Windows:



Services can only be registered and started by users having local administrator permissions on the physical target machine, and not remotely.

If Services have to be registered and started from remote machines, such as Terminal Server, then the user must be an Administrator having necessary permissions to the registry and Agents\Windows\System32 directories.

Make sure that you have free space of approximately 700 MB in temp directory, before installation.

Disable the antivirus (if configured or enabled) before installation.

After executing the file, IBM Resiliency Orchestration Agent installation starts with the following screen.

Figure 37: IBM Resiliency Orchestration Agent Installer

After displaying the IBM Resiliency Orchestration Agent Installer screen, the Introduction window is displayed.



Figure 38: IBM Resiliency Orchestration Agents Installation on Windows

Server - Introduction

4. Go through the installation procedure and click Next. The Choose Install Folder window is displayed.


Server - Choose Install Folder




is C:\Program Files\panaces. It is recommended that you use the default path displayed.

6. Click Next. The Choose Agents - Windows window is displayed.


Server - Choose Agents - Windows

The list of agents available is displayed on the Choose Agents - Windows window.

7. Select the checkbox next to the specific agent to install that agent. You can choose to install any or all of the agents.

8. Click Next. The Choose Shortcut Folder window is displayed.




Server - Choose Shortcut Folder

9. Select an option to create a product icon in the required location. For example, select Other option button to create a product icon in a specific path, or select Don’t create icons button to avoid creating shortcut folders.

Note:

During installation, if In a new Program Group option is selected and if no name is

given for the program group, the option will be ignored and shortcuts will not be created.

Please make sure that the selected path has all the JDBC driver jar file.

10. Click Next. The Agent Configuration window is displayed.




Server - Agent Configuration

11. Depending on the agent you have selected for installation, perform the steps for the MSSQL Agent:

Enter MSSQL JDBC driver jar file location.

Click Choose button to select the jar file location.

12. Enter the IP addresses of the primary and secondary IBM Resiliency Orchestration servers and IBM Resiliency Orchestration Agent Node Address. In a non-NAT environment NAT IP address field should be left blank.

13. In a NAT environment, enter the primary and secondary Resiliency Orchestration server‘s public IP. Resiliency Orchestration Agent node address should be the public IP and NAT IP address should be the private IP of the server where you are installing.




Server - IBM Resiliency Orchestration IP Address Configuration

14. Click Next. Enter Site Controller IP Address if required.

Figure 44: IBM Resiliency Orchestration Site Controller IP Address

Configuration on Windows server





Server - Pre-Installation Summary


17. Click Install. The Installing IBM Resiliency Orchestration Agents window is displayed.


Server - Installing IBM Resiliency Orchestration Agents

Once the installation is complete, the Starting Agents window is displayed.




Server - Starting Agents

18. On the Starting Agents window, perform either of the following:



Note

The best practice is not to change the default value displayed on the Starting Agents

window.

19. Restart the agent machine, if the agents do not start after agent installation is complete.

When the installation is carried on silent mode or GUI mode, restart with a Remote Desktop session for Windows.

20. Click Next. The Install Complete window is displayed, indicating successful installation.




Server - Install Complete


22. Download GPL dependent binaries for Windows OS Agent.

Windows -32 BIT

installedlocation/bin/cyggcc_s-1.dll

installedlocation/bin/cygiconv-2.dll

installedlocation/bin/cygintl-8.dll

installedlocation/bin/cygwin1.dll

Windows-64-BIT

installedlocation/bin/cyggcc_s-1.dll

installedlocation/bin/cygiconv-2.dll

installedlocation/bin/cygintl-8.dll

installedlocation/bin/cygwin1.dll

23. Once the installation is complete, verify the individual agent service installation manually, by clicking the Services icon on the Administrative tools group in Control Panel.

Note



For MS Exchange solution, Remote Agent installation is also supported. Perform the

following:

Remote agent is supported, however, while agent process runs on Agent Node

(Resiliency Orchestration Server), the IBM Resiliency Orchestration MS Exchange

Extensions (powershell extensions) needs to be deployed on the client servers. To

install the extensions, the user has to install the MS Exchange agent (local agent kit).

During installation, do not start any agents or after installation disable the installed

agent services (from service list).

24. Note that there will be not separate installer to install extensions as the number of installations is always going to be very few (only one or two). Hence we will reuse the agent installer itself to deploy local agent as well as Extensions for remote agent.

25. The traditional remote agent model where everything is deployed and executed on agent node (or Resiliency Orchestration Server) is not supported due to security restrictions by MS Domain Management and powershell.

26. Have to import replication workflow from $EAMSROOT/workflows/MSExch/MSExchReplicationInfo_Remote.xml

27. When the installation is carried on silent mode or GUI mode, restart with a Remote Desktop session for Windows.

12.7 Debugging Agent Installation on Windows Server

To debug the installation on Windows server, and to view or capture the debug output from a Win32 installer, keep the CTRL key pressed immediately after launching the installer, until a console window appears. Before exiting the installer, copy the console output to a text file for later review.

12.8 Starting and Stopping of Agent Services on Windows Server

Note

Make sure that the clock settings on the IBM Resiliency Orchestration server and the

agent server are in sync.

Perform the following steps to view the agents installed on the server:

1. Go to Control Panel.

2. Click Administrative tools on the Control Panel.

3. Click the Services icon on the Administrative Tools window. You can see the agents installed on the server.

The following are the agents supported by IBM Resiliency Orchestration on Windows server. Depending on the installed agents, the services window will show some of the following options:

Panaces Agent for MS Windows OS

Panaces Agent for IBM Resiliency File Replicator



Panaces Agent for MS SQL Server

IBM Resiliency File Replicator

Panaces Agent for Oracle

Panaces Agent for Oracle DataGuard

SRDF Agent

4. Right-click on the respective service in the Services window and perform the following steps:

Select Start to start the service.

Select Stop to stop the service.

Select Restart to restart the service.



13 Installing Agents on Solaris Server

This software is available on the IBM Passport Advantage site. The Agents.zip when unzipped will result in the Agents folder contain IBM Resiliency IBM Resiliency File Replicator, SRS, and Sybase Agents. It contains all the binaries and packages to run IBM Resiliency Orchestration agents software. This software installation involves installing IBM Resiliency Orchestration agents‘ binaries, and a few miscellaneous software binaries.

Note

Solaris OS Agent is automatically installed during the installation of agents. IBM

Resiliency File Replicator is automatically installed during the installation of IBM

Resiliency IBM Resiliency File Replicator Agent.


IBM Resiliency Orchestration Agent Software packages are available for each supported application, protection software and operating system. These agents are installed on the servers involved in Disaster Recovery solution. The installer installs IBM Resiliency Orchestration Agent Platform package, required for the installation of agent software, on the same server. This installation happens automatically during agent installation.

For the installer to install IBM Resiliency Orchestration Agent Platform package successfully on Solaris, the following prerequisites must be fulfilled.

13.2 Solaris Server Requirements

The server participating in the DR infrastructure must incorporate the following requirements.

Hardware / Software Requirements: The following are the Solaris Server Hardware / Software requirements:


If the server is running Sybase, it must have Sybase ASE 12.5 or 15 data center edition.

Set the Solaris machine time to a desired time zone. If the desired time zone to which Solaris machine is to be set is not available, import the time zone from another Solaris machine into /usr/share/lib/zoneinfo directory.

Note

Ensure that the time settings on IBM Resiliency Orchestration server and the agent

server are in sync.

Logs Directory: The server should have enough allocated disk space to hold Sybase transaction logs, for up to 5 business days. Take the assistance of a



consultant to size the directory appropriately. This directory can reside on either direct attached storage, or external attached storage.

For Example: Consider that a log of 2MB is generated every 10 minutes. This 1.5GB of log device

size.

The replication of database dump from primary server to secondary server and vice versa must be manually done, either on tapes, or on any other backup devices. It is assumed that the server is configured with appropriate backup software to do the same. If the database dump size is small, and primary and remote servers are connected over LAN, the replication may be performed on LAN itself. In this case, backup software is not required.


If there is a virtual IP address for the host or if the host is part of an OS Cluster, then add the following entry in $EAMSROOT/installconfig/PanacesAgentGeneric.cfg

PANACES_AGENT_NODE_ADDRESS=<IP Address of the Node>.

Using this entry, IBM Resiliency Orchestration Server always communicates to all agents on this IP address. This could be a Virtual IP or the original IP assigned to the interface.


This section outlines the steps to install all agents on Solaris server. Additional steps that you must perform for specific agents are also included within.

Note




1. Download the Agent Installer executable files from the IBM Passport Advantage site.

2. Files are available in the zipped format in the Agents folder. Extract Files from SolarisIntel_DRMAgent_7.1.zip for Intel based architecture and SolarisSparc_DRMAgent_7.1.zip.

3. Goto the extracted folder and execute the following command: (Use whichever is applicable)

sh install.bin (or) ./install.bin

Note

Make sure that you have free space of approximately 700 MB in /tmp directory,

before executing the above command.

If server hardening is performed, you need to mention sudo prior to the above

command.



4. After executing the command IBM Resiliency Orchestration Agent installation starts with the following screen.


5. After displaying the IBM Resiliency Orchestration Agent Installer screen, the Introduction window is displayed.



Figure 50: IBM Resiliency Orchestration Agents Installation on Solaris





7. Select a path to install the software by clicking Choose. Alternatively, you can click Restore Default Folder to restore the default path. The default path is /opt/panaces. It is recommended that you use the default path displayed.

8. Click Next. The Choose Agents - Solaris window is displayed.




Server - Choose Agents - Solaris

The list of agents available is displayed on the Choose Agents - Solaris window.

9. Select the checkbox next to the specific agent to install that agent. You can choose to install any or all of the agents.

10. Click Next. The Choose Link Folder window is displayed.




Server - Choose Link Folder

11. Choose a path for creating links in the Choose Link Folder window.

Select In your home folder for creating a link in the home folder.

Select Other to enter a specific path.

Select Don’t create links for not creating shortcut folders.




13. Enter Sybase JDBC driver jar file location.

14. Click the Choose button to select the jar file location.

Note

Confirm that the selected path has all the JDBC driver jar files.

15. Click Next. For Sybase agent, enter the Sybase Admin login ID for the Sybase database.





16. Enter the IP addresses of the primary and secondary IBM Resiliency Orchestration servers & IBM Resiliency Orchestration Agent Node Address. In a non-NAT environment NAT IP address field should be left blank.

17. In a NAT environment, provide the Primary and secondary Resiliency Orchestration server‘s public IP. Resiliency Orchestration Agent node address should be the public IP & NAT IP address should be the private IP of the server where you are installing.





Note

To change Nat IP configuration after installation or to troubleshoot the issue refer to NAT

IP in the Troubleshooting section.





Configuration on Solaris Server










30. Once the installation is complete, the Starting Agents window is displayed.








Note


window.


33. Click Next. The Install Complete window is displayed, indicating the successful installation.






Note

After the agent installation, log off and log in again to your computer to effect the IBM

Resiliency Orchestration environment variables settings permanently.

When the installation is carried on silent mode or GUI mode, restart with a Putty session for Unix and Remote Desktop session for Windows.

13.5 HA Configuration

Post Metadata replication, slave server status can display the following error in slave server:

Unable to load replication GTID slave state from mysql.gtid_slave_pos:

Table 'mysql.gtid_slave_pos' doesn't exist

In case this error is displayed, run the following command in master and slave server:

sudo mysql_upgrade

13.6 Debugging Agent Installation on Solaris Server

To debug the Agent installation on Solaris server, refer the log entries made in the file PanacesAgentdebug.log. The file is located in /opt directory.



13.7 Starting and Stopping Agents on Solaris Server

The script for starting and stopping of the agents resides at the following location on the Solaris server:

/etc/rc3.d

13.7.1 Solaris OS Agent

The script S99PanOSAgt starts the service automatically when the server is rebooted.

Alternatively, the following steps can be used to start or stop the agent manually -

Go to $EAMSROOT and enter the following command:

# nohup ./SolarisOSAgent.sh start &

# nohup . /SolarisOSAgent.sh stop &

Note

Java is not bundled with the installer for Intel Solaris systems. Instead, the system uses

Java installed with the Operating System (OS).

For Intel Solaris machines, the following steps are performed to use Java installed with the OS:

Rename installer bundled java

mv /opt/panaces/jre /opt/panaces/orig_jre

Create softlink to the os java :

ln -s /usr/bin/java/jre /opt/panaces/jre

Note that $EAMSROOT is /opt/panaces as explained in this guide. This is the default location. However, you can install the agents at any other location.

13.7.2 PFR Agent

The script S99PanPFRAgt starts the service automatically when the server is rebooted.



# nohup ./PFRAgent.sh start &

# nohup ./PFRAgent.sh stop &

13.7.3 Sybase Agent

The script S99PanSybAgt starts the service automatically when the server is rebooted.





# nohup ./SybaseAgent.sh start &

# nohup ./SybaseAgent.sh stop &

13.7.4 SRS Agent

The script S99PanSRSAgt starts the service automatically when the server is rebooted.



# nohup ./SRSAgent.sh start &

# nohup ./SRSAgent.sh stop &

13.7.5 Oracle Agent

The script S99PanOraAgt starts the service automatically when the server is rebooted.



# nohup ./OracleAgent.sh start &

# nohup ./OracleAgent.sh stop &

13.7.6 TrueCopy

The script S99PanTrueCopyAgt starts the service automatically when the server is rebooted.



$nohup ./TrueCopyAgent.sh start &

$nohup ./TrueCopyAgent.sh stop &

13.7.7 Listing the Running Agents

Enter the following command to check whether the agents installed have been started or not:

# ps –ef | grep –i LAX

This command will list the names of the agents that have been started.



14 Installing Agents on Linux Server

This software is available on the IBM Passport Advantage site and can be accessed by the customer with the given credentials. This software installation involves installing IBM Resiliency Orchestration agents‘ binaries, and a few miscellaneous software binaries.

Note

Linux OS Agent is automatically installed during installation of agents. IBM Resiliency File

Replicator is automatically installed during installation of IBM Resiliency IBM Resiliency

File Replicator Agent.


This section outlines the steps to install all agents on Linux (RHEL 7) server. Additional steps that you must perform for specific agents are also included within.

Note




1. Download the server binaries from the IBM Passport Advantage site.

2. Browse through IBM Resiliency Orchestration software from the downloaded path and go to the folder to the folder Agent/Linux_DRMAgent_7.1.zip for 32-bit Linux Operating Systems or Agents/ Linux64_DRMAgent_7.1.zip for 64-bit Linux Operating Systems.

3. Execute the following command: (Use whichever is applicable)


Note




command.

35. After executing the command, IBM Resiliency Orchestration Agent installation starts with the following screen.

Note

If the RHEL version is not 7, then a warning message will be displayed on the screen.

However, the user can continue with the installation.




36. After displaying the IBM Resiliency Orchestration Agent Installer screen, the Introduction window is displayed

Figure 63: IBM Resiliency Orchestration Agents Installation on Linux








39. Click Next. The Choose Agents - Linux window is displayed.




Server - Choose Agents - Linux

40. The list of agents available is displayed on the Choose Agents - Linux window. Select the checkbox next to the specific agent to install that agent. The user can choose to install any or all of the agents.







Click Don’t create links for not creating shortcut folders.






44. Enter the Oracle home directory location. Click Choose button to select the file location.

45. Click Next. Enter the Oracle JDBC driver jar directory. Click Choose button to select the jar file location.

Note






46. Click Next. Enter the Oracle Java lib directory location. Click the Choose button to select the file location





47. Enter the IP addresses of the primary and secondary IBM Resiliency Orchestration servers and IBM Resiliency Orchestration Agent Node Address. In a non-NAT environment NAT IP address field should be left blank.

In a NAT environment Primary and secondary Resiliency Orchestration server‘s public IP should be given. Resiliency Orchestration Agent node address should be the public IP and NAT IP address should be the private IP of the server where you are installing.



Note

14.2 To change Nat IP configuration after installation or to troubleshoot Nat IP, refer to Troubleshooting HA Configuration




In case this error is displayed, run the following command in Master and Slave server:

sudo mysql_upgrade

NAT IP on 243.



48. Click Next. Enter Site Controller IP Address, if required.


Configuration on Linux server





Server - Pre - Installation screen













Note


window.

Restart the agent machine, if the agents do not start after agent installation is

complete.







56. Download GPL dependent binaries for Resiliency Orchestration, MySQL Agent.

My SQL

EAMSROOT/lib/mysql-connector-java-5.1.20-bin.jar

Note

After the agent installation, log off and log in again to your computer to effect IBM


When the installation is carried on silent mode or GUI mode, log off and log in with a

Putty session for Unix as well as for Windows

14.3 Debugging Agent Installation on Linux Server

To debug the Agent installation on Linux server, refer the log entries made in the

file PanacesAgentDebug.log. The file is located in the /opt directory.

14.4 Starting and Stopping Agents on Linux Server

The script for starting and stopping agents that reside at the following location on the Linux server:

/etc/rc3.d



14.4.1 Linux OS Agent




# nohup ./LinuxOSAgent.sh start &

# nohup ./LinuxOSAgent.sh stop &


14.4.2 PFR Agent






14.4.3 Oracle Agent






14.4.4 Oracle Data Guard Agent

The script S99PanOraAgt starts the service automatically when the server is rebooted. Alternatively, the following steps can be used to start or stop the agent manually:

1. Go to $EAMSROOT and enter the following command to start the agent manually:

# nohup ./dataguardagent.sh start &

57. Enter the following command to start the agent manually:

# nohup ./dataguardagent.sh stop &



14.4.5 PostgreSQL Agent

The script S99PanPostgresAgt starts the service automatically when the server is rebooted.



# nohup ./PostgresAgent.sh start &

# nohup ./PostgresAgent.sh stop &

14.4.6 Listing the Agents that are Running






15 Installing Agents on HPUX Server

This software is available on the IBM Passport Advantage site. It contains all the binaries and packages to run IBM Resiliency Orchestration agents software. This software installation involves installing IBM Resiliency Orchestration agents‘ binaries, and a few miscellaneous software binaries.

Note

HPUX OS Agent is automatically installed during installation of agents. IBM Resiliency

File Replicator is automatically installed during installation of IBM Resiliency File

Replicator Agent. IBM Resiliency File Replicator replication may not work on Itanium

machines.

1. Install gnu-tar for HPUX for Itanium:

58. Download and manually install the GNU tar files.

59. Create the following soft links, after the installation of gnu tar:

ln -s <agent_install_dir>/tool/usr/local/lib/libiconv.sl

/usr/local/lib/libiconv.sl

ln -s <agent_install_dir>/tool/usr/local/lib/libintl.sl

/usr/local/lib/libintl.sl


This section outlines the steps to install all agents on HPUX server. Additional steps that you must perform for specific agents are also included within.

Note

You must have root or root equivalent privileges to install IBM Resiliency Orchestration

Agents.



60. Browse through IBM Resiliency Orchestration software from the downloaded path and go to the folder Agent/HPUX_DRMAgent_7.1.zip.

61. Goto the extracted folder and execute the following command: (Use whichever is applicable)


Note






command.






Figure 77: IBM Resiliency Orchestration Agents Installation on HPUX








66. Click Next. The Choose Agents - HPUX window is displayed.


Server - Choose Agents - HPUX

67. The list of agents available is displayed on the Choose Agents - HPUX window. Select the checkbox next to the specific agent to install that agent. You can choose to install any or all of the agents.















71. Enter the Oracle home directory location. Click Choose button to select the file location.

72. Click Next. Enter the Oracle JDBC driver jar directory. Click Choose button to select the jar file location.

Note






73. Click Next. Enter the Oracle Java lib directory location. Click the Choose button to select the file location






In a NAT environment Primary and secondary Resiliency Orchestration server‘s public IP should be given. Resiliency Orchestration Agent node address should be the public IP & NAT IP address should be the private IP of the server where you are installing.


Server - IBM Resiliency Orchestration IP Address configuration

Note

15.2 To change Nat IP configuration after installation or to trouble shoot refer Troubleshooting for HA Configuration





sudo mysql_upgrade

NAT IP on 243.




Configuration on HPUX server



















Note


window.


82. Click Next. The Install Complete window is displayed, indicating the successful installation.






Note

After the agent installation, log off and log in again to your computer to effect the IBM


When the installation is carried on silent mode or GUI mode, restart with a Putty session for Unix and Remote Desktop session for Windows.

15.3 Debugging Agent Installation on HPUX Server

To debug the Agent installation on HPUX server, refer to the log entries made in

the file PanacesAgentDebug.log. The file is located in the /opt directory.

15.4 Starting and Stopping Agents on HPUX Server

15.4.1 HPUX OS Agent

The following steps can be used to start or stop the agent manually -


# nohup ./HPUXOSAgent.sh start &

# nohup ./HPUXOSAgent.sh stop &




15.4.2 PFR Agent





15.4.3 Oracle Agent








# nohup ./DataGuardAgent.sh start &

# nohup ./DataGuardAgent.sh stop &





16 Installing Agents on AIX Server This software is available on the IBM Passport Advantage site. It contains all the binaries and packages to run IBM Resiliency Orchestration agents software. This software installation involves installing IBM Resiliency Orchestration agents‘ binaries, and a few miscellaneous software binaries.

Note

AIX OS Agent is automatically installed during installation of agents. IBM Resiliency File

Replicator is automatically installed during installation of IBM Resiliency File Replicator

Agent.


IBM Resiliency Orchestration Agent Software packages are available for each supported application, protection software, and operating system. These agents



are installed on the servers involved in the Disaster Recovery solution. The installer installs the IBM Resiliency Orchestration Agent Platform package, required for agent software to be installed, on the same server. This installation happens automatically during agent installation.

For the installer to install IBM Resiliency Orchestration Agent Platform package successfully on AIX, the following prerequisites must be fulfilled.

16.2 AIX Server Requirements

The server participating in the DR infrastructure must incorporate the following requirements:

Hardware / Software Requirements: The following are the AIX Server Hardware / Software requirements:


Confirm that the AIX machine is set to a desired time-zone.

AIX 6.1 TL7 (6100-07) or later is required to work with Java 8. For details, refer to https://www-01.ibm.com/support/docview.wss?uid=isg3T1022644#requirements

Note

Confirm that the time settings on the IBM Resiliency Orchestration server and the agent

server are in sync.


If there is a virtual IP address for the host or if the host is part of an OS Cluster, add the

following entry in $EAMSROOT/installconfig/PanacesAgentGeneric.cfg

PANACES_AGENT_NODE_ADDRESS=<IP Address of the Node>. Using this entry, IBM

Resiliency Orchestration Server always communicates to all agents on this IP address.

This could be a Virtual IP or the original IP assigned to the interface.


This section outlines the steps to install all agents on AIX server. Additional steps that you must perform for specific agents are also included within.

Note





2. Browse through IBM Resiliency Orchestration software from the downloaded path and go to the folder to the folder Agent/AIX_DRMAgent_7.1.zip.

3. Go to the extracted folder and execute the following command: (Use whichever is applicable)

https://www-01.ibm.com/support/docview.wss?uid=isg3T1022644#requirements




Note

Ensure that you have free space of approximately 700 MB in /tmp directory, before

executing the above command.


command.






Figure 91: IBM Resiliency Orchestration Agents Installation on AIX








88. Click Next. The Choose Agents - AIX window is displayed.


Server - Choose Agents - AIX

89. The list of agents available is displayed on the Choose Agents - AIX window. Select the checkbox next to the specific agent to install that agent. You can choose to install any or all of the agents.






91. Choose a path for creating links on the Choose Link Folder window.









93. Enter the DB2 Instance user login ID. Click Next.

Note

If PFR agent is select, then installer skips this step and displays IBM Resiliency

Orchestration Server IP Address Configuration window as PFR Agent does not require

any configuration.






In a NAT environment Primary and secondary Resiliency Orchestration server‘s public IP should be given. Resiliency Orchestration Agent node address should be the public IP & NAT IP address should be the private IP of the server where you are installing

Note

16.5 To change Nat IP configuration after installation or to troubleshoot refer Troubleshooting HA Configuration





sudo mysql_upgrade

NAT IP on 243.




Server - IBM Resiliency Orchestration IP Address configuration





Configuration on AIX server










Note


window.






Note

After the Agent installation, log off and log in again to your computer to effect the IBM


When the installation is carried on silent mode or GUI mode, restart with a Putty session for UNIX and Remote Desktop session for Windows.

16.6 Starting and Stopping of Agents on AIX Server

The script for starting and stopping of the agents resides at the following location on AIX server:

/etc/rc.d/rc2.d

16.6.1 AIX OS Agent




# nohup ./AIXOSAgent.sh start &

# nohup ./AIXOSAgent.sh stop &


16.6.2 PFR Agent






16.6.3 Oracle Agent









The script S99PanOraAgt starts the service automatically when the server is rebooted. Alternatively, the following perform the following steps to start or stop the agent manually:

1. Go to $EAMSROOT and enter the following command to start the agent manually:

# nohup ./DataGuardAgent.sh start &

104. Enter the following command to stop the agent manually:

# nohup ./DataGuardAgent.sh stop &







17 Installing Resiliency Orchestration Advanced Reporter

IBM Advanced Reporter is the licensed feature. You can install it in GUI mode only. It is supported only in Linux platform, to be installed on Resiliency Orchestration Server.

17.1 Prerequisite

IBM Resiliency Orchestration server should be already installed in the machine, else installer will display an error and quit.

You can install the Resiliency Orchestration Advanced Reporter in the following methods:

Installing by using the GUI. For instructions, see Installing Advanced Reporter

in GUI Mode.

Installing by using the Silent Mode. For instructions, see Installing the

Advanced Reporter in Silent Mode.

17.2 Installing Advanced Reporter in GUI Mode

To install the advanced reporter, perform the following steps. The commands specified in the following points must be provided at the command prompt:

1. Download the Advanced Reporter binaries from the IBM Passport Advantage site.

105. IBM Resiliency Orchestration Advanced Reporter can be installed only if you log in as Root user. Go to Advanced Reporter folder and execute the following command.


Note

If server hardening is performed, you need to mention sudo prior to the above command.

106. After executing the command IBM Resiliency Orchestration Advanced Reporter installation starts with the following screen.



Figure 100: IBM Resiliency Orchestration Advanced Reporter Installer

A warning message is shown if Linux version is not RHEL 5 or RHEL 6. User can still Continue.

107. After displaying the IBM Resiliency Orchestration Advanced Reporter Installer screen, the MariaDB root password window is displayed.

108. Enter password for MariaDB root user or leave it blank if there is no password.

Warning message is shown if MariaDB version is not 10.1.17 or 10.1.19. User can

still Continue.

Note

Click the Cancel button to quit the installation.

109. Click Next. The Tomcat Home window is displayed.

110. Click Choose… to browse and select the location of Tomcat.



Figure 101: IBM Resiliency Orchestration Advanced Reporter Installation

- Tomcat Path

111. When Tomcat is located and then selected, the path appears in the Please Choose a Folder: box in Tomcat Home screen. Click Next, the Introduction window is displayed.


- Introduction

112. Click Next. The Choose IBM Resiliency Orchestration Server Folder window is displayed.



113. Select the path where IBM Resiliency Orchestration Server software is installed. Click Choose… to select the installation path. The default path is /opt/panaces.

Note

If the IBM Resiliency Orchestration server is not installed in the given path, an error

message is displayed.



- Pre-Installation Summary

Note

Read through the pre-installation summary to verify the inputs provided. If you want to

change the inputs, click Previous and modify.

115. Click Install. The Installing Sanovi Advanced Reporter window is displayed.

116. IBM Resiliency Orchestration Advanced Reporter Installation automatically uploads the IBM Resiliency Orchestration Advanced Reporter schema. If it already exists, a dialog box is displayed as shown below, that confirms if you want to drop the existing IBM Resiliency Orchestration Advanced Reporter schema and replace it through installer.

117. Click No to continue the installation with the existing schema. Click Refresh to drop and recreate the IBM Resiliency Orchestration Advanced Reporter schema.



118. After the installation is complete, the Installation Completed window is displayed, indicating successful installation.


17.3 Configuring Openreports

Perform the following steps to configure Openreports:

1. Download openreports3.2.tar.gz $TOMCAT_HOME of Resiliency Orchestration Server from sourceforge content server (https://sourceforge.net/projects/gnu-utils/files/binaries/)

The tarball contains openreports.war, mariadb-java-client-1.1.8.jar,jasperreports-4.5.0.jar & jasperreports-javaflow-4.5.0.jar files.

120. Confirm that the user of openreports3.2.tar.gz file has Tomcat permissions, if the user does not have Tomcat permissions, change the Tomcat permissions (Tomcat user and Tomcat user group) manually.

121. Remove existing openreports.war(which is 0kb) file and open reports folder if exists already.

122. Untar openreports3.2.tar.gz using below commands

cd $TOMCAT_HOME; tar -xvzf openreports3.2.tar.gz

123. After untaring openreports3.2.tar.gz, openreports/WEB-INF/lib structure is created under $TOMCAT_HOME/webapps/ along with the following jar files: mariadb-java-client-1.1.8.jar,jasperreports-4.5.0.jar & jasperreports-javaflow-4.5.0.jar

124. Rename the existing openreports folder as openreports_bak

125. Prior to copying openreports.war, change the permission of $TOMCAT_HOME /webapps/openreports/WEB-INF to 757 temporarily.

126. Copy $TOMCAT_HOME/openreports.war to $TOMCAT_HOME/webapps. Revert the permission of $TOMCAT_HOME /webapps/openreports/WEB-INF when you have copied openreports.war.

127. Unzip the openreports.war at $TOMCAT_HOME/webapps by executing the following command if the TOMCAT service does not unzip openreports.war

unzip $TOMCAT_HOME/webapps/openreports.war -d openreports

128. Delete the jar files by executing the following command.

rm -f WEB-INF/lib/jasperreports-3.5.1.jar WEB-INF/lib/jasperreports-3.5.1-javaflow.jar

129. Copy mariadb-java-client-1.1.8.jar,jasperreports-4.5.0.jar & jasperreports-javaflow-4.5.0.jar files from $TOMCAT_HOME/webapps/openreports_bak/WEB-INF/lib to $TOMCAT_HOME/webapps/openreports/WEB-INF/lib

130. Delete the openreports_bak folder.

131. Go to $EAMSROOT/lib.




132. Unzip openreports_dependencies.zip by executing the following command:

unzip openreports_dependencies.zip -d openreports_dependencies

133. After executing the above command, openreports_dependencies folder will be created under /$EAMSROOT/lib

134. copy classes folder from $EAMSROOT/lib/openreports_dependencies/WEB-INF to $TOMCAT_HOME/webapps/openreports/WEB-INF

135. copy etl.jar from $EAMSROOT/lib/openreports_dependencies/WEB-INF/lib to $TOMCAT_HOME/webapps/openreports/WEB-INF/lib

136. Login to mysql by executing the following commands at mysql prompt

use advancedreporter;

update REPORT_DATASOURCE set DRIVER='org.mariadb.jdbc.Driver';

137. Restart IBM Resiliency Orchestration services to access open reports.

17.4 Installing the Advanced Reporter in Silent Mode

In Silent mode installation method, the installation program reads the settings of the previous configuration from the .properties file that the user has created prior to installation. The installation program does not display any configuration options during the installation process.

The following sections describe how to install IBM Resiliency Orchestration Advanced Reporter, using the installation program in silent mode on Linux platform. It is assumed that the user has acquired the installation program from the IBM Passport Advantage site.


Before the user can run the installation program for Advanced Reporter in Silent mode, the properties file must be edited as per the following instructions.

To edit PanacesServerInstaller.properties file:

1. Get the Advanced Reporter Installer binary and PanacesServerInstaller.properties file from the IBM Passport Advantage site and copy it to /tmp folder.

cp Server/PanacesServerInstaller.properties /tmp/

cp AdvancedReporter/install.bin /tmp


vi /tmp/PanacesServerInstaller.properties

139. Modify the MariaDB_ROOT_PASSWORD to modify MariaDB root user password.



17.4.2 Installing Resiliency Orchestration Advanced Reporter on Linux

Perform the following steps to install Advanced Reporter on Linux system.

1. Log on to Linux system.

2. Navigate to the directory that contains the installation file.

3. Launch the installation by entering the following command:

/tmp/install.bin –f /tmp/PanacesServerInstaller.properties

Note

To verify the Advanced Reported installation was successful, go to $EAMSROOT and

verify that the reports folder is created and contains the required files.



18 Installing IBM Resiliency Orchestration Server OVA

This chapter outlines the procedures for installing the IBM Resiliency Orchestration Server OVA.

IBM Resiliency Orchestration Server OVA software is delivered as the following file:

ResiliencyOrchestration_OVF10.ova: IBM Resiliency Orchestration Virtual Appliance for VMware

18.1 Minimum System Requirements

The following is the minimum system requirements for IBM Resiliency Orchestration server.

2 vCPU

8 GB Memory

100 GB Hard Disk

18.2 Assumptions

It is assumed that the administrator who is installing and configuring IBM Resiliency Orchestration

Software is familiar with administering Cisco UCS Director Software including restarting UCS

Director services by accessing the UCS Director shell.

18.3 Installing Resiliency Orchestration Server Virtual Appliance for VMWare

18.3.1 Prerequisites

You need administrator privileges to connect to VMware VSphere

If you do not want to use DHCP, you need the following information: IP address, subnet mask, and default gateway.

18.4 Installation Procedure

1. Login to vCenter using the VMware vSphere Client

2. In the Navigation pane, choose the Data Center for IBM Resiliency Orchestration server deployment.

3. Choose File >Deploy OVF Template.

4. The Deploy OVF Template window appears.



5. In the Source pane, browse to the location where SanoviCC_OVF10.ova is located, choose the file, and click Open.

6. In the OVF Template Details pane, verify the details and click Next.

7. In the End User License Agreement pane, read the license agreement, and click Accept.

8. In the Name and Location pane, enter the name for the VM and choose the Data Center where IBM Resiliency Orchestration should be deployed

9. In the Host/Cluster pane, choose the required host, cluster, or resource pool, and click Next.

10. In the Datastore pane, choose the location to store IBM Resiliency Orchestration VM files, and click Next.

11. In the Disk Format pane, choose one of the following radio buttons and click Next to create disks:

Thin Provisioned format—To allocate storage on demand as data is written to disk.

Thick Provisioned (Lazy Zeroed) format —To allocate storage immediately in thick format.

Thick Provisioned (Eager Zeroed) format —To allocate storage in thick format. It might take longer

140. In the Network Mapping pane, choose your network and click Next.

141. In the IP Address Allocation pane, leave the fields blank for DHCP, or enter the values for static IP

142. Click Next.

143. In the Ready to complete pane, verify the options selected, and click Finish.

144. Power on the VM once the upload is completed.

Note

The above steps for Deployment can be used for SanoviSiteController.ova which includes

Sanovi Agent Node and Site Controller binaries.



19 Installing Resiliency Orchestration Site Dashboard

IBM Resiliency Orchestration Site Dashboard is the licensed feature. You can install it in GUI mode only. It is supported only in Linux platform, to be installed on Resiliency Orchestration Server.

19.1 Prerequisites

The following are the prerequisites for installing Resiliency Orchestration site dashboard:

IBM Resiliency Orchestration server should be already installed in the machine, else installer will display an error and quit.

The Google map API key has to be generated to use google maps. Refer to https://developers.google.com/maps/premium/prelaunch-checklist for details.

19.2 GUI Mode Installation of Resiliency Orchestration Site Dashboard

You need to perform the following steps to install the site dashboard:

1. Download the Site Dashboard binaries from the IBM Passport Advantage site.

145. IBM Resiliency Orchestration Site Dashboard can be installed only if you log in as Root user. Run the following command in the Site Dashboard folder.


Note

If server hardening is performed, you need to mention sudo prior to the above command.

146. After executing the command, IBM Resiliency Orchestration Site Dashboard installation starts with the IBM Resiliency Orchestration Site Dashboard Introduction window is displayed as shown in the following figure:



Figure 104: IBM Resiliency Orchestration Site Dashboard Introduction

147. After displaying the IBM Resiliency Orchestration Site Dashboard Introduction screen, the IBM Resiliency Orchestration Software License Agreement window is displayed as shown in the following figure:

Figure 105: IBM Resiliency Orchestration Site Dashboard - MySQL root

password

Note

Click the Cancel button to quit the installation.

148. Click Next. The Choose Tomcat home Folder window is displayed as shown in the following figure:



Figure 106: IBM Resiliency Orchestration Site Dashboard – Choose Tomcat

Home

149. Click Choose… to browse and select the location of Tomcat.

150. Click Next. The IBM Resiliency Orchestration IP Address window is displayed as shown in the following figure:

Figure 107: IBM Resiliency Orchestration Site Dashboard – IP address

151. Enter the IP address of the current machine.

152. Click Next. The IBM Resiliency Orchestration Google Apis Key window is displayed as shown in the following figure:



Figure 108: IBM Resiliency Orchestration Site Dashboard – Google Apis

Key

153. Click Next. The IBM Resiliency Orchestration Pre-Installation Summary screen is displayed as shown in the following figure:

Figure 109: IBM Resiliency Orchestration – Pre-Installation Summary

Note

Read through the preinstallation summary to verify the inputs provided. If you want to

change the inputs, click Previous and modify.

154. Click Install. The IBM Resiliency Orchestration Installing Site Dashboard window is displayed.



Figure 110: IBM Resiliency Orchestration - Installing Site Dashboard

155. After the installation is complete, the IBM Resiliency Orchestration Installation Completed window is displayed indicating successful installation.

Figure 111: IBM Resiliency Orchestration Site Dashboard – Installation

Completed


20 Installing Resiliency Orchestration Using

Silent Mode Installation In Silent mode installation method, the installation program reads the settings for your configuration from the properties file that you modify prior to installation. The



installation program does not display any configuration options during the installation process. Silent mode installation is supported on Windows, Linux, Solaris, HPUX and AIX platforms.

The following sections describe how to install IBM Resiliency Orchestration, using the installation program in silent mode on Windows, Linux, Solaris, HPUX and AIX platforms. It is assumed that you have acquired the installation program from the IBM Passport Advantage site.

Note

Confirm that the hardware and software configuration required for IBM Resiliency

Orchestration installation is in place.

20.1 Editing Properties File

When you install IBM Resiliency Orchestration in Silent mode, the installation program uses the .properties file for server (PanacesServerInstaller.properties) as well as agents (PanacesAgentsInstaller.properties), to determine which installation options should be implemented.

Before you run the installation program in Silent mode, you must edit the respective properties file in which you specify the installation options that you want to invoke, while performing the IBM Resiliency Orchestration Server and Agents installation.

Perform the following steps to edit the properties files:

1. Download the binaries and properties files from the FTP server to a location on the intended Resiliency Orchestration server, assuming binary file and property files are available in /opt/Server and the logged in user has sudo permissions equivalent to root


cd /opt/Server

sudo vi PanacesServerInstaller.properties


20.1.1 PanacesServerInstaller.properties file



MODIFY_SYSTEM_FILES=1 It modifies system files, i.e.


/etc/sysctl.conf

KEYSTORE_FILE_PATH Add the keystore path.

For example:




/opt/panaces/installconfig/keystore/sanovi.key

store

USER_INSTALL_DIR Enter the default path for the directory to

install the IBM Resiliency Orchestration Server

software.(default path is /opt/panaces/ )

REFRESH_EXISTING_SCHEMA When the Schema Refresh option is chosen,

the old schema which is already available in

the system will be refreshed.Default is 0, if set

to 0 the schema will not be refreshed and

when set to 1 schema will be refreshed/reset.

STOP_IBM_RESILIENCY_ORCHESTR

ATION_AND_UNINSTALL

If set to 1, it will stop the running services and

uninstall.

If set to 0, the services will be running and the

uninstaller will quit. The logs will be available

in the \temp directory.

MariaDB_ROOT_PASSWORD Enter the password to connect to the MariaDB

database.

Note: If password is not present, keep the

field empty.

USER_MANAGEMENT_MODE Basic ADVANCED

ADVANCED_SERVER_TYPE NA LDAP or AD

Default: AD

ADVANCED_SERVER_URL NA Enter the Advanced Server URL of

AD/ LDAP Server

ADVANCED_SERVER_DOMAIN NA The Server Domain is applicable

only to AD.

Note: Do not enter domain for

LDAP

DIRECTORY_USERNAME NA Enter the User name for reading

the external system for AD/LDAP

server.

DIRECTORY_PASSWORD NA Enter the Password for reading

the external system for AD/ LDAP

server.

SEARCH_BASE_FOR_READING_ROL

ES

NA Enter the searchbase string for

AD/ LDAP server.

LICENSE_ACCEPTED Enter the value “TRUE”

SUPPORT_USER_PASSWORD Enter the password for support user (default

=Drmsupport123$).

TOMCAT_HOME Enter the Tomcat Installation directory path.



20.1.2 PanacesAgentsInstaller.properties file

Keyword Description

INSTALLER_UI Displays the mode of installation as

“silent”.




SRS_AGENT_CHK

ORACLE_AGENT_CHK


TRUE_COPY_AGENT_CHK

SRDF_AGENT_CHK

HPXP_AGENT_CHK

DB2_AGENT_CHK

POSTGRES_AGENT_CHK



USER_INPUT_RESULT_JAR_MSSQL Enter the full path of the directory where

the MSSQL Jar files have been installed.

For example: On Windows, the location of

the Jar files would be C:\Program

Files\Microsoft SQL Server 2000 or 2005

Driver for JDBC\lib

USER_INPUT_ORACLE_HOME Enter the full path of the directory where

the Oracle is installed.

USER_INPUT_RESULT_JAR_ORA Enter the full path of the directory where

the Oracle Jar files have been installed.



libraray files are located. Usually it is

$ORACLE_HOME/jlib

USER_INPUT_RESULT_JAR_SYBASE Enter the full path of the directory where

the Sybase Jar files have been installed.



USER_INPUT_RESULT_SYBASE_LOGIN Enter the Sybase Admin login ID.

USER_INPUT_RESULT_PRIMARY_PANAC

ES_SERVER_IP


USER_INPUT_RESULT_SECONDARY_PA

NACES_SERVER_IP


server.




classpath. By default, the following

classpath is displyed:




Keyword Description


USER_INPUT_RESULT_DB2_INSTANCEU

SER


USER_INSTALL_DIR The full pathname for the directory in

which you want to install the agent

software.





manually.

Refer to the Starting and Stopping of

Agents in the respective Installation of

Agents chapter in this guide for more

information.

USER_INPUT_RESULT_POSTGRES_LOGI

N

By default, "postgres" will be pre-filled as

the login ID.


USER_INPUT_RESULT_SITE_CONTROLL

ER_IP


CHOSEN_INSTALL_SET= Enter Upgrade

Note: This is used only during Upgrade

159. Execute the following command to start the installation.

sudo /opt/Server/install.bin –f

/opt/Server/PanacesServerInstaller.properties

Note

When you are installing the IBM Resiliency Orchestration in the Silent Mode in the

Japanese OS, enter the following command:

sudo ./install.bin -f PanacesServerInstaller.properties -l ja

160. Follow the Post Installation Steps.

Note

Restart the Resiliency Orchestration application server after you update the parameters



21 Installing Resiliency Orchestration Agent Server in Silent Mode

21.1 Installing Agent Server in Silent Mode on Windows System

Perform the following steps to install IBM Resiliency Orchestration on Windows system.

1. Log on to Windows system.

2. Open an MS-DOS command prompt window.

3. Go to the directory that contains the installation file and launch the installation procedure by entering the following command:

install.exe –f <complete path of the .properties file with the properties file

name>

For example: install.exe -f c:\\Progra~1\\panaces\\PanacesAgentsInstaller.properties

Note

After completing the installation of Agents on Windows Server, no status is displayed.

The user does not get information on whether the installation is successful or not.

21.2 Starting Silent Mode Installation on Solaris/Linux/HPUX/AIX Servers

1. Log on to Linux/Solaris/HPUX/AIX system.



./install.bin –f <complete path of the .properties file with the properties

file name>

For example:

For agents: ./install.bin –f /Agents/ PanacesAgentsInstaller.properties

For Server: ./install.bin –f /Server/ PanacesServerInstaller.properties

Note

You have to manually start IBM Resiliency Orchestration Server after installing IBM


21.3 Vault Configuration

If you want to use Vault make the following changes before starting Resiliency Orchestration Services.



1. Set parameter IS_SERIALCALL_ENABLED=TRUE in <EAMSROOT>/installconfig/PanacesAgentGeneric.cfg. By default it is false. Make the changes for both PanacesAgentGeneric.cfg (Agent) and panaces.properties (Panaces services)..

161. Set parameter sanovi.vault.agent.onstartup = TRUE in <EAMSROOT>/installconfig/panaces.properties. By default it is false.

For more information on Vault Configuration go to IBM Resiliency Orchestration Online Help and navigate to Home> Configuration> Vault Framework or refer to the admin guide.

162. Re-start Resiliency Orchestration Server, if the Resiliency Orchestration server is already started.



22 Installing the Resiliency Orchestration Agent Server in Silent Mode

The following section provides steps to install the software by silent mode on Windows, Linux, Solaris, HPUX, and AIX servers.

Note

In silent mode, uninstallation does not check whether services are running or not. The

user has to confirm that services are stopped prior to uninstallation in silent mode.

22.1 Installing Agent Server on Windows in the Silent Mode

Perform the following steps to install IBM Resiliency Orchestration on Windows system.





name>

For Example: install.exe -f

c:\\Progra~1\\panaces\\PanacesAgentsInstaller.properties

Note



22.2 Installing Agent Server on Solaris, Linux, HPUX, or AIX in the Silent Mode





file name>

For example:

For agents: ./install.bin –f /Agents/ PanacesAgentsInstaller.properties

For Server: ./install.bin –f /Server/ PanacesServerInstaller.properties

Note



You have to manually start IBM Resiliency Orchestration Server after installing IBM


22.3 Vault Configuration

If you want to use Vault, make the following changes prior to starting Panaces service.

Note

Restart Panaces if Panaces is already started after the following changes.

1. Set parameter IS_SERIALCALL_ENABLED=TRUE in

<EAMSROOT>/installconfig/PanacesAgentGeneric.cfg.

By default it is set as FALSE.

2. Make the changes for both the Agent and Resiliency Orchestration Services as

PanacesAgentGeneric.cfg (Agent) and panaces.properties (Resiliency Orchestration Services).

3. Set parameter sanovi.vault.agent.onstartup = TRUE in

<EAMSROOT>/installconfig/panaces.properties.

By default it is set as FALSE.

22.4 Post Upgrade Tasks

Since the mount TCL scripts are modified, the agents using the TCL scripts (HPXP solution) must also be upgraded when the Resiliency Orchestration Server is upgraded, else the mount operations will fail.

After the successful upgrade of the server, the user should clear the browser cache for the GUI changes to take effect completely.

The comparison between previous roles and new role definitions in Basic User Management are given as follows:

The OPERATOR has READ privileges for all the pages including Admin tab.

The ADMINISTRATOR can change their own User Management information and cannot edit or view for other users.

SUPER ADMINISTRATOR has all the privileges as in the previous releases.

NOTIFICATION MEMBER wherein it will not be allowed to login into the system.

SUPPORT USER will now be able to modify his own password on login. This was not supported in the previous releases.

The support user will be present and function as in the previous releases. The user will not be listed to other users who are logged into the system. When



support logs in, he/she will be able to view the user in the User Listing page and will be able to edit their own password and Home page preference.

For customers who are upgrading, the new user name is also reflected. Existing password will not be changed on upgrade.

The drmadmin user will not be allowed to be deleted by other users with SUPER ADMINISTRATOR role. Only newly created users with SUPER ADMINISTRATOR role can be deleted.

The user name field can accept a maximum up to 64 characters. The same will be reflected in the UI in login page and create/edit user page.

If HA is available, perform the following tasks:

Uninstall on Slave Resiliency Orchestration Server.

Install on Slave Resiliency Orchestration Server. Do not refresh the schema/DB during installation. Do not start Resiliency Orchestration Services on Slave Server.

Restart MariaDB Replication.

Restore required custom workflows/scripts from the backup.

Start the IBM Resiliency Orchestration Server services.

22.5 Server Memory Management

Depending on the expected number of groups that will be supported by IBM Resiliency Orchestration Software, Java maximum heap memory limit parameter needs to be specified. It is defined in the variable named DRM_SERVER_JVM_MEM, which is located at starting lines of the Resiliency Orchestration startup script DRM Install root/bin/panaces. Default value of this variable is set to –Xmx2048m.

The following are the recommended values:

Configuration with more than 100 groups: -Xmx4072m is recommended.

22.6 Backup and Fallback Plan

22.6.1 Backup Plan

Take the backup of the following files and directories:

IBM Server MariaDB Metadata

sudo mysqldump -u root --databases panaces pfr advancedreporter -R

--triggers > backupfilename.sql

IBM Server Installation directory $EAMSROOT

The following system files:

sysctl.conf



any user specific scripts and cron jobentries

/etc/hosts

User files

If Panaces Server is configured with Linux OS agent:

Agent Binaries

Custom/ Field Specific scripts

22.6.2 Fallback Plan

At any time of the upgrade, if there are failures that cannot be corrected within the upgrade window, use the following plan to restore to the old IBM server installation.

Run the following command to drop the existing databases if they already exist:

sudo mysqladmin –u root drop panaces

sudo mysqladmin –u root drop pfr

sudo mysqladmin –u root drop advancedreporter

Restore the MariaDB Metadata from backup.

sudo mysql -u root < backupfilename.sql

Restore the IBM Server software installation directory.

Startup IBM Server Services.



23 Upgrading the Resiliency Orchestration Advanced Reporter

Upgrading IBM Resiliency Orchestration Advanced Reporter is similar to fresh Installation of Advanced Reporter.

However, during the upgrade process you are prompted to refresh the existing advanced reporter metadata.

Select No, to retain the metadata and to upgrade only the binaries of advanced reporter.

Figure 112: Upgrade IBM Resiliency Orchestration Advance Reporter -

Metadata Refresh Screen for Advanced Reporter



24 Upgrading Resiliency Orchestration Agents

The upgrade of agents on customer servers may be done any time after the IBM Resiliency Orchestration server software is upgraded.

24.1 Prerequisites

The following are prerequisites for upgrading Resiliency Orchestration Agents:

All the agents need to be stopped before performing any agent upgrade process.

Kill rsync.exe processes started by Panaces agents (PFR), if any.

The user needs to add a permanent firewall rule to allow port 8081(jetty) and 8083(RMI)

Note

If the firewall is off, adding a permanent firewall rule is not required.

The user needs chmod 744 permissions to upload binaries to jackrabbit repository.

24.2 Resiliency Orchestration Agent Upgrade [Optional]

Refer the respective agent upgrade chapters for upgrading the agents from the older version to 7.1 version.

After the agent upgrade, all new workflows or the new actions that got defined in field or bundled with 7.1 releases will work.

Note

Upgrading the agents will retain the existing workflow configuration files in the

$EAMSROOT/work directory to maintain backward compatibility. If new workflows from

the current version are loaded, it may not work with the existing workflow configuration

files. A fresh copy of the configuration file must be copied from

$EAMSROOT/scripts/repository/workflow-config directory to the work directory and must

be configured to be used by the workflow.

The following are the steps to upgrade Resiliency Orchestration agent:

1. For each identified Functional Group, move the Group to maintenance mode.

2. Upgrade the agent software on all servers.

24.3 Upgrading Agents on Linux Server

24.3.1 Prerequisites before upgrading agents on Linux Server

1. Stop all the agents.



2. Make sure that you have free space of approximately 700 MB in /tmp directory, before executing the above command.

24.3.2 Limitations

Agents should be upgraded first and then IBM Resiliency IBM Resiliency File Replicator is upgraded, when IBM Resiliency IBM Resiliency File Replicator is installed with agents.

During upgrade, use old EAMSROOT as installation path.

24.3.3 Upgrading Agents on Linux Server in GUI mode

Perform the following steps for upgrading the agents on Linux server. The commands specified in the following points must be provided at the command prompt:

To upgrade the agents, perform the following steps:

1. Download the agent binaries from the IBM Passport Advantage site.

2. Browse through IBM Resiliency Orchestration software from the downloaded path and go to the folder to the folder Agent/Linux_DRMAgent_7.1.zip for 32-bit Linux Operating Systems or Agents/ Linux64_DRMAgent_7.1.zip for 64-bit Linux Operating Systems.

3. Go to the extracted folder and execute the following command: (Use whichever is applicable)


Note




command.





Figure 113: Upgrade Agents on Linux Server - Introduction


Figure 114: Upgrade Agents on Linux Server - Choose Install Folder




is /opt/panaces. It is recommended that you use the default path. This needs to be the same as that of the previous agent installation.

166. Click Next. The Choose Install Set window is displayed. Select the Upgrade option and click Next

167. The Choose Install Set screen will be displayed only when the user selects the same install location as the current one.

Figure 115: Upgrade Agents on Linux Server - Choose Install Set

168. The Choose Agents - Linux window is displayed.



Figure 116: Upgrade Agents on Linux Server - Choose Agents - Linux

169. The list of agents available is displayed on the Choose Agents - Linux window. Select the checkbox next to the specific agent to install that agent. You can choose to install any or all of the agents.




Figure 117: Upgrade Agents on Linux Server - Choose Link Folder




Select Don’t create links for not creating shortcut folders.




Figure 118: Upgrade Agents on Linux Server - Agent Configuration

173. Enter DB2 instance user login ID and click Next.



Figure 119: Upgrade Agents on Linux Server - Agent Configuration

174. Enter the DB2 file location. Click the Choose button to select the jar file location.

175. Click Next. The NAT IP Address Configuration window displays.

Figure 120: Upgrade Agents on Linux Server – NAT IP Address

Configuration

176. Enter the NAT IP Address if applicable and click Next. The Site Controller Configuration window displays.



Figure 121: Upgrade Agents on Linux Server – Site Controller

Configuration

177. Enter the Site Controller IP Address if applicable and click Next. The Pre-Installation Summary window displays.



Figure 122: Upgrade Agents on Linux Server - Pre-Installation Summary



Figure 123: Upgrade Agents on Linux Server - Installing IBM Resiliency

Orchestration Agents




Figure 124: Upgrade Agents on Linux Server - Starting Agents




Note


window.


183. Click Next. The Upgrade Complete window is displayed, indicating successful upgrade.



Figure 125: Upgrade Agents on Linux Server - Upgrade Complete

184. Click Done to complete the upgrade process.



25 Upgrading Resiliency Orchestration Agents Using Silent Mode Installation

25.1 Prerequisites before upgrading agents on AIX Server

Stop all the agents.

25.2 Limitations

Agents should be upgraded first and then IBM Resiliency IBM Resiliency File Replicator is upgraded, when IBM Resiliency IBM Resiliency File Replicator is installed with agents.

During upgrade, use old EAMSROOT as installation path.

25.3 Editing Properties File

When you upgrade IBM Resiliency Orchestration Agents in Silent mode, the upgrade program uses the .properties file for agents (PanacesAgentsInstaller.properties), to determine which upgrade options should be implemented. Therefore, before you can run the upgrade program in Silent mode, you must edit the respective properties file in which you specify the i upgrade options that you want to invoke, while performing the IBM Resiliency Orchestration Agents upgrade. Perform the following steps to edit the properties files.

1. Get the files from the IBM Passport Advantage site and copy properties files by running the following command:

cp Agents/PanacesAgentsInstaller.properties /tmp


Agents(UNIX)

vi /tmp/PanacesAgentsInstaller.properties


25.3.1 PanacesAgentsInstaller.properties file:

Keyword Description

INSTALLER_UI Displays the mode of installation as

“silent”.




SRS_AGENT_CHK

ORACLE_AGENT_CHK






Keyword Description

TRUE_COPY_AGENT_CHK

SRDF_AGENT_CHK

HPXP_AGENT_CHK

DB2_AGENT_CHK

POSTGRES_AGENT_CHK

USER_INPUT_RESULT_JAR_MSSQL Enter the full path of the directory where

the MSSQL Jar files have been installed.

For example: On Windows, the location of

the Jar files would be C:\Program

Files\Microsoft SQL Server 2000 or 2005

Driver for JDBC\lib

USER_INPUT_ORACLE_HOME Enter the full path of the directory where

the Oracle is installed.

USER_INPUT_RESULT_JAR_ORA Enter the full path of the directory where

the Oracle Jar files have been installed.



library files are located. Usually it is

$ORACLE_HOME/jlib

USER_INPUT_RESULT_JAR_SYBASE Enter the full path of the directory where

the Sybase Jar files have been installed.



USER_INPUT_RESULT_SYBASE_LOG

IN

Enter the Sybase Admin login ID.

USER_INPUT_RESULT_PRIMARY_PA

NACES_SERVER_IP


USER_INPUT_RESULT_SECONDARY_

PANACES_SERVER_IP


server.




classpath. By default, the following

classpath is displayed:



USER_INPUT_RESULT_DB2_INSTAN

CEUSER


USER_INSTALL_DIR The full pathname for the directory in

which you want to install the agent

software.






Keyword Description


manually.

Refer to the Starting and Stopping of

Agents in the respective Installation of

Agents chapter in this guide for more

information.

USER_INPUT_RESULT_POSTGRES_L

OGIN

By default, "postgres" will be pre-filled as

the login ID.


USER_INPUT_RESULT_SITE_CONTR

OLLER_IP


CHOSEN_INSTALL_SET=

Enter Upgrade

Note: This is used only during Upgrade

25.4 Upgrading Agents in Silent Mode on Windows

Perform the following steps to upgrade the Agents on Windows:





name>

For Example: install.exe -f c:\\Progra~1\\panaces\\PanacesAgentsInstaller.properties

Note



25.5 Upgrading Agents in Silent Mode on Solaris, Linux, HPUX, AIX Servers





file name>

For Example: For agents ./install.bin –f /Agents/ PanacesAgentsInstaller.properties



26 Installing Third-party Software

Download the GPL dependent binaries from this link: GPL Dependent Binaries

(https://sourceforge.net/projects/gnu-utils/files/binaries/).

You can use the procedures in this section to install the required Third-party software that you can download from the GPL Dependent Binaries site.

26.1 Red Hat Enterprise Linux (RHEL) Versions

26.1.1 RHEL 5.6 (32-Bit)

1. Download the software from GPL Dependent Binaries site.

2. Go to the ROOT folder for the Resiliency Orchestration application or its component.

189. Unzip the files by executing following command

tar -xvzf rsync3.0.5-RHEL5.6-32bit.tar.gz

tar -xvzf tar1.19-RHEL5.6-32bit.tar.gz

26.1.2 RHEL 5.5 (64-Bit)





191. Create the following soft link.

ln -s <ROOT>/bin/tar tar

26.1.3 RHEL 5.7 (64-Bit)





194. Create the following soft link.

ln -s <ROOT>/bin/tar tar

26.1.4 RHEL 6.X (64-Bit)



GPL%20Dependent%20Binaries




tar -xvzf rsync3.0.9-RHEL6-64bit.tar.gz

tar -xvzf tar1.23-RHEL6-64bit.tar.gz

26.1.5 RHEL 7.X (64-Bit)




tar -xvzf rsync3.0.9-RHEL7-64bit.tar.gz

tar -xvzf tar1.23-RHEL7-64bit.tar.gz

26.2 Advanced Interactive eXecutive (AIX)




gunzip rsync3.0.5-AIX.tar.gz

tar -xvf rsync3.0.5-AIX.tar.gz

gunzip tar1.14-AIX.tar.gz

tar -xvf tar1.14-AIX.tar.gz

26.3 HPUX 64-Bit Itanium




gunzip rsync3.0.9-HPUX11.31-IA.tar.gz

tar -xvf rsync3.0.9-HPUX11.31-IA.tar

gunzip tar1.26-HPUX11.31-IA.tar.gz

tar -xvf tar1.26-HPUX11.31-IA.tar

26.4 HPUX 64-Bit Parisac






gunzip rsync3.0.9-HPUX11i-PARISC.tar.gz

tar -xvf rsync3.0.9-HPUX11i-PARISC.tar

gunzip tar1.26-HPUX11i-PARISC.tar.gz

tar -xvf tar1.26-HPUX11i-PARISC.tar

26.5 Solaris_Sparc




tar -xvzf rsync3.0.5-SOLARIS10-SPARC.tar.gz

195. Download and then unzip/untar the following files

tar -xvzf tar1.18-SOLARIS10-SPARC.tar.gz

26.6 Solaris_Intel




tar -xvzf rsync3.0.5-SOLARIS10-x86.tar.gz

196. Download and then unzip/untar the following files

tar -xvzf tar1.26-SOLARIS10-x86.tar.gz



27 Uninstalling Resiliency Orchestration Agent Node

Perform the following steps to uninstall IBM Resiliency Orchestration Agent Node.

1. Go to <$EAMSROOT>/UninstallerData folder.

2. Click Uninstall IBM Resiliency Orchestration Agent Node folder. The Uninstall IBM Resiliency Orchestration Agent Node window opens.


197. Click Uninstall.




Figure 127: Uninstall Complete screen




28 Uninstalling Resiliency Orchestration Server

This chapter provides detailed information on uninstalling IBM Resiliency Orchestration product on your system.

Note

If you have used Silent mode of installation, you can perform only Silent mode of

uninstallation. After Silent mode of installation, Graphical mode of uninstallation cannot

be performed.

28.1 Uninstalling by using the Silent Mode

If the IBM Resiliency Orchestration Server and/ or Agent is installed through Graphical mode, the uninstallation is possible through both Graphical and Silent mode by using the following commande:

Uninstall_IBM_Resiliency_Orchestration -i silent

Uninstallation of IBM Resiliency Orchestration server can be performed from:

GUI

Command Prompt

28.2 Uninstalling by using the GUI

To uninstall IBM Resiliency Orchestration server from GUI, perform the following steps:

1. Go to $EAMSROOT/UninstallerData.

2. Click Uninstall_IBM Resiliency Orchestration_server.

3. The Introduction screen is displayed, as shown in the following figure.



Figure 128: Uninstall IBM Resiliency Orchestration Server – Introduction

screen

200. Click the Uninstall button to continue with Uninstallation. The Uninstalling… screen is displayed, as shown in the following figure.



Figure 129: Uninstall IBM Resiliency Orchestration Server –

Uninstalling… screen

201. Once the uninstaller removes all the features, the Uninstall Complete screen is displayed, as shown in the following figure.



Figure 130: Uninstall IBM Resiliency Orchestration Server – Uninstall

Complete screen

202. Click Done to close the Uninstall IBM Resiliency Orchestration Server window.

Note

The uninstallation of IBM Resiliency Orchestration Server does not delete the database.

You have to manually delete the databases by providing the following command at the command prompt:

#mysql -u root

mysql>drop database panaces;

mysql>drop database pfr;

mysql>drop database advancedreporter;

28.3 Uninstalling by using the Command Prompt

To uninstall IBM Resiliency Orchestration server from the command prompt, perform the following steps:

# cd $EAMSROOT/UninstallerData

# ./Uninstall_IBM_Resiliency_Orchestration



This process will uninstall all binaries that have been installed while installing IBM Resiliency Orchestration server. This process will not uninstall Tomcat binaries.



29 Uninstalling of Agents

29.1 Agents on Windows

Perform the following steps to uninstall all agents on your system.

1. Go to C:\Program Files\Panaces\ UninstallerData\ folder.

2. Click Uninstall Agents folder. The Uninstall Agents window opens.

3. Click Uninstall.


Figure 131: Uninstall Complete screen


29.2 Agents on Solaris

Perform the following steps to uninstall all agents from your system.

To uninstall Solaris agent(s) from the command prompt, execute the following commands:


# ./Uninstall_IBM_Resiliency_Orchestration_Agents



As part of uninstallation, the link names from "/etc/rc3.d" directory should be manually removed.

29.3 Agents on Linux


To uninstall Linux agent(s) from command prompt, do the following steps:



As part of uninstallation, the link names from "/etc/rc.d/rc3.d" directory should be manually removed.

29.4 Agents on HPUX


To uninstall HPUX agent(s) from command prompt, do the following steps:



As part of uninstallation, the link names from "/etc/rc3.d" directory should be manually removed.

29.5 Agents on AIX

To uninstall AIX agent(s) from command prompt, enter the following commands:



As part of uninstallation, the link names from "/etc/rc.d/rc2.d" directory should be manually removed.

During uninstallation, the following directories will not be deleted, as they might be useful.

var/log

scripts/samples

panacesFileReplicator/filesets

If the above directories are not deleted, the uninstallation process will list the name of these directories. After reviewing its contents, the directories can be deleted.



30 Installing Resiliency Orchestration OS

Command Processor

30.1 Prerequisites

Prior installing the IBM Sz/OS CP (Command Processor), you need to install the following components on your z/OS system:

z/OS ICSF: ICSF is a software element of z/OS. ICSF works with the hardware cryptographic features and the Security Server (RACF element) to provide secure, high-speed cryptographic services in the z/OS environment. ICSF provides the application programming interfaces, which allow applications to request the cryptographic services. ICSF is also the means for loading the secure cryptographic features with master key values, allowing the hardware features to be used by applications. The cryptographic feature is secure, high-speed hardware that performs the actual cryptographic functions. Your processor hardware determines the cryptographic feature available to your applications.

Note

If z/OS ICSF is not installed, refer to the following manual: z/OS Cryptographic Services

Integrated Cryptographic Service Facility System Programmer's Guide.

z/OS OpenSSH: OpenSSH provides secure encryption for both remote login and file transfer.

Note

If z/OS OpenSSH is not installed, refer to the following manual: z/OS IBM Ported Tools

for z/OS: OpenSSH User's Guide

30.2 Overview

The IBM Sz/OS CP (Command Processor) enables the IBM Resiliency Orchestration Manager workflows to communicate with z/OS systems. The communication is created by installing several modules in the OMVS subsystem that allow commands to be submitted through SSH communications and through OMVS to execute on your z/OS system. Responses to those commands are then captured and returned to the Resiliency Orchestration Manager server for further workflow processing.

For example, the following figure displays the Resiliency Orchestration Manager workflow, where Step A checks if the job, JOB123 is executing, if it is, Step B submits JOB456 and Step C is ignored, otherwise if Step A is not executing, Step B is ignored and Step C is completed.



Figure 132: Resiliency Orchestration Workflow

30.3 Installing OS Command Processor

The Resiliency Orchestration OS Command Processor can be installed from a tar

file. The name of the tar file is sanovi-szcpvnnrnn.tar where nn denotes the

version and release number of the tar file.

Note

You need to install OS Command Processor into a directory named /u/sanovi.

The following tasks need to be performed to install the Resiliency Orchestration OS Command Processor from a tar file:

1. Extract Installation File

2. Authorize APF for TCMD, ZCMD, GCMD, and XCMD

3. Define Userid SANOVI to RACF (or other security program)

30.3.1 Extracting Installation File

The following are the steps to extract the installation file:

1. Specify the IP of your z/OS system, enable the download in binary mode, and FTP the SzCP tar file to your z/OS system.

For example:

ftp xxx.xxx.xxx.xxx <- the ip of your z/OS system

bin <- set binary mode

put /from/sanovi-szcpvnnrnn.tar /to/sanovi-szcpvnnrnn.tar

204. Create the /u/sanovi folder. If you have a previous version installed,

copy it to the backup prior proceeding, for example /u/sanovi-prev-

version.



205. Extract the sanovi-szcpvnnrnn.tar file. Specify -xvf to extract and

display the untared files, and then specify the location /xxxx where the tar

file is FTP‘d in Step 1. The following example displays the snippet for

installing v01r00:

tar -xvf /xxxx/sanovi-szcpv01r00.tar

206. Verify that the following files are extracted in the /u/sanovi folder:

/u/sanovi/TCMD, 12288 bytes, 24 tape blocks

/u/sanovi/ZCMD, 24576 bytes, 48 tape blocks

/u/sanovi/tcmd.sh, 64 bytes, 1 tape block

/u/sanovi/zcmd.sh, 64 bytes, 1 tape block

30.3.2 Authorizing APF for TCMD, ZCMD, GCMD, and XCMD

1. After the untar, the contents of the /u/sanovi folder is displayed as shown

below:

gcmd.sh File rwxrwxrwx fff--- --s- ----

tcmd.sh File rwxr-xr-x fff--- --s- ----

xcmd.sh File rwxr-xr-x fff--- --s- ----

zcmd.sh File rwxr-xr-x fff--- --s- ----

GCMD File rwxrwxrwx fff--- --s- ----

TCMD File rwxr-xr-x fff--- --s- ----

XCMD File rwxr-xr-x fff--- --s- ----

ZCMD File rwxr-xr-x fff--- --s- ----

Note

The contents of /u/sanovi folder displayed from ISPF Data Set List Utility or

Edit Entry Panel is same.

207. Set the APF Extended Attribute ON for TCMD and ZCMD. You can perform this through ISPF, for example using MX (Modify Extended Attributes):

MX TCMD File rwxr-xr-x fff--- --s- ----

208. Enter ―/‖ next to APF Authorized, as shown below

Modify z/OS UNIX File Extended Attributes

Command ===>

Pathname . : /u/sanovi/TCMD

Type . . . : File

Enter "/" to select option



/ Use Shared Address Space

/ APF Authorized

Program Controlled

Shared Library

209. After APF authorization is turned on for TCMD and ZCMD, verify that the extended attribute displays, as shown below:

Pathname . : /u/sanovi

EUID . . . : 0

Command Filename Message Type Permission Audit Ext Fmat

----------------------------------------------------------

Dir rwxr-xr-x fff--- ----

Dir rwxr-xr-x fff--- ----

gcmd.sh File rwxrwxrwx fff--- --s- ----

tcmd.sh File rwxr-xr-x fff--- --s- ----

xcmd.sh File rwxr-xr-x fff--- --s- ----

zcmd.sh File rwxr-xr-x fff--- --s- ----

GCMD File rwxrwxrwx fff--- a-s- ----

TCMD File rwxr-xr-x fff--- a-s- ----

XCMD File rwxr-xr-x fff--- a-s- ----

ZCMD File rwxr-xr-x fff--- a-s- -------

30.3.3 Defining Userid SANOVI to RACF/Other Security Program

Define a userid named SANOVI to RACF or equivalent security program. The SANOVI userid needs the following OPERPARM attributes set:

OPERPARM INFORMATION

--------------------

STORAGE= 00000

AUTH= MASTER

DOM= ALL

CMDSYS= *

30.4 Verifying Sz/OS CP (Command Processor) Install

1. After the install, verify the install by executing the SzCPIVP Workflow from Resiliency Orchestration. The following figure displays the SzCPIVP Workflow.



Figure 133: SzCPIVP

210. The workflow executes few simple tests to confirm that your install was successful. The following tasks will be performed:

TESTDAL: The TESTDAL enters and returns the output from a z/OS command

―D A,L‖.

TESTJESDA:The TESTJESDA enters and returns the output from a JES

command ―$DA‖.

TSOLISTCAT: The TSOLISTCAT enters and returns the output from a TSO

LISTC command.

TSOLU: The TSOLU enters and returns the output from a TSO LU command.

211. After the workflow is executed, confirm that each step is successful, for example successfully executed actions are displayed as shown below:

212. Click on the expand arrow to the left of each Action to verify that the correct output is returned. For example:



213. Your install is now complete.



31 Migrating the Resiliency Orchestration Server

Find information about migrating the IBM Resiliency Orchestration application server to a New Server. You can migrate to the new server and retain the Same IP as the old server or set up a New IP for the new server.

Depending on the settings you want, select any one procedure from the following procedures:

Migrating the Resiliency Orchestration server to a New Server with the Same IP

Migrating the Resiliency Orchestration server to a New Server with the New IP

31.1 Migrating to new Server with Same IP

Assuming /backup has enough disk space for original and new IBM Resiliency Orchestration Server, EAMSROOT as /opt/panaces, and TOMCAT_HOME as /opt/jboss-ews-2.0/tomcat7, and same OS, with Same MariaDB DB version level

The below steps need to be followed to migrate IBM Resiliency Orchestration server to new server with same IP

1. Stop all the services in the current IBM Resiliency Orchestration Server.

214. Take the mysql Schema

mysqldump -u root –databases panaces pfr advancedreporter –triggers -R

> /backup/panaces-pfr-advrpt.sql

215. Take EAMSROOT, and TOMCAT Home folder backup

cd /opt

tar –cvzf /backup/EAMSROOT.tar.gz panaces

cd /opt/

tar –cvzf /backup/tomcat7.tar.gz jboss-ews-2.0

216. Copy /backup/panaces-pfr-advrpt.sql /backup/EAMSROOT.tar.gz /backup/tomcat7.tar.gz /etc/security/limit.conf /etc/hosts

/etc/my.cnf to a common share location

217. Note down hostname of original server , at prompt type hostname

218. Note down the port exceptions in firewall , use system-config-firewall or system-config-securitylevel

219. Shutdown the current IBM Resiliency Orchestration server using poweroff command

220. Bring the New IBM Resiliency Orchestration Server with Same IP with the help of IT.



221. Login to new IBM Resiliency Orchestration server using putty.

222. Copy from common share folder all files panaces-pfr-advrpt.sql EAMSROOT.tar.gz tomcat7.tar.gz limit.conf hosts my.cnf to /backup

223. Extract IBM Resiliency Orchestration binaries

cd /opt

tar –xvzf /backup/ EAMSROOT.tar.gz

224. Extract Tomcat

cd /opt

tar –xvzf /backup/tomcat7.tar.gz

225. Update EAMSROOT

echo “export EAMSROOT=/opt/panaces” >> /etc/profile

226. refer /backup/limit.conf , /backup/hosts , /backup/my.cnf and update /etc/security/limit.conf /etc/hosts /etc/my.cnf respectively

227. Set hostname same as noted one

hostname <original_server_hostname>

update same in /etc/sysconfig/network

228. Configure the exception ports as noted earlier using system-config-firewall or system-config-securitylevel

229. Restore the mysql schema

mysql -u root < /backup/panaces-pfr-advrpt.sql

230. Create required mysql users along with privileges

Mysql –u root

use mysql;

CREATE USER 'pfradmin'@'localhost' IDENTIFIED BY 'pfradmin123';

GRANT ALL PRIVILEGES ON *.* TO 'pfradmin'@'localhost' IDENTIFIED

BY 'pfradmin123' WITH GRANT OPTION;

CREATE USER 'panaces'@'localhost' IDENTIFIED BY 'panaces123';

GRANT ALL PRIVILEGES ON *.* TO 'panaces'@'localhost' IDENTIFIED

BY 'panaces123' WITH GRANT OPTION;

CREATE USER 'sanovireporter'@'localhost' IDENTIFIED BY

'sanovi123';

GRANT ALL PRIVILEGES ON *.* TO 'sanovireporter'@'localhost'

IDENTIFIED BY 'sanovi123' WITH GRANT OPTION;



231. Verify the panaces, pfr, advancedreporter databases are available after restored in the new server.

232. Start IBM Resiliency Orchestration Services ;

/opt/panaces/bin/panaces start

233. Verify that the console log shows panaces services started successfully

tail –f /opt/panaces/var/log/console.log

31.2 Migrating to new Server with New IP

Assuming /backup has enough disk space for original and new IBM Resiliency Orchestration Server, EAMSROOT as /opt/panaces , and TOMCAT_HOME as /opt/jboss-ews-2.0/tomcat7, and same OS, with Same MariaDB DB version level

The below steps need to be followed to migrate IBM Resiliency Orchestration server to new server with new IP.

1. Stop all the services in the current IBM Resiliency Orchestration Server.

234. Take the mysql Schema

mysqldump -u root –databases panaces pfr advancedreporter –triggers -R

> /backup/panaces-pfr-advrpt.sql

235. Take EAMSROOT , and TOMCAT Home folder backup

cd /opt

tar –cvzf /backup/EAMSROOT.tar.gz panaces

cd /opt/

tar –cvzf /backup/tomcat7.tar.gz jboss-ews-2.0

236. Copy /backup/panaces-pfr-advrpt.sql /backup/EAMSROOT.tar.gz /backup/tomcat7.tar.gz /etc/security/limit.conf /etc/hosts

/etc/my.cnf to /backup of new IBM Resiliency Orchestration server using scp.

237. Note down the port exceptions in firewall , use system-config-firewall or system-config-securitylevel

238. Login to new IBM Resiliency Orchestration server using putty

239. Extract IBM Resiliency Orchestration binaries

cd /opt

tar –xvzf /backup/ EAMSROOT.tar.gz

240. Extract Tomcat

cd /opt

tar –xvzf /backup/tomcat7.tar.gz

Update EAMSROOT



echo “export EAMSROOT=/opt/panaces” >> /etc/profile

241. Refer /backup/limit.conf , /backup/hosts , /backup/my.cnf and update /etc/security/limit.conf /etc/hosts /etc/my.cnf respectively

242. Configure the exception ports as noted earlier using system-config-firewall or system-config-securitylevel

243. Restore the mysql schema

mysql -u root < /backup/panaces-pfr-advrpt.sql

244. Verify the panaces, pfr, advancedreporter databases are available after restored in the new server.

245. Create required mysql users along with privileges

Mysql –u root

use mysql;

CREATE USER 'pfradmin'@'localhost' IDENTIFIED BY 'pfradmin123';

GRANT ALL PRIVILEGES ON *.* TO 'pfradmin'@'localhost' IDENTIFIED

BY 'pfradmin123' WITH GRANT OPTION;

CREATE USER 'panaces'@'localhost' IDENTIFIED BY 'panaces123';

GRANT ALL PRIVILEGES ON *.* TO 'panaces'@'localhost' IDENTIFIED

BY 'panaces123' WITH GRANT OPTION;

CREATE USER 'sanovireporter'@'localhost' IDENTIFIED BY

'sanovi123';

GRANT ALL PRIVILEGES ON *.* TO 'sanovireporter'@'localhost'

IDENTIFIED BY 'sanovi123' WITH GRANT OPTION;

246. Update the following tables to be done for Agent Node and Vault Agent, if we use:

update component set

c_ipaddr='New_IBM_Resiliency_Orchestration_IP where c_id=5;

update agent_csa set

ac_ipaddress='New_IBM_Resiliency_Orchestration_IP where

ac_id=168;

update agent_csa set

ac_anode_ip='New_IBM_Resiliency_Orchestration_IP where

ac_anode_ip='OLD_IBM_Resiliency_Orchestration_IP';

247. For Vault Changes

update component_OSServer set

cos_mgmt_ipaddr='New_IBM_Resiliency_Orchestration_IP where

cos_mgmt_ipaddr='Old IBM_Resiliency_Orchestration_IP';



248. Start IBM Resiliency Orchestration Services ;

/opt/panaces/bin/panaces start

249. Verify that the console log shows panaces services started successfully

tail –f /opt/panaces/var/log/console.log



32 Troubleshooting

Find information about errors displayed while you are performing different tasks during the installation and configuration of the IBM Resiliency Orchestration software and troubleshooting tips to resolve such errors.

32.1 Resiliency Orchestration Start Fails with Error ActiveMQ Failed to Start

As part of the installation, the script SecurityUserInjection.sh will run

correctly. In the event this script fails to run correctly on starting the Resiliency

Orchestration server, the error message ActiveMQ Failed to Start is

displayed.

32.1.1 Resolution

a) Kill the running Java ActiveMQ process by using the command: kill -9

<pid>

b) Run $EAMSROOT/bin/SecurityUserInjection.sh

c) Ensure this script has completed without any errors displayed.

d) Start the Resiliency Orchestration.

32.2 Subsystem Discovery Failing for Oracle Solution

The product by default supports discovery and management for Oracle 12c. Discovery may fail for Oracle 11g.

32.2.1 Resolution

For managing Oracle 11g or lower versions, replace ‗ojdbc8.jar‘ with ‗ojdbc6.jar‘ in the AGENT_CLASSPATH in the following files:

$EAMSROOT/bin/OracleAgent.sh

$EAMSROOT/bin/DataGuardAgent.sh

Example: AGENT_CLASSPATH=$ORA_CLIENT_HOME/ojdbc6.jar:$EAMSROOT/lib/DGAgent

CSA.jar:$EAMSROOT/lib/jcifs-1.3.18.jar:$EAMSROOT/lib/j-

interopdeps.jar:$EAMSROOT/lib/j-

interop.jar:$EAMSROOT/lib/maverick-legacy-client-1.6.16-all.jar

32.3 Agent Not Starting on Windows Server

Scripts installed along with the installation starts the Agents, when the system is rebooted. Alternatively, you can start the agents manually, without rebooting the system. However, if the agents do not start by any of these methods, do the following:

Check the respective lax files for the agent‘s class path and java path entries. If these entries are incorrect, edit these files and restart the agents once the agent installation is complete.



Perform any of the following procedures depending on the agent selection:

Note

The default value of EAMSROOT is ‚C:\Program Files\panaces‛. If you have installed IBM

Resiliency Orchestration at a different location, then the paths in the following lax files

would be appropriately set by the installer program. Following is an example, with the

assumption that IBM Resiliency Orchestration has been installed at the default location.

32.3.1 IBM Resiliency File Replicator Service

Open PFRService.lax file that has been installed in the IBM Resiliency File Replicator Service installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:

lax.class.path= C:\Program Files\panaces\lib\commons-lang-

1.0.1.jar;C:\Program Files\panaces\lib\PADS.jar;C:\Program

Files\panaces\lib\log4j.jar;C:\Program

Files\panaces\lib\jacl.jar;C:\Program

Files\panaces\lib\tcljava.jar;C:\Program

Files\panaces\lib\PFR.jar:lax.jar

Edit the IBM Resiliency File Replicator installation path in the

PFRConfiguration.cfg file by following the steps given below:

1. Enter in the $EAMSROOT /installconfig folder.

250. Open the PFRConfiguration.cfg file. Provide the installation path of IBM

Resiliency File Replicator in the PFR_INSTALL_PATH parameter.

251. Replace C:\Program Files\panaces with C:\Progra~1\panaces.

32.3.2 PFR Agent

Open PFRAgent.lax file that has been installed in PFR agent install path. Check if lax.class.path has the following classpath:






Files\panaces\lib\PFR.jar;C:\Program

Files\panaces\PFRAgentCSA.jar:lax.jar

32.3.3 MSSQL Agent For MSSQL 2005

Open MSSQLAgent.lax file that has been installed in MSSQL agent installation path with a text editor. Check if ―LAX.CLASS.PATH‖ has the following class path:







Files\panaces\lib\tcljava.jar;C:\sqljdbc.jar;C:\Program

Files\panaces\MSSQLAgentCSA.jar:lax.jar

32.3.4 Windows OS Agent

Open WindowsOSAgent.lax file that has been installed in Windows OS agent installation path with a text editor. Check if ―LAX.CLASS.PATH‖ has the following class path:



Files\panaces\lib\log4j.jar; C:\Program



Files\panaces\WindowsOSAgentCSA.jar; C:\Program

Files\panaces\lib\commons-dbcp-1.2.1.jar;C:\Program

Files\panaces\lib\commons-logging.jar;C:\Program

Files\panaces\lib\commons-pool-1.2.jar;C:\Program

Files\panaces\lib\quartz-all-1.5.2.jar:lax.jar

32.4 Agent Not Stating on Solaris Server

Before starting the agent services, check the respective lax files for the agent‘s class path and java path entries. If these entries are incorrect, edit these files and restart the agents once the agent installation is complete.


32.4.1 Sybase Agent

Open Sybase Agent.lax file that has been installed in the Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:

lax.class.path= /opt/panaces/lib/commons-lang-

1.0.1.jar:/opt/panaces/lib/PADS.jar:/opt/panaces/lib/log4j.jar:/opt/pan

aces/lib/jacl.jar:opt/panaces/lib/tcljava.jar:SybaseAgentCSA.jar:opt/pa

naces/lib/SYBASE/ase_125/jConnect-

5_5/classes/jconn2.jar:/SYBASE/ase_125/jConnect-

5_5/classes/jTDS2.jar:lax.jar

Also, check for the java installation path displayed under LAX.NL.CURRENT.VM.







aces/lib/jacl.jar:opt/panaces/lib/tcljava.jar:/opt/panaces/lib/PFR.jar:

lax.jar

32.4.3 PFR Agent

Before starting the PFR Agent, open PFRAgent.lax file that has been installed in Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:



aces/lib/jacl.jar:opt/panaces/lib/tcljava.jar:/opt/panaces/lib/PFRAgent

CSA.jar:lax.jar


32.4.4 Solaris OS Agent

Open SolarisOSAgent.lax file that has been installed in Solaris OS Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:


1.0.1.jar:/opt/panaces/lib/PADS.jar:/opt/panaces/lib/log4j.jar:opt/pana

ces/lib/jacl.jar:opt/panaces/lib/tcljava.jar:opt/panaces/lib/SolarisOSA

gentCSA.jar:/opt/panaces/lib/commons-collections-

4.0.jar:/opt/panaces/lib/commons-dbcp-

1.2.1.jar:/opt/panaces/lib/commons-

logging.jar:/opt/panaces/lib/commons-pool-

1.2.jar:/opt/panaces/lib/quartz-all-1.5.2.jar:lax.jar


32.4.5 SRS Agent

Open SrsAgent.lax file that has been installed in Solaris OS Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:

lax.class.path=/opt/panaces/lib/commons-lang-


aces/lib/tcljava.jar:/opt/panaces/lib/jacl.jar:.:/opt/panaces/SrsAgentC

SA.jar:lax.jar


32.5 Agent Not Stating on Linux Server





32.5.1 Sanovi IBM Resiliency File Replicator Service


lax.class.path= /opt/panaces/lib/commons-lang-1.0.1.jar;/opt/panaces/l

ib/PADS.jar;/opt/panaces/lib/log4j.jar;/opt/panaces/lib/jacl.jar;opt/pa

naces/lib/tcljava.jar;/opt/panaces/lib/PFR.jar:lax.jar

32.5.2 PFR Agent




naces/lib/tcljava.jar;/opt/panaces/lib/PFRAgentCSA.jar:lax.jar


32.5.3 Linux OS Agent

Open LinuxOSAgent.lax file that has been installed in Linux OS Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:



naces/lib/tcljava.jar;opt/panaces/lib/LinuxOSAgentCSA.jar;/opt/panaces/

lib/commons-collections-4.0.jar;/opt/panaces/lib/commons-dbcp-

1.2.1.jar;/opt/panaces/lib/commons-

logging.jar;/opt/panaces/lib/commons-pool-

1.2.jar;/opt/panaces/lib/quartz-all-1.5.2.jar:lax.jar


32.6 Agent Not Starting on AIX Server





lax.class.path= /opt/panaces/lib/commons-lang-1.0.1.jar:/opt/panaces/l

ib/PADS.jar:/opt/panaces/lib/log4j.jar:/opt/panaces/lib/jacl.jar;opt

/panaces/lib/tcljava.jar:/opt/panaces/lib/PFR.jar:lax.jar




32.6.2 PFR Agent

Before starting the PFR Agent, open PFRAgent.lax file that has been installed in the Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:

lax.class.path=/opt/panaces/lib/commons-lang-

1.0.1.jar:/opt/panaces/lib/PADS.jar:/opt/panaces/lib/log4j.jar:

/opt/panaces/lib/jacl.jar;opt/panaces/lib/tcljava.jar:/opt/panaces/lib/

PFR.jar:/opt/panaces/lib/PFRAgentCSA.jar:lax.jar


In addition to checking class paths for the agents installed as explained in this step, also perform the following step:

32.6.3 AIX OS Agent

Before starting the AIX OS Agent, open AIXOSAgent.lax file that has been installed in the Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:

lax.class.path=/opt/panaces/lib/commons-lang-1.0.1.jar:

/opt/panaces/lib/PADS.jar:/opt/panaces/lib/log4j.jar:

/opt/panaces/lib/jacl.jar;/opt/panaces/lib/tcljava.jar:/opt/panaces/lib

/commons-collections-4.0.jar:/opt/panaces/lib/commons-dbcp-

1.2.1.jar:/opt/panaces/lib/commons-logging.jar:/opt/panaces/lib/quartz-

all-1.5.2.jar:/opt/panaces/AIXOSAgentCSA.jar:lax.jar

Check for the java installation path displayed under LAX.NL.CURRENT.VM.

32.7 Agent Not Starting on HPUX Server






1.0.1.jar;/opt/panaces/lib/

PADS.jar;/opt/panaces/lib/log4j.jar;/opt/panaces/lib/jacl.jar;opt

/panaces/lib/tcljava.jar;/opt/panaces/lib/PFR.jar:lax.jar



32.7.2 PFR Agent



1.0.1.jar;/opt/panaces/lib

/PADS.jar;/opt/panaces/lib/log4j.jar;/opt/panaces/lib/jacl.jar;op

t/panaces/lib/tcljava.jar;/opt/panaces/lib/PFRAgentCSA.jar:lax.ja

r


32.7.3 HPUX OS Agent

Open HPUXOSAgent.lax file that has been installed in Linux OS Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:


1.0.1.jar;/opt/panaces/lib/PAD

S.jar;/opt/panaces/lib/log4j.jar;/opt/panaces/lib/jacl.jar;opt/pa

naces/lib/tcljava.jar;opt/panaces/lib/LinuxOSAgentCSA.jar;/opt/pa

naces/lib/commons-collections-4.0.jar;/opt/panaces/lib/commons-

dbcp-1.2.1.jar;/opt/panaces/lib/commons-

logging.jar;/opt/panaces/lib/commons-pool-

1.2.jar;/opt/panaces/lib/quartz-all-1.5.2.jar:lax.jar


32.8 HA Configuration





sudo mysql_upgrade

32.9 NAT IP

The servers that are being managed have a local IP address, but that these servers have Network Attached Translation (NAT) IP and only the NAT IP is used everywhere. Also, the same local IP address might be used by multiple customers and hence the local IP cannot be used to uniquely identify the server and hence only the NAT IP (which is publicly known) can be used.

Enter the IP addresses of the primary and secondary IBM Resiliency Orchestration servers and IBM Resiliency Orchestration Agent Node Address. In a non-NAT environment, NAT IP address field should be left blank.



In a NAT environment, primary and secondary Resiliency Orchestration server‘s public IP should be provided. Resiliency Orchestration Agent node address should be the public IP, and NAT IP address should be the private IP of the server where you are installing.

Note

Manual Configuration if NAT IP is not provided during installation.

32.9.1 CFG file for NAT IP

Example IBM Resiliency Orchestration CFG file for NAT IP

PANACES_MASTER_SERVER_ADDRESS=<Resiliency Orchestration IP>//priv

IP of Resiliency Orchestration

PANACES_SLAVE_SERVER_ADDRESS==<Resiliency Orchestration IP>//priv

IP of Resiliency Orchestration

PANACES_AGENT_NODE_ADDRESS==<Resiliency Orchestration IP>//priv IP

of Resiliency Orchestration

PANACES_AGENT_NODE_BIND_ADDRESS= //leave empty

Discover agent node using "PANACES_AGENT_NODE_ADDRESS"

Discover PR & DR using their public IP

Example Local Agent CFG file for NAT IP

PANACES_MASTER_SERVER_ADDRESS==<Resiliency Orchestration IP>

//public IP of Resiliency Orchestration

PANACES_SLAVE_SERVER_ADDRESS==<Resiliency Orchestration IP>

//public IP of Resiliency Orchestration

PANACES_AGENT_NODE_ADDRESS==<Resiliency Orchestration IP>

//public IP of PR/DR (this server)

PANACES_AGENT_NODE_BIND_ADDRESS==<Resiliency Orchestration IP>

//private IP of PR/DR (this server)

Example PFR Configuration CFG file for NAT IP

PUBLIC IP: =<Resiliency Orchestration IP>//private IP of PR/DR

32.10 Web Browser Displays Certificate Error

If secure protocol is used to access the IBM Resiliency Orchestration application and you have used the default certificate provided by IBM, the web browser will display the certificate error. If you proceed further with this certificate, the web browser displays the certificate error. Sometimes, you may not be able to access



the application. In this case, you need to obtain a certificate from a certifying authority and import the same into the Sanovi keystore.

32.11 Server/Advanced Reporter Installation Fails with UnsatisfiedLinkError

While Installing the IBM Resiliency Orchestration or Advanced Reporter, the user may encounter the following UnsatisfiedLinkError:

IAResourceBundle: create resource bundle: en 'SWING' UI not supported

by VM. java.lang.UnsatisfiedLinkError:

/tmp/install.dir.30775/Linux/resource/jre/lib/i386/xawt/libmawt.so:

libXext.so.6: cannot open shared object file: No such file or

directory at java.lang.ClassLoader$NativeLibrary.load(Native Method)

This is due to the 32-bit rpm requirement from the Installer, required 32-bit rpms (libXext-1.1-3.el6.i686.rpm libX11-1.3-2.el6.i686.rpm libxcb-1.5-1.el6.i686.rpm libXau-1.0.5-1.el6.i686.rpm libXtst-1.0.99.2-3.el6.i686.rpm libXi-1.3-3.el6.i686.rpm) should be installed to continue installation.

32.12 Port Forwarding

32.12.1 Verify Firewall Status

The following are details to verify the Firewall status.

[sanovi@sbrphln02 lic]$ sudo systemctl status firewalld.service

â firewalld.service - firewalld - dynamic firewall daemon

Loaded: loaded (/usr/lib/systemd/system/firewalld.service;

disabled; vendor preset: enabled)

Active: active (running) since Wed 2017-09-06 23:47:29 IST; 1

day 14h ago

Docs: man:firewalld(1)

Main PID: 29752 (firewalld)

CGroup: /system.slice/firewalld.service

ââ29752 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid

Sep 06 23:47:28 sbrphln02 systemd[1]: Starting firewalld -

dynamic firewall daemon...

Sep 06 23:47:29 sbrphln02 systemd[1]: Started firewalld -

dynamic firewall daemon.

[sanovi@sbrphln02 lic]$

32.12.2 Add Exception to Firewall

The following are details to add exception to firewall.

sudo firewall-cmd --zone=public --add-port=443/tcp –permanent







sudo firewall-cmd --zone=public --add-port=8081/tcp --permanent

32.12.3 Open Ports

The following are details to list the ports, which are open to access.

[root@sbrphln02 httpd]# firewall-cmd --list-all

public (active)

target: default

icmp-block-inversion: no

interfaces: enp3s0f0

sources:

services: dhcpv6-client ssh

ports: 42443/tcp 45443/tcp 443/tcp 22/tcp 8081/tcp 8083/tcp

protocols:

masquerade: no

forward-ports:

sourceports:

icmp-blocks:

rich rules:

[root@sbrphln02 httpd]#

32.13 Create Server Certificate and Server Private Key Reference

The following snippet shows the details for creating server certificate and server private key reference:

openssl req -new -x509 -days 365 -sha1 -newkey rsa:2048 -nodes -

keyout /opt/tomcat7/conf/ibm.key -out /opt/tomcat7/conf/ibm.crt -

subj "/O=IBM Corporation/OU=PS/CN=sbrphln02.in.ibm.com" -config

"/etc/pki/tls/openssl.cnf"

32.14 Analyse HTTPD Logs

The following are details to see httpd logs:

journalctl -xe

/bin/systemctl status httpd.service ( for checking the status

of httpd service )

Ref:

-- Unit user-0.slice has begun shutting down.



Sep 10 00:51:42 sbrphln02 sudo[10839]: sanovi : TTY=pts/0 ;

PWD=/etc/httpd/conf.d ; USER=root ; COMMAND=/bin/bash

Sep 10 00:51:43 sbrphln02 dbus-daemon[840]: dbus[840]: [system]

Activating service name='org.freedesktop.problems' (using

servicehelper)

Sep 10 00:51:43 sbrphln02 dbus[840]: [system] Activating service

name='org.freedesktop.problems' (using servicehelper)

Sep 10 00:51:43 sbrphln02 dbus-daemon[840]: dbus[840]: [system]

Successfully activated service 'org.freedesktop.problems'

Sep 10 00:51:43 sbrphln02 dbus[840]: [system] Successfully

activated service 'org.freedesktop.problems'

[root@sbrphln02 ~]#

32.15 Install httpd, SSL Packages

32.15.1 Download/Mount the Operating System ISO

mailcap-2.1.41-2.el7.noarch.rpm

httpd-tools-2.4.6-31.el7.x86_64.rpm

httpd-2.4.6-31.el7.x86_64.rpm

mod_ssl-2.4.6-45.el7.centos.x86_64.rpm

32.15.2 Install the httpd, SSL Packages

rpm -ivh mailcap-2.1.41-2.el7.noarch.rpm httpd-2.4.6-

31.el7.x86_64.rpm httpd-tools-2.4.6-31.el7.x86_64.rpm

rpm -ivh mod_ssl-2.4.6-45.el7.centos.x86_64.rpm



33 License Information

33.1 GPL License Information

If you wish to access the source code for any of these packages, it is recommended that you visit the official download site of the package maintainer directly. A link to each download site appears in the table below. These links are provided "as-is" and will take you to sites that are not owned or controlled by IBM. IBM is not accountable for the contents of these sites and is not acting as a distributor of the code on such sites. IBM in no way warrants that the code or other information on these sites is accurate, will function in a particular manner, or is non-infringing of a third party's intellectual property rights. Please contact the maintainers of the code for information on the licenses and documentation that accompany the source code distributed from their site.

Open source licenses such as GNU Public License (GPL) require that IBM makes the source available on request by the client. For packages with such licenses, the client must either go to the official site of the source or download the information from this link: https://sourceforge.net/projects/gnu-utils/files/binaries/.

In addition to GPL, each of these packages include its own licensing information. It is essential to understand the terms and conditions pertaining to the licensing information of the individual tools.


Documents

· 2018-04-17 · IBM Resiliency Orchestration Contents ©IBM Corporation 2017, 2018 3 Contents 1 Installation Overview