Student Guide - Oracle Secure Backup - Volume I

Oracle Database 11g: Oracle Secure Backup

Volume I • Student Guide

D57258GC10

Edition 1.0

March 2009

Part Number

®

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Copyright © 2009, Oracle. All rights reserved.

Disclaimer

This document contains proprietary information and is protected by copyright and other intellectual property laws. You may copy and print this document solely for your own use in an Oracle training course. The document may not be modified or altered in any way. Except where your use constitutes "fair use" under copyright law, you may not use, share, download, upload, copy, print, display, perform, reproduce, publish, license, post, transmit, or distribute this document in whole or in part without the express authorization of Oracle.

The information contained in this document is subject to change without notice. If you find any problems in the document, please report them in writing to: Oracle University, 500 Oracle Parkway, Redwood Shores, California 94065 USA. This document is not warranted to be error-free.

Restricted Rights Notice

If this documentation is delivered to the United States Government or anyone using the documentation on behalf of the United States Government, the following notice is applicable:

U.S. GOVERNMENT RIGHTSThe U.S. Government’s rights to use, modify, reproduce, release, perform, display, or disclose these training materials are restricted by the terms of the applicable Oracle license agreement and/or the applicable U.S. Government contract.

Trademark Notice

Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.

Author

Maria Billings

Technical Contributors and Reviewers

Christian Bauwens

Donna Cooksey

Gerlinde Frenzen

Steven Fried

Donna Keesling

Isabelle Marchand

Judy Panock

Branislav Valny

Editor

Raj Kumar

Graphic Designer

Satish Bettegowda

Publisher

Syed Ali

Nita Brozowski

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

iii

Contents

Preface

I Introduction to Oracle Database 11g: Oracle Secure Backup

Objectives I-2

Course Objectives I-3

Suggested Schedule I-4

The Product in Context I-5

Your Learning Aids I-6

Oracle Secure Backup Documentation I-7

Additional Resources I-8

1 Oracle Secure Backup Overview

Objectives 1-2

What Is Oracle Secure Backup? 1-3

Oracle Secure Backup Tape Backup Management 1-4

Tape Management and Integration with Oracle Products 1-5

The Integration Advantage 1-6

Client/Server Architecture Host Roles 1-7

Oracle Secure Backup Architecture 1-8

Oracle Secure Backup for Centralized Tape Backup Management 1-9

Typical SAN Environment 1-11

Oracle Secure Backup Interface Options 1-12

Media Concepts: Overview 1-13

Backup Pieces and Backup Images 1-14

RMAN and Oracle Secure Backup Overview 1-15

Oracle Secure Backup Media Family 1-16

Tape Drives and Libraries 1-17

Virtual Tape Library (VTL) 1-19

Managing Data to Be Protected 1-20

Securing Data and Access to the Backup Domain 1-21

Quiz 1-22

Why Use Oracle Secure Backup? 1-26

Summary 1-27

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

iv

2 Installing Oracle Secure Backup

Objectives 2-2

Performing Preinstallation Tasks 2-3

Installation and Configuration of the Administrative Domain 2-4

Quiz 2-5

Performing Installation Tasks 2-9

Administrative Server Installation: Example 2-10

Wizard-Based Installation on Windows 2-16

Oracle Secure Backup Interfaces 2-17

Oracle Secure Backup Web Tool Home Page 2-18

Common Obtool Commands 2-19

Quiz 2-20

Summary 2-23

Practice 2 Overview: Installing and Configuring Oracle Secure Backup 2-24

3 Securing Domain and Data

Objectives 3-2

Managing User Access Control 3-3

Predefined Classes and User Rights 3-4

Configuring Oracle Secure Backup Users 3-7

Oracle Secure Backup User: OS Permissions 3-9

Preauthorization 3-11

Preauthorizing Access 3-12

Assigning Windows Account Information 3-13

Quiz 3-14

Authentication 3-16

Leveraging Oracle Security Technology 3-17

Administrative Server Certificate Authority (CA) 3-19

Oracle Wallets for OSB Intradomain Communication 3-21

Encrypted Backups to Tape 3-23

Oracle Secure Backup Encryption 3-24

Configuring Host Encryption Policies 3-25

Using OSB Encryption Keys 3-26

Transient Backup Encryption 3-27

Comparing OSB and RMAN Encryption 3-29

Quiz 3-30

Summary 3-34

Practice 3 Overview:

Configuring OSB Security 3-35

4 Configuring RMAN for Oracle Secure Backup

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

v

Objectives 4-2

Oracle Database

Disk and Tape Backup Solution 4-3

Backing Up the Flash Recovery Area to Tape 4-4

Defining Retention for RMAN Backups 4-5

RMAN and Oracle Secure Backup Basic Process Flow 4-6

Integration with Enterprise Manager 4-7

Configuring the Administrative Server in EM 4-8

Oracle Secure Backup Administrative Server Page 4-9

RMAN Database Backup to Tape 4-10

Recovery Settings 4-11

Backup Settings 4-12

Database Backup Storage Selector 4-13

Defining Database Storage Selectors 4-15

Media Families and RMAN 4-16

Media Management Expiration Policies for Automated Tape Recycling 4-17

RMAN and Oracle Secure Backup 4-19

Media Management Expiration

Troubleshooting Technique 4-20

Quiz 4-21

Summary 4-25


Configuring RMAN for OSB 4-26

5 Performing RMAN Backups and Restores

Objectives 5-2

Scheduling Backups with EM 5-3

Oracle-Suggested Backup 5-4

RMAN and OSB Process Flow 5-7

Oracle Secure Backup Jobs 5-8

RMAN and Oracle Secure Backup Job Execution 5-9

Managing Database Tape Backups 5-10

Performing Database Recovery 5-12

RMAN Automatic Failover to Previous Backup 5-13

Quiz 5-14

Summary 5-16

Practice 5 Overview: Performing OSB-Encrypted Backup and Restore 5-17

6 Backing Up File-System Data with Oracle Secure Backup

Objectives 6-2

Backing Up OS File Systems with Oracle Secure Backup 6-3

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

vi

File-System Backups 6-4

Managing Media Families 6-5

Dataset Examples 6-6

Creating Datasets 6-9

Configuring Backup Windows 6-11

Creating Backup Schedules 6-13

Creating Backup Triggers 6-14

Previewing a Backup Trigger 6-16

Creating On-Demand Backup Requests 6-17

Submitting Backup Requests 6-19

Reviewing Jobs 6-20

Quiz 6-21

Summary 6-24


Backing up File-System Data 6-25

7 Restoring File-System Backups with Oracle Secure Backup

Objectives 7-2

Browsing the Catalog for

File-System Backup Data 7-3

Restoring File-System Data 7-4

Restoring File-System Files with Oracle Secure Backup 7-5

The Restore Page 7-6

Listing All File-System Backups of a Client 7-7

Creating a Catalog-Based Restore Request 7-8

Submitting Restore Requests 7-12

Quiz 7-13

Summary 7-16

Practice 7 Overview: Restoring File-System Data 7-17

8 Managing Your Oracle Secure Backup Domain

Objectives 8-2

Oracle Secure Backup Processes: Daemons 8-3

Managing Common Daemon Operations 8-5

Quiz 8-6

Managing Defaults and Policies 8-7

Configuring Oracle Secure Backup Policies 8-8

Oracle Secure Backup: Backup Metadata Catalogs 8-9

Oracle Secure Backup: Directory Structure 8-11

Backing Up the Catalog 8-12

Manual Catalog Backup 8-13

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

vii

Quiz 8-14

Summary 8-16

Practice 8 Overview: Performing a Preconfigured OSB Catalog Backup 8-17

9 Managing the OSB Infrastructure

Objectives 9-2

Managing Clients 9-3

Adding Media Servers 9-4

NAS Devices 9-6

Adding NDMP Media Servers 9-7

Adding Devices 9-8

Discovering Devices on NDMP Hosts 9-10

Managing Devices 9-11

Tape Library Properties 9-12

Tape Drive Properties 9-13

Managing Volumes 9-14

Quiz 9-16

Summary 9-27

Practice 9 Overview: Viewing OSB Management Tasks 9-28

10 Configuring and Using Tape Vaulting

Objectives 10-2

Overview of Vaulting 10-3

Configuring a New Vaulting Environment 10-5

Defining Media Storage Locations 10-6

Defining Rotation Policies and Rules 10-7

Defining Rotation Policies and Rules 10-8

Associating a Media Family with a Rotation Policy 10-9

Using the Vaulting Environment 10-11

Scheduling a Location Scan 10-12

Viewing Scan Control Jobs 10-13

Executing a Media Movement Job 10-14

Viewing Vaulting Reports 10-15

Troubleshooting Vaulting 10-16

Recovery Manager and Vaulting 10-17

Recalling a Tape Volume 10-18

Quiz 10-19

Summary 10-22

Practice 10 Overview: Configuring and Using Tape Vaulting 10-23

11 Configuring Tape Duplication

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

viii

Objectives 11-2

Media Management 11-3

Overview of Tape Duplication 11-4

Tape Duplication and Vaulting 11-5

Tape Duplication and Migration 11-6

Configuring and Using Volume Duplication 11-7

Configuring a Duplication Environment 11-8

Defining Volume Duplication Policies 11-9

Associating a Duplication Policy with a Media Family 11-10

Scheduling Volume Duplication 11-11

Executing Jobs 11-12

Quiz 11-13

Summary 11-15


Viewing Media Life Cycle Demonstration 11-16

12 Tuning Oracle Secure Backup

Objectives 12-2

Tuning Hardware 12-3

Tuning RMAN and Oracle Secure Backup 12-4

Tuning RMAN Software 12-6

Performance Factors 12-8

Tuning Oracle Secure Backup 12-11

Results of Tuning 12-12

Scalability of the Overall System 12-13

Quiz 12-14

Summary 12-18

Appendix A

Appendix B Oracle Secure Backup: Additional Topics

Objectives B-2

Encrypted Backups to Tape . B-3

Creating RMAN Encrypted Backups B-4

Using Transparent Mode Encryption B-5

Using Password Mode Encryption B-7

Using Dual Mode Encryption B-8

Restoring Encrypted Backups B-9

Performing Encrypted Recovery B-10

Comparing RMAN and OSB Encryption B-11

Oracle Secure Backup Jobs B-14

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

ix

Managing Jobs B-16

Viewing Job Properties and Transcripts B-18

Troubleshooting Jobs B-20

Suspending and Resuming Job Dispatching B-21

Job Summaries B-23

Displaying Log Files and Transcripts B-24

Summary B-25

Appendix C Oracle Secure Backup Additional Installation Topics

Topics C-2

Windows Installation: Overview C-3

Oracle Secure Backup InstallShield Wizard C-4

Oracle Secure Backup Service Startup C-7

Service Logon and SCSI Devices C-8

Oracle Secure Backup Installed Files C-9

Installed Files for Host Role: Administrative Server C-13

Installed Files for Host Role: Media Server C-15

Installed Files for Host Role: Client C-16

Verifying Your Installation C-17

Removing Oracle Secure Backup C-18

Summary C-20

Appendix D Glossary

Index

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Preface

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Preface - 3

Profile

Before You Begin This CourseBefore you begin this course, you should be able to perform database backup and restore operations in Enterprise Manager at least equivalent to the level of the Oracle Database 11g: Administration Workshop I course, ideally equivalent to the level of the Oracle Database 11g: Administration Workshop II course.

How This Course Is OrganizedOracle Database 11g: Oracle Secure Backup is an instructor-led course featuring lectures and hands-on exercises. Online demonstrations and written practice sessions reinforce the concepts and skills that are introduced.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Preface - 4

Related Publications

Oracle PublicationsTitle Part NumberOracle Secure Backup Installation and Configuration

Guide, Release 10.2 E05408-02Oracle Secure Backup Administrator’s Guide,

Release 10.2 E05407-02Oracle Secure Backup Reference, Release 10.2 E05410-02Oracle Secure Backup Migration Guide, Release 10.2 E05409-01Oracle Secure Backup Readme, Release 10.2 E05411-05Oracle Secure Backup Licensing Information,

Release 10.2 E10310-02

Additional Publications• System release bulletins• Installation and user’s guides• read.me files• International Oracle User’s Group (IOUG) articles• Oracle Magazine

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Preface - 5

Typographic Conventions

The following two lists explain Oracle University typographical conventions for words that appear within regular text or within code samples.

1. Typographic Conventions for Words Within Regular Text

Convention Object or Term Example

Courier New User input; Use the SELECT command to viewcommands; information stored in the LAST_NAMEcolumn, table, and column of the EMPLOYEES table.schema names;functions; Enter 300.PL/SQL objects;paths Log in as scott

Initial cap Triggers; Assign a When-Validate-Item trigger touser interface object the ORD block. names, such as button names Click the Cancel button.

Italic Titles of For more information on the subject seecourses and Oracle SQL Referencemanuals; Manualemphasized words or phrases; Do not save changes to the database.placeholders or variables Enter hostname, where

hostname is the host on which thepassword is to be changed.

Quotation marks Lesson or module This subject is covered in Lesson 3,titles referenced “Working with Objects.”within a course

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Preface - 6

Typographic Conventions (continued)

2. Typographic Conventions for Words Within Code Samples

Convention Object or Term Example

Uppercase Commands, SELECT employee_idfunctions FROM employees;

Lowercase, Syntax variables CREATE ROLE role;italic

Initial cap Forms triggers Form module: ORDTrigger level: S_ITEM.QUANTITYitemTrigger name: When-Validate-Item. . .

Lowercase Column names, . . .table names, OG_ACTIVATE_LAYERfilenames, (OG_GET_LAYER ('prod_pie_layer'))PL/SQL objects . . .

SELECT last_nameFROM employees;

Bold Text that must CREATE USER scottbe entered by a IDENTIFIED BY tiger;user

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Introduction to Oracle Database 11g: Oracle Secure Backup

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Oracle Database 11g: Oracle Secure Backup I - 2


Objectives

After completing this lesson, you should be able to describe:

• The overall course objectives

• The product in context

• Your learning aids

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Course Objectives

After completing this course, you should be able to:

• Install and manage Oracle Secure Backup (OSB)

• Use Oracle Secure Backup and Recovery Manager (RMAN) to create Oracle Database backup and restore operations

• Use Oracle Secure Backup to create file-system backup and restore operations

• Manage the OSB environment:– Back up the OSB catalog

– Manage OSB domain: Add client

– Manage tape media (vaulting and duplication)

– Tune OSB

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Suggested Schedule

1, 2, 3, 4

10, 11, 12

Lessons

5

6, 7

8, 9

1

2

Day

1

2

2

Overview, Installation and Configuration

Topic

Advanced OSB Management(Tape Vaulting, Duplication and Tuning)

Database Backup and Restore

File System Backup and Restore

OSB Management (Core Tasks)

Suggested Schedule

The lessons in this guide are arranged in the order in which you will probably study them in the class. If your instructor teaches the class in the sequence in which the lessons are printed in this guide, the class should run approximately as shown in the schedule. Your instructor, however, may vary the sequence of the lessons for a number of reasons, including:

• Customizing material for a specific audience• Splitting topics, such as backup and restore of the database • Maximizing the use of course resources (such as hardware and software)

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



The Product in Context

The Product in Context

Oracle Secure Backup is a product in the “High Availability” group of database options. It has its own release cycle and version number, for example, Oracle Secure Backup 10.2 is the correct version for Oracle Database 11g (Release 1).Oracle Secure Backup provides the fastest, most efficient Oracle database backups to tape, as well as heterogeneous file system protection. O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Your Learning Aids

Related material:

• Oracle by Example (OBE): OTN > Oracle Database 11g > Availability > Oracle Secure Backup

– Installing and Configuring Oracle Secure Backup 10.2

– Performing Encrypted Backups with Oracle Secure Backup 10.2

– Configuring Policy-Based Media Management with Oracle Secure Backup 10.2

• Viewlets or demonstrations accessible from the product home page:

– Media Lifecycle Management

– Backup Encryption to Tape

– And more to come

Your Learning Aids:

OBEs show you step-by-step how to perform a specific task. They do not discuss why you need to perform a task. It is assumed that you have your own technical environment to follow along.Viewlets or demonstrations are generally a series of screenshots, displaying how a specific task is accomplished. O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup Documentation

• Oracle Secure Backup Installation and Configuration Guide• Oracle Secure Backup Administrator’s Guide• Oracle Secure Backup Reference• Oracle Secure Backup Migration Guide• Oracle Secure Backup Readme• Oracle Secure Backup Licensing Information

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Additional Resources

To continue your learning:

• Oracle Secure Backup home page

http://www.oracle.com/technology/products/secure-backup

• High Availability home page

http://www.oracle.com/technology/deploy/availability

• Oracle University (OU)http://education.oracle.com

• Oracle Technology Network (OTN) http://www.oracle.com/technology

• Oracle by Example (OBE) http://www.oracle.com/technology/obe

• My Oracle Support: OracleMetaLinkhttp://metalink.oracle.com

Additional Resources

Product home pages on OTN provide you with a variety of information, which can include the latest product updates, white papers, FAQs, and so on.Oracle University offers different formats to best suit your needs:

• Instructor-Led inClass Training• Live Web Class• Self-Study CD-ROMs

Oracle Technology Network is a free resource with information about the core Oracle software products, including database and development tools. You can have access to:

• Technology centers• Oracle Community, including user groups• Software downloads and code samples, and much more

My Oracle Support: Access to My Oracle Support is included as part of your annual support maintenance fees. In addition to the most up-to-date technical information available, My Oracle Support gives you access to:

• Service requests (SRs)• Certification matrixes• Technical forums monitored by Oracle experts• Software patches• Bug reports

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Oracle Secure Backup Overview

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Oracle Database 11g: Oracle Secure Backup 1 - 2


Objectives

After completing this lesson, you should be able to:

• Describe how Oracle Secure Backup complements the Oracle backup and recovery options

• Define Oracle Secure Backup terminology

• Describe Oracle Secure Backup interface options

• Describe backup management features of Oracle Secure Backup

For More Information

• http://www.oracle.com/technology/deploy/availability• http://www.oracle.com/technology/products/secure-backup• Oracle Secure Backup Administrator’s Guide• Oracle Secure Backup Reference O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



What Is Oracle Secure Backup?

• Centralized tape backup management software:– Managing data protection for diverse, distributed servers and

tape devices

– Client/server architecture for backing up and restoring data locally or over the LAN, WAN, or SAN

• Oracle Secure Backup features:– Tape backup management for entire Oracle environment,

including file systems and the Oracle database

– Policy-based backup management

– Secure data protection and interdomain communication

– Effective media and device management

– Broad tape device and platform support

What Is Oracle Secure Backup?

Oracle Secure Backup is centralized tape management software. It enables reliable data protection to tape, and supports the major tape drives and libraries in SAN, Gigabit Ethernet (GbE), and SCSI environments.Oracle Secure Backup enables you to do the following:

• Back up and restore data using a variety of machine architectures.• Access local and remote file systems and devices from any location in a network without

using Network File System (NFS) or Common Internet File System (CIFS) protocols.• Back up to and restore from Oracle Cluster File System (OCFS) on Linux and Windows• Use wildcards and exclusion lists to specify what you want to back up.• Control secondary storage-based data recording format and compression.• Duplex database backups (back up the same files to multiple devices). Each data stream

automatically goes to a separate device. • Perform full, incremental, or differential backups.• Maintain security and limit the users who are authorized to perform data management

operations.• Support most popular tape drives and libraries.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



File-system dataOracle databases

Oracle Secure BackupTape Backup Management

• Highest levels of tape data protection at the lowest cost

• Fastest, most efficient Oracle database tape backup

• Protection of entire Oracle environment including Oracle application files

• Oracle integrated product

UNIX

Windows

Linux

NAS

Oracle Secure BackupCentralized tape backup system

Tape

Integration with RMAN

Oracle Secure Backup Tape Backup Management

Business background: The increased demands on the enterprise backup infrastructure require more rigorous service-level agreements for backup windows and restoration time, while achieving reliable data protection within budget. The tape technology meets this challenge by offering high-speed devices and high-capacity media with a throughput similar to that of a disk (generally, at a high cost). Oracle Secure Backup addresses this issue by providing centralized tape backup management for the Oracle database and file systems in mixed, diverse environments, thus reducing the cost and complexity of tape backup and restoration.The graphic shows that Oracle databases are integrated via RMAN with Oracle Secure Backup (OSB) and that UNIX, Linux, Windows and Network Attached Storage (NAS) directly use OSB.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Tape Management and Integration with Oracle Products

File-system data:

• Oracle home installations

• Other nondatabase data

Oracle database:

• Version Oracle9i and later

• Real Application Clusters

Oracle Application Server configuration files

Oracle Beehive configuration files

Tapelibrary

Oracle Secure Backup

Centralized tape backup management

Backu

p an

d resto

re

Tape Management and Integration with Oracle Products

Some of the many options available for protecting your Oracle data are backing up solely to disk, backing up to disk as a staging area for tape backups, or backing up directly to tape. Disk backup and restore operations are generally faster than the equivalent tape operations. However, tape backups provide some advantages for long-term backup requirements, such as off-site storage and portability, which allow you to move backups from one data center to another. Oracle Secure Backup provides tape backup management for all your files relating to Oracle products, including:

• Oracle database backups stored on tape through integration with Recovery Manager• Seamless support of Oracle Real Application Clusters (RAC)• Support for Oracle Cluster File System (OCFS) and Automatic Storage Management

(ASM)• Central administration of distributed clients and media servers including:

- Oracle Application Server- Oracle Collaboration Suite- Oracle home and binaries

Note: Oracle Secure Backup has its own release cycle and version numbers; for example, Oracle Secure Backup 10.2 is the correct version for Oracle Database 11g (Release 1).

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



The Integration Advantage

• Key benefits of RMAN and Oracle Secure Backup integration:– Exclusive support of RMAN backup encryption to tape

– Faster, more reliable database backups to tape

– Single technical support resource, expediting problem resolution

• Enterprise Manager integration exclusive to OSB– Familiar interface for Oracle customers, reducing any

learning curves associated with other products

– Management of the entire Oracle database backup and recovery from disk (Flash Recovery Area) to tape

• Advanced, effective security based on proven Oracle technology

The Integration Advantage

This slide summarizes key benefits of RMAN and Oracle Secure Backup integration over other third-party media management libraries. Details about the security technology are:

• Secure Sockets Layer (SSL) implementation• Embedded Oracle wallets

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Client/Server ArchitectureHost Roles

• Administrative server – Maintains

configuration settings and backup history catalog

• Media server – Transfers data to or

from attached devices

• Client– Contains data to be

backed up

Administrative

server

Client

NETWORK

Oracle SecureBackup catalog

Media

server

Data tobackup

Client/Server Architecture Host Roles

To configure Oracle Secure Backup, you must define an administrative domain. An administrative domain is a group of machines on your network that you manage as a common unit to perform backup and restore operations. An administrative domain has one administrative server, one or more clients, and one or more media servers.

• The administrative server is a machine in your administrative domain that contains a full installation of the Oracle Secure Backup software. This host maintains the backup catalog files and other files for configuration settings and administrative data. The administrative server runs the scheduler, which starts and monitors jobs within the administrative domain. You need one administrative server for each administrative domain at your site. To configure an administrative server, choose an administrative server installation when installing Oracle Secure Backup on the host.

• A media server is a machine that has one or more secondary storage devices, such as a tape library, connected to it. A media server transfers data to and from its attached storage devices. During installation, you can configure multiple secondary storage devices on media servers.

• A client is a machine whose locally accessed data is backed up by Oracle Secure Backup. Most of the machines defined within the administrative domain are clients.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup Architecture

Administrative serverClient

observiced

obscheduled

observiced

obhttpd

Media server

observiced

Oracle Secure Backup Architecture

The Oracle Secure Backup Architecture includes:• Oracle Secure Backup catalog, a directory structure with host-specific subdirectories. This

means the contents vary depending on the roles you assign to the host. An administrative server has the central catalog with configuration and metadata.

• Daemons (or services), which are processes, that run in the background and perform OSB operations on behalf of an application

Some daemons run continually; others run only to perform specific work and then exit when the work is completed. The Oracle Secure Backup daemons actively participate in managing backup and restore operations:• obscheduled daemon: This daemon initiates scheduled events and manages jobs.• observiced daemon: On the administrative server, this daemon runs jobs (such as

backup and restore operations) at the request of the obscheduled daemon. • Apache Web server daemon (obhttpd): This daemon provides the Web tool GUI for

Oracle Secure Backup.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup forCentralized Tape Backup Management

Heterogeneous clients backed up over the network

LAN

TapeLibrary

NASUNIX orLinux Windows

Media servers locally

backed up

Oracle Secure Backup administrative server

Oracle Database

Oracle Secure Backup Administrative Domain

OSB Cloud

module

Oracle Secure Backup for Centralized Tape Backup Management

The Oracle Secure Backup software offers centralized backup management of heterogeneous clients and servers by storing the backup and configuration data in a central repository called the Oracle Secure Backup administrative server. The administrative server contains a consolidated backup catalog, providing a single location for managing backup policies, scheduling backups for multiple platforms, and managing local and remote tape devices. The configured machines and devices managed by an administrative server make up the Oracle Secure Backup administrative domain, as shown in the slide.The Oracle Secure Backup tape management system minimizes the complexity of managing diverse architectures by offering:

• Flexible tape device configuration with options for single- and multihosted tape libraries• Support for major tape libraries and tape drives in GbE and SCSI environments• Client/server architecture providing centralized administration of distributed media servers

over a local area network (LAN) or wide area network (WAN)

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Oracle Secure Backup for Centralized Tape Backup Management (continued)

The Storage Cloud enables users to take advantage of the virtually unlimited pool of computing resources and storage over the Internet (the Cloud). Unlike the traditional IT setup, users have little insight or control over the underlying infrastructure. Their interaction with the Cloud is primarily governed through an abstracted interface provided by the Cloud vendor. The Cloud is essentially disk storage.With the Oracle Secure Backup Cloud module, it is possible to send the local disk backups of the Oracle database directly to a storage cloud for off-site storage purposes. Amazon S3 is the first Cloud vendor that Oracle has partnered with, to enable database backup in the Cloud. This functionality may be extended to more Cloud platforms or vendors in the future.Backup and recovery from the Cloud is performed by RMAN. OSB 10.2 cannot back up to disk.So, OSB 10.2 does not have an explicit integration with the Cloud. RMAN backup encryption and advanced compression technologies may be used for Cloud backup strategies.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Typical SAN Environment

LAN

Tape devices

Administrative server

Oracle Secure Backup:

• Dynamically shares tape drives attached to the Storage Area Network (SAN)

• Manages any resource contention

Fibreconnectivity Oracle

Database

SAN

Typical SAN Environment

Oracle Secure Backup supports Storage Area Network (SAN) environments. The slide depicts a typical SAN environment where one or more servers are attached to the SAN along with one or more tape devices. Each of the tape devices attached to the SAN appears local to the servers using SAN. Clients within the administrative domain are backed up over the network to the tape devices on the configured media servers.Oracle Secure Backup automatically manages resource contention for tape drives within the SAN. During a backup or restore operation, a server engages a tape drive, thereby making it temporarily unavailable to other servers. When the operation completes, the tape drive is again available for use by any of the servers using SAN, as permitted by your configuration.When configuring tape devices, you are asked to configure attachments, where each attachment describes a data path between the host and the device itself. A device must have at least one attachment. In a SAN environment, a tape device may have multiple attachments, one for each host that can access the device.The Fibre fabric and switches within the SAN are transparent to Oracle Secure Backup. Therefore, SAN interoperability becomes important at the hardware level. When configuring a SAN, it is recommended to confirm that the hardware components have been tested and certified to work together.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup Interface Options


Web toolEM

Databaseoperations

File-systemoperations

obtoolRMANSBT

Oracle Secure Backup Interface Options

As shown in the slide, you can access Oracle Secure Backup in four different ways depending on what you want to do:

• Enterprise Manager provides a graphical interface to Oracle Secure Backup for users who elect to perform database backup and restore operations through integration with RMAN. You can also perform administrative tasks such as managing media and devices within the Oracle Secure Backup administrative domain. The Enterprise Manager console includes a link to the Oracle Secure Backup Web tool for performing file-system backup and restore operations.

• Use RMAN to back up your databases directly to tape. RMAN can be accessed either through the RMAN executable or through EM. RMAN communicates with Oracle Secure Backup through the system backup to tape (SBT) interface.

• The Web tool is a GUI application that enables you to configure administrative domains, manage operations, browse the backup catalog, and back up and restore data. It provides a graphical and interactive interface to access the obtool utility. You should use this interface when making backups of file-system data.

• The obtool utility provides a command-line interface to Oracle Secure Backup. This interface gives you the same functionalities as the GUI interface.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Media family

Volume set

Media Concepts: Overview

Set of tapes containing backup images

Set of volumes with common characteristics

Volume

Physical tape

Volume

Physical tape

Product of a backup operation

Backup image

Product of a backup operation

Media Concepts: Overview

Oracle Secure Backup organizes the backups it creates in a simple hierarchy, which comprises the following logical concepts:

• A “backup image” is the product of a backup operation. A backup image is a file that consists of one or more backup sections. A backup image can be contained within a single volume or it can span multiple volumes. The part of a backup image that fits on a single volume is called a “backup section.”

• A “volume” is a single unit of media such as an LTO-3 tape. It can store many backup images.

• A “volume set” is a group of one or more volumes that contain a complete backup image.• A “media family” is a named classification of volumes that share some common attributes,

such as the volume naming method, the policies used for writing data to volumes, and the length of time volumes are retained in the media family.

When you back up files using Oracle Secure Backup, you generate a volume set that has some common characteristics defined by the media family that you have associated with your backup operation.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Backup Pieces and Backup Images

Oracledatabase

files

RMAN backup set

RMANbackuppiece

RMANbackuppiece

…

Backupimage

Backupimage

Oracle Secure Backup images

Backup Pieces and Backup Images

The backup of an Oracle database, created by RMAN, results in a backup set (an RMAN-specific logical structure), which contains at least one backup piece (an RMAN-specific physical file containing the backed up data). Oracle Secure Backup backs up and maintains backup metadata for each RMAN backup piece written to tape within its own catalog. You can browse backup pieces with the obtool command-line or Oracle Secure Backup Web tool. Note: Use RMAN for the management of RMAN backup pieces. If you manage the backup pieces stored on tape by using Oracle Secure Backup utilities instead of RMAN, the Oracle Secure Backup catalog and the RMAN repository can become unsynchronized. The best practice is for backup pieces to be updated through RMAN, not manually by the use of Oracle Secure Backup.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Volume

Volume set

Media family

Library

Media family

. . .

Volume Volume

Volume Volume Volume

OS RMAN OSB

Data file 3

Data file 4

File-systemfile

Backuppiece

Backuppiece

Imagecopy

Backupimage

Backupimage

Backupimage

Backupimage

BACKUP ASBACKUPSET

BACKUPAS COPY

Backup set

(filesperset 3)

Data file 2

Data file 1

RMAN and Oracle Secure Backup Overview

Backupimage

section

Backupimage

section

Backupimage

section

Backupimage

section

Backupimage

section

Backupimage

section

RMAN and Oracle Secure Backup Overview

This slide combines the previously discussed concepts into one overview. On the left side it shows data files on the OS level, how they relate to RMAN image copies and backup pieces, and how these relate to OSB backup images. File-system files, which of course do not have and RMAN equivalent, relate directly to OSB backup images.The right side depicts that OSB backup images are stored as backup image section on a volume, within a volume set, which belongs to a media family in a tape library.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup Media Family

• A named classification of volumes that share the same:– Volume identification sequence

– Write-allowed period

– Expiration policy (either content- or time-managed)

• Used to classify and characterize backup types

• Commonly associated with backup levels, which generally correspond to retention times, such as:– Full

– Incremental

– Archive log

Oracle Secure Backup Media Family

Media families provide a way to establish write periods and retention policies for data backed up to various kinds of tapes. You can, for example, establish a media family for all of your backups that remain on-site, a separate media family for your backups that are to be stored off-site.A media family is a classification of backup media that share the same:

• Volume identification sequence: The volume ID consists of a fixed portion, followed by a sequence number assigned and updated by Oracle Secure Backup. When you create a media family, you specify how to generate volume IDs that become part of the volume label.

• Write window: The beginning of the write window is the time at which Oracle Secure Backup first writes to a volume in the volume set. The write window is a user-specified time interval that applies to all volumes in the set. Oracle Secure Backup continues to append backups to the volume set until the end of this interval. When the write window closes, Oracle Secure Backup does not allow further updates to the volume set until it expires or is relabeled, reused, unlabeled, or overwritten.

• Expiration policy: When a volume set expires, Oracle Secure Backup automatically considers each volume in the set eligible to be overwritten. A media family is either content managed (default) or time managed. These two policies are mutually exclusive.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Tape Drives and Libraries

Type of tape drive refers to its tape format such as

LTO-3 or SDLT600.

Storage elements (slots) store

tapes.

Tape library robotics move tapes between

drives and slots.

Device connectivity varies by device: SCSI, Fibre, and iSCSI

____________________________________________________________________________________________________________________________________________________________________________________________________________________________________

Tape library

Robotic control

mainlib

maintd1

maintd3

Barcode reader scans labels on

cartridges.

maintd2

Tape Drives and Libraries

Oracle Secure Backup maintains information about secondary storage devices, tape libraries,and tape drives, so they can be used for local and network backup and restore operations. These devices are easily configured during the installation process, or a new device can be easily added to an existing Oracle Secure Backup environment.Each tape drive and tape library is uniquely identified within an Oracle Secure Backup administrative domain by a user-defined name (for example, mainlib and maintd1). Because Oracle Secure Backup manages tape drive operations, it must explicitly be able to identify the tape drive as well as understand if the tape drive is housed within a tape library. Oracle Secure Backup must further determine which tape slots (storage elements) are available for storing tapes when they are not loaded in a tape drive. Before you can use tape drives or tape libraries with Oracle Secure Backup, you must add the device to the administrative domain. Oracle Secure Backup maintains a distinction between a device and the means by which the device is connected to a host. Each device you configure can have one or more attachments, where each attachment describes a data path between a host and the device itself. Most often, an attachment includes the identity of a host plus a UNIX device special file name, a Windows device name, or NAS device name. In rare cases, additional information is needed to complete the attachment definition.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Tape Drives and Libraries (continued)

A Fibre channel–attached tape drive or tape library often has multiple attachments, one for each host that can directly access it. When a device is attached to multiple hosts, Oracle Secure Backup automatically manages contention for the device so that only one host is permitted access to it at any time. For example, SAN-attached devices often have multiple attachments, one for each host that has local access to the device through its Fibre channel interface.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Virtual Tape Library (VTL)

• Providing the performance advantages of disk backup– Disk appliances, emulating tape libraries and drives

– Most popular virtual tape libraries supported by Oracle Secure Backup

See “Tape Device” compatibility guide on Oracle Technology Network)

• Increasingly adopted into IT environments– Seamless deployment without changing backup

infrastructure

– Flexible configuration with user-defined options for number and type of tape emulation

• Attached to the network or servers, depending on the manufacturer


A virtual tape library leverages traditional tape backup with disk technology to create an optimized backup and recovery infrastructure. Tape emulation software on the disk appliance emulates popular tape devices and formats. Because VTLs identify themselves as tape equipment, for the backup software, they appear identical to the actual tape device that is emulated.VTLs offer the performance advantages of disk backup and they may be seamlessly deployed in a system environment, without changing the backup infrastructure. Note: In this class (where physical tape devices are not available), you use virtual test devices to practice Oracle Secure Backup operations. These virtual test devices are not supported in production use and are different from the commercially sold VTLs. For a list of supported VTLs, refer to Certify on My Oracle Support.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Managing Data to Be Protected

Recurring or immediate backups scheduled using Enterprise Manager

Use RMAN backup levels: full and incremental

RMAN backup sets

Oracle Database

Flexible date/time calendar–based schedulingOn-demand backups

Frequency of backups

Multilevel backups: full, incremental, or off-site

Backup options

User-defined datasets: based on hosts, files, or directories

Defining what data to back up

File-System Data

Managing Data to Be Protected

Managing the backup infrastructure of file-system data and Oracle database data is easily administered with Oracle Secure Backup and RMAN. Defining what data to back up is conceptually similar for file-system and database data. Both require that you, the user, define what to include in the backup. For the database, you use the RMAN backups sets created using RMAN or Enterprise Manager. For file systems, Oracle Secure Backup uses “datasets.” Use the Oracle Secure Backup Web tool to define file-system datasets.After defining what data to back up, you must determine what type of backup is most appropriate to meet your backup and restore requirements. Oracle Secure Backup offers multiple backup levels for file-system backups including full backup levels, multiple incremental levels, and an off-site backup level. The off-site level is actually a full backup performed without interfering with any incremental backup strategies. Oracle Secure Backup also provides flexible scheduling options that enable you to determine ongoing backup schedules based on the day and time granularity. For the Oracle database, RMAN offers full and incremental backup levels that are backed up to tape by Oracle Secure Backup.After you have defined what, how, and how often to back up your data through scheduling, Oracle Secure Backup can automatically implement your backup schedules, only requiring manual intervention for hardware errors or media needs.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Securing Data and Access to the Backup Domain

• User-level access control– Users assigned to a set of privileges, called classes

– Consistent user identity mapping OS privileges to Oracle Secure Backup user, called preauthorized access

• Host authentication– Two-way server authentication

• Encryption– Oracle Secure Backup encryption for data in transport and

on tape

– For database backups: choice of RMAN and OSB encryption

– For file-system backups: OSB encryption

Securing Data and Access to the Backup Domain

Access ControlTo access the Oracle Secure Backup software, you must enter a username and password or use preauthorization. Each Oracle Secure Backup user is assigned to a class, which defines the actions that are permitted for that user.Host AuthenticationAll hosts in the administrative domain use SSL and X.509 certificates for identity verification and authentication. Sensitive data is encrypted before transmittal over the network. The Web server requires a signed X.509 certificate and associated public and private keys to establish an SSL connection with a client browser. The X.509 certificate for the Web server is self-signed by the installation script when you install OSB on the administrative server. Note: Currently, the Network Data Management Protocol (NDMP) does not include a mechanism to accommodate the negotiation of an SSL connection to NDMP filers.EncryptionFor your database backups, you have a choice of RMAN and OSB encryption; for your file-system backups, use OSB encryption.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

The best way to manage Oracle backup pieces when your configuration includes Oracle Secure Backup (OSB) is with:

1. OSB

2. RMAN

3. OSB or RMAN

4. RMAN or SQL

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Which interfaces may be used to back up and restore file-system data:

1. obtool

2. RMAN

3. Enterprise Manager

4. Web tool

Answers: 1, 4

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

During a backup or restore operation, a server engages a tape drive; but the tape drive is available at the same time for use by any of the servers on the SAN as permitted by your configuration.

1. True

2. False

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Which of the following statements is true? - You can assign to a single host:

1. The role of administrative server

2. The role of media server

3. The role of OSB client

4. All three roles

Answers: 1, 2, 3, 4

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Why Use Oracle Secure Backup?

• Intelligent integration with RMAN delivering the best performance and security for database backups– Backup encryption performed with Oracle database

– Faster, smaller backups protecting only used blocks

• Scalable, low-cost per-tape drive pricing– Substantial cost savings over the competition

– Unlimited clients, servers, and NAS

• Single technical support resource for entire backup solution expedites problem resolution

• Reliable, centralized backup management for entire Oracle environment

Why Use Oracle Secure Backup?

• Since Oracle 8.0, RMAN is the recommended backup utility for the Oracle database. It is known for reliable, automated, online protection of data to disk, and is integrated with numerous third-party media management products for backups to tape. Oracle Secure Backup provides an alternative to expensive, third-party tape backup utilities by providing the media management layer for RMAN tape utilization.

• Oracle Secure Backup increases customer return on investment by providing end-to-end tape data protection for your Oracle environment at a fraction of the cost of other tape products.

• Oracle Secure Backup exclusively provides RMAN encrypted backup to tape.• To deliver the fastest database tape backup, Oracle Secure Backup backs up only used

blocks (from Oracle Database 10.2.0.2 and later). This process makes the backups faster and smaller, which also saves space on tape.

• Oracle Secure Backup (as part of the Oracle technology stack) offers a single-vendor technical resource for complete Oracle database protection. The Oracle Secure Backup installation automatically links the SBT libraries for RMAN tape backups.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Summary

In this lesson, you should have learned how to:

• Describe how Oracle Secure Backup complements the Oracle backup and recovery options

• Define Oracle Secure Backup terminology

• Describe Oracle Secure Backup interface options

• Describe backup management features of Oracle Secure Backup

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Installing Oracle Secure Backup

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Objectives


• Decide on the structure of your administrative domain

• Perform preinstallation tasks

• Install Oracle Secure Backup on Linux

For More Information

• Oracle Secure Backup Installation and Configuration Guide • For supported tape devices, see http://www.oracle.com/technology/products/secure-backup.• For supported Web browser, platform and NAS devices, see Oracle’s certification matrix on My

Oracle Support.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Performing Preinstallation Tasks

• Confirm that your planned environment is supported.– Tape device support matrix on OTN

– Platform support on Certify on metalink.oracle.com

• Plan disk space for Oracle Secure Backup.

• Obtain Oracle Secure Backup software via OTN download or CD.

• Plan your administrative domain-that is, determine which host will be the administrative server, which the media server(s) and which the client(s).

• Obtain SCSI device information (UNIX and Linux).

Performing Preinstallation Tasks

There is no required sequence between the preinstallation tasks.Check the supported device list on OTN to confirm that your environment is supported:

• Platform support by host role• Tape library and tape drive support• Connectivity support

Each host that participates in an Oracle Secure Backup administrative domain must have a network connection and run TCP/IP. Oracle Secure Backup uses this protocol for all inter- and intra-server communication between its own and other system components.Each appliance that employs a closed operating system, such as Network Attached Storage (NAS) and tape servers, is backed up using NDMP. This protocol enables Oracle Secure Backup to access primary and secondary storage controlled by the appliance.Each host that participates in an Oracle Secure Backup administrative domain must also have some preconfigured way to resolve a host name to an IP address. Most systems use one of the name resolution mechanisms: Domain Name Service (DNS), Network Information Service (NIS), Windows Internet Name Service (WINS), or a local hosts file to do this. Oracle Secure Backup does not require a specific mechanism. Oracle Secure Backup requires only that, upon presenting the underlying system software with an IP address you have configured, it obtains an IP address corresponding to that name.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Installation and Configuration of the Administrative Domain

The graphic makes a distinction between the original software installation, which includes the mandatory configuration of the administrative server, and later configurations of media and client host roles. It also shows that tape drives and libraries can be added at any point in time.1. Software

installation2. Configure additional hosts and

tape devices

Client

Tape drives and libraries

OTN CD-ROM

Administrativeserver

Mediaserver

Client

Mediaserver

Installation and Configuration of the Administrative Domain

The installation and configuration of your administrative domain includes the following:• Install the Oracle Secure Backup software itself on each of your hosts except NDMP-enabled

hosts such as NAS filers. • Define your administrative domain on the administrative server. This step involves defining all

media servers, clients, and NAS filers.• When installing a media server, Oracle Secure Backup device attachments are created as part of

the device driver installation process. These attachments are used during the device definition. Make the administrative server aware of the tape devices that exist in your administrative domain. On each defined media servers, you configure the directly attached SCSI and Fibre Channel devices (tape libraries and tape drives). If you use a NAS filer with attached tape libraries and tape drives, you can use Oracle Secure Backup commands to discover these devices; this allows Oracle Secure Backup to recognize and communicate with the NAS-attached devices.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

The host that you use to initiate and manage backup and restore jobs should have the role of administrative server.

1. True

2. False

Answers: 1

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

You have hosts in your network with data that needs to be backed up. Assign these hosts the role of:

1. Administrative server

2. OSB client

3. Media server

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

You should assign hosts, which have tape or other secondary storage devices attached to them, the role of media server.1. True

2. False

Answers: 1

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

A single host can NEVER serve all roles.1. True

2. False

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Performing Installation Tasks

1. Log in as the root user.

2. Create an Oracle Secure Backup home directory.3. Change your directory to the <OSB_Home> directory.

4. Run the setup program from your <OSB_Home> directory and respond to the prompts.

[stage] $ su Password:[stage]# mkdir -p /usr/local/oracle/backup[stage]# cd /usr/local/oracle/backup[backup]# /stage/osb_installmedia/setup

Performing Installation Tasks

The recommended directory for installing the Oracle Secure Backup software is /usr/local/oracle/backup. You can install the software in a different directory, if desired. However, then the printed and online documentation for Oracle Secure Backup may not agree with your actual commands, output, and GUI screens. For users new to Oracle Secure Backup, this can add an unwanted layer of confusion. In this course, you use the default directory /usr/local/oracle/backup as OSB_Home.Note: There is no default “OSB_Home” environment variable, which is used to refer to this directory, unlike the ORACLE_HOME variable used with Oracle Database installations. After your OSB_Home directory is created, change your current directory to the OSB_Homedirectory, and execute the setup program from your staging area, which in this example is the /stage/osb_installmedia directory. If you use your CD-ROM drive as your staging area, use a command similar to /cdrom/cdrom0/setup. In the slide example, a stage directory is used instead of a CD-ROM drive.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Administrative Server Installation: Example

Welcome to Oracle's setup program for Oracle Secure Backup. This program loads Oracle Secure Backup software from the CD-ROM to a filesystem directory of your choosing.

This CD-ROM contains Oracle Secure Backup version 10.2.0.2.0_linux32.Please wait a moment while I learn about this host... done.- - - - - - - - - - - - - - - - - - - - -1. Linux32 administrative server, media server, client- - - - - - - - - - - - - - - - - - - - -Loading Oracle Secure Backup installation tools... done.Loading linux32 administrative server, media server, client... done.- - - - - - - - - - - - - - - - - - - - -Loading of Oracle Secure Backup software from CD-ROM is complete. You may unmount and remove the CD-ROM.

Would you like to continue Oracle Secure Backup installation with 'installob' now? (The Oracle Secure Backup Installation Guide contains complete information about installob.)Please answer 'yes' or 'no' [yes]: no


As you can see, Oracle Secure Backup analyzes the host on which you start the installation, then it loads the relevant software.installob is the primary installation script for Oracle Secure Backup. It can be called in a stand-alone fashion by invoking the installob shell script. O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




Welcome to installob, Oracle Secure Backup's UNIX installation program.

It installs Oracle Secure Backup onto one or more UNIX or Linux systems on your network. (Install Oracle Secure Backup for Windows using the CD-ROM from which you loaded this software.)

For most questions, a default answer appears enclosed in square brackets. Press Enter to select this answer.

Please wait a few seconds while I learn about this machine... done.

Have you already reviewed and customized install/obparametersfor your Oracle Secure Backup installation [yes]? noWould you like to do this now [yes]? no- - - - - - - - - - - - - - - - - - - - -

Administrative Server Installation: Example (continued)

The obparameters file is preconfigured. If you wish a default installation, answer no, once, to the question about customizing this file. If you wish to customize it, then you can use a text editor to edit the obparameters file in the/usr/local/oracle/backup/install/ directory (referred to as the OSB_Home/install directory). Various parameters are defined that you can configure to meet the needs of your business. For example, you can modify parameters for:

• Automatic startup at boot time of the observiced daemon• Automatic creation of an Oracle Secure Backup user, called oracle, that is assigned the oracle class, and preauthenticated to be used by RMAN

• Default certificate key size

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




Oracle Secure Backup is not yet installed on this machine.

Oracle Secure Backup's Web server has been loaded, but is not yet configured.

You can install this host one of three ways:(a) administrative server

(the host will also be able to act as a media server or client)

(b) media server(the host will also be able to act as a client)

(c) client

If you are not sure which way to install, please refer to the Oracle Secure Backup Installation Guide. (a,b or c) [a]? a


Specify the role for this server. If you install Oracle Secure Backup for first time on a specific network, then you should begin with an administrative server installation. By default, the administrative server is also configured as a client.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




Beginning the installation. This will take just a minute and will produce several lines of informational output.

Installing Oracle Secure Backup on edvmr1p0 (Linux version 2.6.9-67.0.7.0.1.ELxenU)

You must now enter a password for the Oracle Secure Backup encryption key store. Oracle suggests you choose a password of at least 8 characters in length, containing a mixture of alphabetic and numeric characters.

Please enter the key store password:key_password <<not echoed>>

Re-type password for verification:key_password <<not echoed >>


Choose a password for the Oracle Secure Backup encryption key store, which follows your security strategies. (Do not forget this password).Note: In this class, simple and easy to remember passwords (oracle) are used to avoid detracting from the purpose of the exercise. In real development and production environments, use strong passwords that follow the guidelines in Oracle Database Security Guide and the Oracle Secure Backup Administrator’s Guide.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




You must now enter a password for the Oracle Secure Backup 'admin' user. Oracle suggests you choose a password of at least 8 characters in length, containing a mixture of alphabetic and numeric characters. Please enter the admin password:admin_password << not echoed >>Re-type password for verification:admin_password <<not echoed>>

You should now enter an email address for the Oracle Secure Backup 'admin‘ user. Oracle Secure Backup uses this email address to send job summary reports and to notify the user when a job requires input. If you leave this blank, you can set it later using the obtool's 'chuser' command.

Please enter the admin email address:


Choose a password for the admin user, which follows your security strategies. If you know the email of the admin user you can enter it as well. During the software installation, you see the actions that are performed. For example:

generating links for admin installation with Web serverupdating /etc/ld.so.confchecking Oracle Secure Backup's configuration file (/etc/obconfig)setting Oracle Secure Backup directory to /usr/local/oracle/backup in /etc/obconfigsetting local database directory to /usr/etc/ob in /etc/obconfigsetting temp directory to /usr/tmp in /etc/obconfigsetting administrative directory to /usr/local/oracle/backup/admin in /etc/obconfigprotecting the Oracle Secure Backup directorycreating /etc/rc.d/init.d/observicedactivating observiced via chkconfiginitializing the administrative domain

If you wish to see the daemons or background processes, enter the following after the installation: # ps -a |grep ob13760 pts/0 00:00:00 observiced13772 pts/0 00:00:00 obscheduled

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




*********************** N O T E ************************On Linux systems Oracle recommends that you answer no to the next two questions. The preferred mode of operation on Linux systems is to use the /dev/sg devices for attach points as described in the 'ReadMe‘ and in the 'Installation and Configuration Guide'.

Is edvmr1p0 connected to any tape libraries that you'd like to use with Oracle Secure Backup [no]? no

Is edvmr1p0 connected to any tape drives that you'd like to use with Oracle Secure Backup [no]? noInstallation summary:

Installation Host OS Driver OS Move RebootMode Name Name Installed? Required? Req?admin edvmr1p0 Linux no no no

Oracle Secure Backup is now ready for your use.


After the Oracle Secure Backup software has been installed, you are asked if you want to configure any tape libraries or tape drives that might be attached to the current host.As suggested in the NOTE on the slide, you should answer no to both questions and follow the methods recommended in the Oracle Secure Backup Installation Guide.After the software installation completes, an installation summary appears.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



There are 3 Windows screenshots on this slide, showing:

– the Oracle Secure Backup welcome page

– the setup page, on which you choose which host roles to install, and

– the admin user password and email page

Wizard-Based Installation on Windows

Wizard-Based Installation on Windows

Start your Windows installation by running the setup.exe program. This activates the InstallShield wizard. Answer the questions of the InstallShield wizard, such as your customer information, your server role definition, your predefined Oracle user, passwords for the admin user and the encryption key store, and other questions needed to complete the installation on a Windows server.During the installation process, the Oracle Secure Backup Setup wizard copies all Oracle Secure Backup files to the local host and generates Windows Registry entries.The default directory on Windows is C:\Program Files\Oracle\Backup\, which is different from the recommended UNIX directory of usr/local/oracle/backup.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup Interfaces


.EM interfacehttps://<host_name>:1158/em

Web toolhttps://<host_name>

obtool

Oracle Secure Backup Interfaces

You can use either the GUI interface or the obtool command-line interface (CLI) to access the Oracle Secure Backup information. In all cases, you must use a valid username and password. For example, if you want to view the Oracle Secure Backup users, you can choose any of these three interfaces:

• You can start the Web tool by entering https://<host_name> into your Web browser. Click the Configure tab, and then click Users.

• You can start Enterprise Manager by entering https://<host_name>:1158/em into your Web browser, and then select the following: Availability > Oracle Secure Backup Device and Media > Configure > Users.

• You can start the obtool command line by entering obtool in a terminal window, and then the lsuser command.

Note: Enterprise Manager is the recommended interface.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup Web Tool Home Page

This screenshot has the OSB home page as it first appears.

The home page has the following sections:

1. Failed Jobs

2. Active Jobs

3. Pending Jobs

4. Completed jobs (within the last 24 hours)

5. Devices

No jobs have been executed; the devices are not in use.

Oracle Secure Backup Web Tool Home Page

The Oracle Secure Backup Web tool Home page provides a snapshot of the current status of Oracle Secure Backup jobs and devices, presenting important summary information to administrators and users. The Home page includes the schedule times and status of recent jobs as well as job IDs, job type, and job level. Oracle Secure Backup provides a link for failed jobs, alerting users and administrators to potential trouble spots. The Devices link lists the devices associated with each job along with information concerning device type, device name, and status. This page provides you with an overall sense of the various backup or restore processes that are going on. The Web tool provides a graphic interface for just about all of the Oracle Secure Backup features, such as:

• Flexible scheduling options for backups of file-system data:- Specify backups based on time of day, days of the week, month, quarter, or year- Schedule backups to start immediately or at a future date

• Backup windows to minimize impact on day-to-day backup operations• Ability to create off-site backups for remote storage without disturbing currently scheduled

incremental backups of the same data

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Common Obtool Commands

lsvol --all or lsvol --library <libname>Volumes

lsmf --longMedia families

lsds (for dataset information)lspiece (for RMAN backup pieces)lsbackup (for file-system backups)lssection (for backup image sections)

Backups

lsjob (-a | -c | -p)lsbw (backup windows)Lssched

Jobs and schedules

id, lsuser, lsclassUser info

Storage selectors

Devices

Hosts

Category

lshost -l

lsssel

lsdev

Obtool Command

Common Obtool Commands

The slide lists some of the common obtool commands that you can use to query the Oracle Secure Backup administrative and catalog data. Depending upon the information you want to retrieve, you may use additional options to specify the amount of information returned, such as listing all the volumes for a particular media family or listing only completed jobs.For details of all command options, see the Oracle Secure Backup Reference.These commands can assist you with troubleshooting your OSB installation and configuration. For example, the lshost command shows the current roles of a host. If you want to add a device to your OSB domain, the host must have the mediaserver role, which is not installed by default.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Oracle Secure Backup installation automatically discovers NAS-attached media devices.

1. True

2. False

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

When installing the administrative server, the following components are also installed:

1. Media server only

2. Client only

3. Media server and client

4. None

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

After initial installation, the OSB administrative server is automatically configured with a media server role:

1. True

2. False

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Summary


• Decide on the structure of your administrative domain

• Perform preinstallation tasks

• Install Oracle Secure Backup on Linux

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Practice 2 Overview:Installing and Configuring Oracle Secure Backup

This practice covers the following topics:

• Creating your Oracle Secure Backup home directory

• Installing the Oracle Secure Backup software

• Configuring the media server and virtual test devices

• Inserting volumes into both tape libraries

Note: Completing all practice steps is a prerequisite for all the following practices.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Securing Domain and Data

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Objectives


• Manage user access control for Oracle Secure Backup

• Add an Oracle Secure Backup user with preauthorized access

• Describe host authentication

• Determine backup security characteristics

• Describe Oracle Secure Backup encryption

• Configure host encryption policies

Objectives

This course focuses on Oracle Secure Backup: Access control, authentication and OSB encryption. For comprehensive coverage of Oracle’s security concepts and tools (including RMAN encryption), see the course titled Oracle Database 11g: Security.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Managing User Access Control .

Oracle Secure Backup user:

• Is different from an Oracle schema and an OS user

• Is assigned to a single UNIX and a single Window account

• Has one set of access rights

• Belongs to only one class

Class Class

> Access ControlAuthenticationEncryption

Set of user rightsSet of user rights

Managing User Access Control

Oracle Secure Backup maintains its own catalog of Oracle Secure Backup users and their rights on the administrative server. This is in addition to the database access and operating system control. By storing Oracle Secure Backup access control information about the administrative server, Oracle Secure Backup maintains a consistent user identity across the administrative domain.A set of “rights” is grouped into a “class,” which can be assigned to multiple users. However, each user is a member of exactly one class. An Oracle Secure Backup user is different from an Oracle schema user, as well as an operating system user. You can assign Oracle Secure Backup usernames and passwords that are identical to or different from those of existing operating system users. Each Oracle Secure Backup user is associated with a single UNIX account and a single Windows account. These UNIX and Windows accounts are used when some component of Oracle Secure Backup must assume a UNIX or Windows identity when running on behalf of a given Oracle Secure Backup user.Note: You might find it convenient to name Oracle Secure Backup users like their OS user identity.To configure Oracle Secure Backup users, you must belong to a class with the “Modify administrative domain’s configuration” right.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Predefined Classes and User Rights

Perform Oracle backups and restores

Access Oracle backups

Modify any job, regardless of its owner

List any job, regardless of its owner

Manage devices and change device state

Query and display information about devices

Receive e-mail describing internal errors

Receive e-mail requesting operator assistance

Perform restores as privileged user

Perform restores as self

Modify any jobs owned by user

List any jobs owned by user

Perform backups as privileged user

Perform backups as self

Modify administrative domain's configuration

Modify own name and password

Display administrative domain's configuration

Browse backup catalogs with this access

readeroracleuseroperatoradminRightsPrivileged

all

notdenied

all

permitted

owner

permitted

owner

named

none

YYYYYYYYYYYYYYY

Y

Y

YY

YYYYYYYYYYY

Y

Y

YY

YYY

Y

YY

Y

YYY

YYYY

Y

Predefined Classes and User Rights

A class defines a set of rights or access privileges. Oracle Secure Backup comes with the following predefined classes:• admin: Is used for the overall administration of a domain. The admin class has all the

rights and privileges needed to modify domain configurations and perform backup and restore operations.

• operator: Is used for standard day-to-day operations. The operator class lacks configuration privileges but has all the rights needed for backup and restore operations as well as viewing and managing devices.

• user: Is assigned to specific users giving them permission to interact in a limited way with their domains. This class is reserved for users who need to browse their own data within the Oracle Secure Backup catalog and perform user-based restore operations.

• oracle: Is similar to the operator class with specific privileges to modify Oracle database configuration settings, as well as to perform Oracle database backups and restore operations

• reader: Enables users to view the Oracle Secure Backup catalog data. Readers are permitted only to modify the given name and password for their Oracle Secure Backup user accounts.

You can use the mkclass command to define your own Oracle Secure Backup user class.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Predefined Classes and User Rights (continued)

Here is the explanation of each right:• Browse backup catalogs with this access:

- Privileged: Users can browse all directories.- Notdenied: Users can browse any directory for which they are not explicitly denied

access. This option differs from permitted in that it allows access to a directory having no stat record stored in the catalog.

- Permitted: Users can browse a directory to which, based on operating system file ownership and protection, they have read rights.

- Named: Users can browse a directory if the UNIX user defined in the Oracle Secure Backup identity is listed as the owner of the directory or the UNIX group defined in the Oracle Secure Backup identity matches the group of the directory. If the UNIX user defined in the Oracle Secure Backup identity has read rights for the directory, but is not the UNIX owner or a member of the UNIX group associated with the directory, then the user is not able to browse the directory.

- None: Users have no rights to browse any directory.• Display administrative domain’s configuration allows the class member to list objects

(for example, hosts, devices, and users) in the administrative domain.• Modify own name and password allows the class member to modify certain attributes

for their own user objects (password and given name).• Modify administrative domain’s configuration allows the class member to edit (create,

modify, rename, and remove) all configuration data in an Oracle Secure Backup administrative domain. These include classes, users, hosts, devices, defaults and policies, schedules, datasets, media families, summaries, and backup windows.

• Perform backups as self allows the class member to back up only those files and directories in which the member has access (using either UNIX user and group names or a Windows domain account).

• Perform backups as privileged user allows the class member to back up files and directories while acting as a privileged user (root on UNIX and as a member of the Administrators group on Windows).

• List any jobs owned by user enables the class member to view:- Status of scheduled, ongoing, and completed jobs that they create- Transcripts for job that they create

• Modify any jobs owned by user allows the class member to modify only jobs that the member configured.

• Perform restore as self allows class members to restore the contents of backup images under the restrictions of the access rights imposed by the user’s UNIX name or group, or the Windows domain and account.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Predefined Classes and User Rights (continued)

• Perform restore as privileged user allows the class member to recover the contents of backup images as a privileged user (root on UNIX and as a member of the Administrators group on Windows).

• Receive email requesting operator assistance allows the class member to receive email messages when Oracle Secure Backup requires manual intervention. Occasionally, during backup and restore operations, your assistance may be required—for example, if a new tape is required to continue a backup. In such cases, emails are sent to all users who belong to classes having this attribute.

• Receive email describing internal errors allows the class member to receive email messages describing errors that occurred in any Oracle Secure Backup activity.

• Query and display information about devices allows the class member to query the state of all storage devices configured within the administrative domain.

• Manage devices and change device state allows a class member to control the state of devices.

• List any job, regardless of owner allows the class member to view:- Status of any scheduled, ongoing, and completed jobs- Transcripts for any job

• Modify job, regardless of owner permits the class member to make changes to any job.• Access Oracle backups specifies the type of access to Oracle Database backups made

through the SBT interface. The values are as follows:- owner indicates that the user can access only SBT backups created by the user.- class indicates that the user can access SBT backups created by any Oracle Secure

Backup user in the same class.- all indicates that the user can access all SBT backups.- none indicates that the user has no access to SBT backups.

• Perform Oracle backups and restores allows the class member to back up and restore Oracle databases. Users with this right are Oracle Secure Backup users that are mapped to operating system accounts used when performing Oracle database installations.

SBT requests will be honored only if the OS account making the request is mapped to an Oracle Secure Backup user who has the “Oracle database backup/restore” right. In addition to this, SBT restore, query, and remove requests will be honored only if the OS account making the request is mapped to an Oracle Secure Backup user whose “Access Oracle backups” right allows access to the piece requested.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Configuring Oracle Secure Backup Users

For unprivileged backup, that is, file-system backup not as

UNIX root or Windows Administrator

Tip: No clear text passwords, use

prompts.

Configuring Oracle Secure Backup Users

To configure one or more users, perform the following steps:1. From the Web tool Home page, click the Configure tab in the menu bar.2. Click Users in the submenu under Basic. The Users page appears.3. Click the Add button to add a new user. A dialog box appears for entering a username.4. Enter a username in the User field. Formally, it is unrelated to any other name used in

your computing environment or the Oracle Secure Backup administrative domain. Practically, you might find it convenient to choose Oracle Secure Backup usernames that are identical to users’ Windows or UNIX names.

5. Enter a password for the user in the Password field. This password is used to log in to Oracle Secure Backup. Note: The practice of supplying a password in clear text on a command line or in a command script is not recommended by Oracle Corporation. It is a security vulnerability. The recommended procedure is to prompt the user for the password.

6. Select a class from the User class list.7. Optionally, enter a given name in the Given name filed. This name is for information

purposes only.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Configuring Oracle Secure Backup Users (continued)

8. Enter a UNIX name for this account in the UNIX name field. This name forms the identity of any nonprivileged jobs run by the user on UNIX systems. If this Oracle Secure Backup user will not, or is not permitted to, run Oracle Secure Backup jobs on UNIX systems, the user can leave this field blank.

9. Enter a UNIX group name for this account in the UNIX group field. This name forms the identity of any nonprivileged jobs run by the user on UNIX systems.

10. In the NDMP server user list, select yes if you want Oracle Secure Backup’s NDMP server to accept a login from this user using the username and password you have supplied. This is not required for normal Oracle Secure Backup operation and is typically set to no.

11. Enter the email address for the user in the Email address field. When Oracle Secure Backup wants to communicate with this user, such as to deliver a summary report or notify the user of a pending input request, it does so by sending an email to this address.

12. Choose one of the following:- Click Apply to add the user account and remain in this page.- Click OK to add the user account and return to the Users page. The user account

appears in the User Name box on the Users page. A message appears in the Status box informing you that the user was successfully added.

- Click Cancel to avoid the operation and move back one page.13. If the user you configured needs to initiate backup and restore operations on Windows

clients, refer to the “Assigning Windows Account Information” section.Note: Oracle Secure Backup creates the admin user when a new administrative domain is initialized. You cannot remove the admin user.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup User:OS Permissions

osbuser1 can only backup and restore data

accessible to

UNIX name: jdoe UNIX group: sysadmin

% obtool Oracle Secure Backup 10.2 login: osbuser1

Oracle Secure Backup User: OS Permissions

When writing backup data to tape, you must log into Oracle Secure Backup. You can login explicitly or transparently by using "preauthorization". Oracle Secure Backup uses the class and rights assigned to the osbuser1 user, to determine whether or not the requested action is allowed. In this example, the osbuser1 user can only back up and restore data accessible by the jdoe UNIX user and the sysadmin UNIX group. The UNIX name and group are the identity under which an unprivileged backup operation will be performed. When an Oracle Secure Backup user makes an unprivileged backup or restore of a host, the host is accessed by means of an operating system identity.

• If a UNIX or Linux host is backed up or restored, then Oracle Secure Backup uses the UNIX username and group values for the operating system identity.

• If a Windows host is backed up or restored, then Oracle Secure Backup uses the first (domain, account, password) triplet that allows access to the host.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup User:OS Permissions

OSB admin user: typically root on

UNIX or LocalSystem on Windows

Scheduled job

root on UNIX; OSB service on Windows

Privileged backup

Unprivileged on-demand and RMAN backups

Type of Backup Operation

Current session of the OSB user

OS Namespace

Oracle Secure Backup User: OS Permissions (continued)

The OS user that is used to access the files being backed up depends upon the type of backup operation:

• If you create a scheduled job, the backup runs in the OS namespace associated with the Oracle Secure Backup admin user, which is typically root on UNIX-like systems orLocalSystem on Windows systems.

• If you perform an on-demand backup, the OS namespace associated with the Oracle Secure Backup user of the current session is used, unless you specify the backup should run as a privileged operation. A backup that runs in privileged mode runs under the rootoperating system identity. On Windows systems, the backup runs under the same account as the Oracle Secure Backup service on the Windows client. Backup and restore requests submitted through the RMAN interface are treated as on-demand jobs.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Preauthorization

run { …allocate channel oem_sbt_backup1 type 'SBT_TAPE' format '%U';…}

RMAN script:

Preauthorized users do not log in explicitly.

Oracle Secure Backup verifies:

• RMAN preauthorization

• Matching OS and database identity

• Backup and /or restore class rights

Preauthorization

You can preauthorize Oracle Secure Backup users for the use of the obtool command line (cmdline), rman, or both. Using the example from the previous slide, the jdoe OS user can be preauthorized to use Oracle Secure Backup as the osbuser1 OSB user, without having to supply an Oracle Secure Backup username or password.Preauthorization for file-system backups is primarily used to avoid logging in to Oracle Secure Backup when running custom scripts. Without cmdline preauthorization, the script would fail, because access to Oracle Secure Backup is not granted without user login. RMAN preauthorization is required to successfully backup or restore the Oracle database. Oracle database backups are invoked from RMAN or Enterprise Manager. When Oracle Secure Backup receives communication from RMAN (through sbt), Oracle Secure Backup verifies that an OSB user meets the following requirements:

1) RMAN preauthorization on that host 2) Matching the OS user identity of the Oracle instance associated with the database (which

is, for example, oracle) 3) Assignment to a class with rights to back up or restore Oracle database

If these three criteria are not successfully met, Oracle Secure Backup does not perform the RMAN backup or restore requests.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Preauthorizing Access

Best Practice Tip: Limit preauthorized

access to selected hosts.Unique combination of: Hosts,

OS and Windows name

Preauthorizing Access

To provide preauthorized access, you can modify parameters for an existing user account:1. From the Users page, select the name of the user from the User Name box.2. Click the Edit button. A page appears with details for the user you selected.3. Make any required changes. To modify users, you must be a member of a class that has

this right enabled.4. Choose one of the following:

- Click Apply to remain in this page.- Click OK to save the changes and return to the Users page.- Click Cancel to avoid the operation and move back one page.

• If your Oracle Secure Backup user needs to initiate backup and restore operations on Windows clients, then you must add Windows Domains information.

• To configure RMAN and/or command-line preauthorization, click Preauthorized Access and specify the appropriate attributes. The combination of Hosts, OS username, and Windows domain name must be unique.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Assigning Windows Account Information

Assigning Windows Account Information

You can associate an Oracle Secure Backup user with multiple Windows domain accounts or use a single account that applies to all Windows domains.This section explains how to configure Windows account information for existing Oracle Secure Backup users who need to initiate backups and restores on Windows clients.To assign Windows account information to an Oracle Secure Backup user, perform the following steps:

1. From the Users page, select the name of the user from the User Name box.2. Click the Edit button. A page appears with details for the user you selected.3. Click the Windows Domains button. The Windows Domains page appears.4. Enter a Windows domain name in the Domain name field. Type an asterisk (*) in this box

for all Windows domains.5. Enter a Windows user account in the Username field.6. Enter a Windows password in the Password field.7. Click the Add button to add the Windows account information. The domain appears in the

Domain: Username list.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Preauthorization may be specified for:

1. obtool users only

2. RMAN only

3. Both

Answers: 3

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Which are required to allow RMAN to successfully backup or restore using Oracle Secure Backup:

1. RMAN must connect via a preauthorized user.

2. The preauthorized OSB user's OSB class must have database backup and restore rights.

3. The preauthorized OSB user's OSB class must have OS file backup and restore rights.

4. The OSB user permissions must match those of Oracle instance.

Answers: 1, 2, 4

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Messages sent securely

Authentication

Ethernet Network

X.509 certificate transmitted proving identity

Identity verified

Reply submitted

SSL communication established; backup or restore operations may proceed

The identity of each host is securely established before accepting communications.

1

2

3

4

Access Control> Authentication

Encryption

Authentication

For hosts to securely exchange control messages and backup data within the domain, they must first authenticate themselves to one another. Host connections are always based on two-way authentications with the exception of the initial host invitation to join a domain and communication with NDMP servers.In two-way authentication, the hosts participate in a handshake process whereby they mutually decide on a cipher suite to use, exchange identity certificates, and validate that each other’s certificate has been issued by a trusted Certificate Authority (CA). At the end of this process, a secure and trusted communication channel is established for the exchange of data.The use of identity certificates and SSL prevents outside attackers from impersonating a client in the administrative domain and accessing backup data. For example, an outside attacker would not be able to run an application on a nondomain host that sends messages to domain hosts that claim origin from a host within the domain.Note: Currently, the NDMP protocol does not include a mechanism to accommodate the negotiation of an SSL connection to NDMP filers.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Leveraging Oracle Security Technology

• Intradomain communications are secured by using the Secure Sockets Layer (SSL) protocol.– Backup messages are encrypted as part of SSL

communication.

– Two-way authentication of clients and servers is performed, with an SSL “handshake” verifying identity.

• Every client and server has a unique X.509 certificate signed by a trusted Certificate Authority (CA).– The Oracle Secure Backup administrative server is the CA

that issues and manages security credentials within the domain.

• Oracle wallets are encrypted containers storing X.509 certificates on all machines within the domain.

Leveraging Oracle Security Technology

Oracle Secure Backup uses the SSL protocol to establish a secure communication channel between hosts in an administrative domain. Any host in the domain can use a public key to send an encrypted message to another host, but only the host with the corresponding private key can decrypt the message. The default key size for all hosts in the domain is 1,024 bits. If you accept this default, then you do not need to perform any additional configuration. You can set the size of the key to values between 512 (less secure) and 4,096 (very secure). The Advanced Encryption Standard (AES) defines three standard key lengths, which are 128-bit, 192-bit, and 256-bit. The Web server requires a signed X.509 certificate and associated public and private keys to establish an SSL connection with a client browser. The X.509 certificate for the Web server is self-signed by the installation script when you install Oracle Secure Backup on the administrative server.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Leveraging Oracle Security Technology (continued)

You can modify the default security configuration in the following ways:• Disable SSL for interhost authentication and communication by setting thesecurecomms security policy.

• Transmit identity certificates in manual certificate provisioning mode.• Set the key size for a host to a value greater or less than the default of 1,024 bits.• Disable encryption for backup data in transit by setting the encryptdataintransit

security policy.For more information about how to modify the secure settings for your installation, refer to the Oracle Secure Backup Administrator’s Guide.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Administrative Server Certificate Authority (CA)

Administrative

server

Identity certificate

Signing certificate

Wallet

Media server and client

Wallet

Identity certificate

If destroyed without backups: Create new wallets for each host

in the domain.

If destroyed: Reinstall host to create new wallet, which can

then be digitally signed by CA.

Administrative Server Certificate Authority (CA)

The Oracle Secure Backup administrative server is automatically configured as the Certificate Authority (CA) upon installation. During the installation of an administrative server, its wallets (encrypted and obfuscated) are created along with a signing certificate and identity certificate. The administrative server has the signing certificate, which it needs to sign the identity certificates for other hosts, and its identity certificate, which it needs to establish authenticated SSL connections with other hosts in the domain.By default, wallets and identity certificates are automatically created during the installation of media servers and clients. However, you can manually provision these certificates by using the obcm utility. For more information about obcm and manual certificate provisioning, see theOracle Secure Backup Reference.The encrypted wallets should be backed up, whereas the obfuscated wallets should not be backed up. If a host wallet becomes destroyed, the host must be reinstalled and configured. This generates a new host wallet, which again is to be digitally signed by the administrative server. If the administrative server wallet is destroyed, the wallet must be re-created using the --initnewdomain command. However, if a new administrative server wallet is created, then a new wallet for each host in the domain must be created, so that their identity certificates are digitally signed by the new administrative server signing certificate.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Administrative Server Certificate Authority (CA) (continued)

Because Oracle Secure Backup embedded wallets are used only for intradomaincommunication, they do not have any direct relationship to the backup data written to tape. Therefore, if wallets are destroyed and re-created, it does not affect the restoration of data from tape.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Wallets for OSB Intradomain Communication

• Oracle Secure Backup creates a unique wallet for every host in the administrative domain. (No additional configuration is needed. No sharing with other Oracle products.)

• The wallets contain X.509 certificates, but no encryption keys (unlike the database wallets).

• There are two types of wallets:– A password protected, encrypted file to establish security

credentials

– An obfuscated wallet, used by Oracle Secure Backup daemons

Note: Back up the encrypted wallet regularly,but never the obfuscated one.

Oracle Wallets

When you add hosts to the administrative domain, Oracle Secure Backup creates the wallet, keys, and certificates for each host. No additional intervention or configuration is required. All required wallet functionality is embedded in Oracle Secure Backup, thereby eliminating the need for other wallet utilities.Every host in the domain, including the administrative server, has a private key known only to that host that is stored with the host’s identity certificate. This private key corresponds to a public key that is made available to other hosts in the administrative domain. Any host in the domain can use a public key to send an encrypted message to another host, but only the host with the corresponding private key can decrypt the message. Oracle wallets are encrypted containers designed to store X.509 certificates. Unlike the database encryption key wallet, the Oracle Secure Backup wallet does not store encryption keys for data.Oracle Secure Backup does not share its wallets with other Oracle products. Besides maintaining its password-protected wallet, each host in the domain maintains an obfuscated wallet. This version of the wallet does not require a password. The obfuscated wallet, which is scrambled but not encrypted, enables the Oracle Secure Backup software to run without requiring a password during system startup.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Oracle Wallets (continued)

The password for the password-protected wallet is generated by Oracle Secure Backup and not made available to the user. The password-protected wallet is not normally used after the security credentials for the host have been established because the Oracle Secure Backup daemons use the obfuscated wallet.To reduce the risk of unauthorized access to obfuscated wallets, Oracle Secure Backup does not back them up. The obfuscated version of a wallet is named cwallet.sso. By default, the wallet is located in /usr/etc/ob/wallet on Linux and UNIX and C:\Program Files\Oracle\Backup\db\wallet on Windows.Best practice tip: Back up the encrypted wallet.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Encrypted Backups to Tape .

OSB backup encryption:

• Available for RMAN and file-system data

• Data encryption on the client host (prior to any transport or local writes, but not for NAS)

• According to your encryption policy:– Encryption level

– Encryption algorithm

– Key types

– Rekey frequency

Note: Consider costs and benefits of encryption, such as performance, accessibility and administrative overhead.

Access ControlAuthentication

> Encryption

Encrypted Backups to Tape

Oracle Secure Backup encryption is available for both RMAN backup data (Oracle 9i and higher) and for file-system data. Oracle Secure Backup encrypts data on the client host. (Because there is no client software installation on NAS, NAS data cannot be encrypted by OSB.) While encryption occurs outside the database, the data is encrypted prior to transport over the network or prior to being written to a locally attached tape device. Backup clients do not have direct access to the tape drives, Data is sent to the media server, which applies your encryption policies.To implement your encryption policy, you can choose among multiple levels, considering the costs and benefits of encryption, such as performance, accessibility and administrative overhead. Details of your OSB encryption choices are covered in the following pages.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup Encryption

Client hostMedia server

Encrypted data on tape

File-system

data

RMAN

backup data

Encrypted data

Embedded SSL

for keys

OSB

encryption


Key store for each

host

Tape libraries and drives

Oracle Secure Backup Encryption

OSB encryption keys are managed by Oracle Secure Backup. They are stored in host-specific encrypted key stores on the administrative server. For security purposes, encryption keys are not stored on client machines, but instead are transmitted via SSL for encryption and decryption. During backup or restore operations, they are held in memory at the client host, but never saved on disk.The backup data is encrypted on the client host before any transport. OSB backup encryption protects data on tape (while onsite, offsite or lost).

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Configuring Host Encryption Policies

Encryption level

Default: AES192

Key renewal:- Automatic for transparent keys- Email, log file and display output notification for passphrase renewal

Certificate keys define level of security for host authentication and are NOT related to backup encryption.

Configuring Host Encryption Policies

You can specify encryption:• At the global or host level for all backup data (additionally at backup or volume level for

file-system data).- required: All data coming from this backup domain or this client must be

encrypted.- allowed: The decision to encrypt is deferred to the next lower priority item.

• Supported algorithms: AES128, AES192 (default), and AES256• A client rekeyfrequency policy defines when a new key is generated. For example,

the policy might require that a new set of keys be generated every 30 days. Transparent keys are automatically rekeyed. For keys that depend on a passphrase, you receive an email notification. Additionally, Oracle Secure Backup writes a message to the log files and the display output.

• Key types: transparent (randomly generated keys) or passphrase (keys generated based on your passphrase.)

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Using OSB Encryption Keys

• First generated during client installation (mkhost phase)

• Valid until automatic or manual renewal

• Key types: – transparent: Randomly generated keys, default and

recommended– Passphrase: Keys generated based on your passphrase

(hash of passphrase is stored, but not the passphrase itself)

• Stored in encrypted key stores on the administrative server:– Active encryption keys

– All old encryption keys

Using OSB Encryption Keys

Each newly created client gets an automatically generated key during the mkhost phase. It remains valid for encryption until:

• A key renewal event occurs.• You manually renew an automatically generated key.• You change the key to a passphrase by providing a new passphrase.

The passphrase itself is never stored anywhere. The hash of the passphrase and the key generated from the passphrase are stored in the encrypted key store. Oracle Secure Backup does not enforce a minimum length for a passphrase.After the new key is created, it is added to the wallet-protected key store and marked as the active encryption key. Old encryption keys are left in the key store and used for automatic and seamless decryption of data. If clients are removed from the backup domain, then their key stores are still retained on the administrative server. This ensures that you can always restore data.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Transient Backup Encryption

• One-time use in addition to the regular schedule

• Moving data to other OSB domains

• Encrypting data at the volume set level for a given job

• Transient Key for this volume set:– Based on a passphrase

– Not stored by default in key store

Site A Site B

Transient Backup Encryption

Scenario: You work in a data center for many customers. From your production environment (A) your customer requests a one-time backup of his three client hosts to create the same environment (B) as his independent test environment. Each of the client backup files is encrypted with its own specific key. You do not want to disclose the keys, because they are used for the regularly scheduled backups. Oracle Secure Backup enables cross-site backup encryption without this security threat by encrypting data at the volume set level for a given backup job. The key for this volume set encryption is based on a passphrase. The data is encrypted with this passphrase-generated key for all clients that are part of this specific backup job. You, as backup administrator of Site A, give the passphrase and encryption algorithm to Site B for the restore operation, so that the data can be decrypted.In all other cases, the OSB encryption keys are automatically added to the appropriate wallet-protected key store. A transient key, however, is a one-time key used mainly for moving data to a remote location. By default, transient encryption keys are not stored in the key stores, but Oracle Secure Backup provides you the --storekey/-s option of the backup obtool command to store the key.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Transient Backup Encryption (continued)

Before restoring data in another OSB domain, the tapes must first be imported to update the OSB catalog. Your customer enters the passphrase during the restore operation to decrypt the backup. In another scenario, if backup and restore operations occur in the same domain (for example, you must duplicate a test environment for another team), then you do not need to provide thepassphrase, because Oracle Secure Backup knows it already.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Comparing OSB and RMAN Encryption

Encryption algorithms up to 256-bit AES

Encryption algorithms: AES128, AES192 (default), and AES256

Global or host level

For RMAN backup Only for RMAN backup dataFor file-system data

User-entered password for decryptionSeamless decryption within domain

RMAN encryption keys:

- Managed by database

- Stored in database wallet

OSB encryption keys:

- Managed by OSB

- Stored in host-specific encrypted key stores on administrative server

Data encryption within the database: no further encryption

Data encryption on the client host

Database or tablespace level

RMAN Encryption

Global, host, backup or volume level

OSB Encryption

Via “Advanced Security Option”

Comparing OSB and RMAN Encryption

Oracle Database backup encryption can be performed in one of two ways:• OSB encryption:

- For both: RMAN backup data (Oracle 9i and higher) and for file-system data- Oracle Secure Backup encrypts data on the client host. (Because there is no client

software installation on NAS, NAS data cannot be encrypted by OSB.) While encryption occurs outside the database, the data is encrypted prior to transport over the network or prior to being written to a locally attached tape device. For decryption within the same domain, you do not have to provide a passphrase.

- Embedded SSL technology provides secure transport of backup data and messages between two-way authenticated servers.

• RMAN encryption (available with “Advanced Security Option”):- RMAN can encrypt backups of an Oracle database on the database or tablespace

level. RMAN encrypts the backup data within the database. This is generally faster than the OSB encryption. The RMAN encryption keys are stored in database wallets and are managed by the database. You must provide passwords for decryption.

- RMAN encrypted backups require the Advanced Security Option. For more on RMAN encryption, see the course titled Oracle Database 11g: Security.

• When OSB encounters RMAN encrypted backups, it does not perform any additional encryption.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

OSB host encryption keys are stored:

1. On each host

2. In an Oracle wallet

3. All in one encrypted key store on the administrative server

4. Each in their specific host key store on the administrative server

Answers: 4

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Which statements are true about transient backups?

1. The passphrase for a transient backup is briefly stored in clear text.

2. Only the hash value and the key, based on the passphrase, are stored.

3. Transient backups can only be restored in the same OSB domain.

4. Transient backups can use just one encryption key for a backup job, even if diverse hosts are part of the volume set.

Answers: 2, 4

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Your host encryption policy is set to passphrase-generated keys. Within the same OSB domain, encrypted backups are automatically decrypted and restored without requiring that you enter any password.

1. True

2. False

Answers: 1

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Which is the most secure OSB encryption setting?

1. Key type: passphrase and algorithm: AES256

2. Key type: passphrase and algorithm: AES128

3. Key type: transparent and algorithm: AES256

4. Key type: transparent and algorithm: AES192 (default)

5. Key type: transparent and algorithm: AES128

Answers: 3

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Summary


• Manage user access control for Oracle Secure Backup

• Add an Oracle Secure Backup user with preauthorized access

• Describe host authentication

• Determine backup security characteristics

• Describe Oracle Secure Backup encryption

• Configure host encryption policies

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Practice 3 Overview:Configuring OSB Security


• Defining a new Oracle Secure Backup user

• Configuring preauthorization for this user

• Defining a host encryption policy

Note: Completing all practice steps is a prerequisite for all the following practices.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Configuring RMAN for Oracle Secure Backup

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Objectives


• Describe integrated disk and tape backup

• Register the Administrative Server in EM

• Check RMAN backup and recovery settings

• Create database backup storage selectors

• Use time- and content-managed expiration policies

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle DatabaseDisk and Tape Backup Solution

• Flash Recovery Area space managed by RMAN

• Automatic restores from disk or tape without user-specified destination

• Optimized backup to tape

RMAN

Oracle Databases

Oracle Secure BackupMedia Management Layer

RMAN

--- OR ---Backup directly to tape

Backup from disk to tape

Flash Recovery

Area

Enterprise Manager

Oracle Database Disk and Tape Backup Solution

Oracle Database 10g (and later) has a Flash Recovery Area, which is a unified disk storage location for all database recovery-related files. RMAN manages the disk space in the Flash Recovery Area. With the Flash Recovery Area and Oracle Secure Backup, you can easily deploy a comprehensive disk and tape backup and recovery strategy for your Oracle databases.By putting RMAN in control of your backup and restore operations, you simplify your availability-related processes. You have the most effective restore process because RMAN automatically restores from the best backup source (which can be disk or tape). If the most recent backup is not available, RMAN continues with a previous backup. This failover can be from disk to tape. It does not require any user intervention.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Backing Up the Flash Recovery Area to Tape

• One simple RMAN command: BACKUP RECOVERY AREA

• Advantages of using the Flash Recovery Area to tape:– Performing optimized backups to tape

– First restoring from Flash Recovery Area for maximum performance, then using tape (if needed)

– Reducing I/O on databases (separate disk group)

Backing Up the Flash Recovery Area to Tape

To back up the Flash Recovery Area to tape with Oracle Secure Backup, you issue one RMAN command: BACKUP RECOVERY AREA. Using this disk-to-tape backup method (instead of performing a separate backup of the production database to tape) provides a few distinct advantages:

• Saves tape resources with optimized backups of the Flash Recovery Area. It eliminates unnecessary backup of files, which are already on tape.

• Enables RMAN to utilize better restore intelligence, first from disk, then from tape, as needed. Otherwise, RMAN use the most recent backup regardless of the storage media.

• Reduces I/O (important for production databases) because the Flash Recovery Area uses a separate disk group.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Defining Retention for RMAN Backups

• Achieving retention policy with both disk and tape backups• Defining an RMAN RECOVERY WINDOW retention policy

• Using the RMAN DELETE OBSOLETE command:

– Deleting obsolete files on disk

– Notifying Oracle Secure Backup of backup pieces that are no longer needed

• Defining content-managed media families for RMAN and Oracle Secure Backup (recommendation)

NowFile1File2

Seven-day retentionRMAN recovery window

Defining Retention for RMAN Backups

By defining retention periods within RMAN, a combination of disk and tape backups is used to meet your recovery requirements. When using the Flash Recovery Area and Oracle Secure Backup, the recommended RMAN retention policy is the user-defined RECOVERY WINDOWoption. This means, that you define a period of time within which point-in-time recovery must be possible. When defining this recovery window, also consider the following:

• Base retention on recovery needs• Size the Flash Recovery Area based on desired disk recovery capability• Schedule disk and tape backups through RMAN or EM

If your recovery plan allows for restoration from disk for a certain number of hours each day, the Flash Recovery Area should be of sufficient size to hold the recovery-related files for this time period. The amount of time backups remain within the Flash Recovery Area is determined by the amount of available disk space, not by a specific time setting.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



RMAN and Oracle Secure BackupBasic Process Flow

OSB client:

Database server


Media serverData being

backed up

4

3

1RMAN

EM

2

5

RMAN and Oracle Secure Backup Basic Process Flow

1. RMAN initiates backup and passes the database backup storage selector to OSB. If RMAN is started from the Enterprise Manager (EM) interface, then you must configure the administrative server in EM (a one-time task).

2. Oracle Secure Backup creates the backup job. Typically, the OS namespace associated with the Oracle Secure Backup user of the current session is used.

3. Oracle Secure Backup executes the job (transfers data from client to media).4. Oracle Secure Backup updates its own catalog.5. RMAN updates its repository.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Integration with Enterprise Manager

• The Oracle Secure Backup Device and Media link invokes the OSB Administrative Server page in EM.

• The File System Backup and Restore link invokes the Oracle Secure Backup Web tool.

Integration with Enterprise Manager

Oracle Secure Backup has been integrated with Enterprise Manager (Database Control and Grid Control). It can be accessed through the Availability page.By using the EM interface, you can manage the Oracle Secure Backup administrative domain and perform tasks such as adding or deleting media servers or tape devices, and scheduling RMAN backups for the database.The OSB Web tool is the best interface to use file-system backups, adding and deleting clients, managing defaults and polices, and managing Oracle Secure Backup users.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Configuring the Administrative Server in EM

Configuring the Administrative Server in EM

Before you can use Enterprise Manager to manage your administrative domain, you must first configure the administrative server information within EM.Connect to the Database Control on the administrative server. From the Availability page, click the “Oracle Secure Backup Device and Media” link in the Oracle Secure Backup section. This takes you to the Add Administrative Server page if this is the first time you are trying to access Oracle Secure Backup from Database Control on that host. On the Add Administrative Server page, specify the Oracle Secure Backup home directory, which is the directory specified during the software installation. (The recommended Oracle Secure Backup Home is /usr/local/oracle/backup, as shown in the screenshot.) EM assumes that the local host is the Oracle Secure Backup administrative server and enters the local host name for the administrative server name. You also need to enter the Oracle Secure Backup administrative Username (for example, admin) and Password. On the following page, you specify the OS user as Host Credentials.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup Administrative Server Page

Oracle Secure Backup Administrative Server Page

The Administrative Server home page provides an overview of your administrative domain.From this management page, you can perform management tasks for the administration domain by clicking the appropriate links:

• Administrative server (the Edit Settings link in the General section)• Media servers• Media families• Volumes (the Details link)• Devices (the Manage link) • For file-system backups, a link to invoke the Oracle Secure Backup Web tool is

conveniently located at the bottom of the page. It is marked by a red box.Note: Use the Manage Devices link to test the accessibility of your libraries.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



RMAN Database Backup to Tape


Databasebackupstorageselector

PreauthorizedRMAN user

SBTlibrary

1. Configure 2. Perform Backup and Restore


Oracle server session

SBT channel

RMAN

EM

RMAN Database Backup to Tape

The RMAN database backup to tape consists of two steps:1. Configure preauthorization and a database storage selector in Oracle Secure Backup.2. Use RMAN to perform your backup and restore operation.

When you install Oracle Secure Backup, the installer automatically performs the following tasks:

• Copies the SBT library to the /lib subdirectory of the OSB_Home directory• Creates a symbolic link to the library in the /lib or /usr/lib directory

So, by default, you are automatically using Oracle Secure Backup each time you allocate an SBT_TAPE channel with RMAN.On a host that has Oracle Secure Backup installed, RMAN searches for and loads the SBT library, as soon as an SBT channel is allocated. RMAN looks in a platform-specific default location for the SBT library. On UNIX or Linux, the default library file name is libobk.so, with the extension varying according to platform: .so, .sl, .a, and so on. On Windows, the default library location is %ORACLE_HOME%\bin\orasbt.dll. When you access Oracle Secure Backup from RMAN, all you do is allocate a channel of type SBT_TAPE, and then run RMAN commands to back up or restore your database.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Recovery Settings

Recovery Settings

In Enterprise Manager, navigate to Availability > Recovery Settings and ensure that the database is in ARCHIVELOG mode and that your Flash Recovery Area (FRA) is big enough. Oracle Corporation recommends the use of this area for all disk backups, but other configurations are possible. O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Backup Settings

Backup Settings

In Enterprise Manager, you must configure “Tape Drives” (in this screenshot set to 1) and you must configure a database backup storage selector. Optional, but recommended: You should test your tape drive.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Database ID

Media family

Host

Database name

Content: archivelog, full,incremental, autobackup

Restricteddevices

Wait time

Database Backup Storage Selector

• RMAN passes database name, content type and copy number to OSB.

• OSB determines corresponding selector.

• Selector specifies devices and media family (and any restrictions).

Databasebackupstorageselector

Copy number

Database Backup Storage Selector

Database backup storage selectors are for backups of Oracle databases. Oracle Secure Backup uses information contained in storage selectors to interact with RMAN when performing backup operations. Oracle Secure Backup maintains storage selectors as an object type on the administrative server.When RMAN performs an Oracle database backup to devices and media managed by Oracle Secure Backup, RMAN passes the database name, content type, and copy number to Oracle Secure Backup. With this information Oracle Secure Backup determines the corresponding database backup storage selector. This selector informs Oracle Secure Backup to which devices, if any, to restrict this backup, and which media family (if any) to use. Database backup storage selectors enable you to specify which resources should be used by SBT backups. A database backup storage selector object contains the following information:

• The database name or ID. An asterisk character (*) indicates that the storage selector applies to all databases.

• The name of the hosts to which this selector applies. An asterisk character (*) indicates that the storage selector applies to databases residing on all available hosts.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Database Backup Storage Selector (continued)

• The name of the media family to use for backups under the control of this storage selector object

• The backup content to which this selector applies. The content may be one or more of the following:

- archivelog: Backs up or restores database archived redo logs- full: Backs up or restores the database files, regardless of when they were last

backed up. This option is the same as a level 0 backup. - incremental: Backs up or restores only data that has been modified since the last

backup, regardless of the backup level- autobackup: Backs up or restores control files- * : Represents all content types

• The names of devices to which backups controlled by this storage selector are restricted. You specify the restriction in one of the following forms:

- devicename: Uses the specified device- @hostname: Uses any device of the specified host- devicename@hostname: Uses the specified device attached to the specified host

When more than one device restriction is specified in a list, Oracle Secure Backup selects only one of them from the list.

• The RMAN copy number to which this selector applies. This is configured for use with the RMAN commands BACKUP … COPIES or CONFIGURE BACKUP COPIES to duplex backup sets to protect against disaster, media damage, or human error. The copy number must be an integer in the range of 1 through 4. The default value is an asterisk (*), which indicates that the storage selector applies to any copy number.

• How long to wait for the availability of resources required by backups under the control of this storage selector. The resource wait time is specified as a duration, which has the following format:

duration::= forever | disabled | number {[seconds] | [minutes] | [hours] | [days] | [weeks] | [months] | [years]}

If the resources do not become available during the specified wait time, RMAN fails the job.

Note: For more information about creating and managing database backup storage selectors, refer to the obtool topic, “Database Backup Storage Selector Commands,” in the Oracle Secure Backup Reference.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Defining Database Storage Selectors

Defining Database Storage Selectors

Storage selectors are created, named, and modified by a user belonging to a class with the Modify administrative domain's configuration right. To create a database backup storage selector, perform the following steps:

1. In EM Database Control, click the Availability tab.2. On the Availability page, click the Configure Backup Settings link.3. On the Configure Backup Settings page, click Configure in the Oracle Secure Backup

section. This takes you to the Backup Storage Selectors page. From there, you can manage your backup storage selectors. Then, click Return.

You can also use the following example command to create a database storage selector:mkssel -c * -d * -i * -h EDRSR14P1 -r vdte1 ssel1

This example creates a database backup storage selector that is valid for any Oracle database located on the EDRSR14P1 host. The storage selector object is called ssel1, and it restricts backups to the vdte1 tape drive. The lsssel command enables you to list the defined database backup storage selectors in your administrative domain.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Media Families and RMAN

Media Families and RMAN

OSB provides two default media families: • The time-managed OSB-CATALOG-MF for OSB catalog backups• The content-managed RMAN-DEFAULT for RMAN backups. Thus, creating media

families for use in RMAN backups is optional. You may find it useful to create different media families for the different types of backup sets that you create with RMAN and for backups that have different retention and storage requirements. For example, you may want to create a media family on-site backups and a separate media family for off-site backups.You can create media families in Enterprise Manager. On the Administrative Server page, you can click the link corresponding to the Media Families number. This takes you to the Media Families page, where you can create new media families and manage the existing media families used by Oracle Secure Backup.Alternatively, you can use the Oracle Secure Backup Web tool to create these media families or use the mkmf command in obtool. Note: For more information about how to manage media families within Oracle Secure Backup, refer to the Oracle Secure Backup Administrator’s Guide.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Media Management Expiration Policies for Automated Tape Recycling

Volume setcreation

Write window Retention duration

Volume setclosed

Updates allowed Updates forbidden

Recycling time-managed volumesOSB Ready for reuse:

The day after volume expiration

File-systemfile

Backupimage

Volume set

Media family

Library

Backupimage

section

Volume

Backupimage

section

Volume

Backupimage

section

Volume

OS OSB


Oracle Secure Backup automates tape recycling, reusing tapes after the backups or volumes have expired, depending on their user-defined recycling method. Time-managed expiration policies: The expiration time is associated at the volume level for time-managed media families. When the volume expiration date is reached, the volume becomes eligible to be overwritten. Each volume in a volume set will have an expiration date, which is determined as follows:

• The user-defined Write window determines how long the tape may be appended to after the first tape write event (optional).

• The user-defined retention time determines how long the volume must be retained after the Write window has closed or after the first tape write event, if a write-window is not defined. If a write-window is not defined, the volume will be appended to, until it is full.

• The expiration time is the Write-window time plus the retention time.In short, time-managed volumes for file-system backups have a user-defined expiration period associated with the volume, not content of volume. (This policy is not for RMAN.)

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




RMAN control of content expiration:• RMAN DELETE OBSOLETE command notifies OSB about

obsolete backup pieces.

• OSB updates expiration status in the Oracle Secure Backup catalog (no deletion from tape).

• After all backup pieces on a specific tape have a “deleted” attribute, OSB considers the tape eligible for reuse.

• OSB overwrites the tape, when a tape is needed.

Marked DELETEDby RMAN

Volumeset

Recycling content-managed volumes

Backuppiece

Backuppiece

Backuppiece

Backuppiece

Expired Expired Expired Expired

Marked DELETED by Oracle Secure Backup

Or

RMAN Ready for reuse:

“deleted” attribute for all backup pieces


Content-managed expiration policies: The expiration time is associated with the content on the tape, not with the actual volume.

• With content-managed volumes, the retention period is configured within RMAN by using the recovery window or redundancy setting. Oracle Secure Backup does not associate a specific date with the backup piece, but updates the piece attribute from “content manages use” to “deleted” status as instructed by RMAN.

• By issuing the RMAN DELETE OBSOLETE command, RMAN deletes any disk backups no longer needed to meet the user-configured retention policies and notifies the media management software (Oracle Secure Backup) about which pieces can be deleted. The expiration status is updated in the Oracle Secure Backup catalog, but the actual pieces are not deleted from tape. Instead, the backup pieces receive the “deleted” attribute.

• After all backup pieces on a specific tape have a “deleted” attribute, Oracle Secure Backup considers the tape eligible for reuse, and overwrites the tape when a tape is needed.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



OS RMAN OSB

Backupimage

section

Volume

Volume set

Media family

Library

Media family

. . .

Backupimage

section

Volume

Backupimage

section

Volume

Backupimage

section

Volume

Backupimage

section

Volume

Backupimage

section

VolumeData file 3

Data file 4

File-systemfile

Backuppiece

Backuppiece

Imagecopy

Backupimage

Backupimage

Backupimage

Backupimage

BACKUP ASBACKUPSET

BACKUPAS COPY

Backup set

(filesperset 3)

Data file 2

Data file 1

RMAN and Oracle Secure Backup

RMAN and Oracle Secure Backup

This slide shows the RMAN backup pieces and their relationship to volumes.As previously seen: On the left side it shows data files on the OS level, how they relate to RMAN image copies and backup pieces, and how these relate to OSB backup images. File-system files, which of course do not have and RMAN equivalent, relate directly to OSB backup images.The right side depicts that OSB backup images are stored as backup image section on a volume, within a volume set, which belongs to a media family in a tape library.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Media Management Expiration Troubleshooting Technique

• RMAN repository and OSB catalog must remain synchronized.

• RMAN CROSSCHECK command marks removed pieces as expired.

• RMAN DELETE EXPIRED command removes pieces from RMAN repository.


OSB catalog

RMAN

EM

RMAN

repository

Media Management Expiration Troubleshooting Technique

It is not recommended, but you can remove backup pieces (an RMAN backup piece corresponds to an Oracle Secure Backup backup image) with the Oracle Secure Backup Web tool or the rmpiece command in the obtool utility. These commands remove the backup piece from the Oracle Secure Backup catalog. If you remove a backup piece outside of RMAN, you must use the RMAN CROSSCHECKcommand to update the RMAN repository and have the removed backup pieces marked as EXPIRED. Then you use the RMAN DELETE EXPIRED command to remove these backup pieces from the RMAN repository.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Which are the parameters that RMAN passes via a database storage selector to OSB?

1. Database name or ID

2. Copy number

3. Host unique name

4. Content type

Answers: 1, 2, 4

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Which types of content may be associated with a storage selector?

1. Archivelog

2. Tablespace

3. Datafile

4. Autobackup

5. Incremental

Answers: 1, 4, 5

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Creating a media family for RMAN is mandatory:

1. True

2. False

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

The recommended retention policy for RMAN backups with OSB is:

1. Recovery window

2. Redundancy

3. OSB management of retention

Answers: 1

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Summary


• Describe integrated disk and tape backup

• Register the administrative Server in EM, a one-time task

• Check RMAN backup and recovery settings

• Create database backup storage selectors to pass information between OSB and RMAN

• Use time-managed expiration policies for file-system data backups with OSB

• Use content-managed expiration policies for database backups with RMAN

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Practice 4 Overview:Configuring RMAN for OSB


• Registering the administrative server in EM

• Verifying connectivity to the libraries

• Creating a database backup storage selector for your database

• Testing your tape backup

• Verifying RMAN recovery settings

Note: Completing this practice is a prerequisite for the following practices.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Performing RMAN Backups and Restores

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Objectives


• Perform an OSB-encrypted RMAN backup to tape

• Restore a data file from a tape backup

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Scheduling Backups with EM Configuration> Backup

Restore

Scheduling Backups with EM

With the EM Database Control Console, you can schedule backups to disk, tape, or both:1. To schedule a backup, click the Schedule Backup link on the Availability page.2. On the Schedule Backup page, you can choose either the Oracle-suggested backup strategy,

or configure a customized backup.In the screenshot shown in the slide, the Oracle-suggested strategy is chosen by clicking the Schedule Oracle-Suggested Backup button. Regardless of whether you accept the suggested backup method or devise your own, you can select the type of storage media to use for your backups.The Oracle-suggested backup strategy makes a one-time, whole-database backup, which is performed online. This is a baseline incremental level 0 backup. The automated backup strategy then schedules incremental level 1 backups for each following day. By selecting Schedule Customized Backup, you gain access to a wider range of configuration options. Select the objects that you want to back up—the whole database (the default) or individual tablespaces, data files, archived logs, or any Oracle backups currently residing on the disk (to move them to the tape).

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle-Suggested Backup


On the Schedule Oracle-Suggested Backup: Destination page, select Disk, Tape, or Both Disk and Tape. Your selection here (and other recovery settings, such as ARCHIVELOG enabled or not), determines the options available to you on other pages of the Schedule Backup Wizard.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




Oracle-Suggested Backup (continued)

On the Schedule Oracle-Suggested Backup: Setup page, specify your disk and tape settings. (If you have not yet configured a tape device, you receive an error.)At the bottom of the page, you can specify RMAN encryption. If you use RMAN encryption, it overrides Oracle Secure Backup encryption (and none of your OSB encryption settings will be used).

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




Oracle-Suggested Backup (continued)

On the Schedule Oracle-Suggested Backup: Schedule page, specify the backup start time.On the Schedule Oracle-Suggested Backup: Review page, review parameters and the RMAN script and click Submit Job.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



RMAN and OSB Process Flow

OSB client:

Database server


Media serverData being

backed up

4

3

1RMAN

EM

2

5

RMAN and OSB Process Flow

This graphic depicts the sequence of events in the RMAN and OSB process:1. RMAN initiates backup. If RMAN is started from the Enterprise Manager (EM) interface,

then you must configure the administrative server in EM (a one-time task).2. Oracle Secure Backup creates the backup job.3. Oracle Secure Backup executes the job (transfers data from client to media).4. Oracle Secure Backup updates its own catalog.5. RMAN updates its repository.

Each backup and restore operation creates output both in RMAN and OSB.O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup Jobs

Log

Transcript

Job

ID

Type

Backup

Restore

Job summaries


Each backup and restore operation creates a corresponding job. Each job has a unique ID, log, and transcript (as shown in the graphic).

• Job logs describe high-level events, such as:- Job creation- Job dispatch- Completion times

• Job transcripts describe the job details, such as:- Created at the time of dispatch- Updated as the job progresses- Input requests, such as “operator assistance required”

There are two different job types:• Data set jobs for file-system backup or restore operations• Oracle backup jobs for database backup or restore operations

A job summary is a text file report produced by Oracle Secure Backup that describes the status of selected file-system backup and restore jobs. Job summaries may be generated on a regular, repeating basis and sent via email to users.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



RMAN and Oracle Secure Backup Job Execution

RMAN and Oracle Secure Backup Job Execution

To verify that your RMAN and Oracle Secure Backup job executed successfully, review:• Output Log (you can see how RMAN first uses the disk, then the tape)• EM Backup Reports (accessible from the EM Availability page)

If an error occurs during an SBT session, then Oracle Secure Backup attempts to send the error description to the administrative server to be saved in the job transcript. The database writes SBT errors to the sbtio.log trace file. Typically, sbtio.log is located in therdbms/log subdirectory of the Oracle home, but you can specify an alternative location.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Managing Database Tape Backups

Managing Tape Backups

Use the Manage Current Backups page to search for and display a list of backup sets or backup copies. You can then perform management operations on selected copies, sets, or files. You can access this page from the Availability page.The Manage Current Backups page displays both disk and tape backups, as shown in the slide.Use the Search section to find backup sets or copies. For example, use the Status “Available” and the Contents options (Datafile, Archived Redo Log, SPFILE, and Control File) and Completion Time “Within a month” to filter the results list. You can use Catalog Additional Files to catalog backup pieces on disk or to add metadata to the RMAN repository when adding a new database to an RMAN recovery catalog.You can ensure that data about backups in the recovery catalog or control file is synchronized with the corresponding data on disk or in the media management catalog by performing the Crosscheck All function and scheduling the operation as a job.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Managing Tape Backups (continued)

You can use the Delete All Obsolete function to remove backups that are obsolete or eligible for deletion. You can use the function to create a job that removes the physical files, deletes the recovery catalog records (if you use a catalog), and updates the records in the target control file to the DELETED status. If the backup is stored on tape and managed by Oracle Secure Backup, the Oracle Secure Backup catalog is also updated to indicate that the backup pieces are deleted.You can create a job using the Delete All Expired function to remove expired records. First, use the Crosscheck All function to determine whether backups recorded in the repository still exist on disk or tape. If Enterprise Manager cannot locate the backups, then it updates their records to the EXPIRED status. After that, you can use the Delete All Expired function to remove the records.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Performing Database Recovery ConfigurationBackup

> Restore

Performing Database Recovery

In Enterprise Manager, you can access the Perform Recovery page from the Availability page. The Perform Recovery page enables you to perform various kinds of database recovery. You can recover the whole database, a particular data file, or a tablespace. RMAN automatically retrieves from backup all the files that are needed for the specified recovery operation, regardless of whether the files were backed up to disk or tape.If RMAN requests files from a previous backup that is stored on tape, Oracle Secure Backup automatically determines which tape to use. If those tapes are not immediately available (offsite), RMAN will wait for the resources as long as you specify. You can specify RMAN resource wait times in the following locations, each of which overrides the preceding specifications in the list:

1. The rmanresourcewaittime policy2. The RMAN channel configuration parameter OB_RESOURCE_WAIT_TIME

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



RMAN Automatic Failover to Previous Backup

RMAN Automatic Failover to Previous Backup

When you recover your database after a data loss, RMAN automatically selects the most appropriate backup to restore. RMAN automatically switches to a previous backup if the most recent backup is not available. This operation is totally transparent and is automatically done by RMAN.Failover from disk backups to tape backups is useful when you are using a Flash Recovery Area with your Oracle database. The screenshot in the slide illustrates this situation, where the data file backup was inadvertently deleted from the Flash Recovery Area. As you can see, RMAN restored the data file using the next most recent backup, which was stored on tape by Oracle Secure Backup. If you use tape backups exclusively in your environment and a backup or tape is not available, then RMAN and Oracle Secure Backup can fail over to the next most recent backup on tape.Note: RMAN and Oracle Secure Backup work in tandem: RMAN performs the data file or database recovery. Oracle Secure Backup restores the necessary files, if they are located on tape.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Oracle Secure Backup supports which types of jobs:

1. RMAN backup jobs

2. RMAN restore jobs

3. RMAN recover jobs

Answers: 1, 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Where can RMAN record the errors returned from OSB over the SBT interface: 1. To $ORACLE_HOME/trace/sbtio.log by default

2. To /usr/local/oracle/sbtio.log by default

3. To another location specified by the DBA4. To $ORACLE_HOME/rdbms/log/sbtio.log by default

Answers: 3, 4

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Summary


• Perform an OSB-encrypted RMAN backup to tape

• Restore a data file from a tape backup

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Practice 5 Overview:Performing OSB-Encrypted Backup and Restore


• Performing an RMAN backup to tape (encrypted by Oracle Secure Backup)

• Restoring a data file from a tape backup

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Backing Up File-System Datawith Oracle Secure Backup

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Objectives


• Create datasets

• Schedule file backups

• Submit backup requests

• Perform file-system backups

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Backing Up OS File Systems with Oracle Secure Backup

• Two ways of scheduling data backups of file systems with Oracle Secure Backup:– On-demand backups

– Scheduled backups

• Two types of backups:– Full: All specified files

– Incremental: Only files that have changed since the last lower backup

0 1 2 3 2 3Backup level

Up to nine levels

Full

Backing Up OS File Systems with Oracle Secure Backup

You can back up file-system files in two different ways:• By creating on-demand (ad hoc or one-time-only) backup jobs and submitting them to the

Oracle Secure Backup scheduler (with the go option)• By using backup schedules, which define backup jobs that run at predetermined times. The

scheduler automatically initiates such jobs at a day and time that you specify.With Oracle Secure Backup, you can create two types of backups:

• Full backups: A full backup backs up all specified files, regardless of when they were lastbacked up. This option is the same as backup level 0. You can also perform a type of full backup, called an off-site backup, that does not affect the full or incremental backup schedule.

• Incremental backups: There are nine different incremental backup levels. In each level, Oracle Secure Backup backs up only those files that have changed since the last backup at a lower (numerical) backup level. You can also instruct Oracle Secure Backup to back up only those files that have been modified since the last backup, regardless of its backup level.

Note: The “incr” level backups are not supported on certain NAS devices, including Network Appliance filers.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



File-System Backups

Your steps to back up your file system:

Set up media families.

Create datasets.

For scheduled backups: Create backup windows.

For repeating backups: Create schedule and triggers.

Create and execute backup requests.

File-System Backups

After you have configured your administrative domain, you perform the following steps with Oracle Secure Backup to create file-system file backups:

1. Log in as a UNIX, Linux, or Windows operating system user that has access to the files to be backed up, and log in to Oracle Secure Backup with backup privileges.

2. Configure media families to help manage the volumes created by the backup operation, if you have not done so already.

3. Create a dataset that identifies the hosts and files which you want to back up.For scheduled backups, perform the following additional steps:

• Create at least one backup window, if you need to restrict the hours during which backups can be performed. If there are no restrictions, then you can use the default backup window.

• Create a schedule for your backup job and add at least one trigger to this schedule.For on-demand backups, perform the following additional steps:

• Create one or more backup requests. • Send your backup requests to the scheduler. Doing so turns each backup request into a backup

job, making it eligible to run.When you terminate your Oracle Secure Backup session, any backup requests that have not been submitted are lost.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Managing Media Families

Managing Media Families

From the EM Administrative Server page, you can click the link corresponding to the Media Families number. This takes you to the Media Families page from where you have the options to add a new media family. You can also select an existing media family, and edit or remove it.To add a new media family, perform the following steps:

1. Enter a name for the media family in the Media Family Name field. Normally, this name will appear as the prefix in each volume ID that uses this media family.

2. Enter a write-allowed time period in the Write window field (seconds, minutes, hours, days, weeks, months, years). You can set the write window to a specific duration, such as 14 days or three weeks. All volume sets that are members of the media family remain open for updates for this period. If you do not specify a write window for a volume set, Oracle Secure Backup considers the volume set eligible to be updated indefinitely.

3. Enter an amount of time to retain the volume in the Retain Time fields. Oracle Secure Backup uses this to apply an expiration date to the volume set. If you intend to use this media family to store RMAN backups, then select the Content Manages Reuse option.

4. Optionally, enter additional information in the Comment field.5. Click OK to create your new media family.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Dataset Examples

• Textualdescriptionthat defines whichfiles to back up

• Examplesfound in thesamplesdirectory

labs file1.tmp

/

usr2usr1 usr3 usr4

home

file2.txt

stc1 stc2 stc3

tmpfile1.temp

labs labstmp

file2.junk labs

Dataset Examples

With Oracle Secure Backup, use datasets to describe the list of files that you want to back up.A dataset is a textual description that tells Oracle Secure Backup which files to back up. Datasets employ a lightweight language. This dataset language gives you great flexibility in building and organizing datasets for the files that you want to protect.The graphic illustrates the files that you can find on three different hosts. By using the dataset defined in the next slide, you can back up the files in the graphic except those shown in dashed boxes (file1.tmp for home/usr1, and directory tmp, file1.temp, and file2.junkfor home/usr4).To familiarize yourself with the dataset language, review the samples subdirectory of your Oracle Secure Backup home directory.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Dataset Examples

# Dataset "common-exclusions":exclude name tmpexclude name *.tmpexclude name *.tempexclude name *.backup

# Dataset "application files": exclude name *~include path /home/usr1include path /home/usr2include host stc1include host stc2include host stc3 {include dataset common-exclusionsinclude path /home/usr3before backup optional "/etc/local/nfy '/usr3 begin'"after backup optional "/etc/local/nfy '/usr3 end'"

include path /home/usr4 {exclude name *.junk } }

Dataset Examples (continued)

Oracle Secure Backup dataset language has the following characteristics:• Comments may appear anywhere following a comment sign (#).• Statements have the form: statement-name [statement-argument] where statement-name may consist of multiple space-separated words, such as include path.

• Some statements may begin a nested block, and statements within the block apply only to the statement that began the block. These have the form: statement-name [statement-argument]{ statement-name [statement-argument] ...}

• An escape character, \, may appear anywhere to remove the special meaning of the character following it.

• Blank lines are ignored.The slide shows you two datasets that can be used to back up the data shown in the previous slide.The first script is used to exclude directories and files starting with tmp, *.tmp, *.temp, and *.backup.Note: The * wildcard can be used in datasets as long as the backup is of a regular file system, not an NDMP filer.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Dataset Examples (continued)

The second script is used to back up the following data on hosts stc1, stc2, and stc3:• On stc1 and stc2: /home/usr1 and /home/usr2• On stc3: /home/usr1, /home/usr2, /home/usr3, and /home/usr4 except files

starting with tmp, *.tmp, *.temp, *.backup, and *.junk only for /home/usr4When Oracle Secure Backup starts backing up data in /home/usr3 on stc3, it executes the /etc/local/nfy executable. The same executable is also executed when Oracle Secure Backup finishes its backup of /home/usr3.When performing a normal (nondatabase) backup, you may want to skip files that would be included in a database backup. Examples of such files include the database files themselves, control files, redo logs, and flashback logs. To exclude these files, specify the exclude oracle files directive in your dataset.Note: For more information about the dataset language, refer to the Oracle Secure Backup Administrator’s Guide.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Creating Datasets

Creating Datasets

Using the Web Tool InterfaceYou can use the Oracle Secure Backup Web tool to create a dataset:

1. From the Home page, click the Backup tab in the menu bar.2. On the Backup menu, click Datasets in the submenu under Settings. The Datasets page appears.

Dataset directories appear in the Path box with a slash as the last character in the name.3. Click the Add button to create a new dataset. When you create a new dataset description, the

initial contents of the dataset are defined by a dataset template.4. Select File or Directory from the Dataset type list. Like Windows and UNIX file systems, Oracle

Secure Backup datasets are organized in a naming tree. You may optionally create dataset directories to help you organize your data definitions. Later, you will discover that when you want Oracle Secure Backup to back up data, you identify the name of the dataset. If you give the name of a dataset directory, it is equivalent to naming all the datasets contained within that directory tree. Dataset directories may be nested up to 10 levels deep. By default, a dataset file is created under the /admin/config/dataset directory.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Creating Datasets (continued)

Using the Web Tool Interface (continued)5. In the Name field, enter a name for the dataset.6. Update the dataset statements displayed in the template file to define your backup data. For

more information, see “Dataset Examples,” earlier in this lesson.7. Choose one of the following:

- Click the Save button to accept your entries and return to the Datasets page.- Click Cancel to abort the operation and move back one page.

If your dataset has errors, a message appears in the Status section. As you can see in the slide, you also have the options to check, edit, rename, and remove datasets.Using the obtool InterfaceSimilarly, you can manage your dataset directories and description files by using the obtoolinterface. The example shown here first looks at the contents of the dataset directory, and then creates the new directory TEST inside the existing NEWCLIENTS directory. Then, a new dataset called test1 is created inside the TEST directory.

ob> lsdsTop level dataset directory: NEW_CLIENTS/ob> cdds NEW_CLIENTSob> mkds --dir TESTob> cdds TESTob> mkds -i test1Input the new dataset contents. Terminate with an EOF or a line containing just a dot (".").exclude name tmpinclude path /u01/oracle/solutions.Apply your changes [yes]? yob> lsdsDataset directory NEW_CLIENTS/TEST:Test1

The obtool commands used for managing datasets are as follows:• cdds is used to navigate into the dataset directory structure.• pwdds is used to show you the current path in the dataset directory structure.• lsds is used to list the contents of the current dataset directory.• mkds is used to create both dataset directories and datasets. The --dir option is used for

directories. The –i option is used to directly enter your dataset description text without the use of any special editor. As shown in the example, the system asks you to enter your text and finish it with a dot.

• rmds is used to remove both directories and files. The --nq option is used to avoid any confirmation before doing the removal.

Note: For more information about these obtool commands, refer to the Oracle Secure Backup Reference.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Configuring Backup Windows

Configuring Backup Windows

A backup window is a time range within which Oracle Secure Backup performs scheduled backup jobs. You must have at least one backup window in order for scheduled backup jobs to run. You can identify a single backup window that applies to all days of the week, or fine-tune backup windows to specific weekdays or dates. A default backup window is always created, and is identified as daily 00:00-24:00.Backup windows have a start time and an end time. Backups are eligible for execution after the start time specified by a backup window. When the backup window end time arrives, Oracle Secure Backup completes any backups that have already been started. No more backups are started until the window opens again or a new window opens.Perform the following steps to create a backup window by using the Oracle Secure Backup Web tool:

1. From the Backup menu, click Backup Windows in the submenu under Settings. The Backup Windows page appears.

2. Click the Add button to add a new backup window. The Backup Window page appears.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Configuring Backup Windows (continued)

3. Select a backup window type from the Type field. Your choices are:- Day range: If you select this option, refer to the “Creating Backup Triggers” section.- Date: If you select this option, refer to the Oracle Secure Backup Administrator’s Guide.

4. Select a local time range (expressed in 24-hour format) from the Time range field. Oracle Secure Backup will start scheduled backups during this time range. A time range is an interval specified as <start time>-<end time>, where the start and end times are in the form hour:minute:second. You can also use a four-digit hour-minute specifier (for example, 1430, which indicates 2:30 PM). The time range is based on the local time and takes into account Daylight Savings Time, if it applies to your locale. If the end time precedes the start time, Oracle Secure Backup assumes that the end time refers to the following day. For example, 20:00–02:00 indicates 8:00 PM as the start time and 02:00 AM of the next day as the end time.

5. Select one of the following:- Click OK to save your entries and exit the page. The Backup Windows page reappears.- Click Cancel to void the operation and move back one page.

Using obtool for Backup WindowsObtool has a group of commands that enable you to configure backup windows. A backup window enables you to specify a time frame for the execution of scheduled backup operations. You can identify a single backup window that applies to all days of the week or fine-tune backup windows based on specific days or dates. When you create a backup window, you specify the time and day range by using the following syntax:

addbw { --times/-t time-range[,time-range]... }day-specifier[,day-specifier]...

• time-range: Represents a time-of-day range using the syntax start-time-end-time. For example: 08:00:00-08:30:00 or 1430-14:35:30

• day-specifier: Represents a range of time in terms of days using the syntax:year/month/day | month/day | wday | wday-wday | weekday[s] | weekend[s] | daily | today | yesterdaywday::=sunday[s] | monday[s] | tuesday[s] | wednesday[s] |thursday[s] | friday[s] | saturday[s]

If no backup windows are identified, then scheduled backups will not run. The default backup window has a day-specifier of 'daily 00:00-24:00'.Obtool commands for backup windows include:• addbw: To add a new backup window• chkbw: To check for the existence of a backup window• lsbw: To list backup windows• rmbw: To remove a backup window or specific time ranges• setbw: To change the settings of a backup window

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Creating Backup Schedules

Creating Backup Schedules

A backup schedule indicates to Oracle Secure Backup what data to back up and how to back it up. Execute the following steps to create a schedule with the Oracle Secure Backup Web tool:

1. From the Backup menu, click Schedules in the submenu under Settings. The Schedules page appears. Backup schedules appear in the Schedule name box in the central panel.

2. Click the Add button to add a new schedule. The New Schedules page appears.3. Enter a name for the schedule in the Schedule field.4. Enter a priority number for the backup job in the Priority field.5. In the Datasets box, select one or more datasets to include in the backup job.6. Optionally, select one or more restrictions in the Restrictions box. You can restrict scheduled

backups to specific devices.7. Optionally, enter any information that you want to store with the backup schedule in the

Comments field.Obtool commands for backup schedules include:• chsched: To change an existing backup schedule• lssched: To list backup schedules• mksched: To make a new backup schedule• rensched: To assign a new name to a schedule• rmsched: To remove a schedule

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Creating Backup Triggers

Creating Backup Triggers

To create triggers by using the Oracle Secure Backup Web tool, perform the following steps:1. Navigate to Backup Schedules > Weekly Catalog backup > Triggers. The Triggers page appears

with the default setting of Day in the Trigger type field.2. Using the Trigger type field, select a time representation for defining when to perform the

backup job. Your choices are:- one time: To perform a backup only once- day (default): To perform a backup one or more days during the week- month: To perform a backup one day a month- quarter: To perform a backup one day per quarter- year: To perform a backup one day during the year

3. Select a backup level from the “Backup level” field. You can choose full, incr, offsite, or an incremental level from 1 through 9.

4. Select the hour and minute to start the backup in the “Backup at” fields.5. Select a media family to be used by this scheduled backup in the “Media family” field.6. Optionally, choose an expiration time period in the “Expire after” fields (in seconds, minutes,

hours, days, weeks, months, years, or forever). If the scheduled backup is not started by this time, it is deleted and not run at all.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Creating Backup Triggers (continued)

7. Your selection in step 2 determines what screens you see. Here, it is supposed that the day option is used. Select the days on which Oracle Secure Backup will run the scheduled backup. Your choices are:

- Select daily: To trigger the schedule to run on all seven days of the week- Select weekdays: To trigger the backup to run on weekdays only (Monday through Friday)- Select weekends: To trigger the backup to run only on weekends (Saturday and Sunday)- Alternatively, from both the “Select weekdays” and “Select weekends” fields, you can

select a mix of individual days on which you can trigger scheduled backups to run (for example, Monday, Tuesday, and Saturday at 8:00 AM).

8. Optionally, select an option from the “Week in month” group. This option enables you to limit which week in the month the backup schedule will run. Your choice are:

- All: This includes all weeks.- Selected (First, Second, Third, Fourth, Fifth, and Last): This enables you to specify the

week to include.9. Optionally, specify weekday exceptions from the Except list. An exception prevents Oracle

Secure Backup from backing up data on the day that you specify. Your choices are:- none (default): To disable an exception- except: To enable an exception

10. Select a value from the Time list. Your choices are:- before: To enable you to specify an exception before a specified day- after: To enable you to specify an exception after a specified day

11. Select values from the Specify day fields. From the first field, your choices are none, first, second, third, fourth, and last. From the second field, your choices are Monday, Tuesday, Wednesday, Thursday, Friday, Saturday, and Sunday.

12. Click one of the following:- Add, to accept your entries and add the trigger

You are returned to the Triggers page with a success message. The schedule is displayed in the Triggers field. The schedule displays the level of the backup, the time at which it is to begin, and the days on which the backup is to be performed.

- Edit, to modify the trigger- Remove, to delete the trigger- Cancel, to void the operation and move back one page

Note: In the slide, you can see how to create a trigger at the day level. For the other levels, refer to the Oracle Secure Backup Administrator’s Guide.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Previewing a Backup Trigger

Previewing a Backup Trigger

To preview a backup trigger by using the Oracle Secure Backup Web tool:Navigate to Backup > Schedules, select a schedule, and click Edit > Triggers > Preview.Note: Oracle Secure Backup 10.2 has a predefined OSB-CATALOG-DS schedule to back up your OSB catalog. Because this daily backup should not be encrypted, the Encryption parameter is set to No.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Creating On-Demand Backup Requests

Creating On-Demand Backup Requests

To create an on-demand backup request with the Oracle Secure Backup Web tool, perform the following steps:

1. From the Backup page, click Backup Now in the submenu under the Operations section. The Backup Now page appears. In the backup box in the central panel, each backup request that you have created but have not yet sent to the scheduler is displayed. Backup requests are identified by a backup name and number.

2. To create a new backup, click the Add button. The Options page appears.3. Select one or more datasets from the Datasets box.4. Optionally, select a future date and time for the backup to run from the “Backup date” and

“Backup time” fields. If you leave these fields unchanged, Oracle Secure Backup considers your backup job immediately available for execution.

5. Optionally, enter an expiration time in the “Expire after” field. Do this if you want Oracle Secure Backup to automatically delete this backup job if it has not started within the specified expiration period after the date and time intervals defined earlier in the “Backup date” and “Backup time” fields.

6. Select a backup level from the Backup level field. Your choices are: full (default), 1 to 9, incr, and offsite.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Creating On-Demand Backup Requests (continued)

7. Select a media family to which the data of this backup should be assigned from the Media family field.

8. Optionally, select one or more device restrictions from the Restrictions field. Oracle Secure Backup enables you to restrict backups to one or more of the following:

- A specific tape drive, displayed as devicename- Any tape drive attached to a specific host, displayed as @hostname- Any tape drive-host attachment, displayed as devicename@hostname

If you do not set a restriction (the default), your backup job will use any available device at the discretion of Oracle Secure Backup scheduling system.

9. Optionally, change the priority of the backup job in the Priority field. The default is 100. The priority of a job is a positive integer value. The lower this value, the greater the priority assigned to the job by the scheduler. It considers priority 20 jobs, for example, more important than priority 100 jobs. The scheduler always gives preference to dispatching higher priority jobs over lower priority ones.

10. Choose whether you want the backup to operate in unprivileged or privileged mode. Unprivileged mode is the default. An unprivileged backup runs under your UNIX user identity or Windows account identity, as configured in your Oracle Secure Backup user profile. Your access to file-system data, therefore, is constrained by the rights of the UNIX user or Windows account having that identity. On UNIX systems, a privileged backup runs under the root user identity. On Windows systems, it runs under the same account identity as the Oracle Secure Backup service on the Windows client.

11. Choose one of the following:- Click OK to accept your selections. When you do so, Oracle Secure Backup displays this

backup request in the list box on the Backup Now page.- Click Cancel to void the operation and move back one page.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Submitting Backup Requests

Submitting Backup Requests

To send backup requests to the scheduler, perform the following steps in the Oracle Secure Backup Web tool:

1. From the Backup menu, click Backup Now in the submenu under Operations. The Backup Now page appears.

2. Click the Go button. Oracle Secure Backup sends each backup request that appears in the Number/Dataset central panel to the scheduler. A message appears in the status section for each request acknowledged by the scheduler.Oracle Secure Backup deletes each backup request upon its acceptance by the scheduler. As a result, the Number/Dataset central panel is empty upon completion of the Go operation.

3. To view the status of your job, go to the Manage page and click the Jobs link. On the Jobs page, click the Show Transcript button to see the output of your job.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Reviewing Jobs

Reviewing Jobs

On the Manage: Jobs page in the Oracle Secure Backup Web tool, you can view a list of jobs according to your selection criteria. For more details, click a job (it is highlighted), then click Show Properties or Show Transcript.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

File-system backups should use time-managed media families:

1. True

2. False

Answers: 1

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Which are required for all backups of OS files with OSB?

1. Media families

2. Datasets

3. Backup windows

4. Backup schedule

5. Backup triggers

Answers: 1, 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Datasets are the actual backups of files produced by OSB:

1. True

2. False

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Summary


• Create datasets, which are scripts to define OS files for backups

• Schedule file backups to be performed in predefined time windows

• Submit backup requests

• Perform file-system backups

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Practice 6 Overview:Backing up File-System Data


• Creating a dataset

• Scheduling a backup of the dataset

Note: The completion of this practice is a prerequisite for the following practice, “Restore File-System Data.”

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Restoring File-System Backupswith Oracle Secure Backup

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Objectives


• Browse the catalog for file-system backup data

• Create catalog-based restore requests

• Perform file-system restoration

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Browsing the Catalog for File-System Backup Data

Browsing the Catalog for File-System Backup Data

The administrative server maintains a catalog in which it stores metadata relating to backup and restore operations for the administrative domain. Oracle Secure Backup maintains a discrete backup catalog for each client in your administrative domain. When you browse a backup catalog, Oracle Secure Backup presents the data in the form of a file-system tree, just as it appeared on the client from which the data was saved. For example, if you backed up the /home/myfile.dat file located on myhost, the backup catalog for myhostrepresents the contents of the backup image as /home/myfile.dat. At the root of the backup catalog is the superdirectory, which contains all files and directories saved from the uppermost file-system level. The superdirectory provides you with a starting point from which to access every top-level file-system object stored in the backup catalog. For Windows clients,this superdirectory contains the drive identifiers, such as C:.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Restoring File-System Data

• Restoring the needed files is easily accomplished using the Oracle Secure Backup catalog, which offers:– Tree-style browsing of all backups

– Multiple query options for fast identification of needed files

• You can restore files to the original location or to an alternative location.

• The end-user restore ability is based on user-level permissions.

• OSB automatically recalls tapes located at alternate locations for the restore operation. (The Restore job remains in a pending state until tapes are returned to an accessible tape device.)

• Fast restoration from tape is accomplished by using tape position data obtained during backup.

Restoring File-System Data

You can gain practical experience with this during the practice session.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Restoring File-System Files withOracle Secure Backup

Two ways to restore data:

• Catalog-based restore operation: Based on catalog backup history

• Directly from media: Based only on the data contained in the volumes – Referred to as a RAW restore and is not commonly used

– Recommended only for advanced users

Restoring File-System Files with Oracle Secure Backup

With Oracle Secure Backup, you can restore data in two different ways:• By browsing backup catalogs for the file-system objects of interest. After you have located their

names and selected the instances to restore, you can direct Oracle Secure Backup to perform the restore operation. This is called “catalog-based restore.”

• By knowing the names of the file-system objects of interest and the secondary storage location (volume ID and backup image file number) in which they are stored. This is called raw restore.For more information about raw restore operations, see the Oracle Secure Backup documentation.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



The Restore Page

The Restore Page

You can use the Oracle Secure Backup Web tool to restore your saved files. You do this from the Restore page. To access the Restore page from the Web tool Home page, click the Restore tab on the menu bar.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Listing All File-System Backups of a Client

Listing All File-System Backups of a Client

Perform the following steps to list all backups of a client by using the Oracle Secure Backup Web tool:

1. From the Restore: Backup Catalog page, select any host from the Hosts Name list.2. Click Browse Host. Oracle Secure Backup displays the Browse Host page.3. Drill down to the file or directory for which you want to display the available backups. Click the

List Host Backups button. A properties page appears. Click the Close button when you have finished viewing this window.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Creating a Catalog-Based Restore Request


To browse a backup catalog for data restore operation, perform the following steps:1. From the Web tool Home page, click the Restore tab on the menu bar. The Restore page

appears.2. On the Restore page, click the Backup Catalog link in the Operations section.3. On the Restore: Backup Catalog page, select the client from which the data was originally saved

in the Host Name list.4. Select one or more data selectors from the Data Selector list box.5. Select a View mode: Inclusive or Exact.6. Optionally, enter the path name of the directory that you want to browse in the Path field. If you

do not do this, Oracle Secure Backup displays the uppermost directory that it has backed up for the selected client.

7. Click Browse Host. Oracle Secure Backup displays the Browse Host page with the selected directory displayed.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




Creating a Catalog-Based Restore Request (continued)

8. On the Browse Host page, click a directory name to make it your current directory and view its contents. You can repeat this operation many times to find the data that you want to restore. You can choose a directory to restore (and all its contents), or you can choose to restore individual files.

9. You can change the Data selector, and then click Apply to redisplay the page.10. You can also change the View mode without leaving this page.11. Select the check box next to the name of each file-system file or directory that you want to

restore. Doing so creates an Oracle Secure Backup restore request for each instance of the file identified by the data selector.

To learn the identity of those instances, view the object property page by clicking the adjacent Properties button. When you do, Oracle Secure Backup displays a pop-up window. After you view the pop-up window, click Close.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.





12. On the Browse Host page, after you have selected the objects that you want to be restored, click the Add button. The New Restore page appears.

13. Optionally, enter an alternative path name for each file or directory to restore. The original path name of each object that you previously selected appears in the lower-left portion of this page. To its right is a text box in which you can enter the alternative path name. If you leave this blank, Oracle Secure Backup restores the data using its original name.

14. Optionally, select the Device option and select a tape drive to use to perform the restoreoperation. By default, Oracle Secure Backup automatically selects the tape drive to use.

15. Select your restore mode. Unprivileged mode is the default. An unprivileged restore operation runs under your UNIX user identity or Windows account identity, as configured in your Oracle Secure Backup user profile. The privileged mode uses the root or administratoraccounts. (You must have appropriate rights to choose this option.)

16. Optionally, enter one or more obtar options in the Obtar option(s) field. For example, -J enables debug output and provides a high level of detail in the job transcript. For details about obtar options, refer to the Oracle Secure Backup Reference.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



17. Select the “No high speed positioning” check box if you do not want to use the available position data to speed up the restore operation.

18. Select the “NDMP incremental restore” check box to direct certain NAS data servers to apply incremental restore rules. Typically, recoveries are additive: each file and directory restored from a full or an incremental backup is added to its destination directory. When you select NDMP incremental restore, NAS data servers that implement this feature restore each directory to its exact state as of the last incremental backup image applied during the restore job. Files that were deleted before the last incremental backup are deleted by the NAS data service upon restore of that incremental backup.

19. Select “Replace existing files” to overwrite any existing files with those restored from the backup image. Alternatively, select “Keep existing files” to keep any existing files instead of the default overwriting them with files from the backup image.

20. If you are restoring to a Windows system, select “Replace in use files” to replace in use files with those from the backup image. Windows deletes each in use file when the last user closes it. Alternatively, select “Keep in use files” to leave any in use Windows files unchanged.

21. Click OK. Oracle Secure Backup displays the Browse Host page. The restore request you just made appears in the Restore items list. Oracle Secure Backup displays the message, “Success: file(s) added to restore list” in the status area.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Submitting Restore Requests

Submitting Restore Requests

Submitting a restore request initiates the creation of an Oracle Secure Backup job.Perform the following steps to send catalog-based restore requests to the scheduler by using the Oracle Secure Backup Web tool:

1. From the Browse Restore Catalog page, select any host from the Hosts Name list.2. Click Browse Host. Oracle Secure Backup displays the Browse Host page.3. Click Go. The Web tool sends each restore request that appears in the “Restore items” list box

to the scheduler. A message appears in the status area for each request acknowledged by the scheduler. It can say, for example: 2 catalog restore request items submitted; job id is admin/2. Oracle Secure Backup deletes each restore request upon its acceptance by the scheduler. As a result, the “Restore items” list is empty upon completion of the Go operation.

4. To view the status of your job, go to the Manage page, and click the Jobs link. On the Jobs page, select “restore” in the Types field, and click Apply. You can see the output of your job.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

When performing a restore operation, Oracle Secure Backup will by default overwrite or replace existing files:

1. True

2. False

Answers: 1

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Files can be restored to either the original location or elsewhere:

1. True

2. False

Answers: 1

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Restoring OS file data with Oracle Secure Backup can be done:

1. Using a catalog-based restore operation

2. Directly from the media

3. Using RMAN 4. Using the dd command

Answers: 1, 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Summary


• Browse the catalog for file-system backup data

• Create catalog-based restore requests

• Perform file-system restoration

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Practice 7 Overview:Restoring File-System Data

This practice covers performing a file-system restore operation.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Managing Your Oracle Secure Backup Domain

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Objectives


• Describe Oracle Secure Backup processes

• Configure defaults and policies

• Browse primary Oracle Secure Backup catalogs

• Perform preconfigured catalog backup

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



> DaemonsPoliciesCatalogs

Oracle Secure Backup Processes: Daemons

Administrative serverClient

observiced

obproxyd

obscheduled

observiced

obhttpd

obixd

obproxyd

Media server

observiced

obrobotd

obndmpd

obproxyd

Oracle Secure Backup Processes: Daemons

To oversee data protection activities among diverse hosts, devices, and databases, you define an administrative domain. There must be one and only one administrative server for each administrative domain. The administrative server includes:

• Oracle Secure Backup catalog, a directory structure with host-specific subdirectories. This means, the contents vary depending on the roles you assign to the host. An administrative server has the central catalog with configuration and metadata.

• Daemons (or services), which are processes that run in the background and perform OSB operations on behalf of an application

Some daemons run continually; others run only to perform specific work and then exit when they have finished. The Oracle Secure Backup daemons actively participate in managing backup and restore operations:• observiced daemon: On the administrative server, this daemon runs jobs (such as

backup and restore operations) at the request of the obscheduled daemon, cleans up old log files and transcripts, and provides access to Oracle Secure Backup configuration data to other hosts in the domain.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Oracle Secure Backup Processes: Daemons (continued)

observiced daemon (continued)• The observiced daemon starts the obscheduled daemon and the Web server

during initialization. When running on a client or media server, observiced is primarily responsible for invoking Oracle Secure Backup programs in response to a request from the administrative server. On all hosts, the observiced daemon is usually started as part of system startup and runs continually. On UNIX and Linux, startup is usually performed through entries in /etc/init.d, whereas on a Windows host, theobserviced daemon is started by the Service Control Manager.

• obscheduled daemon: This daemon initiates scheduled events and manages jobs. The daemon receives job creation requests from obtool users and from the SBT interface in response to RMAN commands.

• obixd daemon: This daemon manages the backup catalog. One instance of this daemon runs for each client whenever the contents of that client’s catalog must be read or updated.

• Apache Web server daemon (obhttpd): This daemon provides the Web tool GUI for Oracle Secure Backup.

• obndmpd daemon: This daemon implements the NDMP tape service and provides media services to remote clients. It is launched by the observiced daemon in response to client requests to open a channel to a tape drive that is not locally connected to the client.

• obrobotd daemon: This daemon is launched by the observiced daemon in response to requests to manipulate tapes in a tape library. One instance of this daemon runs for each tape library whenever the services of that tape library are required.

• obproxyd daemon: This daemon verifies user access for SBT backup and restore operations. The proxy daemon runs on the host that contains the SBT library accessed during the operations. The invocation of the proxy daemon is platform specific. The proxy daemon uses the operating system user identity of the process invoking the SBT library and the local host name to determine the Oracle Secure Backup user account for the backup operation. If a preauthorization exists for this OS user and host, and if the associated Oracle Secure Backup user is permitted to perform RMAN backups, then the login to Oracle Secure Backup is permitted.

On a host running the Windows operating system, only the observiced daemon runs as a Windows service. The other Oracle Secure Backup daemons do not run as services.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Managing Common Daemon Operations

Managing Common Daemon Operations

Oracle Secure Backup daemons respond to a common set of control commands. Sending control commands to daemons is an infrequently performed task that you would typically perform only under the guidance of Oracle Support Services.The daemon control commands are:• dump: To direct the daemon to dump internal state information into its log file• reinitialize: To direct the daemon to reread configuration data from the file

system• debugon: To direct the daemon to generate extra information to its log file• debugoff: To cancel a previous debugon command. This is the default state.

To send a command to a daemon, perform the following steps:1. From the Web tool Home page, click the Manage tab.2. From the Manage page, click the Daemons link in the Maintenance section.3. On the Daemons page, select a daemon from the Type list.4. From the Host list, select the host on which the daemon is running.5. Select a command from the Command list.6. Click Apply to accept your selections.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

All OSB daemons run continuously:

1. True

2. False

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Managing Defaults and Policies

For the ease of management (of simple and complex environments):

• Policy settings for devices, catalog indexing, log management, and general backup and recovery operations

• Email notification of system events and reports

• Policies that control the behavior of daemons and services

• NDMP Data Management Agent (DMA) defaults

• Policies that control aspects of domain security

Daemons> Policies

Catalogs

Managing Defaults and Policies

Defaults and policies are configuration data that control how Oracle Secure Backup operates within an administrative domain. The data is maintained on the administrative server. Oracle Secure Backup is preconfigured with a set of defaults and policies for fast deployment in most environments. Oracle Secure Backup policies are grouped into several policy classes. Each policy class contains policies that describe a particular area of Oracle Secure Backup operations:

• Daemon policies • Device policies• Index policies • Log policies • Media policies • Naming policies • NDMP policies • Operations policies • Scheduler policies • Security policies• Testing policies

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Configuring Oracle Secure Backup Policies

13

2

Configuring Oracle Secure Backup Policies

To modify the policies settings by using the Web tool, perform the following steps:1. From the Configure page, select Defaults and Policies.2. Click the name of the policy that you want to modify.3. Make any required changes.4. Choose one of the following:

- Click Apply to remain in this page.- Click OK to save the changes and return to the Configure page.- Click Cancel to avoid the operation and move back one page.

5. Operations example: You can set operation policies to specify the following:- Whether Oracle Secure Backup updates backup history data every time a client host

is backed up - Whether Oracle Secure Backup creates volume and backup image labels for a new

backup image whenever it backs up data- Whether Oracle Secure Backup performs block-level verification after each backup

section is completed- Additional options to apply to scheduler-dispatched backup and restore operations,

such as enabling diagnostic output mode with the obtar -J option

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup: Backup Metadata Catalogs

File-system metadata: indices.cur

Piece catalog: sbtpiece.dat and sbtpiece.idx

Volumes catalog: volumes.dat and volumes.idx

Backup sections catalog: archives.dat and archives.idx

DaemonsPolicies

> Catalogs

1

2

3

4

Oracle Secure Backup: Backup Metadata Catalogs

The Oracle Secure Backup catalog is a collection of backup metadata catalogs and configuration files. They are centrally located on the administrative server in a hierarchical file system under the OSB_Home directory. The following are the four primary catalogs:

1. File-system backup metadata is stored for each client in the indices.cur catalog (also known as the index database). Thus, if the administrative server has 100 clients, it has 100 indices.cur files. The indices.cur file is located in the /usr/local/oracle/backup/admin/history/host/host_name directory.

2. Oracle database backup piece metadata is stored in the sbtpiece.dat and sbtpiece.idx files.

3. A listing of all tapes that contain backups registered with the Oracle Secure Backup catalog, is stored in the volumes.dat and volumes.idx files. When a tape is overwritten, the volumes catalog is immediately updated.

4. Information about backup sections is stored in the archives.dat and archives.idx files. This is important when a backup spans multiple volumes. The last three catalogs are located in the /usr/local/oracle/backup/admin/state/general/ directory.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Oracle Secure Backup: Backup Metadata Catalogs (continued)

After volumes have been overwritten or unlabeled, the backup metadata is no longer needed. The index daemon automatically removes this backup metadata from the catalog at the interval set by the indexcleanupfrequency index policy (default is 21 days).

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup: Directory Structure

/usr/local/oracle/backup

OSB_HOME directory

help

samples


man

admin apache

• conf• htdocs• images• logs• modules

• config • history• log• state

devicebin etc

lib tools.linux32

.drv.linux32

Oracle Secure Backup: Directory Structure

The Oracle Secure Backup home directory is created on every host where you install Oracle Secure Backup, although the contents of the directory vary depending on the roles that you assigned to the host. The slide shows the installed directories for an administrative server on a Linux operating system. The directories in the dashed box contain executable files, or information related to storage devices. They are: bin, etc, device, lib, tools.linux32, and .drv.linux32. Not shown in the slide are the following directories: .bin.linux32, .etc.linux32, and .lib.linux32.Oracle Secure Backup maintains its own centralized catalog on the administrative server. The Oracle Secure Backup catalog contains all the information used to define your configuration, and also metadata relating to your backup and restore operations. Oracle Secure Backup organizes its catalog in a hierarchical way. The admin directory contains the administrative domain catalogs.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Backing Up the Catalog

Preconfigured catalog backup with the following elements: • OSB-CATALOG-MF media family: All catalog backups will

be written to same tapes.• OSB-CATALOG-SUM job summary: Daily reports are

emailed to users showing status of catalog backup • OSB-CATALOG-DS dataset: All directories and files of the

OSB catalog are defined for the file-system backup.• OSB-CATALOG-SCHED schedule: The schedule

determines the timing for the catalog backup.

For you to do:• Edit the OSB-CATALOG-SCHED trigger to specify the

backup time.

Backing Up the Catalog

The primary catalog backup configuration settings have been defined. Only one step remains which requires user intervention: Edit the OSB-CATALOG-SCHED trigger specifying when the backup should be performed.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Manual Catalog Backup

1. Create a dataset that includes:– Oracle Secure Backup home directory– The /etc/obconfig file

– The /usr/etc/ob directory

2. Create a backup request, either on-demand or scheduled.

3. Submit the backup request to the scheduler.

4. Store the volume set in a known location.

Manual Catalog Backup

If you do not want to use the preconfigured recommended catalog backup specifications, you can create your own with the above steps.You will need the catalog backup only in unusual, difficult circumstances, so you should make special provisions when storing the backup, such as:

• Storing the volume set in a known location so that the tapes can be retrieved without having to look up which volumes were used to store the backup

• Configuring the operations/backupoptions policy to use the -v option (if you configured a scheduled backup). This generates a full transcript and lists all the files that are backed up. Then, save the transcript along with the tapes. For additional protection, you can back up the /usr/etc/ob directory, which is the job transcript directory.

You may also want to save a copy of the SCSI parameters used to create the device special files for your tape devices. This can help you to reconfigure the tape devices during disaster recovery of your administrative server. The parameter specifications should be saved along with the volumes that contain the catalog backup.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

How many indices.cur files exist containing file-system metadata?

1. One for each directory on each client

2. One for each client

3. One for each file system on each client

4. One for each media server

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

What should be contained in the backup of the OSB catalog?

1. The OSB home directory 2. The /etc/obconfig file

3. The /usr/local/oracle directory

4. The /usr/etc/ob directory

Answers: 1, 2, 4

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Summary


• Describe Oracle Secure Backup processes

• Configure defaults and policies

• Browse primary Oracle Secure Backup catalogs

• Perform preconfigured catalog backup

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Practice 8 Overview:Performing a Preconfigured OSB Catalog Backup

This practice covers the topic of backing up the Oracle Secure Backup catalog data and critical files.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Managing the OSB Infrastructure

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Objectives


• Manage clients

• Manage media servers (tape devices and libraries)

• Manage volumes

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Managing Clients> Clients

Media Serv.- Devices- LibrariesVolumesJobs

Managing Clients

Adding Clients may be your most common management task. You can perform it with the mkhost obtool command or the OSB Web tool.

1. In the Web tool, click Configure, and then click Hosts.2. Select the “Suppress communication with host” check box if you want to add a (stand-

alone) server to the administrative domain.3. Click the Add button. Then enter a host name of your choice in the Host field. The name

must be unique among all Oracle Secure Backup host names.4. Optionally, enter one IP interface name in the “IP Interface name(s)” field. If you leave

this blank, OSB uses the name of the host (step 3) as the resolvable IP name for the host.5. Select a status from the Status field. Your choices are:

- In service: Indicates that the server is logically available for backup and restores- Not in service: Indicates that the server is unavailable

6. Select one or more administrative domain roles for the host from the Roles field. 7. Select an access method for the host (if applicable) from the “Access method” field. Your

choices are: ob or NDMP.Removing hosts from your administrative domain, includes that:• The backup catalog is also removed.• The key store remains, so that your backups from that host remain valid.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Adding Media ServersClients

> Media Serv.- Devices- LibrariesVolumesJobs

Adding Media Servers

From the Administrative Server page, you can click the link corresponding to the number of configured Media Servers in the administrative domain.This takes you to the Media Servers page from which you can manage your media servers. On the Media Servers page, click Add to add a new media server to your administrative domain.To configure a new media server on the Add Media Server page, perform the following steps:

1. Select the “Suppress communication with host” check box if you want to add a host to the administrative domain that is not yet connected to the network.

2. Enter the name by which you want to refer to the host in the Name field. The host name that you choose must be unique among all Oracle Secure Backup host names.

3. Optionally, enter one IP interface name in the “DNS Hostname(s) or IP Address(es)”field. If you leave this blank, Oracle Secure Backup uses the name you assigned to the host in step 2 as the resolvable IP name for the host.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Adding Media Servers (continued)

4. Select a status from the Status field. Your choices are:- In Service: Indicates that the server is logically available to perform backup and

restore operations- Not In Service: Indicates that the server is logically unavailable to perform backup

or restore operations5. Select an access method for the host (if applicable) from the Access Mode field. Your

choices are: - Native: The host contains a local installation of Oracle Secure Backup.- NDMP: The host is accessed through the Oracle Secure Backup RPC protocol (plus

NDMP) or solely through Network Data Management Protocol (NDMP).6. Click OK.

Note: For more information about how to manage media servers within Oracle Secure Backup, refer to the Oracle Secure Backup Administrator’s Guide.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



NAS Devices

• Communicate via NDMP

• Do not require installation of Oracle Secure Backup software on the NAS appliance

• Support local data transfer (from file server directly to andfrom tape drives) with simultaneous central management

• May be a client or media server but not an administrative server

ClientsMedia Serv.

> - Devices- LibrariesVolumesJobs

NAS Devices

The Network Data Management Protocol (NDMP) defines a common architecture for backups of heterogeneous file servers on a network. NDMP allows administrators to back up data using any combination of compliant network–attached servers, backup devices, and management applications. With NDMP, network congestion is minimized because the data path and control path are separated. Backups can occur locally—from file servers directly to tape drives—whereas management occurs centrally. NDMP is commonly used by NAS devices, which are also known as filers, to perform backup and restore operations without requiring an Oracle Secure Backup installation on the appliance. The filer communicates with the backup software through NDMP. This model is very different from the classic backup model, which requires the installation of an agent or backup software component on each host to communicate and perform backup and restore operations as directed by the backup software server.For supported NAS devices, see Certify on My Oracle Support.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Adding NDMP Media Servers

Adding NDMP Media Servers

If you select NDMP in the Access Mode field on the Add Media Server page, you must also specify the following additional options for your new host:

1. Select an authentication type from the Authentication Type field. The authentication type defines the way in which Oracle Secure Backup authenticates itself to the NDMP server. Typically, you should use the negotiated default setting. Your choices are:

- default: Uses the value of the Authentication type for the NDMP policy- none: Attempts to use the NDMP server from Oracle Secure Backup without

providing authentication data (this is usually unsuccessful)- negotiated: Instructs Oracle Secure Backup to negotiate with the NDMP server to

determine the best authentication mode to use- text: Uses plain (unencrypted) text to authenticate- md5: Uses the MD5 digest algorithm to authenticate

2. Enter a username in the Username field. The username is used to authenticate Oracle Secure Backup to this NDMP server.

3. Other NDMP settings that you can enter on this page include: password, backup type, protocol version, and port. Enter the values which are appropriate for your environment.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Adding Devices

Adding Devices

You can add new devices in one of two ways:• By automatically discovering them. Oracle Secure Backup can automatically discover and

configure secondary storage devices connected to certain types of NDMP servers, such as Network Appliance filers.

• By adding them manually to define devices that cannot be automatically discovered .On the Devices page, click either Add Library or Add Drive to add a new device to your configuration.You can also use the mkdev obtool command to add an Oracle Secure Backup device object to your administrative domain configuration. Here are some examples:ob> mkdev --type library --attach hasun20:/dev/obl0 tc-lib

ob> mkdev --type tape --library tc-lib --dte 1 --attach hasun20:/dev/obt0 tc-tape

ob> lsdev

The following output appears:library tc-lib in service

drive 1 tc-tape in service

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Adding Devices (continued)

The first example shows you how to add a tape library device to your configuration. As shown in the slide, you must specify the device type, its attachment, and its Oracle Secure Backup name.The second example is doing the same thing for a tape drive that is part of your tape library. In addition to the type, attachment, and name, you must specify the corresponding tape library as well as the data transfer element (DTE) of the tape drive. Oracle Secure Backup identifies each tape drive within a tape library by its DTE number. A DTE must be specified if library is specified.The third example displays the output of the lsdev command, which shows you the current configuration for both devices.Unlike SCSI, which is a host-centric protocol, Fibre Channel libraries and tape drives are typically shared among multiple Oracle Secure Backup media servers. A Fibre Channel–attached tape drive or tape library often has multiple attachments, one for each host that can directly access it. You can specify multiple attach points when creating a device with the mkdev or chdev obtool commands, the Web tool, or Enterprise Manager. Multiple attach points enable you to attach the same device to multiple hosts on a network.Note: For more information about the mkdev and chdev commands, refer to the Oracle Secure Backup Reference.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Discovering Devices on NDMP Hosts

ob> discoverdev --verbose --host edrsr12p1

Discovering Devices on NDMP Hosts

Libraries and tape devices attached to Network Attached Storage (NAS) filers are automatically configured by the operating system on which the NAS device runs. Both SCSI device and Fibre Channel configuration occur automatically and require no input from the user. Oracle Secure Backup can detect changes in device configuration for some types of these NDMP-accessed hosts and, on the basis of this information, and automatically update the device configuration in the administrative domain. However, NAS tape libraries and tape drives must first be made accessible to the Oracle Secure Backup software. This is accomplished by performing device discovery on each of the NAS filers in the administrative domain. You can discover devices by using Enterprise Manager, the OSB Web tool, or obtool commands.Oracle Secure Backup detects multiple hosts connected to the same device by comparing the serial numbers reported by the operating system.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Managing Devices

Managing Devices

From the Administrative Server page, you can click the link corresponding to the Devices number.This takes you to the Devices page from where you have the options to Add Library and Add Drive. You can also select an existing device, and click Edit or Remove to perform those actions on that device.A tape must be mounted in the drive before you can write to it. “Mounting a volume” means logically preparing a tape volume in a drive to be read or written. Note: Unlike tape devices, Oracle Secure Backup will refuse to communicate with a tape library that it does not recognize (a tape library whose product ID does not appear in the OSB_Home/devices/ob_robots file). Too many things may go wrong when trying to control an unknown tape library.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Em_devices_crop.gif

Em_08_lib_prop_2.gif

Tape Library PropertiesClientsMedia Serv.- Devices

> - LibrariesVolumesJobs

Tape Library Properties

To view tape library properties, perform the following steps in Enterprise Manager:1. On the Devices page, click the name of a tape library in the main text box.

The Edit Library page is displayed, showing the properties of the selected tape library. The device attachment information is displayed at the bottom of the page.

2. Click Show Advanced Settings to view additional properties for the device. 3. You can make changes to the tape library configuration and then click one of the

following:- Apply, to implement those changes and remain in this page- OK, to save the changes and return to the Device page- Cancel, to avoid the operation and move back one page- Attachments, to configure device attachments

Using the Web tool interface:1. On the Manage page, select a tape library or tape drive in the main text box 2. Click Show Properties

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Tape Drive Properties

Tape Drive Properties

To view tape drive properties, perform the following steps:1. On the Manage page, select a tape drive in the main text box.2. Click Show Properties.

The Web tool displays a page with the properties for the tape drive that you selected.3. Click Close to return to the Manage page.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Managing VolumesClientsMedia Serv.- Devices- Libraries

> VolumesJobs

Managing Volumes

You can access the Volumes page from the Administrative Server page by clicking the Details link to the right of the Volumes label in the Resources section. You can use the Volumes page to display a list of all volumes associated with an administrative server.To display the volumes, you must first specify a filter option. You do so by using the Search section. In the example in the slide, the filter option limits the volumes displayed to only those for the RMAN-DEFAULT media family. For a listing of all volumes, select the All search option, and then click Go.The Results table identifies the Volume ID and other important information related to your volumes. You can view all the backup sections in a selected volume by clicking Backup Sections.Note: For more information about how to manage volumes within Oracle Secure Backup, refer to the Oracle Secure Backup Administrator’s Guide.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Managing Volumes

Managing Volumes (continued)

Use the Backup Sections page to display the sections of a backup. A backup section is that portion of a backup image that fits on one physical volume. The Sections table displays the client host, attributes, and time stamp for each section.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Backup job transcripts are kept for seven days by default. How can you increase this?

1. You cannot, it is fixed at seven days.

2. You can increase it in the backup schedule.

3. You can define this in the Logs section of Defaults and Policies.

4. You can specify this in the backup dataset.

5. You can configure this in the media family.

Answers: 3

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

If you remove a host from the OSB domain, the backup catalog is also removed.

1. True

2. False

Answers: 1

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

If you remove a host from the OSB domain, the key store is also removed, which means that your backups from that host become invalid.

1. True

2. False

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Communication with NAS devices uses the SSH protocol:

1. True

2. False

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Filers using NDMP do not require an OSB Installation on the filer:

1. True

2. False

Answers: 1

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

New devices may be discovered in which ways:

1. By automatic discovery for all devices

2. By automatic discovery on NDMP devices

3. Manually

Answers: 2, 3

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Only hosts with a media server role are available for allocationof tape/library device attachments:

1. True

2. False

Answers: 1

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

You can add a client to the OSB domain by:

1. Adding it to the backup dataset

2. Using the Web tool Configure tabbed page

3. Using Enterprise Manager4. Executing the mkhost obtool command

Answers: 2, 4

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

NDMP media servers cannot share tape devices with regular media servers:

1. True

2. False

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Discovered NDMP devices are automatically available by default:

1. True

2. False

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

After you create a tape library device, the list of volumes in that library are available to Oracle Secure Backup:

1. True

2. False

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Summary


• Manage clients

• Manage media servers (tape devices and libraries)

• Manage volumes

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Practice 9 Overview:Viewing OSB Management Tasks


• Viewing how to add an OSB client to an existing domain– Installing OSB software on a new client

– Configuring client role in the administrative domain

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Configuring and Using Tape Vaulting

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Objectives


• Describe the use of tape vaulting

• Configure tape vaulting

• Use a tape vaulting environment

• View tape rotation reports

• Troubleshoot vaulting

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Overview of Vaulting

An example of the the life cycle of backup tapes:

catalog

Tapelibrary

Mediarecycle bin

“Iron Mountain” off-site storage

Vault_Offsite

Library = 1 hour after full

Offsite = 2 years after arrival

Media_Recycle_Bin = duration disabled


An example of media requirements, which illustrates the life cycle of backup tapes, includes:1. Tapes in a tape library are written to either for a given time period, for example, one week,

or until they are full.2. If a tape has a retention requirement, for example, two years, then you might have a policy

to store these tapes offsite. 3. Operators, robots, or both perform the physical transport of tape volumes. 4. After the retention time expires, the tapes move to their next location.5. The volumes might be held in a media recycle bin (temporary storage) until they are

needed for reuse. O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




Configuring in Oracle Secure Backup:• Locations (offsite)

• Rotation policies (via offsite_2Y media family)

• Location scan schedule

Operator tasks:

• Executing media movement jobs

• Extracting volumes

• Packing and shipping volumes

Vault_Offsite

Library = 1 hour after full

Offsite = 2 years after arrival

Media_Recycle_Bin = duration disabled

Offsite_2Y

Write Window = 1 week

Retain Time = 2 years

Rotation PolicyMedia Family

Overview of Vaulting (continued)

Oracle Secure Backup uses a volume rotation policy to track a backup volume as it moves from its originating location to a storage location and is eventually recycled. This process is known as vaulting.To use tape vaulting, you must configure the following:

• Locations: Storage locations • Rotation policies, that volumes inherit from their media family (After rotation policies are

associated to their media family, you must perform at least one backup to have test data available.)

• Location scan schedule, which initiates location scans (Location scans create pending media movement jobs for eligible candidate tape volumes.)

Operators perform the following tasks:• Execute media movement jobs. • Extract volumes from their present location with the help of pick reports. • Pack and ship volumes with their distribution reports to their new location.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Configuring a New Vaulting Environment

• Defining media storage locations

• Defining rotation policies and rules

• Associating a rotation policy with a media family

Configuring a New Vaulting Environment

The list in the slide shows the prerequisite tasks before you can use the Oracle Secure Backup tape vaulting functionality.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Defining Media Storage Locations

1

2

3

Defining Media Storage Locations

You can use either the obtool commands or the OSB Web tool interface to manage your information about media storage locations.

1. In the OSB Web tool, navigate to Configure > Locations. On the Configure: Locations page, you see OSB-generated locations:

- The Media_Recycle_Bin default location can be used as a temporary "holding" location, when tapes are ready for reuse.

- When you configured devices, vlib and vlib2 were automatically created as "active locations".

2. To add a new location:- On the Configure: Locations > New Locations page, enter a name: offsite and

optionally, 3 minutes as Recall time, then click Apply. - The Recall time is the time needed to return tapes for the restore operation. Recall

time is an optional parameter, but its use is recommended, especially when you plan to use duplication policies. OSB considers this information and initiates restore operations (from original or duplicate tapes) with the shortest recall time.

3. You should receive a success message and then click OK.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Defining Rotation Policies and Rules

Locationvlib2

offsiteMedia_Recycle_Bin

Rotation policyquick_test_rotation

Rotation rulevlib2: windowclosed: 5 minutes

offsite: arrival: 2 minutesMedia_Recycle_Bin: arrival: 1 minutes

made up of

in for

subject to


A rotation policy determines the location and duration of tape movement and location. The following rules apply:

• Each rotation policy must be made up of one or more rotation rules.• Each rotation rule must be in one and only one rotation policy and each rotation rule must

be for one and only one location.• Each location may be subject to one or more rotation rules.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




1

234

5

Defining Rotation Policies and Rules (continued)

1. To create a rotation policy in the OSB Web tool, navigate to Configure > Rotation Policies > Add, then enter a policy name and click Apply. To define rotation rules, use the middle section of the page. Possible events: firstwrite,lastwrite, windowclosed, nonwritable, arrival and expiration.

2. Your first rotation rule (which must use a volume in an active location) appears in the display section above your definition area. In this example, the tapes (per media family) are eligible for movement five minutes after the Write window has closed. This implies that the media family must have a Write window parameter specified.

3. Test volume takes two minutes to arrive at the offsite location. Later, when a media movement job is executed, OSB assumes the volumes are at the next scheduled location and does not take the shipping time into account.

4. The Media_Recycle_Bin is a holding location. When you return a tape device to the Media_Recycle_Bin or another user-configured location, then OSB considers the tape to be at the end of its rotation policy. OSB does not associate the tape with another rotation policy until the tape is reused. Then OSB will use the new media family and rotation policy (if any).

5. To add these rules to the rotation policy, click OK.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Associating a Media Family with a Rotation Policy

Locationvlib2

offsiteMedia_Recycle_Bin

Rotation policyquick_test_rotation

Media familyoffsite_test

Rotation rulevlib2: windowclosed: 5 minutes

offsite: arrival: 2 minutesMedia_Recycle_Bin: arrival: 1 minutes

made up of

in for

subject tofor

governed by


Media families establish tape retention as well as the foundation for rotation and duplication policies. You must create a media family for each set of tapes that has different retention requirements. The following rules apply:

• Each media family may be governed by one and only one rotation policy.• Each rotation policy may be for one or more media families. O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




Volume setcreation

Write window Retention duration

Volume setclosed

Updates allowed Updates forbidden

Recycling time-managed volumesOSB

Associating a Media Family with a Rotation Policy (continued)

To configure a media family in the OSB Web tool, navigate to Configure > Media Families. Select the media family and click Edit. Select your rotation policy, specify your volume expiration and write window.

• The Volume expiration for OSB is Time Managed. Retain the volume set for 10 minutes.• The Write window is the period of time for which a volume set is open for updates. Ensure

that your backups fit in this Write window.Note: Of course, content-managed media families can also have rotation policies just like time-managed ones.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Using the Vaulting Environment

1. Performing a backup

2. Scheduling a location scan

3. Viewing scan control jobs

4. Executing a media movement job

5. Viewing vaulting reports

Creating pending volume movement job(s)

Executed by operators

Eligible candidates?

Yes, for vaulting:

No:

Scanning the OSB catalog

No action

Using the Vaulting Environment

In addition to the vaulting configuration, you need a suitable backup tape to test your vaulting environment. To execute a rotation policy, you must schedule a location scan which identifies when the catalog should be scanned for eligible candidate tapes. You can schedule location scans for one, several, or all locations. The location scan is automatically executed according to your specified schedule.The location scan creates a media movement job for each location. You, as OSB operator, must explicitly execute the media movement job which:

• Generates a pick and distribution report• Moves tapes to import or export slots of the library

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Scheduling a Location Scan

2

1

Scheduling a Location Scan

To schedule a location scan in the OSB Web tool, navigate to Manage > Schedule Location Scan > Add.

1. Enter a schedule name and select the locations; first click Apply, and then click Triggers. 2. To define a time-based trigger, specify the start time and the scanning frequency by day,

week, or month. You can also specify exceptions, such as when not to run a location scan. You can add multiple triggers to each location scan, for example, if you wish to schedule one scan in the morning and another in the afternoon. Click Add for each trigger.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Viewing Scan Control Jobs

Viewing Scan Control Jobs

To view scan control jobs in the OSB Web tool, navigate to Manage > Jobs; then:1. Select the Viewing options to display the jobs that interest you. 2. For each job, you can click Show Properties and/or Show Transcript, to review details of

the job execution.3. In the Job Transcript Viewer, select the level of detail that you wish to review. The

screenshot above uses “Verbose”. You can see your pending media movement job highlighted.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Executing a Media Movement Job1

3

4

2

5

Executing a Media Movement Job

To execute a media movement job in the OSB Web tool, navigate to Manage > Jobs. 1. Select the media movement Types and the following check boxes: Active, Complete

and Pending. Then click Apply.2. Select your media movement job and click Run.3. Select Now and Media Movement as Run Option and then click Apply. 4. When the job is completed, review the Properties.5. You should see that the operation completed without errors.

Note: When a media movement job is executed, OSB assumes that the tape is at its next location without taking transport time into account. OSB does not validate the arrival of the physical tape at its next location. So, OSB administrators or system operators should confirm the actual arrival with the help of the distribution list.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Viewing Vaulting Reports

An example of the the life cycle of backup tapes with sample reports:

Distribution report

catalog

Tapelibrary

Mediarecycle bin


Pick report

Location report

Distribution report

Exception reports

Schedule reports

Viewing Vaulting Reports

To view vaulting reports in the OSB Web tool, navigate to Manage > Location Reports and select your report from the Type drop-down list.

• The pick report lists all volumes to be picked (selected) for distribution to another location. Pick and distribution reports are automatically generated when you run a media movement job.

• OSB creates a distribution report when it creates a media movement job. It lists all volumes that are being sent to a particular location as the result of a media movement job. (You can think of it as a packing list to be included in the shipment of volumes to a location.)

• The location report lists the tapes at their locations and when they are scheduled to move to the next location. The next location and the eligibility move date come from the rotation policy for that volume.

• A schedule report contains the same information as a location report, but it is limited to volumes whose move-eligibility dates fall within a range that you specify.

• An exception report shows the current and expected locations for all volumes whose current and expected locations are different, compared to their rotation policy. For example, if a volume is recalled from a storage location back into a tape library, then that volume appears in the exception report for that tape library.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Troubleshooting Vaulting

Misplaced volumes:

• Volumes inventory or physical search

• To find discrepancies early: Two distribution reports– Report with tape

– Directly transmitted report, alerting operator

Stranded volumes:

• Omitting locations when changing active rotation policies

• Exception report: Volumes outside their rotation policies

• Moving stranded volumes with the OSB Web tool

Troubleshooting Vaulting

If a volume is manually removed from an active or storage location and misplaced, then Oracle Secure Backup does not flag it as misplaced. The OSB catalog still shows it at its former location. Its misplaced status is not discovered until the volume becomes eligible for inclusion in a media movement job. Finding it might require a complete volume inventory or a physical search.A volume that is misplaced on route to a storage location is the worst case. Tip: Generate two distribution reports for each media movement job: one to accompany the volume to the storage location, and transmit the other by itself to the storage location operator. If the operator receives a distribution report without a matching volume, then the operator immediately knows that a volume has been misplaced on route.Volumes inherit their rotation policies from their media families. If you change the rotation policy associated with a media family and you omit one or more locations, then all volumes in the newly omitted locations at the time of the policy change are stranded. OSB does not create media movement jobs for these volumes, because it does not look for them in the omitted locations. These stranded volumes appear in the volume exception report. Use OSB Web tool > Manage > Volumes to move the stranded volumes to a location within the new rotation policy.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Recovery Manager and Vaulting

RMAN and OSB integration:

• RMAN restore operation fails if required volumes are in storage, rather than in an active location.

• RESTORE DATABASE PREVIEW shows status of all required volumes.

• RESTORE DATABASE PREVIEW RECALL creates OSB media movement job to recall required volumes.

• RMAN restore operation succeeds with all required volumes on site.

Recovery Manager and Vaulting

RMAN and OSB are closely integrated:• In Oracle Database 10g (10.2 and later), an RMAN restore operation fails immediately if

any needed volume are located at a storage location, rather than an active location. • You can use the RESTORE DATABASE PREVIEW command to get the status of all volumes

required for a restore operation, including volumes that are AVAILABLE, but located remotely.

• You can use the RESTORE DATABASE PREVIEW RECALL command to start a recall for all volumes needed for a restore operation that are currently at a storage location. This RMAN command translates into an Oracle Secure Backup media movement job.

• When the volumes have been recalled from storage, the RESTORE DATABASE PREVIEWoutput for the same restore operation indicates that these volumes are now available on site. A restore operation can be completed successfully at this point.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Recalling a Tape Volume

Return volume to proper place in rotation.

Policy-based releaseManual release

Volume “frozen” after restore operation

Automated recall, while job remains “pending”

RESTORE DATABASE PREVIEW

RECALL creates media movement job,“manual” recall

Automated start of restore operationManual start of restore operation

Explicitly enable media movement job.

For Database Restore For File-system Restore

Recalling a Tape Volume

When a tape is recalled, Oracle Secure Backup is optimized for each specific activity. This means, OSB functionality varies slightly for database and file-system restore operations.

1. When a restore operation needs a volume that is not in an active location, then OSB automatically generates a volume recall request for file-system restore operation. The job remains in a “pending” state until the volume arrives. This is not implemented for a database related recall, because a “pending” job would use server processes while waiting.

2. You must explicitly enable this media movement job before the volume can be recalled. Usually, recall requests are processed with the next regular media movement, but they can also be executed immediately.

3. For the database, you start the restore operation; for the file-system data, the pending job continues and automatically starts restore operation.

4. When the restore operation is complete, the volume is frozen at its current point in the rotation cycle until it is released. For the file-system restore operation: theautovolumerelease policy determines if the volume is automatically released or not.

5. You release the volume from its current location and return it to the proper place in its rotation (as specified by the rotation policy that applies to that volume).

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

A tape is assigned a rotation policy according to the:

1. Media family configuration

2. Backup schedule

3. Defaults and Policies

4. Dataset

Answers: 1

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

A scheduled location scan is configured for 10 AM on Tuesday so the media movement job will run automatically at that time:

1. True

2. False

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

You change a rotation policy in a fully functional environment, because your organization does not want to renew a contract with some of your storage providers. The tapes from the omitted locations are automatically transferred to a default location:

1. True

2. False

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Summary


• Describe the use of tape vaulting

• Configure tape vaulting

• Use a tape vaulting environment

• View tape rotation reports

• Troubleshoot vaulting

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Practice 10 Overview: Configuring and Using Tape Vaulting


• Configuring a new vaulting environment

• Performing a backup

• Scheduling a location scan

• Executing a media movement job

• Viewing tape rotation reports

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Configuring Tape Duplication

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Objectives


• Describe the use of tape duplication

• Differentiate duplication from vaulting and migration

• Configure tape duplication

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Media Management

Managing tapes from the first write to reuse based on user-defined media families, duplication and rotation policies

Duplication policy:Automates the duplication of tapes, which

can use either the same or different

retention times and rotation schedules

Rotation policy or vaulting:Automates the tape rotation between

two or more sites

Media family:Acting on tape pool to establish retention and reuse

Tape reuse:Automatic reuse of expired tapes within the administrative domain

Media Management

Oracle Secure Backup 10.2 provides the following key enhancements for media management:• Automated rotation of tapes between locations, referred to as vaulting• Automated duplication of tapes according to duplication policy• On-demand tape duplication O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Tapes duplicated to another media family may have a different retention and rotation schedule than the original tapes.

catalog“Cabinet” tape library

on-site storage

TapeLibrary

Mediarecycle bin


ONSITE_1M

media family

OFFSITE_2Y

media family

Overview of Tape Duplication

Overview of Tape Duplication

A real-life example: You may want to maintain one set of backup tapes onsite for one month and send a copy of the tapes offsite for disaster recovery and long-term storage requirements (for example, for two years).

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



ONSITE_1M

Write Window = 1 weekRetain Time = 4 weeks

VAULT_ONSITE

Library = 1 week after FullCabinet = 1 month after arrivalLibrary = duration disabled

VAULT_OFFSITE

Library = 1 hour after fullIron_Mountain = 2 years after arrivalMedia_Recycle_Bin = duration disabled

OFFSITE_2Y

Write Window = NoneRetain Time = 2 years

Rotation Policy

Rotation Policy

COPY_OFFSITE

Trigger = 1 hour after window closed# of Duplicates = 1Duplicate to Media Family= OFFSITE_2Y

Duplication Policy

Media Family

Media Family

Tape Duplication and Vaulting

Tape Duplication and Vaulting

In this scenario, your backup is associated with the onsite_1m media family (with a one-month retention and a rotation policy to an on-site storage location). The onsite_1m media family has a duplication policy that copies the tapes to the offsite_2y media family (which has a two-year retention, no duplication policy, and a rotation policy to the desired storage location for two years).Note: Oracle Secure Backup performs duplication before rotation.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Tape Duplication and Migration

Virtual Tape Libraries (VTLs)• Virtual tapes migrate to physical tape per user-defined policy.

• Duplication policy enables “migration” to the same or a different media family.

• Physical tape, which was at first the duplicate, becomes the “original” backup, and VTL space is reused.


Copy tape

Reclaim storage in VTL

First duplicate, then only backup

Tape Duplication and Migration

Virtual tape libraries (VTLs) are disk backup appliances that emulate tape devices. VTLs can be seamlessly deployed into an environment because the tape backup software recognizes the VTL as the tape device that it is emulating.VTLs are becoming more widely adopted to achieve the performance benefits of disks without requiring any change to the backup infrastructure. If you need to maintain backups in your VTL for a short period of time (a week or a month), then you migrate data to physical tape, as defined in your rotation and duplication policy. Once the virtual tape has been copied to physical tape, the disk space is reclaimed in the VTL. At this point the duplicate copy becomes the original.Note: This functionality is not available for the Oracle classroom setup.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Configuring and Using Volume Duplication

Configuring a duplication environment involves:


• Viewing or defining a volume duplication window

• Defining a volume duplication policy (within the duplication window)

• Associating a duplication policy with a media family

Using the duplication environment consists of:

1. Scheduling a volume duplication

2. Performing a backup

3. Executing jobs

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Configuring a Duplication Environment


• Viewing or defining volume duplication window

Configuring a Duplication Environment

• In the OSB Web tool, navigate to Configure > Locations.• In the OSB Web tool, navigate to Configure > Volume Duplication Windows. View the

time range of the daily default window, which is from 10:00 to 20:00 (10 AM to 8 PM).

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Defining Volume Duplication Policies

Defining Volume Duplication Policies

In the OSB Web tool, navigate to Configure > Volume Duplication Policies. Click Add to define a new policy.Duplicate tapes can be made in the same or a different media family than the original tapes. If the same media family is used, then the duplicated tapes have the same retention and rotation schedule (if any) as the original ones. If a different media family is used, then the duplicate tapes have the retention and rotation schedule (if any) of the new media family.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Associating a Duplication Policy with a Media Family

Associating a Duplication Policy with a Media Family

1. Navigate to OSB Web tool > Configure > Media Families. 2. Then select your media family.3. Click Edit.4. Associate the Volume duplication policy by selecting your rotation policy from the drop-

down list. Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Scheduling Volume Duplication

3

2

1

Scheduling Volume Duplication

1. Navigate to OSB Web tool > Manage > Schedule Volume Duplication > Add. Enter a name for the duplication schedule and select the appropriate locations, first click Apply, then click Triggers.

2. Select frequency and time of day (within your volume duplication window) and click Add.3. Your duplication will be automatically executed at your specified day and time. O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Executing Jobs

Creating and executing volume duplication job(s)

Eligible candidates?

Yes, for duplication:

Yes, for vaulting:

No:

Scan control job: Scanning the OSB catalog

Creating "pending" volume movement job(s)

Executed by operators

No action

Executing Jobs

Tape vaulting and tape duplication are optional configuration settings. They are independent of each other. However, if both policies are defined for a tape, then OSB will duplicate this tape before executing the rotation policy. This ensures that the duplication requirement is completed, before the tape is shipped offsite.So, your duplication job will run automatically within your scheduled time window, before any data movement jobs, if both are defined for the same media family.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

A tape is assigned a duplication policy according to the:

1. Media family configuration

2. Backup schedule

3. Defaults and Policies

4. Dataset

Answers: 1

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

After scheduling tape duplication, you must run the media duplication job manually:

1. True

2. False

Answers: 2

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Summary


• Describe the use of tape volume duplication

• Differentiate duplication from vaulting and migration

• Configure tape duplication

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Practice 11 Overview:Viewing Media Life Cycle Demonstration

This practice covers the topic of tape configuration. View the osb_media_lifecycle viewlet, that shows both tape vaulting and duplication.

OSB_CATALOG-MF

Write Window = 7 daysRetain Time = 14 days

Demo_Rotation

vlib : windowclosed : 1 hourDemo : arrival : 6 monthsMedia_Recycle_Bin : arrival: disabled

Rotation Policy

Full_Offsite

Write Window = NoneRetain Time = 6 months

Media Families

Full_Dup_Offsite

Trigger = 1 hour after window closedDuplicates = 1Duplicate to media family= Full_Offsite

Duplication Policy

Full_DemoWrite Window = 2 hoursRetain Time = 1 months

Practice 11 Overview: Viewing Media Life Cycle Demonstration

The viewlet shows the following tape configuration tasks:1. Create a new Demo location.2. Create a new Demo_Rotation rotation policy with three rules.3. Assign the Demo_Rotation policy to the OSB_CATALOG-MF media family.4. Create a Full_Demo media family.5. Create a Full_Offsite media family and assign the Demo_Rotation policy.6. Create a Full_Dup_Offsite duplication policy, that copies tapes from the Full_Demo media

family to the Full_offsite media family.7. Associate the Full_Dup_Offsite duplication policy with the Full_Demo media family.8. Create the Demo_Loc_Scan schedule for vaulting jobs.9. View the default volume duplication window.10. Create the Demo_dup_scan schedule within the duplication time window for the

duplication job.11. Navigate to Location reports, which enable you to track tapes at the various locations.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Tuning Oracle Secure Backup

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Objectives


• Identify tunable hardware and software components

• Choose the optimal disk storage subsystem

• List potentially CPU-intensive server operations

• Choose the optimal tape subsystem and connections

• Analyze RMAN read operations

• Analyze media manager write operations

• Describe RMAN and OSB tuning dependencies

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Tuning Hardware

The most important hardware components involved in backup and recovery are:

Connection between tapes and server -SAN, direct attach

Connection between disks and server -fiber attach

Tape storage subsystem

Database server

Disk storage subsystem

Tuning Hardware

To understand how to tune backup and recovery performance, it is important to understand the performance characteristic of each component, so that you can maximize its performance. The most important hardware components involved in backup and recovery are:

• Disk storage subsystem • Servers • Tape subsystem • Connection between the disks and server, and the server and tape subsystem

Generally, fiber-attached disks are used for production and SAN-attached are used for secondary backup storage. SAN disk storage is transparent for Oracle Secure Backup. OSB regards SAN as a collection of disks. In contrast, NAS uses NDMP, and OSB must identify the NAS device.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Tuning RMAN and Oracle Secure Backup

• Disk storage subsystem are best configured: – With ASM without using hardware-based RAID

– Using only outer sectors of the physical disk

• Potentially CPU-intensive server operations include:– Copying data from I/O buses to memory buffers

– Validating data blocks

– Copying memory buffers from RMAN to OSB

– Copying data from memory buffers to I/O buses

– Encryption

– Compression


It is important to know which components can create a bottleneck and why. Backup and recovery performance depends on both software and hardware components.The most efficient and scalable way to configure a disk storage subsystem is to use ASM without using hardware-based RAID. Because Oracle ASM spreads database files across allavailable disks, ASM can achieve low contention and high I/O throughput even on commodity disk arrays such as simple JBODs (Just a Bunch of Disks). You can achieve further improvement in disk throughput by using only outer sectors of the physical disk.Although the processing power of the server (for example, CPU, internal bus, and so on) is rarely a backup bottleneck, it can affect backup performance. The following potentially CPU-intensive operations occur inside the server:

• Copying data from I/O buses to memory buffers • Validating data blocks • Copying memory buffers from Oracle Recovery Manager to Oracle Secure Backup • Copying data from memory buffers to I/O buses

Oracle encryption and compression backups are other CPU-intensive operations whose speed may be limited by the processing power of the CPU. For example, testing showed that a single Intel Xeon 3.2 GHz processor could encrypt Oracle data blocks during the backup at a speed of about 40 MB.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




• Tape subsystem performance is improved by:– Adaptive tape speed

– Larger tape blocks

• Best connection between the disks and server, and the server and tape subsystem: Fibre Channel SAN

Tuning RMAN and Oracle Secure Backup (continued)

Additional performance factors are:• The tape subsystem can be an important factor in backup and recovery performance. One

popular option for tape drives is LTO technology. The native transfer rate for LTO3 drives is 80 MB/s and up to 150 MB/s compressed.Tape streaming is not an issue, because most modern tape technologies have adaptive tape speed.

• The physical tape block size is the amount of data written by the media management software to a tape in one write operation. The common rule is that a larger tape block size leads to a faster backup, because the larger block size uses the bandwidth between server and tape drive more efficiently.

• Fibre Channel SANs provides the most performance. It is a widely accepted connectivity method between servers, tapes, and disk. In SAN environments, the connectivity between HBA, Fibre Channel switches, tape controllers, and disk controllers is an important consideration, and the overall SAN performance is dependent upon each of these components. The most important recommendation is to zone the disk subsystem to a different HBA from the tape subsystem.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Tuning RMAN Software

Oracle database initialization parameters for tuning RMAN: • _BACKUP_KSFQ_BUFCNT (16): Maximum number of

outstanding I/O requests = Number of disks, if 32 or more• _BACKUP_KSFQ_BUFSZ (1 MB): Size of individual I/O

requests = Size of ASM stripe


By default, RMAN uses asynchronous an I/O operation to read data. The DISK_ASYNCH_IO Oracle database initialization parameter controls asynchronous I/O. When I/O is asynchronous, a server session can begin an I/O and then perform other work while waiting for the I/O operation to complete. The server session can also begin multiple I/O operations before waiting for the first to complete.

• The maximum number of outstanding I/O requests during backup is controlled by the _BACKUP_KSFQ_BUFCNT parameter, whereas the size of I/O requests is controlled by the _BACKUP_KSFQ_BUFSZ parameter.

• Even though these parameters are so-called underscore parameters, to achieve the best performance you might need to set the _BACKUP_KSFQ_BUFCNT parameter to the number of disks in the ASM disk group and the _BACKUP_KSFQ_BUFSZ parameter to the size of the ASM stripe. The default is 16 for _BACKUP_KSFQ_BUFCNT and 1 MB for _BACKUP_KSFQ_BUFSZ. These defaults are acceptable for ASM disk groups with fewer than 32 disks and when the ASM stripe size is 1 MB.

The diagram depicts RMAN buffers and data flow during a backup between input and output I/O buffers.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




RMAN needs to be tuned, so it can use all disk spindles in the ASM disk group. An example:• _KSFQ_BACKUP_BUFCNT database parameter: 64

• MAXOPENFILES RMAN channel parameter: 1

Tuning RMAN Software (continued)

As noted previously, Oracle RMAN is responsible for the reading of data. Thus, RMAN must be tuned so that it can use all disk spindles in the ASM disk group. The graph on this page shows an example of benchmark testing: The maximum throughput is achieved with the _KSFQ_BACKUP_BUFCNT parameter set to 64; so the maximum number of outstanding I/O reads is 64. Because the disks are striped with the default ASM stripe size of 1 MB, there is no need to modify the size of I/O reads, which are controlled by the _KSFQ_BACKUP_BUFSZ parameter. Because ASM stripes each data file across all available disks, RMAN multiplexing should not be used. Consequently, the Oracle RMAN channel parameter MAXOPENFILES is set to 1.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Performance Factors

Performance optimizations based on RMAN and OSB integration include:

• No reading and writing of unused blocks (automatic)

• Backup of only uncommitted undo (automatic)

• Shared buffer between SBT and OSB tape (automatic)

• User-defined TCP/IP buffer size for sending larger packets over the network

• Linux direct I/O: Writing from OSB tape buffer (user space) via DMA to tape

Performance Factors

Performance optimizations with Oracle Secure Backup 10.2 and Oracle Database 11g are: • An RMAN/OSB backup (OSB 10.1 and higher) reads and writes only used data file blocks.

This feature is only available when RMAN uses Oracle Secure Backup as its media manager.

• Oracle Secure Backup 10.2 eliminates backup of committed undo (increasing backup performance and reducing tape consumption). Only uncommitted undo is backed up.

• Oracle Secure Backup 10.2 optimizes SBT buffer allocation by using a shared buffer between SBT and tape. In past versions, RMAN writes data to the SBT buffer, then the media manager copies data from the SBT buffer to the tape buffer. Using a shared buffer (OSB and RMAN only) reduces CPU overhead by up to 30% in internal tests.

Note: These Oracle Secure Backup 10.2 and Recovery Manager 11g performance optimizations are not available with third-party media management utilities. In addition to Oracle database backup performance enhancements, Oracle Secure Backup 10.2 has strengthened the data transfer architecture, achieving faster performance than that of OSB 10.1 for file system and networked backups. You can now explicitly define TCP/IP buffer size to send larger packet sizes over the network (as desired), and further increase your remote backup performance.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Performance Factors (continued)

Note: Oracle Secure Backup supports Linux direct I/O, which eliminates additional memory copies when backing up to tape. To decrease CPU usage and increase speed, OSB can take advantage of direct I/O for writing to tapes. With direct I/O, the Linux kernel can manipulate memory allocated within the user space (that is, the OSB tape buffer), so that the adapter driver can transfer data via the Direct Memory Access (DMA) technique directly to or from that user space memory. Without direct I/O, the memory first must be copied to the kernel space and then transferred by means of the DMA to the adapter. Thus, using direct I/O to write to tape can significantly reduce CPU usage. You can enable direct I/O by issuing the following commands as a super user on the OSB media server:

# echo 1 > /proc/scsi/sg/allow_dio# touch /usr/local/oracle/device/enable_dio

To use direct I/O with Oracle Secure Backup, you need RedHat AS 4.0 or above and the patch that includes Oracle Secure Backup direct I/O enhancement 5479541. From the benchmark testing example: The team experimented backing up data with and without direct I/O: Without direct I/O the maximum speed of four drives on one node was about 220MBs with nearly 100% CPU utilization. That speed was 40% slower than a backup with direct I/O. Enabling direct I/O significantly helps performance.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Performance Factors

• Backup parallelism: One RMAN channel per tape device

• RMAN ALLOCATE CHANNEL and CONFIGURE CHANNEL parameter BLKSIZE: Size of buffer shared with OSB

• OSB BLOCKINGFACTOR media policy: Controlling tape block size.

Performance Factors (continued)

Other performance factors include:• The number of concurrent RMAN channels controls backup parallelism. An RMAN

channel represents one stream of data to an output device. An RMAN channel is an operating system process or thread (on Windows) that reads the data from disk and sends it to the output device. The backup is performed in parallel on all allocated channels. Because the channels act independently, the number of active channels defines the level of parallelism. The number of channels should not exceed the number of tape devices: One RMAN channel per tape device should provide the best performance.

• The size of the output buffers used to transfer data from RMAN to Oracle Secure Backup is controlled by the RMAN ALLOCATE CHANNEL and CONFIGURE CHANNELparameter BLKSIZE. So you can tune the size of Oracle database output buffers and tape block size.

• Oracle Secure Backup provides the media management layer for RMAN. In other words, Oracle Secure Backup is responsible for copying data from Oracle database buffers and writing these buffers to tape. The most important parameter for tuning Oracle Secure Backup is the BLOCKINGFACTOR media policy that controls tape block size.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




• Decreasing the value of the RMAN BLKSIZE parameter causes less CPU usage and, in the case of greater parallelism, a faster backup.

• You can achieve faster tape backups by increasing the BLOCKINGFACTOR media policy (if parallelism > 1).


From the benchmark testing example: • The graph shows the speed of an RMAN backup to tape with one and four RMAN

channels with different values of BLKSIZE. It is important to emphasize that BLKSIZE does not influence speed when parallelism is 1. Further testing on other operation systems such as Solaris showed that BLKSIZE has minimal impact on performance, so the testers believe that this behavior is specific to Linux.

• To better use the bandwidth between server host and tape, the testers increase the tape block size and document the performance gains of larger block size. You can change the tape block size by setting the BLOCKINGFACTOR media policy. The value of this parameter represents the number of 512-byte blocks with the default setting of 128. The test shows that the best speed is achieved with the BLOCKINGFACTOR set to 4096, which corresponds to a block size of 2 MB. To achieve direct I/O with larger buffers (2 MB), you need the Linux RedHat patch, that fixes bug 5479559. Without that patch the maximum tape block size is 512 KB.

• Changing tape block size does not have any measurable affect on backup performance when parallelism is 1. This is because with parallelism 1, the CPU is able to initiate DMA requests (to transfer from server memory to tape controller) fast enough to keep the tape drive spinning.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Results of Tuning

Results of Tuning

From the benchmark testing example: After tuning the base environment and documenting the performance results, we measured the performance achieved by adding a RAC node and more tape drives. Our test proved the scalability of this solution. Oracle Secure Backup leverages over 97% of available throughput with performance increasing linearly with that of hardware capability. The chart demonstrates how Oracle Secure Backup delivers speeds of 700 MB/s leveraging over 97% of available disk throughput to eight LTO-3 tape drives.

• The blue line shows the linear improvement in backup speed utilizing one node of the RAC as the number of tape drives is increased from one to four.

• By adding a second node and an additional four tape drives, backup performance continues to increase in direct relation to the additional hardware capabilities, as shown on the green line of the chart.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Scalability of the Overall System

Scalability of:

• Disk Storage Subsystem with Oracle ASM

• Servers with RAC

• Tapes with an appropriate tape library design

• SAN drive sharing

• Backup software supporting:– New nodes in a RAC cluster

– New disks in an ASM disk group

– New clients and media servers in the OSB domain

Scalability of the Overall System

Because of the exponential growth of transactional data, the most important aspect of the entire backup system is scalability.

• By adding more disk drives to an ASM disk group, you can easily scale the throughput of the disk subsystem.

• By combining the computing power of multiple commodity servers, RAC provides high availability for the Oracle database in addition to scalability. As new nodes are added to the RAC environment, the computing power linearly increases performance.

• A tape library design should allow the tape library to be easily expanded by adding more tape drives and capacity.

• Oracle Secure Backup has a SAN drive-sharing feature that enables utilization of all hosts in a RAC cluster.

• The OSB backup software is easily scalable: It supports new nodes in a RAC cluster, new disks in an ASM disk group, new clients and media servers in the OSB domain.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

With parallelism 1, you can achieve faster tape backups by increasing the BLOCKFACTOR media policy.

1. True

2. False

Answers: 1

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Which of the following performance optimizations are only available if you are using RMAN and OSB together?

1. Linux direct I/O

2. Backup of only uncommitted undo

3. Fibre Channel SAN

4. Shared buffer between SBT and OSB tape

Answers: 2, 4

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

With parallelism 1, the RMAN ALLOCATE CHANNEL and CONFIGURE CHANNEL parameter BLKSIZE has minimal impact on performance.

1. True

2. False

Answers: 1

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Quiz

Assume that you are tuning an environment with 64 disks. The _BACKUP_KSFQ_BUFSZ parameter is set to 1 MB, which is also the size of your ASM stripe. To which value should you set the _BACKUP_KSFQ_BUFCNT parameter?

1. 16

2. 32

3. 64

Answers: 3

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Summary


• Identify tunable hardware and software components

• Choose optimal subsystems

• Consider performance factors, such as:– RMAN needs to be tuned, so it can use all disk spindles in

the ASM disk group (with the _KSFQ_BACKUP_BUFCNT database parameter: 64).

– Enabling Linux direct I/O significantly helps performance.

– One RMAN channel per tape device should provide the best performance.

– Tune the size of Oracle database output buffers and tape block size, and specify TCP/IP buffer size for sending larger packets over the network.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Appendix APractices and Solutions

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Oracle Database 11g: Oracle Secure Backup A - 2

Table of Contents Practices for Lesson 1 ......................................................................................................... 3 Practices for Lesson 2 ......................................................................................................... 4

Practice 2-1: Install Oracle Secure Backup .................................................................... 5 Practice 2-2: Configure Media for Oracle Secure Backup ............................................. 9

Practices for Lesson 3 ....................................................................................................... 13 Practice 3-1: Configure an OSB User........................................................................... 14 Practice 3-2: Configure a Host Encryption Policy........................................................ 19

Practices for Lesson 4 ....................................................................................................... 21 Practice 4-1: Configure RMAN for OSB...................................................................... 22

Practices for Lesson 5 ....................................................................................................... 34 Practice 5-1: Perform an Oracle-Suggested Backup..................................................... 35 Practice 5-2: Recover a Data File from an OSB-Encrypted Backup ............................ 44

Practices for Lesson 6 ....................................................................................................... 50 Practice 6-1: Back Up File-System Data ...................................................................... 51

Practices for Lesson 7 ....................................................................................................... 61 Practice 7-1: Restore File-System Data ........................................................................ 62

Practices for Lesson 8 ....................................................................................................... 67 Practice 8-1: Perform a Preconfigured OSB Catalog Backup ...................................... 68

Practices for Lesson 9 ....................................................................................................... 75 Practice 9-1: View OSB Management Tasks................................................................ 76

Practices for Lesson 10 ..................................................................................................... 78 Practice 10-1: Configure Tape Vaulting ....................................................................... 79 Practice 10-2: Use Tape Vaulting ................................................................................. 91

Practices for Lesson 11 ................................................................................................... 106 Practice 11-1: View Media Lifecycle Demo .............................................................. 107

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practices for Lesson 1 There are no practices for Lesson 1.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practices for Lesson 2 Background: You are promoted to be the Oracle Secure Backup administrator in your organization. Your first task is to create your own training environment. You install Oracle Secure Backup on only one server and confirm that each installation step is correctly executed. THE VIRTUAL TEST DEVICES USED IN THIS LAB ARE FOR TRAINING PURPOSES ONLY. THEY ARE NOT SUPPORTED FOR PRODUCTION USE. Note: Executing all installation and configuration steps is a prerequisite for the following practices.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practice 2-1: Install Oracle Secure Backup In this practice, you perform the following tasks: Create your Oracle Secure Backup home directory. Install the Oracle Secure Backup software. Unless specified otherwise during this practice, you should log in as the oracle user to your terminal emulator session. Note: In this practice, simple and easy to remember passwords are used in order not to detract from the purpose of the exercise. In real development and production environments, use strong passwords following the guidelines in Oracle Database Security Guide and the Oracle Secure Backup Administrator’s Guide. Use the following information to install the software: The Oracle Secure Backup software is staged on your server in the

/stage/osb_installmedia directory. Your Oracle Secure Backup home directory is /usr/local/oracle/backup. All your passwords are oracle. During installation, you configure only the local server as an administrative server with no attached devices.

1) Log in as the root user and create /usr/local/oracle/backup as your Oracle Secure Backup home directory. Change to that directory. Ensure that the uncompress utility is available.

su – root Password: oracle <<password not echoed >> # mkdir -p /usr/local/oracle/backup # cd /usr/local/oracle/backup # ln -s /bin/gunzip /bin/uncompress #

2) Continue as the root user. Start the installation of Oracle Secure Backup from the staging directory. Begin with the setup program.

Note: The output has been slightly formatted to reduce the number of space lines.

# /stage/osb_installmedia/setup Welcome to Oracle's setup program for Oracle Secure Backup. This program loads Oracle Secure Backup software from the CD-ROM to a filesystem directory of your choosing. This CD-ROM contains Oracle Secure Backup version 10.2.0.2.0_linux32. Please wait a moment while I learn about this host... done.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Practice 2-1: Install Oracle Secure Backup (continued)


- - - - - - - - - - - - - - - - - - - - 1. linux32 administrative server, media server, client - - - - - - - - - - - - - - - - - - - - Loading Oracle Secure Backup installation tools... done. Using your previous obparameters file. The new file shipped with this distribution of Oracle Secure Backup is called install/obparameters.new. Loading linux32 administrative server, media server, client... done. - - - - - - - - - - - - - - - - - - - - Loading of Oracle Secure Backup software from CD-ROM is complete. You may unmount and remove the CD-ROM.

Would you like to continue Oracle Secure Backup installation with 'installob' now? (The Oracle Secure Backup Installation Guide contains complete information about installob.) Please answer 'yes' or 'no' [yes]: yes - - - - - - - - - - - - - - - - - - - - Welcome to installob, Oracle Secure Backup's UNIX installation program. It installs Oracle Secure Backup onto one or more UNIX or Linux systems on your network. (Install Oracle Secure Backup for Windows using the CD-ROM from which you loaded this software.) For most questions, a default answer appears enclosed in square brackets. Press Enter to select this answer. Please wait a few seconds while I learn about this machine... done.

Have you already reviewed and customized install/obparameters for your Oracle Secure Backup installation [yes]? no

Would you like to do this now [yes]? no - - - - - - - - - - - - - - - - - - - - Oracle Secure Backup is not yet installed on this machine. Oracle Secure Backup's Web server has been loaded, but is not yet configured.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



You can install this host one of three ways: (a) administrative server the host will also be able to act as a media server or client) (b) media server (the host will also be able to act as a client) (c) client

If you are not sure which way to install, please refer to the Oracle Secure Backup Installation Guide. (a,b or c) [a]? a Beginning the installation. This will take just a minute and will produce several lines of informational output. Installing Oracle Secure Backup on edvmr1p0 (Linux version 2.6.9-67.0.7.0.1.ELxenU)

You must now enter a password for the Oracle Secure Backup encryption key store. Oracle suggests you choose a password of at least 8 characters in length, containing a mixture of alphabetic and numeric characters. Please enter the key store password: oracle <<password not echoed >> Re-type password for verification: oracle <<password not echoed >>

You must now enter a password for the Oracle Secure Backup 'admin' user. Oracle suggests you choose a password of at least 8 characters in length, containing a mixture of alphabetic and numeric characters. Please enter the admin password: oracle <<password not echoed >> Re-type password for verification: oracle <<password not echoed >> You should now enter an email address for the Oracle Secure Backup 'admin' user. Oracle Secure Backup uses this email address to send job summary reports and to notify the user when a job requires input. If you leave this blank, you can set it later using the obtool's 'chuser' command.

Please enter the admin email address: <<no entry, just press the Enter key>> generating links for admin installation with Web server updating /etc/ld.so.conf

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



checking Oracle Secure Backup's configuration file (/etc/obconfig) setting Oracle Secure Backup directory to /usr/local/oracle/backup in /etc/obconfig setting local database directory to /usr/etc/ob in /etc/obconfig setting temp directory to /usr/tmp in /etc/obconfig setting administrative directory to /usr/local/oracle/backup/admin in /etc/obconfig protecting the Oracle Secure Backup directory creating /etc/rc.d/init.d/observiced activating observiced via chkconfig initializing the administrative domain ********************** N O T E ************************* On Linux systems Oracle recommends that you answer no to the next two questions. The preferred mode of operation on Linux systems is to use the /dev/sg devices for attach points as described in the 'ReadMe' and in the 'Installation and Configuration Guide'.

Is edvmr1p0 connected to any tape libraries that you'd like to use with Oracle Secure Backup [no]? no Is edvmr1p0 connected to any tape drives that you'd like to use with Oracle Secure Backup [no]? no Installation summary: Installation Host OS Driver OS Move Reboot Mode Name Name Installed? Required? Required? admin edvmr1p0 Linux no no no Oracle Secure Backup is now ready for your use. # exit exit $

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practice 2-2: Configure Media for Oracle Secure Backup In this practice, you perform the following tasks: Configure the mediaserver role for the current host. Configure virtual test devices. View information about the configured devices. Insert volumes into both tape libraries. Confirm the correct configuration via the obtool interface.

1) In a terminal window, navigate to the /home/oracle/labs directory and execute the ./config1.sh script to update the config1_out.sh script with your short host name.

$ cd /home/oracle/labs $ $ cat config1.sh #!/bin/ksh # Only for test and training, not for production # Must be connected as oracle OS user if [ `whoami` != "oracle" ]; then echo "You are supposed to be logged on as oracle when running this script." exit fi x=`hostname --short` echo $x sed 's/edrsr04p1/'$x'/' config1_in.sh > config1_out.sh $ ./config1.sh edvmr1p0 $

2) In the /home/oracle/labs directory, execute the ./config1_out.sh script to perform the following tasks:

Configure the client,admin,mediaserver roles for the current host.

Configure the vdte1, vdte2, vdte3 and vdte4 tape drives for the vlib library.

Configure the vdrive1 and vdrive2 for the vlib2 library.

Note: You must enter the admin_password several times, because it would be a security violation to provide the password in clear text on a command line or in a command script. Oracle Corporation recommends that you prompt users for the appropriate password.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Practice 2-2: Configure Media for Oracle Secure Backup (continued)


$ ./config1_out.sh Password: <<oracle – the admin_password does not appear>> Password: <<oracle>> Password: <<oracle>> Password: <<oracle>> Password: <<oracle>> Password: <<oracle>> Password: <<oracle>> Password: <<oracle>> Password: <<oracle>> $

3) Now, practice some potential installation troubleshooting steps to confirm that the configured devices exist according to your specifications. First view your virtual drives and libraries as operating system directories under the u01 directory.

$ ls -l /u01 total 36 drwxrwxr-x 4 root oinstall 4096 Aug 21 2007 app drwxr-xr-x 2 root root 4096 Oct 9 13:01 vdrive1 drwxr-xr-x 2 root root 4096 Oct 9 13:01 vdrive2 drwxr-xr-x 2 root root 4096 Oct 9 13:00 vdte1 drwxr-xr-x 2 root root 4096 Oct 9 13:00 vdte2 drwxr-xr-x 2 root root 4096 Oct 9 13:01 vdte3 drwxr-xr-x 2 root root 4096 Oct 9 13:01 vdte4 drwxr-xr-x 2 root root 4096 Oct 9 13:00 vlib drwxr-xr-x 2 root root 4096 Oct 9 13:01 vlib2 $

Note: If any of your virtual libraries or tape drives do not exist, most likely, you will have to uninstall the OSB software and start again.

4) Start the obtool as the admin user with the oracle password, and view all roles of your host with the lshost command.

Note: If you receive the following, “Warning: auto-login failed – login token has expired”, ignore it. It means that you have to enter the login username and password as shown above. - If you are within the time period of your login token, you do NOT have to enter username and password. [oracle@edrsr4p1 labs]$ obtool Oracle Secure Backup 10.2.0.2.0 login: admin Password:oracle <<Password not echoed >> ob> lshost edvmr1p0 admin,mediaserver,client (via OB) in service

5) View your just created devices with the lsdev command.

ob> lsdev library vlib in service

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



drive 1 vdte1 in service drive 2 vdte2 in service drive 3 vdte3 in service drive 4 vdte4 in service library vlib2 in service drive 1 vdrive1 in service drive 2 vdrive2 in service ob>

6) To insert unlabeled volumes into both tape libraries, either execute the config2.txt OSB script in your working directory or use the insertvol command. Insert 32 volumes into the vlib library and 14 volumes into the vlib2 library.

ob> < /home/oracle/labs/config2.txt ob> # Only for test and training, not for production ob> # OSB script, run as admin user ob> ob> insertvol -L vlib -c 250 unlabeled 1-32 ob> insertvol -L vlib2 -c 250 unlabeled 1-14 ob>

7) List the volumes in the vlib2 library with the lsvol command, to confirm that they are correctly configured.

ob> lsvol -L vlib2 Inventory of library vlib2: in 1: unlabeled, barcode c91e60a47888102bbceaaa0b0000401 in 2: unlabeled, barcode c92cec787888102bbceaaa0b0000401 in 3: unlabeled, barcode c93a988c7888102bbceaaa0b0000401 in 4: unlabeled, barcode c948466c7888102bbceaaa0b0000401 in 5: unlabeled, barcode c9560acc7888102bbceaaa0b0000401 in 6: unlabeled, barcode c963bdc07888102bbceaaa0b0000401 in 7: unlabeled, barcode c9717a6e7888102bbceaaa0b0000401 in 8: unlabeled, barcode c97f2eca7888102bbceaaa0b0000401 in 9: unlabeled, barcode c98cecae7888102bbceaaa0b0000401 in 10: unlabeled, barcode c99aa7187888102bbceaaa0b0000401 in 11: unlabeled, barcode c9a8585e7888102bbceaaa0b0000401 in 12: unlabeled, barcode c9b620f67888102bbceaaa0b0000401

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



in 13: unlabeled, barcode c9c3e0427888102bbceaaa0b0000401 in 14: unlabeled, barcode c9d19f527888102bbceaaa0b0000401 ob>

8) View the default media families in the obtool. Use the lsmf --long command, and use the logout command to exit.

ob> lsmf --long OSB-CATALOG-MF: Write window: 7 days Keep volume set: 14 days Appendable: yes Volume ID used: unique to this media family Comment: OSB catalog backup media family RMAN-DEFAULT: Keep volume set: content manages reuse Appendable: yes Volume ID used: unique to this media family Comment: Default RMAN backup media family ob> logout $

Note: If you use the quit command to exit, then you do not have to enter username and password within the time period of your login token. If you use the logout command to exit, then you will be asked for username and password, the next time that you enter the obtool. This is more secure.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practices for Lesson 3 Background: After your successful installation of the Oracle Secure Backup software, you ensure that the security requirements of your organization are implemented with Oracle Secure Backup. You want to limit access to the OSB domain and make sure that tapes are encrypted at all times, whether they are onsite, in off-site storage or even lost. Note: Executing all configuration steps in this practice is a prerequisite for the following practices.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practice 3-1: Configure an OSB User In this practice, you perform the following tasks in the Oracle Secure Backup Web tool:

Set the OSB preference to view the extended command output. Define a new Oracle Secure Backup user. Configure preauthorization for this user.

In the Oracle Secure Backup Web tool you create the oracle Oracle Secure Backup user and preauthorize this user for RMAN backups. “Preauthorization” means that this user does not have to provide OSB credentials, after they are logged into Enterprise Manager and started, for example, a backup job to tape.

1) Start a web browser and enter your URL in the following format:

https://<your host name>, for example, https://edvmr1p0.us.oracle.com

2) In Oracle classrooms, you may receive a security warning about the website certificate, which originates in the fact that you have been given a newly installed server. Accept the certificate (permanently, if possible) or if asked, add it to your website exception. The exact messages (and the number of windows) depend on your browser.

3) On the Oracle Secure Backup Login page, enter admin as User Name, oracle as Password, and click Login.

4) On the Oracle Secure Backup home page, click Preferences.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Practice 3-1: Configure an OSB User (continued)


5) On the Preferences page, select Extended command output: On and then click Apply.

Note: You will see the result of this step in several of the coming screenshots. It displays relevant obtool commands in the Extended Command Output section below the graphic elements on a page.

6) On the Preferences page, click Configure.

7) On the Configure page, click Users in the Basic section.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



8) On the Configure: Users page, click Add.

9) On the Configure: Users > New Users page, enter or select the following values, and

then click Apply:

User oracle Password: oracle User class: oracle UNIX name: oracle UNIX group: dba

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



NDMP server user: no

Note: If you have an NDMP server, set the value to yes, but inside the regular classrooms, an NDMP server is not available, so set the value to no.

10) View the mkuser obtool command in the Extended Command Output area. You

executed this command when you clicked Apply. Then click Preauthorized Access.

11) On the Configure: Users > oracle > Preauthorized Access page, select or enter the

following values, and then click Add:

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Hosts: all hosts OS username: * Attributes: rman

Note: “All hosts” is an appropriate value for this training environment, but for development and production environments, limit preauthorized access to selected hosts.

12) You should receive a success message.

13) If needed, scroll down and review the chu obtool command. Then click the

Configure tab in preparation for your next task.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practice 3-2: Configure a Host Encryption Policy In this practice, you configure a policy to encrypt all database and file system backups on this host with Oracle Secure Backup encryption. You use an encryption key with the AES192 default algorithm that OSB transparently (randomly) generates for encryption during backup and decryption during recovery. All of the following backup and recovery operations will use this policy (unless you define a specific exception).

1) Logged into the Oracle Secure Backup Web tool as the admin user, navigate to the Configure page.

2) On the Configure page, click Hosts in the Basic section.

3) To configure host encryption policies, select your host and click Edit.

4) Select Encryption: required. Accept the default algorithm of aes192 and leave the

other fields with their default values as well. Then click Apply.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Practice 3-2: Configure a Host Encryption Policy (continued)


5) You should receive a success message.

6) View the chhost command in the Extended Command Output section. You

specified that encryption is required, that encryption keys should be randomly generated and that they should be regenerated every month. - Click OK.

7) Log out of the Web tool.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practices for Lesson 4 Background: You continue with your one-time configuration tasks. In this practice, you configure RMAN for Oracle Secure Backup. Because you plan to use Enterprise Manager (EM) as your main interface, you first register the administrative server in EM, and then you create a database backup storage selector. This selector is used by RMAN to pass the database name, copy number and content type to Oracle Secure Backup. Of course, you test each step. Finally, you ensure that the database is in ARCHIVELOG mode. Note: Completing this practice is a prerequisite for the following practices.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practice 4-1: Configure RMAN for OSB In this practice, you perform the following tasks in Enterprise Manager as the SYS user: Connect to the EM Database Console with your browser. Register the administrative server in EM. Verify connectivity to the libraries. Create a database backup storage selector for your database. Test your tape backup. Verify RMAN recovery settings for the database: ARCHIVELOG mode enabled

1) To connect to Enterprise Manager, perform the following steps:

a) In a terminal window as oracle OS user, retrieve the host name for your computer by checking the status of the dbconsole.

$ emctl status dbconsole Oracle Enterprise Manager 11g Database Control Release 11.1.0.6.0 Copyright (c) 1996, 2007 Oracle Corporation. All rights reserved. https://edvmr1p0.us.oracle.com:1158/em/console/aboutApplication Oracle Enterprise Manager 11g is running. ------------------------------------------------------------------ Logs are generated in directory /u01/app/oracle/product/11.1.0/db_1/edvmr1p0.us.oracle.com_orcl/sysman/log $

b) Open your browser application and enter the URL, https://<host name>:1158/em.

c) In Oracle classrooms, you may receive a security warning about the website certificate, which originates in the fact that you have been given a newly installed server. Accept the certificate (permanently, if possible) or if asked, add it to your website exception. The exact messages (and the number of windows) depend on your browser.

d) On the Database Login page, enter SYS as User Name, oracle as Password, select SYSDBA from the Connect As drop-down list, and then click Login.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Practice 4-1: Configure RMAN for OSB (continued)


2) To register your administrative server, navigate to Availability > Oracle Secure Backup Device and Media (in the Oracle Secure Backup section).

a) On the Add Administrative Server page, enter /usr/local/oracle/backup in

the Oracle Secure Backup Home field. Then, make sure that admin is set in the Username field, enter oracle in the Password field, and then click OK. (Click No, if the Password Manager offers to remember the password.)

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



b) On the Host Credentials page, enter oracle for both the Username and

Password fields. Select the “Save as Preferred Credential” check box. Then, click OK.

After clicking OK, the Administrative Server page is displayed.

3) To verify connectivity to the libraries, click the Manage link after Devices in the Resources section.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



a) On the Devices page, ensure that the vlib library is selected, then choose

Verify Connectivity from the Actions drop-down list, and click the Actions Go button.

b) You should receive the information that the vlib library and four tape drives are

accessible.

c) Select the vlib2 library, Verify Connectivity Actions and click the Actions Go

button.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



You should receive the information that the vlib2 library and two tape drives are accessible.

d) Click the Database tab in preparation for your next task.

4) To create a database storage selector, navigate to Availability > Backup Settings.

a) On the Backup Settings page, enter 1 for Tape Drives in the Tape Settings section.

b) Under Host Credentials, enter oracle as Username and enter oracle as Password. If these fields are already filled in, make sure the supplied values are correct. Select “Save as Preferred Credential,” and click OK.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



c) Reaccess the Backup Settings page and click Configure in the Oracle Secure

Backup section.

d) On the Administrative Server Login page, make sure that your administrative

server is selected from the list. Enter oracle as Username and as Password. If these fields are already filled in, make sure the supplied values are correct. Select “Save as Preferred Credential” and click OK.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



e) On the Backup Storage Selectors page, click Add to configure a Backup Storage

Selector for your database.

f) On the Add Backup Storage Selector page, under the heading “For These Types

of Backups,” select all check boxes (for Archive Logs, Auto Backup, Full, and Incremental database backup types). Select RMAN-DEFAULT as Media Family. Then click Add to limit the devices for RMAN backups.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



g) On the Use Devices page, select the tape drives of your vlib library: vdte1,

vdte2, vdte3, and vdte4, and then click the Select button.

h) To create your database storage selector, click OK.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



i) You should receive a success message. Your Backup Storage Selector has been

created and is now displayed. Click Return. Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



You return to the Backup Settings page.

5) Test your tape backup.

a) On the Backup Settings page, scroll down to see that the administrative server is set. Make sure that your Host Credentials are correct, and then click “Test Tape Backup” in the Tape Settings section in the middle of the page.

The progress window appears.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



b) When your tape drive test is successful, click the Database Instance link to return to the Availability page.

6) Connected as SYSDBA to a SQL*Plus session, verify that the database is in ARCHIVELOG mode. If your database is in ARCHIVELOG mode, continue with the next step. If not, shut down the database, enable archiving, and then restart the database.

$ sqlplus / as sysdba SQL*Plus: Release 11.1.0.6.0 - Production on Mon Oct 13 14:27:11 2008 Copyright (c) 1982, 2007, Oracle. All rights reserved. Connected to: Oracle Database 11g Enterprise Edition Release 11.1.0.6.0 - Production With the Partitioning, Oracle Label Security, OLAP, Data Mining and Real Application Testing options SQL> archive log list Database log mode No Archive Mode Automatic archival Disabled Archive destination USE_DB_RECOVERY_FILE_DEST Oldest online log sequence 46 Current log sequence 48 SQL> shutdown immediate Database closed. Database dismounted. ORACLE instance shut down. SQL> startup mount ORACLE instance started. Total System Global Area 627732480 bytes Fixed Size 1301728 bytes Variable Size 448791328 bytes Database Buffers 171966464 bytes Redo Buffers 5672960 bytes Database mounted. SQL> alter database archivelog; Database altered.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



SQL> alter database open; Database altered. SQL> archive log list Database log mode Archive Mode Automatic archival Enabled Archive destination USE_DB_RECOVERY_FILE_DEST Oldest online log sequence 46 Next log sequence to archive 48 Current log sequence 48 SQL>

7) Exit SQL*Plus.

SQL> exit Disconnected from Oracle Database 11g Enterprise Edition Release 11.1.0.6.0 - Production With the Partitioning, Oracle Label Security, OLAP, Data Mining and Real Application Testing options $

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practices for Lesson 5 Background: After completing your configuration tasks, which included mandatory one-time setup tasks and (from the software point of view “optional”) security configuration tasks, you are ready to perform your first database backup to tape. You decide to use Enterprise Manager for an Oracle-Suggested Backup to tape, to test this functionality. For a production system, you would consider backing up to both disk and tape for faster recovery.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practice 5-1: Perform an Oracle-Suggested Backup In this practice, you use Enterprise Manager for an Oracle-Suggested Backup with the following specifications: Backup destination: tape Full weekly backup, then daily incremental and archive log backup Tape Drives: 1 Schedule daily backup within 5 minutes of your current date and time Encrypted by Oracle Secure Backup

Unless specified otherwise, you should log on as the oracle user to your terminal emulator session, and as SYSDBA to your Database Control Console.

1) Logged into Enterprise Manager as the SYS user, navigate to: Availability > Schedule Backup.

2) On the Schedule Backup page, ensure your Host Credentials are set correctly. Then click Schedule Oracle-Suggested Backup.

3) On the “Schedule Oracle-Suggested Backup: Destination” page, select Tape and click

Next.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Practice 5-1: Perform an Oracle-Suggested Backup (continued)


4) On the “Schedule Oracle-Suggested Backup: Setup” page, ensure 1 is set for Tape

Drives, and expand Encryption at the bottom of the page.

5) Do not enter anything in the RMAN encryption fields for this practice. Click

Next. (Although you could specify RMAN encryption in this section, doing so would take precedence over OSB encryption.)

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



6) On the “Schedule Oracle-Suggested Backup: Schedule” page, select the daily backup

to run within 5 minutes of your current date and time, and then click Next.

7) On the “Schedule Oracle-Suggested Backup: Review” page, review both the Settings

and RMAN Scripts and click Submit Job.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



8) You should see that the job has been successfully submitted.

9) At your specified backup time, click View Job.

The Job Execution page is displayed.

10) Wait until the job run completes. In the Summary section, note that RMAN did not encrypt this backup.

Then, click the Backup link under the Logs section. In the Output log, review how the RMAN command allocates the tape devices.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



11) In the output log of RMAN, review the information about the tape backup.

12) In the screenshot above, you see the channel allocation for the tape.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



13) Scroll down to review the execution of all commands.

14) Because you do not see OSB encryption in the RMAN output, review the OSB

transcript of this job execution.

15) Click the Database tab, then click Availability and (if your browser permits) right-click File System Backup and Restore > Open Link in New Tab.

16) Log in to the OSB Web tool as the admin user with the oracle password.

17) Navigate to Manage > Jobs.

18) On the Manage: Jobs page, select the following viewing options: Active, Complete, Pending and Types: Oracle backup, and then click Apply.

19) Select the datafile backup and click Show Transcript.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Your screen might look a little different.

20) Review the job transcript.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



21) Find the encryption values and the error rate, and then click Close.

22) Optional: If you are interested in a summary of the backup activities, you can select

EM Availability > Backup Reports. Scroll down to see the Result area.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Your screenshot will look different, but it should show SBT_TAPE under Output Devices.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practice 5-2: Recover a Data File from an OSB-Encrypted Backup In this practice, you perform a tablespace recovery using the encrypted tape backup. You perform an object-level recovery of the EXAMPLE tablespace to the current time or to a previous point in time through the Enterprise Manager interface. Restore the files to the default location. Unless specified otherwise, you should log in as SYS user (with the oracle password) and connect as SYSDBA to Enterprise Manager Database Control and SQL*Plus sessions.

1) First, copy the example01.dbf file to the /home/oracle/solutions directory and attempt to insert a row into the HR.COUNTRIES table, which should fail. This simulates a scenario that requires you to initiate recovery operations.

If you want to save yourself the typing of the commands, execute the rec_setup.sh script; otherwise, execute the following commands:

Note: The output has been slightly formatted to conserve space.

$ ls $ORACLE_BASE/oradata/orcl control01.ctl example01.dbf redo03.log temp01.dbf control02.ctl redo01.log sysaux01.dbf undotbs01.dbf control03.ctl redo02.log system01.dbf users01.dbf $ cp $ORACLE_BASE/oradata/orcl/example01.dbf /home/oracle/solutions/example01.save $ ls /home/oracle/solutions archivelog.sh example01.save show_host.sh show_port.sh test_labs.sh $ rm -f $ORACLE_BASE/oradata/orcl/example01.dbf $ sqlplus / as sysdba SQL*Plus: Release 11.1.0.6.0 - Production on Tue Oct 21 19:28:20 2008 Copyright (c) 1982, 2007, Oracle. All rights reserved. Connected to: Oracle Database 11g Enterprise Edition Release 11.1.0.6.0 - Production With the Partitioning, Oracle Label Security, OLAP, Data Mining and Real Application Testing options SQL> desc hr.countries Name Null? Type ------------------- -------- ---------------------- COUNTRY_ID NOT NULL CHAR(2) COUNTRY_NAME VARCHAR2(40) REGION_ID NUMBER

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Practice 5-2: Recover a Data File from an OSB-Encrypted Backup (continued)


SQL> INSERT INTO hr.countries 2 VALUES ('TT','TEST COUNTRY',1); SQL> 2 INSERT INTO hr.countries * ERROR at line 1: ORA-01116: error in opening database file 5 ORA-01110: data file 5: '/u01/app/oracle/oradata/orcl/example01.dbf' ORA-27041: unable to open file Linux Error: 2: No such file or directory Additional information: 3 SQL> exit Disconnected from Oracle Database 11g Enterprise Edition Release 11.1.0.6.0 - Production With the Partitioning, Oracle Label Security, OLAP, Data Mining and Real Application Testing options $

The output above displays the expected error.

2) Logged in to Enterprise Manager as the SYS user, navigate to: Availability > Perform Recovery (in the Manage section).

3) On the Perform Recovery page, you should see that one database failure is detected. Ensure that your Host Credentials (the oracle Username and the oracle Password) are entered, and then click Advise and Recover.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



4) Click Expand All to view the missing example01.dbf failure.

5) With the failures selected, click Advise.

6) On the Manual Actions page, click Continue with Advise.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



7) On the Recovery Advice page, review the RMAN script and click Continue.

8) The Review page displays the failure and the repair action. Click Submit Recovery

Job.

9) The Processing page appears, which should be followed by a confirmation that your

job was created successfully.

10) Your job number may be different. Click the job link.

11) If your job is still running, use your browser’s Reload or Refresh button, until the job is completed. It should have the status Succeeded on the Job Run page.

12) Click the Step: Recovery link.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



13) Review all of the RMAN output.

14) Confirm that the backup tape is used for recovery.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



15) Click the Database tab and navigate to Availability > Perform Recovery to see that

there are no failures.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practices for Lesson 6 Background: After configuring and testing the Oracle-Suggested Backup to tape, you decide to create a dataset and schedule a dataset backup, as a way to backup up your file-system data. Backups of the database and the file system are independent of each other, that is, you can use one or the other, or both. Of course, the Oracle Secure Backup configuration (including host encryption) that you performed in earlier practices is available: “ready to go”.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practice 6-1: Back Up File-System Data In this practice, you create a dataset called mylabs for a file-system backup. You use it to back up your $HOME/labs directory. The dataset should be of the form:

include host <hostname> { include path /home/oracle/labs }

Then you schedule a backup of the dataset that is executed immediately. You decide to use the Oracle Secure Backup Web tool, which you access from Enterprise Manager. Unless specified otherwise, you should log in to Enterprise Manager Database Control as SYS user (with the oracle password) and connect as SYSDBA. You log in to the OSB Web tool as the admin user with the oracle password. Note: The completion of this practice is a prerequisite for the following practice, “Restore File-System Data” and for the “Use Tape Vaulting” practice.

1) In Enterprise Manager, navigate to Availability > (if possible, right-click) File System Backup and Restore (if possible, click Open Link in New Tab).

2) Log in to the Oracle Secure Backup Web tool as the admin user with the oracle password.

3) To view the obtool commands at the bottom of your screen, click Preferences > Extended command output “On” > Apply. Then click Backup.

4) Click Datasets.

5) On the Datasets page, click Add.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Practice 6-1: Back Up File-System Data (continued)


6) On the New Datasets page, enter mylabs in the Name field and replace the given

template with the following:

include host <hostname> { include path /home/oracle/labs }

Make sure that you replace <hostname> with the name of your computer. To not back up the local root directory, place comment signs (#) before the

relevant lines, or delete these lines.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



7) After this is done, click Save.

8) Verify that the dataset was created successfully. On the Datasets page, select mylabs, and click Check Dataset.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



9) On the Dataset Errors page, you see that there were no errors. If there are any errors,

resolve them; then click Close.

10) To create a backup of the mylabs dataset, navigate to Backup > Backup Now in the

OSB Web tool.

11) On the Backup Now page, click Add.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



12) On the Backup: Backup Now > Options page, select the mylabs dataset and the vdrive1 and vdrive2 Restrictions; then click OK.

13) Back to the Backup Now page, select the mylabs dataset and click Go to submit the

job to the scheduler.

Question: Does Oracle Secure Backup use the Oracle database scheduler? Answer: No, it has its own scheduler, because Oracle Secure Backup can be used independently from Oracle databases.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



14) Oracle Secure Backup submits the backup request and assigns a job number. Click

Manage in preparation for your next task.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



15) On the Manage page, click Jobs.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



16) On the Jobs page, restrict the display to only Active, Complete, or Pending jobs by

selecting those options. In the Types box, select file system backup, and then hold the Ctrl key and select dataset. Click Apply.

17) The updated display now shows the recent dataset backup. Select the admin/1.1

backup job and click Show Transcript. O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



18) Scroll through the transcript and note that the backup is encrypted, that you backed up

the correct directory, and that there are no read, or write errors. When you are finished reviewing the transcript, click Close.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



19) With the same admin/1.1 job selected, click Show Properties.

20) Scroll to the end of the properties to view the lsjob obtool command in the Extended Command Output. Then click Close.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practices for Lesson 7 Background: After you created a backup of your /home/oracle/labs directory, you decide to create a labs_save directory, duplicate the labs files there, and then delete the original files. After deleting the files, you use the Oracle Secure Backup restore operation, to restore the files, and then test that they are accessible.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practice 7-1: Restore File-System Data In this practice, you perform the following tasks: Delete the contents of your labs directory. Restore the missing lab files. Verify that the files are recovered.

Unless specified otherwise, you should log on as the oracle user to your terminal emulator session, as sys user with the oracle password and SYSDBA connection to Enterprise Manager, and as admin user with the oracle password to Oracle Secure Backup.

1) From your terminal emulator session, duplicate and then remove all the files located in your $HOME/labs directory.

$ ls /home/oracle/labs config1_in.sh config1.sh rec_setup.sh config1_out.sh config2.txt $ mkdir /home/oracle/solutions/labs_save $ cp /home/oracle/labs/* /home/oracle/solutions/labs_save $ rm -f /home/oracle/labs/* $ ls /home/oracle/labs $

2) Logged in to Oracle Secure Backup as the admin user, navigate to Restore > Backup Catalog, because you are using the OSB catalog to select the data to be restored.

3) On the Backup Catalog page, select your host name and latest, and then click

Browse Host.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Practice 7-1: Restore File-System Data (continued)


4) On the Browse Host page, click the link labeled home to view its contents.

5) Continue drilling down until you reach the labs directory. Select this directory, and

then click Add.

6) On the New Restore page, accept the default settings and click OK.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



7) On the Backup Catalog page, click “Show restore list and browse options” to view

the items to be restored and the selection options for that data.

8) After viewing the information, click Go to submit the restore request to the scheduler.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



9) To monitor the job progress, navigate to Manage > Jobs.

10) On the Jobs page, restrict the display to only Active, Complete, or Pending jobs by

selecting those options. In the Types box, select file system restore and click Apply.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



11) Review the displayed job.

12) Verify that your restore job was successful.

13) In a terminal window, verify that your lab files are present.

$ ls /home/oracle/labs config1_in.sh config1.sh rec_setup.sh config1_out.sh config2.txt $

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practices for Lesson 8 Background: In the previous practices, you familiarized yourself with OSB-encrypted backup and restore of both an Oracle database and file-system data. It is a best practice recommendation to perform regular unencrypted backups of your Oracle Secure Backup catalog. To do so, you use the predefined OSB catalog backup. First review the preconfigured elements, then set a time trigger to activate the catalog backup and confirm a successful backup. The following is your task list:

1. View the OSB-CATALOG-MF media family. 2. View the OSB-CATALOG-DS dataset. 3. View the OSB-CATALOG-SUM job summary. 4. View the OSB-CATALOG-SCHED schedule and edit its trigger to initiate catalog

backups. 5. View the completed job. Confirm a successful, unencrypted execution of the job.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practice 8-1: Perform a Preconfigured OSB Catalog Backup In this practice, you perform a preconfigured catalog backup. First view the preconfigured elements, and then edit the OSB-CATALOG-SCHED trigger to specify a backup time. Unless specified otherwise, you should log in as the admin user with the oracle password to the Oracle Secure Backup Web tool. 1) To view the OSB-CATALOG-MF media family:

a) Navigate to Configure > Media Families.

b) Review the OSB-CATALOG-MF media family, but do not change any properties.

Click Cancel when you are finished with your review.

2) To view the OSB-CATALOG-DS dataset:

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Practice 8-1: Perform a Preconfigured OSB Catalog Backup (continued)


a) Navigate to Backup > Datasets.

b) Select the OSB-CATALOG-DS dataset and click Open.

c) Review the OSB-CATALOG-DS dataset, but do not change any properties. Click

Cancel when you are finished with your review.

3) To view the OSB-CATALOG-SUM job summary:

a) Navigate to Configure > Job Summaries.

b) Select the OSB-CATALOG-SUM job summary and click Edit.

c) Review the OSB-CATALOG-SUM job summary, but do not change any properties.

Note the specific job summary options and properties. Click Cancel when you are finished with your review.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



4) To activate the OSB-CATALOG-SCHED schedule:

a) Navigate to Backup > Schedules.

b) Select the OSB-CATALOG-SCHED schedule and click Edit.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



c) Review the properties.

d) To edit the OSB-CATALOG-SCHED trigger, click Triggers on the Backup: Schedules > OSB-CATALOG-SCHED page.

e) Click Select daily and enter a backup time a few minutes into the future. Then

click Add.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



f) Review the Extended Command Output.

g) Select your newly defined trigger and click Preview.

h) Review the schedule, and then click Close.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



5) To review your completed job after your estimated job completion time:

a) Navigate to Manage > Jobs.

b) On the Jobs page, restrict the display to only Active, Complete, or Pending jobs by selecting those options. In the Types box, select file system backup, then hold the Ctrl key and select dataset. Click Apply.

If the backup of the OSB catalog has not yet completed successfully, refresh the page. If you have any unexpected errors, resolve them.

c) Select the dataset OSB-CATALOG-DS job and click Show Transcript.

d) Review the transcript of the dataset and note that encryption is off, as is required

for the catalog backup. Also note that the volume set owner is the root user. When you are finished reviewing the transcript, click Close.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practices for Lesson 9 Background: Regular Oracle Secure Backup management tasks usually involve multiple servers. Not all training environments can support this setup, so you view a demonstration of the most common management task: Adding a new client to your administrative domain.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practice 9-1: View OSB Management Tasks In this practice, you view a demonstration of OSB management tasks. You see how to add a client to an existing domain, which consists of: Installing OSB software on a new client Configuring a client role in the administrative domain

1) Double-click the oracle’s Home icon on your desktop.

2) Navigate to the /home/oracle/demos/osb_client_linux directory.

3) Double-click the osb_client_linux_viewlet_swf.html file.

4) In the Run or Display window, click Display and view the presentation.

5) Use the controls at the bottom of the viewlet window to start, pause, and stop the presentation, as suits your personal learning style.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Practice 9-1: View OSB Management Tasks (continued)


6) Uninterrupted viewing of the demonstration takes about six minutes. When you have

finished viewing the presentation, close your Web browser window.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practices for Lesson 10 Background: As Oracle Secure Backup administrator you are asked to configure and use tape vaulting in training environment. Part of your task is to present a step-by-step list, but with a fast rotation time; so that everybody can see the functioning of the configuration (rather then wait, for example, a six-months return time of a tape). The following is your high-level outline of the tasks, with a diagram of the names that you are planning to use. Configuring a new vaulting environment: Define a media storage location. Define a rotation policy consisting of several rules. Create a new media family. Associate a rotation policy with a media family.

Using a new vaulting environment: Perform a backup. Schedule a location scan. Execute a media movement job. View tape rotation reports:

o Location reports o Two types of job reports:

Pick reports (which assist operators to collect the volumes that need to be moved)

Distribution reports (which are similar to packing lists, shipped with the volumes to the next location)

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practice 10-1: Configure Tape Vaulting In this practice, you configure a new tape vaulting environment by executing the following steps:

1. Define a media storage location. 2. Define a rotation policy with three rules. 3. Create a new media family. 4. Associate a rotation policy with a media family.

You should be logged in to Oracle Secure Backup Web tool as the admin user with the oracle password and set “Extended Command Output” as your web tool preference. You can perform steps 1, 2 and 3 in any order, but they all have to be complete before step 4. Note: This practice is a prerequisite for the following one “Use Tape Vaulting”.

1) To define a media storage location, perform the following steps:

a) Navigate to Configure > Locations (in the Media Life Cycle section).

b) On the Configure: Locations page, you see that Oracle Secure Backup has

automatically created locations for you:

The Media_Recycle_Bin location can be used as a temporary "holding" location, when tapes are ready for reuse.

When you configured devices, vlib and vlib2 were automatically created as "active locations".

c) To define a new location, click Add. O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Practice 10-1: Configure Tape Vaulting (continued)


d) On the Configure: Locations > New Locations page, enter offsite_location

as Location and 3 minutes as Recall time, and then click Apply.

Note: The Recall time is the time needed to return tapes for restoration. Recall time is an optional parameter, but its use is recommended, especially when you plan to use duplication policies. OSB considers this information and initiates restore operations (from original or duplicate tapes) with the shortest recall time.

e) You should receive a success message. View the mkloc obtool command.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



f) Click OK.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



2) To define a rotation policy with three rules, perform the following steps:

a) Navigate to Configure > Rotation Policies.

b) On the Configure: Rotation Policies page, click Add.

c) On the Configure: Rotation Policy > New Rotation Policy page, enter

quick_test_rotation as Rotation Policy and then click Apply.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



d) You should receive a success message. Review the mkrot obtool command.

e) In the Rotation rule(s) section, select or enter the following values, and then click

Add to define your first rotation rule

Location: vlib

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Event: windowclosed Duration: 5 minutes

Note: Your first rotation rule (which must use a volume in an active location) appears in the display section above your definition area. In this example, the tapes (per media family) are eligible for movement five minutes after the Write window has closed. This implies that the media family must have a write window parameter specified.

f) Review the chrot obtool command.

g) Define your second rotation rule: the test volume takes eight minutes to arrive at

the offsite_location location. Select or enter the following values, and then click Add:

Location: offsite_location Event: arrival Duration: 8 minutes

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



h) Review the chrot obtool command.

Note: Later, when a media movement job is executed, OSB assumes the volumes are at the next scheduled location and does not take the shipping time into account.

i) To define your third rotation rule, select or enter the following values, and then click Add:

Location: Media_Recycle_Bin Event: arrival Duration: 6 minutes

j) Review the chrot obtool command.

Note: The Media_recycle_bin is a holding location. When you return a tape device to the Media_recycle_bin or another user-configured location, then OSB considers the tape to be at the end of its rotation policy. OSB does not associate the tape with another rotation policy until the tape is reused. Then OSB will use the new media family and rotation policy (if any).

k) Click OK, to add these rules to the quick_test_rotation policy.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



l) Review the chrot obtool command, and then click the Configure link in

preparation for your next task.

3) To create a new media family, perform the following steps:

a) Navigate to Configure > Media Families.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



b) On the Configure: Media Families page, first review the existing media families,

and then click Add.

c) On the Configure: Media Families > New Media Families page, enter and confirm

the following values, and then click Apply:

Media Family: offsite_test Volume ID used: Unique to this media family Volume expiration: Time Managed Keep volume set: 10 minutes Appendable: yes

O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



d) You should receive a success message.

e) Scroll down to view the mkmf obtool command.

f) Click OK.

4) To associate a rotation policy with a media family, perform the following steps:

a) On the Configure: Media Families page, select the offsite_test media family, and then click Edit.

b) On the Configure: Media Families > offsite_test page, enter or select the

following values, and then click Apply:

Write window: 5 minutes Rotation Policy: quick_test_rotation

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Note: The Write window is the period of time for which a volume set is open for updates. In other words, it needs to be long enough to complete at least one backup.

c) Review the chmf obtool command and then click OK.

d) You should receive a success message. You can review the chmf obtool

command again.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practice 10-2: Use Tape Vaulting In this practice, you use your newly configured tape vaulting environment to perform the following tasks: Performing a backup Scheduling a location scan Executing a media movement job Viewing tape rotation reports

An additional prerequisite is the creation of the mylabs dataset in the “Back Up File-System Data” practice. You should be logged in to Oracle Secure Backup Web tool as the admin user with the oracle password and set “Extended Command Output” as your web tool preference.

1) To perform a file-system backup, execute the following steps:

a) Navigate to Backup > Backup Now.

b) On the Backup Now page, click Add.

c) On the Options page, select or enter the following values, and then click OK:

Datasets: mylabs Backup level: full Media family: offsite_test Encryption: no

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Practice 10-2: Use Tape Vaulting (continued)


d) You should receive a success message. Review the obtool command.

e) On the Backup Now page, select the mylabs dataset and click Go.

f) Note your job id and click Home. Your job id is most likely different.

g) On the OSB Home page, click the transcript icon before your Job ID. (If you do

not see your Job ID, you might need to expand the “Completed Jobs” node by clicking Show completed jobs.)

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



h) In the Job Transcript Viewer scroll through the output file and review it. For

example, you might notice the encryption algorithm and the volume name. Should you have to do any troubleshooting, you will probably need to know the volume name.

Question: Why is encryption on? (Remember you chose Encryption: no on the Backup Now Options page). Answer: You enabled encryption for the host in the “Configure a Host Encryption Policy” practice. So, all backup jobs are automatically encrypted, unless you explicitly exclude them from encryption, as is done with the OSB catalog backup (in the “Perform a Preconfigured OSB Catalog Backup” practice).

i) When you are finished reviewing the output, click Close.

2) To schedule a location scan, perform the following tasks:

a) Navigate to Manage > Schedule Location Scan.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



b) Click Add.

c) On the Manage: Schedule Location Scan > New Schedule Location Scan page,

enter schedule_location as Schedule Location Scan, select all Locations and then click Apply.

d) You should receive a success message. Review the mksched obtool command

and click Triggers.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



e) On the Triggers page, click Select_daily (which selects all days for you), enter or

select a time that is a couple of minutes into the future. This example uses 00:45 hours as Time. Then click Add.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Note: If you see during the next task, that no scan was executed, return to this step to edit the schedule_location schedule by adding another "time trigger" with values that are appropriate for your environment.

f) You should receive a success message. Review the chsched obtool command. Then click the schedule_location link to return to the previous page.

g) On the Manage: Schedule Location Scan > schedule_location page, click OK.

h) You should receive a success message. Review the chsched obtool command.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



i) Click the Manage link in preparation for your next task

3) Based on the results of a scan control job, "pending" media movement jobs can be created. These jobs are "pending" until they are explicitly run by an operator, who usually also takes care of associated tasks, such as physically transporting tapes, and so.

Note: You may encounter predefined wait time before the media movement job appears, because the offsite_test media family has a Write Window of 5 minutes and a "Keep Volume Set" duration of 10 minutes. Also your rotation policy has a Write Window of 5 minutes. To execute a media movement job, perform the following steps:

a) On the Manage: Jobs page under Viewing options, select the scan control Types and the following check boxes: Active, Complete and Pending. Then click Apply.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



b) If you do not have any scan jobs, return to the previous task and schedule another

location scan.

If the state is future work, wait until the job execution is complete.

c) Your resulting job list will look different. On the Manage: Jobs page, select the last volume vaulting scan job (if you have more than one) and then click Show Properties.

d) Review the Job Properties and then click Close.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



e) On the Manage: Jobs page, select the last volume vaulting scan job (if you have

more than one) and then click Show Transcript.

f) Optional: Select Level: 2 Verbose and then click Apply.

g) Review the job transcript. (Level 4 displays fewer lines than level 2.) You should see the pending media movement job. Then click Close.

If you do not see your media movement job and the job is still running, wait and occasionally refresh your page until it appears.

If you do not see your media movement job and the job is completed, initiate another scan control job.

O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



h) On the Manage: Jobs page under Viewing options, select the media movement

Types and the following check boxes: Active, Complete and Pending. Then click Apply.

i) Your resulting job list might look different. On the Manage: Jobs page, select the

media movement for vlib job and then click Run

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



j) Select Now and Media Movement as Run Option and then click Apply.

Oracle Secure Backup executes the media movement job. You should receive a success message.

k) On the Manage: Jobs page, select your media movement job and then click Show Properties.

l) You should see a successful completion. When you are finished reviewing the job

properties, click Close.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



m) On the Manage: Jobs page, select your media movement job and then click Show

Transcript.

n) Review the job transcript. You should see that your volume moved to the next

location, as specified by your rotation policy. When you are finished reviewing the job transcript, click Close.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



o) Click the Manage link in preparation for your next task.

Now you are ready to view location and job reports.

Location reports show the current and next location of your volumes.

Job reports are of two types:

Pick reports (which assist operators to collect the volumes that need to be moved) Distribution reports (which are similar to packing lists, shipped with the volumes

to the next location)

4) To view tape rotation reports, perform the following steps:

a) Navigate to the Manage > Location Reports page.

b) On the Manage: Location Reports page, select the following values, and then

click View Report:

Location: offsite_location Type: location

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



c) Review the report. Your volume is in the offsite_location. The next location

for your volume is the Media_Recycle_Bin, as defined in your volume rotation policy (The next planned location is only listed within a report after the first movement to a new location.)

d) When you are finished reviewing the report, click Close

e) Navigate to Manage > Job reports.

A distribution and a pick report are automatically generated for each media movement job

f) Select the pick report and click View Report.

g) Review the pick report. It shows all volumes that need to be physically moved by

an operator. When you are finished reviewing the report, click Close.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



h) Select the distribution report and click View Report.

i) Review the distribution report. A distribution report is similar to a packing list,

which is shipped with all volumes to the next location. When you are finished reviewing the report, click Close.

j) Click Logout in the top-right corner to leave the OSB Web tool.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practices for Lesson 11 Background: Tape vaulting and duplication are often used together. For example, your organization plans to maintain one set of backup tapes onsite for one month and to send a copy of the tapes offsite for disaster recovery and to meet its long-term storage requirements of seven years. In this scenario, your backup is associated with the onsite_1m media family (with a one-month retention and either no rotation policy or a rotation policy to an onsite storage location). The onsite_1m media family has a duplication policy that copies the tapes to the offsite_7y media family (which has a seven-year retention, no duplication policy, and a rotation policy to the desired storage location for seven years). The osb_media_lifecycle_viewlet_swf.html demonstration covers a similar scenario (with different names and retention times). It includes the following tasks:

1. Create a new Demo location. 2. Create a new Demo_Rotation rotation policy with three rules. 3. Assign the Demo_Rotation policy to the OSB_CATALOG-MF media family. 4. Create a Full_Demo media family. 5. Create a Full_Offsite media family and assign the Demo_Rotation policy. 6. Create a Full_Dup_Offsite duplication policy that copies tapes from the

Full_Demo media family to the Full_offsite media family. 7. Associate the Full_Dup_Offsite duplication policy with the Full_Demo

media family. 8. Create the Demo_Loc_Scan schedule for vaulting jobs. 9. View the default volume duplication window. 10. Create the Demo_dup_scan schedule within the duplication time window for the

duplication job. 11. Navigate to Location reports, which enable you to track tapes at the various

locations.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Practice 11-1: View Media Lifecycle Demo In this practice, you view a demonstration of the media life cycle. This is a combination of the tape vaulting and duplication topics.

1) Click the oracle’s Home icon on your desktop.

2) Navigate to the /home/oracle/demos/osb_media_lifecycle directory.

3) Double-click the osb_media_lifecycle_viewlet_swf.html file.

4) In the Run or Display window, click Display and view the presentation.

5) Use the controls at the bottom of the viewlet window to start, pause and stop the presentation, as suits your personal learning style.

6) Uninterrupted viewing of the demos takes about ten minutes. When you have finished viewing the presentation, close your Web browser window.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Oracle Secure Backup: Additional Topics

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Oracle Database 11g: Oracle Secure Backup B - 2


Objectives


• Perform an RMAN-encrypted database backup and restore operations

• View OSB jobs transcripts and logs

• Describe OSB performance considerations related to RAC

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Encrypted Backups to Tape .

• RMAN backup encryption:– Encryption keys are transparently managed by the database

– Backup encryption at the database or tablespace level

– Encryption algorithms up to 256-bit AES

• Secure transportation over the network:– Database backups with RMAN encryption

– File-system backups with SSL

• RMAN encrypted backups on tape—only available with Oracle Secure Backup.

> RMAN EncryptionOSB JobsRAC

Encrypted Backups to Tape

Oracle Secure Backup leverages RMAN backup encryption technology, such as:• Encryption keys being transparently managed by the database• Your ability to choose backup encryption at the database or tablespace level. (This is in

addition to the Transparent Data Encryption (TDE), which you can use inside the Oracle database.)

• Substantial protection through encryption algorithms up to 256-bit AESDuring transportation over the network, database backups are secured with RMAN encryption (in which case, no additional SSL is used). If your database backups are not encrypted by RMAN, Oracle Secure Backup uses SSL by default. It also secures your file-system backups over the network by using SSL. To store RMAN encrypted backups on tape, you must use Oracle Secure Backup.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Creating RMAN Encrypted Backups

RMAN offers three encryption modes:

• Transparent mode:– Uses the Oracle key management infrastructure

– Requires that you first configure Oracle Encryption Wallet

• Password mode: Requires the use of the SETENCRYPTION ON IDENTIFIED BY password ONLYcommand in your RMAN scripts

• Dual mode: Requires the use of the SET ENCRYPTION ONIDENTIFIED BY password command in your RMAN scripts

Creating RMAN Encrypted Backups

For improved security, RMAN backup set backups can be encrypted. Any RMAN backups created as backup sets can be encrypted. Image copy backups cannot be encrypted.Encrypted backups are decrypted automatically during restore and recover operations, as long as the required decryption keys are available, by means of either a user-supplied password or the Oracle Encryption Wallet.RMAN supports three encryption modes:

• Transparent mode• Password mode• Dual mode

Additional information about each mode follows.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Using Transparent Mode Encryption

Perform the following steps:

1. Create a wallet using Oracle Wallet Manager:

2. Open the wallet:

3. Set the master key:

ENCRYPTION_WALLET_LOCATION= (SOURCE=(METHOD=FILE)(METHOD_DATA=(DIRECTORY=/opt/oracle/product/10.2.0/db_1/)))

ALTER SYSTEM SET ENCRYPTION WALLET OPEN IDENTIFIED BY <password>;

ALTER SYSTEM SET ENCRYPTION KEY IDENTIFIED BY <password>;


Transparent encryption does not require DBA intervention as long as the required Oracle key management infrastructure is available. Transparent encryption is best suited for day-to-day backup operations, where backups will be restored on the same database that they were backed up from. Transparent encryption is the default encryption mode.You must first configure the Oracle Encryption Wallet to use transparent encryption. Refer to the Oracle Advanced Security Administrator’s Guide for detailed information about the Oracle Encryption Wallet.Perform the following steps to use transparent mode encryption:

1. Create a wallet using Oracle Wallet Manager. By default, an unencrypted wallet (cwallet.sso) is created when Oracle Database is installed. An encrypted wallet (ewallet.p12) is recommended for use with backup set encryption. Place an entry in the sqlnet.ora file as shown in the slide.

2. Open the wallet. Before you can use backup set encryption , you must ensure that the wallet is opened by your instance. The password specified with the ALTER SYSTEMcommand is the same password that you specified when you created the wallet in step 1.

3. Set the master key from within your instance. When the wallet is opened, you must set the master key.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




4. Configure RMAN encryption level (database, tablespace, or database excluding tablespaces):

5. Set an encryption algorithm, if needed:

SET ENCRYPTION ALGORITHM 'algorithm name'

CONFIGURE ENCRYPTION FOR DATABASE ON

CONFIGURE ENCRYPTION FOR TABLESPACE <tablespace_name> ON

Using Transparent Mode Encryption (continued)

4. Configure the RMAN encryption level. The CONFIGURE ENCRYPTION command is used to specify encryption settings for the database or tablespaces within the database, which apply unless overridden using the SET command. Options specified for an individual tablespace take precedence over options specified for the whole database.

5. Set an encryption algorithm, if needed. Query V$RMAN_ENCRYPTION_ALGORITHMSto obtain a list of encryption algorithms supported by RMAN. The default encryption algorithm is 128-bit AES.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Using Password Mode Encryption

Enable password mode encryption in your RMAN session:

SET ENCRYPTION ON IDENTIFIED BY <password> ONLY

Using Password Mode Encryption

When you use password encryption, you must provide a password when you create and restore encrypted backups. When you restore the password-encrypted backup, you must supply the same password that was used to create the backup. Password encryption is most appropriate for backups that will be restored at remote locations, but which must remain secure in transit. Use the SET ENCRYPTION ON IDENTIFIED BY password ONLY command in your RMAN scripts to enable password encryption. Password encryption cannot be persistently configured. Note: For security reasons, it is not possible to permanently modify your existing backup environment so that RMAN backups are encrypted using the password mode. You can enable password-encrypted backups only for the duration of an RMAN session.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Using Dual Mode Encryption

• Dual-mode encrypted backups can be restored transparently or by specifying a password.

• Enable password mode encryption in your RMAN session:

SET ENCRYPTION ON IDENTIFIED BY 'password'

Using Dual Mode Encryption

Dual-mode encrypted backups can be restored transparently or by specifying a password. Dual-mode encrypted backups are useful when you create backups that are normally restored using the Oracle Encryption Wallet, but which occasionally must be restored where the Oracle Encryption Wallet is not available.To create dual-mode encrypted backup sets, specify the SET ENCRYPTION ONIDENTIFIED BY password command in your RMAN scripts.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Restoring Encrypted Backups

• Before restoration, set the RMAN session to decrypt backups.

• Specify all required passwords with the SET DECRYPTIONcommand when restoring from a set of backups that were created with different passwords.

SET DECRYPTION IDENTIFIED BY '<password_1>' {, '<password_2>',…,'<password_n> }

Restoring Encrypted Backups

Use the SET DECRYPTION command to specify one or more decryption passwords to be used when reading dual-mode or password-encrypted backups. When RMAN reads encrypted backup pieces, it tries each password in the list until it finds the correct one to decrypt that backup piece. An error is signaled if none of the specified keys are correct. O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Performing Encrypted Recovery

1

2

Performing Encrypted Recovery

While performing encrypted database recovery from tape and disk, you can notice the following:

1. The SET DECRYPTION command is executed. 2. The recovery completed successfully and the EXAMPLE tablespace is brought back

online.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Comparing RMAN and OSB Encryption

RMAN

Password

Encrypted to Disk

Encrypted to Tape

(ASO)

(OSB)

Datafiles


RMAN Encrypted BackupsRecovery Manager (RMAN) can create encrypted backups to either tape or disk as long as the required Oracle key management infrastructure is available. RMAN encryption can use either a password-based key or a generated key held in the Oracle wallet. The data is encrypted by RMAN before it is transmitted to the disk or tape storage device, and no further encryption is performed. RMAN backup encryption is only available in the Enterprise Edition of the database, and the COMPATIBLE parameter must be set to 10.2.0 or higher.Encrypted backup to disk requires Advanced Security Option to provide the key infrastructure. Encrypted backups to tape require Oracle Secure Backup (OSB) to provide the key infrastructure. OSB includes the same technology as ASO.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




OSB

Data Files

Encrypted

OS Files

OSB Wallet

Tape Device

Comparing RMAN and OSB Encryption (continued)

Oracle Secure Backup EncryptionOracle Secure Backup (OSB) is available in both Standard Edition and Enterprise Edition of the Oracle Database 10g Release 2. Oracle Secure Backup includes the secure communications technology of the ASO in the Enterprise Edition to provide secure communication between hosts (administrative, source, and target) in the OSB domain. OSB encrypts the transmitted data and control messages with a default key of 1,024 bits generated for each session using SSL. OSB provides this key from an embedded wallet that is separate from the Oracle wallet used by RMAN to encrypt backups. If RMAN encryption is provided, OSB does not encrypt the data again for transmission. But if RMAN encryption is disabled, OSB does encrypt the data during transmission.You can modify the default security configuration in the following ways:

• Disable SSL for interhost authentication and communication by setting the securecomms security policy in OSB.

• Transmit identity certificates in manual certificate provisioning mode.• Set the key size for a host to a value from 512 to 4,096 bits, rather than the default of

1,024 bits.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Comparing RMAN and OSB Encryption (continued)

Oracle Secure Backup Encryption (continued)• Disable encryption for backup data in transit by setting the encryptdataintransit

security policy. Because Oracle Secure Backup–embedded wallets are used only for interdomain communication, they do not have any direct relationship to the backup data written to tape. Therefore, if wallets are destroyed and re-created, it does not affect the restoration of data from tape.Oracle Secure Backup does not share its wallets with other Oracle products. Besides maintaining its password-protected wallet, each host in the domain maintains an obfuscated wallet. This version of the wallet does not require a password. The obfuscated wallet, which is scrambled but not encrypted, enables the Oracle Secure Backup software to run without requiring a password during system startup.The password for the password-protected wallet is generated by Oracle Secure Backup and not made available to the user. The password-protected wallet is not normally used after the security credentials for the host have been established, because the Oracle Secure Backup daemons use the obfuscated wallet.To reduce the risk of unauthorized access to obfuscated wallets, Oracle Secure Backup does not back them up. The obfuscated version of a wallet is named cwallet.sso. By default, the wallet is located in /usr/etc/ob/wallet on Linux and UNIX, and C:\Program Files\Oracle\Backup\db\wallet on Windows.Best practice tip: Back up the OSB-encrypted wallet.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




• Oracle Secure Backup backup and restore jobs include:– Dataset

– File-system backup

– File-system restore

– Oracle backup (RMAN)

– Oracle restore (RMAN)• Oracle Secure Backup media management jobs include:

– Scan control

– Media movement

– Duplication• For each job, Oracle Secure Backup maintains a:

– Log

– Running transcript

RMAN Encryption> OSB Jobs

RAC


Oracle Secure Backup creates jobs in response to work that you ask it to do. It assigns each job a name, called a job identifier, that is unique among all jobs within the administrative domain. Several events cause Oracle Secure Backup to create new jobs:

• At the beginning of the day, Oracle Secure Backup inspects the triggers defined in each schedule. For each trigger that fires that day, it creates one new job and assigns the scheduled job a numerical job identifier.

• Media management jobs are based on OSB scanning its catalog (based on your schedule). For candidate tape volumes the appropriate jobs are created. As OSB operator, you must execute the media movement jobs; the execution of duplication jobs can be automated.

• Also, each time you explicitly request that Oracle Secure Backup perform a backup and send your request to the scheduler, Oracle Secure Backup creates a job. It assigns the job an identifier consisting of the username of the logged-in user, a slash, and a unique numerical identifier. An example of such a job identifier is admin/233.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Oracle Secure Backup Jobs (continued)

• At the scheduled start time for a dataset job, Oracle Secure Backup reads the dataset, and then creates one subordinate job for each host that Backup Web it includes. In job descriptions, Oracle Secure Backup calls this a backup job. It assigns each backup job an identifier whose prefix is the parent (dataset) job ID, followed by a dot, and then followed by a unique small number. An example of such a job identifier is admin/233.1.

• Each time you explicitly request that Oracle Secure Backup restore data, and send your request to the scheduler, Oracle Secure Backup creates a “restore job” for each backup image that must be read to effect the restore. It assigns each job an identifier consisting of the logged-in username, a slash, and a unique numerical identifier. If Oracle Secure Backup creates multiple jobs to satisfy one restore request, it marks each job except the first as dependent on the success of the previous job. The effect of this notation is that, should a job fail on which a later job is dependent, that later job is also marked as failed.

• RMAN creates an Oracle Secure Backup job with types of oracle backup ororacle restore instead of the backup and restore type.

Oracle Secure Backup keeps a log for each job. This “job log” describes high-level events, such as the creation, dispatch, and completion times of the job. You can view the log through both the Oracle Secure Backup Web tool and obtool interface.Oracle Secure Backup also maintains a running transcript for each job. The transcript contains everything that is written to the standard output stream by the job’s components, such asobtar. Oracle Secure Backup creates this transcript when dispatching the job for the first time, and updates it as the job progresses. When a job requires operator assistance, Oracle Secure Backup prompts for assistance by using the transcript and by sending an email notification, if you configured this.When you list the jobs by using the obtool utility, it displays the job ID, the scheduled time, the contents, and the job state. The contents field contains the following information, depending on the backup job type:

• The dataset being backed up (dataset jobs)• The host on which the data set is being backed up (backup job)• A description of the data being restored (restore job)• The database backup operation, such as datafile or archivelog (Oracle backup

job)• The backup piece restored (Oracle restore job)

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Managing Jobs

Managing Jobs

After your backup has been submitted to the Oracle Secure Backup scheduler, you manage these jobs from the Oracle Secure Backup Web tool:

1. From the Manage page, click the Jobs link in the Maintenance section. You are directed to the Jobs page.

2. To limit the jobs displayed to:- A specific host: select that host from the Host list- Those instantiated by a certain user: select that user from the User list- A particular dataset: select that dataset from the Dataset list

3. Select one or more of the following Viewing options:- Active: Select this option if you want to view the status of backup jobs that are

currently in progress.- Complete: Select this option to view the status of completed jobs, whether they

succeeded or not.- Pending: Select this option if you want to view the statuses of jobs that are pending,

but not presently running.- Input pending: Select this option to view the statuses of jobs that are running and

requesting input now.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Managing Jobs (continued)

- Today: Select this option if you want to view the statuses of backup jobs that are scheduled to run today.

- Scheduled time: Select this option to display jobs scheduled within a time range that you select from the From date and To date boxes.

4. Select the type of jobs that you want to see in the report. Your choices are: backup, restore, dataset, Oracle backup, and Oracle restore. You can select multiple job types by holding down Shift while selecting a job type.

5. Click Apply to accept your selections. Information is displayed in the job management table in the central panel. The following information is available for each job:

- ID: The Oracle Secure Backup-assigned job identifier- Type: The type of Oracle Secure Backup job associated to a host- Time: The date and time the job began or is scheduled to begin- State: The job status, which can be pending, completed successfully, or failed

To monitor jobs with the obtool interface, use the lsjob command. Note that the state of newly created jobs is future work until the job has been submitted.On-demand backups (created as backup requests) are named using the Oracle Secure Backup username and a system-generated number (for example, admin/1). Scheduled jobs are named using a system-generated number, but do not include the username as part of the job name. (or example, 1.1). Oracle Database backup jobs are considered on-demand backups, so the username is included in the job ID (for example, oracle/1.1).

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Viewing Job Properties and Transcripts

Viewing Job Properties and Transcripts

To view job properties in the Oracle Secure Backup Web tool, perform the following steps:1. Select a job ID from the job management table in the central panel of the Jobs page.2. Click the Show Properties button. The Job Properties page appears, showing the

characteristics of the selected job.To view a job transcript in the Oracle Secure Backup Web tool, perform the following steps:

1. Select a job from the job management table in the central panel of the Jobs page.2. Click Show Transcripts. A transcript page appears.3. Scroll down the page to view more information. At the end of the page, you can modify

the transcript viewing criteria. Optionally, select a message level from the Level list. Oracle Secure Backup tags each message it writes to a transcript with a severity level. These levels range from “0 Debug message (extra output)” to “9 Fatal.”

4. Optionally, select “Start at line” and enter a line number at which you want the transcript view messages to start.

5. Optionally, select the “Suppress input” check box to suppress input requests. When a request for input is recognized, Oracle Secure Backup prompts for a response. Specifying this option suppresses this action.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Viewing Job Properties and Transcripts (continued)

6. Optionally, select the “Show line numbers” check box to prefix each line with its message number.

7. Optionally, select the “Head lines” option and enter a number representing the first N lines of the transcript having a message severity level at or above the value you selected.

8. Optionally, select the “Tail lines” option if you want to display the last N lines of the transcript having a message severity level at or above the value you selected.

9. Optionally, select a value in the “Page refresh (in seconds)” list. The default is 60 seconds.

10. Click Apply to accept your changes, if any, and redisplay the transcript.To view a job transcript, you must be the owner of the job or belong to a user class that has either the list any jobs owned by user or the list any job, regardless of its owner right.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Troubleshooting Jobs

AB

. . .

Troubleshooting Jobs

A. An alternative way to view the job properties is to click the job link on the OSB Home page.

B. An alternative way to view the transcript is to click the icon before the job link.Note: The job transcript informs you of an error and the job waits for your input. O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Suspending and Resuming Job Dispatching

Suspending and Resuming Job DispatchingIt is possible to temporarily suspend and later resume the Oracle Secure Backup dispatching of jobs. When job dispatching is suspended, running jobs are allowed to complete; however, the scheduler starts no new jobs. After job dispatching is suspended, the scheduler resumes it when you select the resume function or restart Oracle Secure Backup on the administrative server.To suspend job dispatching, from the Daemons page, click the Suspend button. The message “obscheduled suspended” appears in the Status area. Any pending backup and restore (scheduled or one-time) jobs are no longer dispatched. Jobs that are already running are permitted to finish.To resume job dispatching, from the Daemons page, click the Resume button. The message “obscheduled processing resumed” appears in the Status area.The following scenario shows you how to suspend and resume job dispatching with the obtoolutility:ob> ctldaemon --command suspend

ob> lsdaemonProcess Daemon/ Listen

ID Service State port Qualifier31815 observiced normal 40031817 obscheduled suspended 64739

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Suspending and Resuming Job Dispatching (continued)ob> ctldaemon --command resume

ob> lsdaemon --long --host EDRSR14P1

Process ID: 31815

Daemon/Service: observiced

State: normal

Listen port: 400

Qualifier: (none)

Process ID: 31817

Daemon/Service: obscheduled

State: normal

Listen port: 64739

Qualifier: (none)

ob>

The ctldaemon command is generally used to control the operation of an Oracle Secure Backup daemon. In the above example, ctldaemon is used to suspend and resume Oracle Secure Backup job scheduling.The lsdaemon command is used to list the Oracle Secure Backup daemons running on a particular host.Note: For more information about the these commands, refer to the Oracle Secure Backup Reference.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Job Summaries

Job Summaries

A “job summary” is a text file report that describes the backup and restore activity performed by Oracle Secure Backup. You can use job summaries to monitor specific backup jobs, or you can use a job summary report to monitor all backup and restore activity for a time period.You can create a “job summary schedule,” which enables Oracle Secure Backup to generate multiple summary reports, each covering different time periods or activities. If an email system such as sendmail is operational on the administrative server, then you can supply the email addresses for the recipients of job summary reports and the report will be sent in an email to those recipients. It is recommended that you create at least one job summary schedule so that you receive an automated email describing your backup jobs. Using the Web tool, in the Advanced section of the Configure page, click Job Summaries to list the configured job summary schedules. To remove a job summary schedule, select the schedule you want to remove, and then click Remove.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Displaying Log Files and Transcripts

rdbms/log/sbtio.log admin/log/scheduler/log

RMAN($ORACLE_HOME)


(<OSB_Home> directory)

Displaying Log Files and Transcripts

If an error occurs during an SBT session, Oracle Secure Backup tries to send the error description to the administrative server to be saved in the job transcript. RMAN records the error in the trace file named sbtio.log, unless the user has configured a different file to be used by RMAN. By default, this trace file is located in the $ORACLE_HOME/rdbms/logdirectory.All SBT errors contain the following information:

• The location (function) where the failure occurred (for example, sbtbackup)• The operation that was being performed (for example, “creating a backup piece”) • A brief description of the problem (for example, “unable to contact admin server”)• If applicable, a brief description of the remedy that the user may apply• If applicable, the name of the trace or debug file where additional information about the

problem can be foundYou can get more trace information by using the TRACE option of the ALLOCATE CHANNELcommand. For example: ALLOCATE CHANNEL c1 TYPE sbt TRACE 5 …Trace levels range from 0 (errors only) to 6 (verbose debugging).

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Summary


• Perform an RMAN-encrypted database backup and restore operations

• View OSB jobs transcripts and logs

• Describe OSB performance considerations related to RAC

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Oracle Secure BackupAdditional Installation Topics

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Oracle Database 11g: Oracle Secure Backup C - 2


Topics

This appendix, together with the relevant lesson, should assist you to:

• Install Oracle Secure Backup on Windows

• Locate and describe the Oracle Secure Backup installed files

• Verify your installation

• Remove Oracle Secure Backup

Topics

For a demonstration of the Windows installation steps, view the osb_win_ins viewlet.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Answer service login dialogs

Answer service startup dialogs

Install

Select the type of host from theOracle Secure Backup Setup screen

Answer customer information dialogs

Run setup.exe

Windows Installation: Overview

Windows Installation: Overview

Before beginning your installation, see documentation for platform-specific details, such as: how to configure firewalls.Oracle Secure Backup supports configuring the administrative domain on a host running the Windows operating system.During the installation process, the Oracle Secure Backup Setup Wizard copies all Oracle Secure Backup files to the local host and generates Windows Registry entries.Note

• Every installation of Oracle Secure Backup on Windows is a client installation, and can additionally be a media server or administrative server installation.

• With OSB 10.2, it is not necessary to stop tape device drivers, before beginning your installation.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup InstallShield Wizard


1. Run the setup.exe program from the directory into which you originally downloadedthe software. The InstallShield Wizard is displayed.

2. Click Next to continue. A system check should inform you that: “This will be a clean install of Oracle Secure Backup.”

3. Click Next to continue. The Customer Information dialog box is displayed.4. Enter your name in the User Name box.5. Enter the name of your company in the Organization box.6. Select a target user for the application. Your choices are:

- Anyone who uses this computer (all users)- Only for me (user)

7. Click Next to continue.8. Choose the program features to configure:

a. To configure the Windows host as a media server, click the pull-down menu of the Media Server icon. The options that are displayed are shown in the slide. Selectingthe “This feature will be installed on local hard drive.” option removes the X from the Media Server icon and installs the media server software.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




Oracle Secure Backup InstallShield Wizard (continued)

b. To configure the Windows host as an administrative server, click the pull-down menu of the Administrative Host icon and select “This feature will be installed on local hard drive.” Again, selecting this option removes the X from the Administrative Host icon and installs the administrative server software.

c. If you plan to perform Oracle database backups and restores, repeat this process for Create “oracle” user. Doing so creates an Oracle Secure Backup user called oracle(with the rights and privileges of the oracle class) whose purpose is to facilitate RMAN backup and restores of Oracle databases.

9. Click Next to continue. The “Encryption Wallet Password” window is displayed. Enter a strong password for the encryption wallet and re-enter it for verification. Then click Next.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.




Oracle Secure Backup InstallShield Wizard (continued)

10. Enter a strong password for the admin user and reenter it for verification. If possible, provide an email address for the admin user. Oracle Secure Backup will send reports, such as the Job Summary to this email. Click Next.

11. Click Install to start copying files. A progress bar appears. When the files are copied, theInstallShield Completed screen is displayed.

12. Click Finish to continue.Note: When the InstallShield Wizard is finished, it automatically calls the OSB Configuration wizard.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup Service Startup

Oracle Secure Backup Service Startup

The Oracle Secure Backup Service Startup dialog box is displayed.13. Select a mode in which to start the Oracle Secure Backup service. Your choices are:

- Automatic: The Oracle Secure Backup service starts automatically when you reboot your host.

- Manual: The Oracle Secure Backup service must be started manually by a user who is a member of the Administrators group.

- Disabled: The Oracle Secure Backup service is disabled.14. Click Next to continue.

Note: On the Windows operating system, the only daemon that runs as a Windows service is the Oracle Secure Backup service (observiced).

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Service Logon and SCSI Devices

Service Logon and SCSI Devices

The Service Login dialog box appears.15. Select one of the following options:

- If you plan to run the Oracle Secure Backup service daemon (and associated subordinate daemons) with full privileges, click System Account.

- If you plan to run the Oracle Secure Backup service daemon (and associated subordinate daemons) with the privilege set associated with an existing Windows user account, click “This Account” and enter the Windows user account name and password. If you choose this option, ensure that the account you select has enough backup and restore privileges. The required privileges are listed in the Oracle Secure Backup Service Logon dialog box.

16. Click Next. The SCSI Devices pages are displayed. Note the OSB Name, which you need to know, when you manually configure devices.

17. Click Finish to complete the installation.18. Repeat this installation process for each Windows host in your administrative domain.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Oracle Secure Backup Installed Files

<OSB_Home> directory

Configurationfile

help samples


admin apache



devicebin


The Oracle Secure Backup home directory is created on every host where you install Oracle Secure Backup, although the contents of the directory vary depending on the roles you assigned to the host. The illustration in the slide shows the installed directories that are common to an administrative server on any operating system. However, an administrative server configured on a Linux host will have additional directories created. In addition to containing the Oracle Secure Backup directory, each host on which Oracle Secure Backup is installed contains a configuration file. The configuration file is calledobconfig.txt in the db subdirectory where you install Oracle Secure Backup on Windows,and it is called obconfig in the /etc directory on UNIX and Linux systems. These directories contain the following types of files:• admin: Administrative and configuration data for the administrative domain, also the

backup catalog• apache: Apache Web server files (used by Web tool)• bin: Executables or links to executables • device: Data on the tape drives and libraries that are supported by the Oracle Secure

Backup device driver

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Oracle Secure Backup Installed Files (continued)

• help: Help files (provides data for the help command in obtool)• samples: Sample tools for writing scripts or programs that interact with Oracle Secure

BackupNote: The directory structure under the <OSB_Home> directory is the same for both Windows and UNIX systems.On a Windows host, an Oracle Secure Backup installation also includes the following file objects:• db\xcr\: Transcripts for jobs that ran on this host• temp\: The directory containing observiced and obndmpd log files and temporary

files A UNIX or Linux host has the following additional files:• .bin.<operating_system>/: Executables for operating_system, where

operating_system is a derivative of the operating system name. For example, the directory for Sun Solaris is .bin.solaris.

• .drv.<operating_system>/: Device drivers for operating_system• etc/: Links that point to the <OSB_root>/.wrapper script for each Oracle Secure

Backup utility. This script is an architecture-specific executable selection tool for Oracle Secure Backup.

• .etc.<operating_system>/: Daemons and utility programs for operating_ system• install/: Installation scripts • lib/: Link to the architecture-independent shared library for the SBT interface • .lib.<operating_system>/: Shared library for the SBT interface for

operating_system, where operating_system is a derivative of the operating system name. For example, the directory for Sun Solaris is .lib.solaris.

• man/: Man pages for Oracle Secure Backup components • man/man1: Man pages for Oracle Secure Backup executables • man/man8: Man pages for daemons and maintenance tools • tools.<operating_system>/: Maintenance tools • /usr/etc/ob/.hostid: Information used for identifying this host • /usr/etc/ob/xcr/: Transcripts for jobs that ran on this host • /usr/tmp/: Log files for observiced and obndmpd and temporary files• .wrapper: Shell program that selects an executable from a .bin.* or .etc.*

directory, based on the computer architecture of the host executing the command. Symbolic links and the architecture-independent .wrapper shell program enable hosts to contain executables for multiple computer architectures.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.





bin devicehelp.drv.<OS>

Media server




Client

binhelp device


The slide illustrates the directories created for a media server or client. The bin and devicesubdirectories are created on every machine, regardless of the operating system used. The other directories shown in the slide are created for machines that use the Windows operating system. For a UNIX or Linux host, the following files and directories are installed in addition to the binand device subdirectories:

• Media server:- .bin.<operating_system>/- .drv.<operating_system>/- etc/ - .etc.<operating_system>/- man/ - /usr/etc/ob/.hostid - /usr/etc/ob/xcr/ - /usr/tmp/ - .wrapper

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



• Client:- .bin.<operating_system>/- etc/- .etc.<operating_system>/- man/- /usr/etc/ob/.hostid- /usr/etc/ob/xcr/- /usr/tmp/- .wrapper

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Installed Files for Host Role: Administrative Server

Configurationfile


help samplesadmin apache



devicebin

Installed Files for Host Role: Administrative Server

The Oracle Secure Backup home directory is created on every host where you install Oracle Secure Backup, although the contents of the directory vary depending on the roles you assigned to the host. The illustration in the slide shows the installed directories that are common to an administrative server on any operating system. However, an administrative server configured on a Linux host will have additional directories created. In addition to containing the Oracle Secure Backup directory, each host on which Oracle Secure Backup is installed contains a configuration file. The configuration file is calledobconfig.txt in the db subdirectory where you install Oracle Secure Backup on Windows,and it is called obconfig in the /etc directory on UNIX and Linux systems. These directories contain the following types of files:• admin: Administrative and configuration data for the administrative domain, also the

backup catalog• apache: Apache Web server files (used by Web tool)• bin: Executables or links to executables • device: Data on the tape drives and libraries that are supported by the Oracle Secure

Backup device driver

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Installed Files for Host Role: Administrative Server (continued)

Oracle Secure Backup Installed Files• help: Help files (provides data for the help command in obtool)• samples: Sample tools for writing scripts or programs that interact with Oracle Secure

BackupNote: The directory structure under the <OSB_Home> directory is the same for both Windows and UNIX systems.On a Windows host, an Oracle Secure Backup installation also includes the following file objects:• db\xcr\: Transcripts for jobs that ran on this host• temp\: The directory containing observiced and obndmpd log files and temporary

files A UNIX or Linux host has the following additional files:• .bin.<operating_system>/: Executables for operating_system, where

operating_system is a derivative of the operating system name. For example, the directory for Sun Solaris is .bin.solaris.

• .drv.<operating_system>/: Device drivers for operating_system• etc/: Links that point to the <OSB_root>/.wrapper script for each Oracle Secure

Backup utility. This script is an architecture-specific executable selection tool for Oracle Secure Backup.

• .etc.<operating_system>/: Daemons and utility programs for operating_ system• install/: Installation scripts • lib/: Link to the architecture-independent shared library for the SBT interface • .lib.<operating_system>/: Shared library for the SBT interface for

operating_system, where operating_system is a derivative of the operating system name. For example, the directory for Sun Solaris is .lib.solaris.

• man/: Man pages for Oracle Secure Backup components • man/man1: Man pages for Oracle Secure Backup executables• man/man8: Man pages for daemons and maintenance tools • tools.<operating_system>/: Maintenance tools • /usr/etc/ob/.hostid: Information used for identifying this host• /usr/etc/ob/xcr/: Transcripts for jobs that ran on this host• /usr/tmp/: Log files for observiced and obndmpd and temporary files• .wrapper: Shell program that selects an executable from a .bin.* or .etc.*

directory, based on the computer architecture of the host executing the command. Symbolic links and the architecture-independent .wrapper shell program enable hosts to contain executables for multiple computer architectures.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Installed Files for Host Role: Media Server


bin devicehelp.drv.<OS>


Installed Files for Host Role: Media Server

The slide illustrates the directories created for a media server or client. The bin and devicesubdirectories are created on every machine, regardless of the operating system used. The other directories shown in the slide are created for machines that use the Windows operating system. For a UNIX or Linux host, the following files and directories are installed in addition to the binand device subdirectories:

• Media server:- .bin.<operating_system>/- .drv.<operating_system>/- etc/ - .etc.<operating_system>/- man/ - /usr/etc/ob/.hostid - /usr/etc/ob/xcr/ - /usr/tmp/ - .wrapper

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Installed Files for Host Role: Client



binhelp device

Installed Files for Host Role: Client

The slide illustrates the directories created for a media server or client. The bin and devicesubdirectories are created on every machine, regardless of the operating system used. The other directories shown in the slide are created for machines that use the Windows operating system.

• Client:- .bin.<operating_system>/- etc/- .etc.<operating_system>/- man/- /usr/etc/ob/.hostid- /usr/etc/ob/xcr/- /usr/tmp/- .wrapper

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Verifying Your Installation

Some examples:

• View Oracle Secure Backup processes in Linux:

• Use obtool commands to view Oracle Secure Backup users and default media family:

ps -e | grep ob

ob> lsuser

ob> lsmf --long

Verifying Your Installation

In the slide are some examples of how you can verify your installation with obtool commands:ob> lsuseradmin adminoracle oracleob> lsmf --longOSB-CATALOG-MF:

Write window: 7 daysKeep volume set: 14 daysAppendable: yesVolume ID used: unique to this media familyComment: OSB catalog backup media family

RMAN-DEFAULT:Keep volume set: content manages reuseAppendable: yesVolume ID used: unique to this media familyComment: Default RMAN backup media family

ob> logout

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Removing Oracle Secure Backup

• Have all users log out of Oracle Secure Backup applications.

• Close all sessions of Web tool.• Use the uninstallob script.

– You must be logged in as the root user.

– Call script from the parent directory of the Oracle Secure Backup home directory.

• Choose whether you want to save or remove the:– Oracle Secure Backup directory

– Administrative directory

Removing Oracle Secure Backup

You can remove Oracle Secure Backup from a client or the administrative server. If you remove Oracle Secure Backup from an administrative server, you are given the option of retaining the administrative directory and its contents. This enables you to safely remove and reinstall the product without deleting your administrative server data.You must be logged in as the root user on UNIX or Linux systems to remove Oracle Secure Backup completely. If you are not logged in as root when you remove the software, you may not have the privileges needed to delete files and shut down the Oracle Secure Backup daemons.Oracle Secure Backup–related processes such as the HTTP processes for Oracle Secure Backup Web tool should be shut down before beginning the uninstallation process. To identify processes for Oracle Secure Backup, you can use the following command:

# /bin/ps -ef |grep ob

You can then use kill -9 <pid> commands to kill each process in the list associated with Oracle Secure Backup.If you remove Oracle Secure Backup from the local machine, the uninstallob script removes the Oracle Secure Backup home directory when the script completes. For this reason, you should call the uninstallob script from the parent directory of the Oracle Secure Backup home directory.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Removing Oracle Secure Backup (continued)

If you encounter errors when removing the Oracle Secure Backup software, or if the uninstallob script fails to completely remove all the files for Oracle Secure Backup (assuming you did not choose to save any files), correct the problem causing the error if possible, then run the uninstallob script again until you see the following message:

Oracle Secure Backup has been successfully removed from <host>.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.



Summary

This appendix provided assistance with the following topics:

• Install Oracle Secure Backup on Windows

• Locate and describe the Oracle Secure Backup installed files

• Verify your UNIX installation

• Remove Oracle Secure Backup

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Oracle Database 11g: Oracle Secure Backup D - 1

________

D

Glossary

________

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Term Definition administrative domain A group of computers on your network that

you manage as a common unit to perform backup and restore operations.

administrative server A host where you install Oracle Secure Backup. This host stores configuration information and the catalog files for client hosts. There must be one and only one administrative server for each administrative domain at your site. One administrative server can service all clients on your network. The administrative server runs the scheduling daemon, which starts and monitors backups within the administrative domain.

AIT Advanced Intelligent Tape, a magnetic tape and drive system used for computer data storage and archiving

Apache Web server A public-domain Web server used by the Oracle Secure Backup Web interface tool.

API application programming interface Areal Density Important indicator of the performance of

the disk and drive that corresponds to the number of magnetic bits per unit area

attachment An attachment describes a data path between a host and a storage device. Most often, an attachment comprises the identity of a host plus a UNIX device special file name, a Windows device name, or an NAS device name. A device must have at least one attachment, and often has multiple attachments, one for each host that can directly access it.

authentication type Defines the way in which Oracle Secure Backup authenticates itself to the NDMP server. Typically, you should use Negotiated as your default setting. Your choices are:

• Default • None • Negotiated • Text • Md5

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Auxiliary Storage/ External Storage/

Secondary storage. All addressable data storage that is not currently in the computer’s main storage or memory.

backup description file A text file you create that is used with command-line interface backup operations. It lists host names and directories that you want to back up.

backup ID An integer identifier that uniquely identifies a backup image section

backup image The product of an Oracle Secure Backup backup operation. Basically it is the list of files that are backed up in one operation. A backup image can contain one or more media families and volume sets.

backup image label The first block of a backup image. It contains the backup image’s file and section numbers and owner.

backup image section A portion of a backup image file that exists on a single tape. One backup image can contain multiple sections. Each backup section is uniquely identified by a backup ID.

backup job A backup operation that is scheduled to run at a specific time. The time the job is scheduled to run can be either immediately or some time in the future.

backup level The level that defines the comprehensiveness of the backup operation. For example, a level 2 backup operation backs up all data changed since the previous level 1 or level 2 backup.

backup operation A process by which data is copied from primary media to secondary media.

backup piece A binary file written in a proprietary format by RMAN for storing backup data. One or more backup pieces make up a backup set.

backup schedule A description of when and how often Oracle Secure Backup is to back up one or more datasets. The backup schedule contains the names of each such dataset and the name of the media family to use.

backup sections Also referred to as archive sections. See backup image section.

backup set A collection of Oracle Database data backed up by RMAN.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Backup Storage Selectors See Database Backup Storage Selector. backup trigger A calendar-based time at which a particular

scheduled backup becomes eligible to run backup window Defines a time range within which Oracle

Secure Backup executes scheduled backup jobs

barcode A symbol code that is physically applied to volumes for identification purposes. Some tape libraries have an automated means to read barcodes, which Oracle Secure Backup supports.

BDF See backup description file. bit The smallest amount of information in a

binary digital system that can be used to represent two states of information, such as YES or NO.

blocking factor Specifies how many 512-byte blocks to include in each block of data written to each tape drive. By default, Oracle Secure Backup writes 64 K blocks to tape (blocking factor 128). Because higher blocking factors usually result in better performance, you can try a blocking factor larger than the obtar default. If you pick a value larger than is supported by the operating system of the server, Oracle Secure Backup fails with an error.

BSP Backup Solutions Program bus A collection of wires through which data is

transmitted from one part of a computer to another

byte Eight bits of information that can represent 256 different states—for example, numbers, processor instructions, or a combination of letters and numbers as in ASCII code.

CA Certificate Authority catalog A hierarchical collection of files that

contains all the information used to define your Oracle Secure Backup administrative domain configuration

CDB command descriptor block CIFS See Common Internet File System. class Defines a set of rights that are granted to an

Oracle Backup user CLI command-line interface

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


client Any computer to be backed up by Oracle Secure Backup, including administrative servers and media servers; also referred to as a host

Common Internet File System CIFS is a file-sharing protocol, used by Windows clients to access data on a Network Appliance filer.

daemon A process on UNIX and Linux that runs in the background and performs an OSB task for an application. Some daemons run continually (for example, observided) and others are started and stopped as required (for example, obrobtd). This is equivalent to a service on a Windows host.

DAFS Direct Access File System, a new file access protocol designed to take advantage of standard memory-to-memory interconnect technologies

DAR See Direct Access Recovery. DAS Direct Attached Storage; those parts of a

wide area network in which the mass storage devices are connected locally

DAT Digital audio tape; a type of 4-mm tape data transfer element (DTE) Secondary storage device within a tape

library usually referred to by a number. In libraries that contain multiple drives, each DTE is sequentially numbered, starting with 1.

Data Mover daemon An operating system process that writes the data to tape

Database Backup Storage Selector These objects are configured to represent backup and restore parameters that describe an Oracle database. They act as a glue layer between RMAN, which accesses the database, and the Oracle Secure Backup software, which manages the underlying media.

dataset A textual description employing a lightweight language that tells Oracle Secure Backup what files to back up

dataset description file A file that contains the names of the hosts and paths that you want Oracle Secure Backup to back up.

DDS Digital data storage; a type of 4-mm tape

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


defaults and policies A set of configuration data that explains how Oracle Secure Backup runs in an administrative domain

device A tape drive or library identified by a user-defined device name

device driver A routine or set of routines that implements the device-specific aspects of generic I/O operations. The operating system handles the device-independent aspects of the I/O operation but calls routines provided by the driver for the device in question to implement the device-specific functions. Every device, whether it is a printer, disk drive, or keyboard, must have a driver program. Most devices have their drivers installed when the device or product that uses it is installed.

Direct Access Recovery (DAR) An optional capability of NDMP that addresses the need to quickly restore a single file from a stream of backup data that might contain millions of individual files. DAR relies on file history information generated at the NAS device during a backup operation.

direct-attached Located on the same host or server; also referred to as local

DLT Digital Linear Tape technology; a form of magnetic tape and drive system used for computer data storage and archiving

DMA data management agent DMA Direct memory access; a technique that

writes data from OSB tape buffers directly to tape. Also known as Linux Direct I/O.

DNS host name Every UNIX system (also known as a host) has a host name, whether it is connected to a network or not. Any system attached to the Internet or any large network conforms to a more rigorous naming convention as part of the Domain Name System (DNS). In DNS, every host name is composed of a host name and domain name. The DNS host name is the host name of the computer (does not include the domain), which is a symbolic name used to reference a particular system.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


domain A group of computers and devices on a network that are administered as a unit with common rules and procedures. Within the Internet, domains are defined by the IP address. All devices sharing a common part of the IP address are said to be in the same domain.

encryption The process of using an algorithm to convert data into a form that is unreadable except by the intended recipient, who uses a key to decrypt the message, returning it to its original readable form. Backup data can be encrypted either by RMAN or OSB (never by both).

encryption key Oracle Secure Backup has three methods to generate encryption keys: Transparent mode: Keys are randomly generated based on the selected encryption algorithm AES128(less secure) to AES 256 (most secure) Passphrase mode: Keys are generated by using a user-defined passphrase. If the encryption keys are no longer available, backups could be decrypted and restored using the passphrase. Transient mode: Keys are generated by using a user-defined passphrase. By default, transient keys are not stored on the administrative because the transient backup is a one-time backup. When the backup data is restored outside the administrative domain, the user must enter the correct passphrase to decrypt and restore the data. When the backup data is restored within the administrative domain, no user entry is required. Oracle Secure Backup can decrypt and restore the data by itself.

EOD End-of-data (EOD) label used to mark the end of Oracle Secure Backup operations on tape

EOV End-of-volume (EOV) label used to mark the end of a volume within a backup image. This label contains the volume ID of the next volume in the set.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


exabyte A unit of storage equal to 1,024 x 1,024 x 1,024 x gigabytes (just over 1 billion gigabytes)

expiration date The time the volume set is first written + the write window duration + the retention duration

expiration policy A media family configuration setting that determines when volumes are eligible to be overwritten

expire duration The amount of time after a backup piece is created during which Oracle Secure Backup cannot overwrite the data

FC Fibre Channel, an interface standard for connecting computers to mass storage devices such as disk drives and tape libraries. See also Fibre Channel.

FDDI fiber distributed data interface See Fiber Distributed Data Interface.

Fiber Distributed Data Interface A set of ANSI protocols for sending digital data over fiber optic cable. FDDI networks are token-passing networks, and support data rates of up to 100 Mbps (100 million bits per second). FDDI networks are typically used as backbones for wide area networks.

Fibre Channel A high performance interface designed to bring speed and flexibility to multiple disk-drive storage systems. A Fibre Channel configuration consists of a backplane, (an external enclosure that houses a printed circuit board (PCB) and multiple drive receptacles) and a Fibre Channel host bus adapter (HBA). The backplane allows direct connection to the drives (no cable), supplies power to the drives, and controls the input and output of data on all drives within the system. Fibre Channel, a one and two gigabit interconnect technology, allows concurrent communications among workstations, mainframes, servers, data storage systems, and other peripherals using SCSI, IP and a wide range of other protocols to meet the needs of the data center. (At the time of course creation, Fibre Channel exists with 1, 2, 4, 8, 10, and 20 GB speeds.)

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


file-system dataset A collection of files backed up by Oracle Secure Backup

filer An appliance attached to a computer network that is used for data storage

firewall A system designed to prevent unauthorized access to or from a private network

full backup An operation that backs up all the files selected on a client. Files are backed up whether or not they have changed since the last backup.

GBIC Gigabit Interface Converter; an interface module which converts the light stream from a fibre channel cable into electronic signals for use by a network interface card. This technology can be used for all connections that use a fiber optic cable, which includes the ethernet connection.

Gigabit Ethernet (GbE) A term describing various technologies for implementing Ethernet networking at a nominal speed of one gigabit per second

gigabyte A unit of storage, abbreviated as G or GB, equal to 1,024 megabytes

GUI graphical user interface HBA Host bus adapter; an interface card that

plugs into the computer’s bus and connects it to the network

host An addressable system in a computer network

host role A class of actions performed by a host. You can have an administrative server, a media server, or a client.

HTTP Hypertext Transfer Protocol (HTTP); the set of rules for exchanging files (text, graphic images, sound, video, and other multimedia files) on the World Wide Web

HTTPS Hypertext Transfer Protocol Secure (HTTPS) is a communications protocol designed to transfer encrypted information between computers over the World Wide Web. HTTPS is HTTP using a Secure Socket Layer (SSL).

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


import-export element (IEE) Used in tape libraries to move volumes into and out of the library without opening the door. It is sometimes called a mail slot, and is physically present only on certain libraries. Not all libraries have a discrete import-export element. Some libraries do have a media access port, but some require manual action by the operator to open the door and remove a tape from a slot in the library.

incremental backup A process that captures data that was changed since the level N backup operation, where N is the level of comprehensiveness of the backup operation

ISAM The Indexed Sequential Access Method (ISAM) is a method for managing how a computer accesses records and files stored on a hard disk. While storing data sequentially in a data file, ISAM provides direct access to specific records through an index. The combination of the data file and its associated index file is called a “database.” ISAM is implemented as a C function library.

iSCSI Pronounced “eye-scuzzy,” an acronym for Small Computer System Interface protocol over IP network instead of a direct SCSI-compatible cable. iSCSI enables data blocks to be read from or sent at high speed to a storage device such as a disk or tape drive.

JBOD Just a Bunch of Disks; a term used for a storage enclosure that is supplied with preintegrated disk drives

job summary A text file report produced by Oracle Secure Backup that describes the status of selected file-system backup and restore jobs

job transcript

A file that contains the standard output from a particular backup job

kilobyte A unit of storage, abbreviated as K or KB, equal to 1,024 bytes

label Data that Oracle Secure Backup uses to identify a volume or a backup image

LAN local area network library See tape library.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


lights out backup An automated backup that does not require user interaction and typically is performed outside of normal working hours

logical unit number An internal mapping identifier used by Oracle Secure Backup for a specific device. LUNs make it possible for a number of devices to share a single SCSI ID.

LTO Linear Tape-Open technology, developed jointly by HP, IBM, and Seagate; an “open format” technology, which means that users will have multiple sources of product and media

LUN See logical unit number. magazine A collection of tapes or volumes media family A classification of backup media that share

the same volume identification sequence. Each media family identifies the amount of time that data can be written to a tape, and the amount of time the tape can remain in storage before it can be overwritten. A media family can contain one or more volume sets and volumes.

media server A computer with one or more attached tape drives or tape libraries. Backup data is sent to and restored from volumes loaded in these devices.

medium transport element (MTE) Moves a volume from a storage element to another element within a tape library

megabyte A unit of storage abbreviated as M or MB; equal to 1,024 x 1,024 or 1,048,576 bytes

MMV media management vendor mount mode The mode indicates the way in which the

scheduling system can use a volume physically loaded into a tape drive. Valid values are read-only, write/append, overwrite, and not-mounted.

Multi-hosted tape library A library with multiple media servers connected to it

NAS See Network Attached Storage.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


NDMP The Network Data Management Protocol (NDMP) is a network applications protocol facilitating data backup and restore. Layered atop TCP and the Berkeley socket model, NDMP defines a set of related service models, network messages, and finite state automations that implement them. The protocol provides a uniform means to back up and restore data within and between diverse kinds of storage servers, open systems, Wintel platforms, and closed operating system appliances. NDMP is commonly used by NAS devices (also known as filers) to facilitate backup and restore operations without having to install the backup agent (Oracle Backup, for example) on the appliance. The NAS appliance communicates with the backup software using NDMP.

NDMP backup type The name of a backup method supported by the NDMP Data Service running on a host. Backup types are defined by each Data Service provider.

NDMP Data Service One of three types of NDMP services. The data service interfaces with the primary storage device (such as a NAS device) and interacts with the volume or file system that is being either backed up or restored.

Network Attached Storage A server on your network that hosts file systems. The server exposes the file systems to its clients through one or more standard protocols, most commonly NFS and CIFS.

network description file A text file that describes your network configuration and is used to push software across the network to designated systems during installation

network drive A hard disk physically attached to a server and accessible over a network

Network File System A client/server application that enables all network users to access shared files stored on servers of different types. NFS provides access to shared files through an interface called the Virtual File System (VFS) that runs on top of TCP/IP. Users can manipulate shared files as if they were

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


stored locally on the user’s own hard disk. With NFS, servers connected to a network operate as clients while accessing remote files, and as servers while providing remote users access to local shared files. The NFS standards are publicly available and widely used.

NFS See Network File System. nibble A unit of information equal to 4 bits (or

half a byte) NT File System One of the file systems for the Windows

operating system. NTFS has features to improve reliability, such as transaction logs to help restore from disk failures.

NTFS See NT File System. object A data storage type used to store Oracle

Secure Backup catalog data. There are user, class, and policy objects that hold attributes and names. Internal names are named with a UUID; external names are user assigned.

OCFS Oracle Cluster File System offsite backup A backup that is equivalent to a full (level

0) backup except that Oracle Secure Backup keeps a record of this backup in such a manner that it does not affect the full or incremental backup schedule. This is useful when you want to create a backup image for offsite storage without disturbing your schedule of incremental backups.

operator A person who runs backup operations, manages schedules, swaps tapes, and checks for any errors

operator assistance request A request from Oracle Secure Backup that asks for the operator to perform a task, such as mounting a different volume during a backup

Oracle Secure Backup scheduler A daemon that automatically starts backup jobs on the specified day and time

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


Oracle Secure Backup user A user definition, distinct from the name spaces of existing UNIX, Linux, and Windows users, which allows Oracle Secure Backup to maintain a consistent user identity across the various hosts. It also allows Oracle Secure Backup to express a finer granularity of user rights than are possible with existing user definitions.

orphan A backup piece that exists in the Oracle Secure Backup catalog but not in the RMAN catalog

permissions Operating system file privileges that allow different users to read, write, or execute files

petabyte A unit of storage equal to 1,024 terabytes, (just over a million gigabytes)

PHP Hypertext Preprocessor (PHP) is an open source, server-side HTML scripting language used to create dynamic Web pages. PHP is embedded within tags, so the author can move between HTML and PHP instead of using large amounts of code. Because PHP is executed on the server, the viewer cannot see the code. PHP can perform the same tasks as a CGI program and is compatible with many different kinds of databases.

ping Stands for Packet Internet Grouper. A utility to determine whether a specific IP address is accessible. It works by sending a packet to the specified address and waiting for a reply. You can use ping hosts to troubleshoot network connections.

PNI See Preferred Network Interface. Preferred Network Interface A network can have multiple physical

connections between a client and the server. For example, a network can have both Ethernet and FDDI connections between a pair of hosts. Using PNI, you can specify, on a client-by-client basis, which of the server’s network interfaces should be used to transmit data to be backed up or restored.

RAC Real Application Clusters

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


RAID Originally, an acronym for Redundant Array of Inexpensive Disks to reflect the data accessibility and cost advantages that properly implemented arrays could provide. The acronym has evolved to mean Redundant Array of Independent Disks emphasizing the technique’s potential data availability advantages over conventional disk storage systems.

recycling policies See expiration policy. recycling volumes Overwriting data on volumes generated by

Oracle Secure Backup restore operation Copies files from the tapes in a backup

device to the file system on a designated host

restore operator list A list of operators to whom restore data requests are e-mailed. This list is defined in the obconfig file on the administrative server.

retention duration See expiration policy. RMAN Recovery Manager RMAN preauthorization Used to determine the Oracle Secure

Backup user under which a specific RMAN operation, such as backup or restore, is performed. This allows for the use of Oracle Secure Backup without going through the normal Oracle Secure Backup login requirements.

SAIT Super Advanced Intelligent Tape; a Small Form Factor ½″ tape cartridge

SAN See Storage Area Network. SBT System backup to tape; interface between

RMAN and storage media. RMAN communicates with Oracle Secure Backup through the SBT interface.

schedule A user-defined time period for executing backup operations

SCSI Pronounced “scuzzy,” an acronym for Small Computer System Interface. A parallel I/O bus and protocol that permits the connection of a variety of peripherals to host computers with independence within a class of devices (such as disk drives and backup devices). Connection to the SCSI bus is achieved through a host adapter and a peripheral controller. Linux has a four-

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


level hierarchical addressing scheme for SCSI devices:

• SCSI adapter number [host] • Channel number [bus] • ID number [target] • Logical unit number [LUN]

Each SCSI bus can have multiple SCSI devices connected to it. In SCSI parlance, the host bus adapter is called the “initiator” and takes up one SCSI target ID number (typically 7). The initiator talks to targets, which are commonly known as SCSI devices. Each SCSI device can contain multiple Logical Unit Numbers (LUNs).

SCSI LUN number The value used to identify a logical unit of a SCSI device. In the SCSI-2 specification, there may be up to eight logical units for each SCSI device address. These logical units are numbered from 0 through 7.

SCSI target ID The unique address of a SCSI device. An 8-bit SCSI can have up to eight IDs; 16-bit up to sixteen IDs; and 32-bit up to 32 IDs. There must be a minimum of one target and one initiator on the bus. SCSI target IDs range from 0 to 7 for 8-bit, 0 to 15 for 16-bit and 0 to 31 for 32-bit systems.

SDLT/SuperDLT Super Digital Linear Tape technology; a variant of DLT technology

section number A number that is recorded in the volume label to indicate the order of the parts of a backup image that spans multiple volumes

Secure Sockets Layer (SSL) An application layer protocol created by Netscape for managing the security of message transmissions in a network. SSL uses the public-and-private key encryption system from RSA (a public key algorithm, named after its inventors: Rivest, Shamir, and Adleman), which also includes the use of a digital certificate.

sequence number A number that is recorded in the volume label to indicate the order of volumes in a volume set

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


service A process on Windows that runs in the background and performs a task for an application. Some services run continually, and others are started and stopped as required.

services daemon The observiced daemon. It ensures that tape resources are available and reserves them for the backup job.

single-hosted tape library A tape library with only one media server directly attached to it

SNIA Storage Networking Industry Association; a non-profit trade organization, incorporated in December 1997, whose members are dedicated to “ensuring that storage networks become complete and trusted solutions across the IT community”

storage consolidation The concept of centralizing and sharing storage resources among many application servers

SSL See Secure Sockets Layer (SSL). Storage Area Network A high-speed subnetwork of shared storage

devices or servers that contains disks for storing data. A SAN storage architecture allows remote servers access to shared tape devices. These shared devices appear locally attached to each SAN server.

storage element (se) A physical location within a tape library where a volume can be stored and retrieved by a tape library’s robotic mechanism

storage selector See Database Backup Storage Selector. tape A data storage medium consisting of a

magnetizable oxide coating on a thin plastic strip, commonly used for backup and archiving. Popular for its ability to store large amounts of data, and for its portability. Tapes are also referred to as removable media, or secondary storage.

tape file mark A marker written to tape by Oracle Secure Backup that signals the end of a backup image

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


tape library An automated tape-handling hardware device that invariably house two or more drives and from 10s to 100s of tapes. A library accepts SCSI commands to move media between storage locations and drives. Tape libraries are designed for continuous, unattended operation and allow simultaneous reading and writing to multiple drives. Tape libraries also offer key features such as barcode readers to scan labels on cartridges, and an I/O port for importing and exporting individual tapes under application control. It is also referred to as a robotic tape device, autochanger, or medium changer.

TCP/IP Transmission Control Protocol/Internet Protocol. It is the suite of protocols used to connect hosts for transmitting data over networks.

terabyte A unit of storage, abbreviated as T or TB; equal to 1,024 gigabytes

trigger A user-defined period in time or sets of times that causes a scheduled backup to run

URL The Uniform Resource Locator, the address of a resource available on the Internet

UUID Universal Unique Identifier; used for tagging objects across a network

virtualization The pooling of physical storage from multiple network storage devices into what appears to be a single storage device that is managed from a central console.

volume A single unit of media such as an 8-mm tape. A volume can contain one or more backup images.

volume expiration time The date and time on which a volume expires. Oracle Secure Backup computes this by adding the write window duration, if any, to the time at which it wrote backup image file number 1 to a volume, then adding the volume retention period.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


volume ID A label that uniquely identifies the volume and includes the backup image’s file number and additional information, if the backup image is contained on a multi-volume set. Oracle Secure Backup begins each backup image with a label that uniquely identifies the backup image. Volume IDs appear in volume labels and backup image labels. For example, VOL000001 appears in the volume sequence file.

volume label The first block of the first backup image on a volume. It contains the volume ID, owner name, and date and time for the volume creation.

volume sequence file

A file that contains a unique volume ID to assign when labeling a volume

volume set The volumes that comprise a backup image volume set expiration time The date and time on which a volume set

expires, computed by adding the write window duration, if any, to the time at which the first backup image file was written to the volume set, then adding the volume set retention period

volume tag A field that is commonly used to hold the barcode identifier for the volume. Each Oracle Secure Backup volume has an associated field called a volume tag. It is another name for the barcode that can be found in the volume label.

WAN Wide area network, a computer network that spans a relatively large geographical area. Typically, a WAN consists of two or more local area networks (LANs). Computers connected to a wide area network are often connected through public networks, such as the telephone system. They can also be connected through leased lines or satellites. The largest WAN in existence is the Internet.

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


World Wide Names (WWNs) A unique identifier for devices on a Storage Area Network (SAN), similar to a media access control (MAC) address for devices connected via Ethernet. WWNs consist of 16 hexadecimal digits grouped as 8 pairs. These are written with colon characters separating each pair. The format of the WWN is defined by the Institute of Electrical and Electronics Engineers (IEEE). It is also referred to as a WWPN (Worldwide Port Name) or WWNN (Worldwide Node Name).

WORM

Write Once Read Many times; a class of optical recording systems that allow recording and adding data but not altering recorded data

write date Defines the period of time, starting from the volume’s first data write operation, during which updates to the volume are allowed

write-protect To mark a file or media so that its contents cannot be modified or deleted. Write-protected files and media can only be read; you cannot write to them, edit them, append data to them, or delete them.

write window The period of time for which a volume set remains open for updates, usually by appending additional backup images. The write window opens at the time the volume set is created, and closes after this specified period has elapsed. After the write window closes, Oracle Secure Backup does not allow any further updates to the volume set until it expires, or until it is relabeled, reused, unlabeled, or forcibly overwritten.

O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Index

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Oracle Database 11g: Oracle Secure Backup Index - 2

A

administrative domain 1-7, 1-9, 1-11, 1-12, 1-17, 1-21, 2-2,

2-3, 2-4, 2-14, 2-23, 3-3, 3-5, 3-6, 3-7, 3-8, 3-16, 3-17,

3-21, 4-7, 4-8, 4-9, 4-15, 6-4, 7-3, 8-3, 8-7, 8-11, 9-3,

9-4, 9-8, 9-10, 9-28, B-14, C-3, C-8, C-9, C-13

administrator i-7, 10-14, 1-2, 2-13, 2-18, 3-5, 3-6, 3-7,

3-18, 3-27, 4-16, 6-8, 6-12, 6-15, 7-10, 9-5, 9-6, 9-14, B-5,

C-7

Apache Web server 1-8, 8-4, C-9, C-13

attachment 1-11, 1-17, 1-18, 2-4, 6-18, 9-9, 9-12, 9-22

authentication 1-21, 3-2, 3-3, 3-16, 3-17, 3-18, 3-23, 3-25,

3-34, 9-7, B-12

authentication type 9-7

B

backup ID 3-5, 9-9

backup image 1-13, 1-14, 3-5, 3-6, 4-20, 7-3, 7-5, 7-11, 8-8,

9-15, B-15

backup job 2-18, 3-8, 3-27, 3-31, 4-6, 5-7, 5-8, 5-9, 5-14,

6-3, 6-4, 6-11, 6-13, 6-14, 6-17, 6-18, 7-12, 9-16, B-14, B-15,

B-16, B-17, B-22, B-23

backup level 1-16, 1-20, 4-14, 6-3, 6-14, 6-17

backup operation 1-13, 1-19, 2-18, 3-8, 3-9, 3-10, 4-13, 6-4,

6-12, 8-4, 8-7, B-5, B-15

backup piece 1-14, 1-22, 4-5, 4-18, 4-19, 4-20, 5-10, 5-11, 8-9,

B-9, B-15, B-24

backup schedule 10-19, 11-13, 1-20, 6-3, 6-13, 6-14, 6-15, 6-22,

9-16, B-16

backup section 1-13, 4-8, 4-15, 8-8, 8-9, 9-14, 9-15

backup set 1-14, 1-20, 2-16, 4-12, 4-14, 4-15, 4-16, 4-19, 5-10,

B-4, B-5, B-8, C-3

Backup Storage Selector 4-2, 4-6, 4-12, 4-13, 4-14, 4-15, 4-25,

4-26

backup trigger 6-12, 6-14, 6-15, 6-16, 6-22

backup window 1-4, 2-18, 3-5, 6-4, 6-11, 6-12, 6-22

barcode 1-17

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


B

bus 12-4, 1-4, 2-11, 3-9, 3-11

C

catalog i-3, 10-11, 10-16, 11-12, 11-16, 1-7, 1-8, 1-9, 1-12,

1-14, 2-19, 3-3, 3-4, 3-5, 3-28, 4-6, 4-16, 4-18, 4-20, 5-7,

5-10, 5-11, 6-16, 7-2, 7-3, 7-4, 7-5, 7-7, 7-8, 7-9, 7-10,

7-11, 7-12, 7-15, 7-16, 8-2, 8-3, 8-4, 8-7, 8-9, 8-10, 8-11,

8-12, 8-13, 8-15, 8-16, 8-17, 9-17, B-14, C-9, C-13, C-17

Certificate Authority 3-16, 3-17, 3-19, 3-20

channel 12-5, 12-8, 12-11, 12-12, 12-16, 12-17, 1-18, 2-4, 3-11,

3-16, 3-17, 4-10, 5-12, 8-4, 9-9, 9-10, B-24, B-25

class i-4, i-8, 11-6, 1-13, 1-16, 1-19, 1-21, 2-11, 2-13, 3-3,

3-4, 3-5, 3-6, 3-7, 3-9, 3-11, 3-12, 3-15, 4-15, 8-7, 9-6,

B-19, C-5

D

daemon 1-8, 2-11, 2-14, 3-21, 3-22, 8-3, 8-4, 8-5, 8-6, 8-7,

8-9, 8-10, B-13, B-21, B-22, C-7, C-8, C-10, C-14, C-18

DAS 6-6, 8-11

data set 5-8, B-15

data transfer element 9-9

dataset 10-19, 11-13, 1-20, 3-5, 6-2, 6-4, 6-6, 6-7, 6-8,

6-9, 6-10, 6-13, 6-17, 6-19, 6-22, 6-23, 6-25, 6-26, 8-12, 8-13,

9-16, 9-23, B-14, B-15, B-16, B-17

direct memory 12-10

DMA 12-9, 12-10, 12-12, 8-7, B-23

DNS 2-3, 9-4

driver 12-6, 12-10, 2-4, 2-15, C-3, C-9, C-10, C-13, C-14

DTE 4-15, 9-8, 9-9

duplicate 10-6, 11-4, 11-6, 11-9, 11-12, 1-12, 3-28

duplication i-3, i-4, 10-6, 10-9, 11-1, 11-2, 11-3, 11-4, 11-5,

11-6, 11-7, 11-8, 11-9, 11-10, 11-11, 11-12, 11-13, 11-14, 11-15, 11-16,

B-14

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


E

encryption i-6, 12-4, 1-6, 1-10, 1-21, 1-26, 2-13, 2-16, 3-2,

3-3, 3-16, 3-17, 3-18, 3-21, 3-23, 3-24, 3-25, 3-26, 3-27, 3-28,

3-29, 3-30, 3-31, 3-32, 3-33, 3-34, 3-35, 5-5, 6-16, B-3, B-4,

B-5, B-6, B-7, B-8, B-11, B-12, B-13, B-14, B-25, C-5

expiration 10-8, 10-10, 1-16, 4-2, 4-17, 4-18, 4-20, 4-25, 6-5,

6-14, 6-17

expiration policy 1-16

F

fiber 12-3, 12-5, 12-16

fibre 12-5, 12-6, 1-11, 1-17, 1-18, 2-4, 9-9, 9-10

firewall C-3

full backup 1-20, 6-3

H

host role 1-7, 2-3, C-13, C-14, C-15, C-16

http i-8, 1-2, 1-8, 2-2, 2-17, 8-4, C-18

https 2-17

I

incremental 1-3, 1-16, 1-20, 2-18, 4-13, 4-14, 4-22, 5-3, 6-3,

6-14, 6-24, 7-11

J

job log 5-8, B-15

job summary 2-14, 5-8, 8-12, B-23, C-6

L

library 10-3, 10-4, 10-11, 10-15, 11-5, 12-6, 12-14, 1-5, 1-7,

1-9, 1-15, 1-17, 1-18, 1-19, 2-3, 4-10, 4-17, 4-19, 8-4, 9-8,

9-9, 9-11, 9-12, 9-22, 9-26, B-25, C-10, C-14

LUN 12-6

M

media family 10-4, 10-5, 10-8, 10-9, 10-10, 10-16, 10-19, 11-4, 11-5,

11-6, 11-7, 11-9, 11-10, 11-12, 11-13, 11-16, 1-13, 1-15, 1-16, 2-19,

4-13, 4-14, 4-16, 4-17, 4-19, 4-23, 6-5, 6-14, 6-18, 8-12, 9-14,

9-16, C-17

media movement 10-4, 10-8, 10-11, 10-13, 10-14, 10-15, 10-16, 10-17,

10-18, 10-20, 10-23, B-14

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


M

media server 12-10, 12-14, 1-5, 1-7, 1-8, 1-9, 1-11, 1-25, 2-3,

2-4, 2-6, 2-7, 2-10, 2-12, 2-21, 2-22, 2-24, 3-19, 3-23, 4-7,

4-9, 8-3, 8-4, 8-14, 9-2, 9-4, 9-5, 9-6, 9-7, 9-9, 9-22,

9-24, 9-27, B-25, C-3, C-4, C-11, C-15, C-16

N

NAS 12-3, 1-4, 1-9, 1-17, 1-26, 2-2, 2-3, 2-4, 2-20, 3-23,

3-29, 6-3, 7-11, 9-6, 9-10, 9-19

NDMP 12-3, 1-21, 2-3, 2-4, 3-8, 3-16, 6-7, 7-11, 8-3, 8-4,

8-7, 9-3, 9-5, 9-6, 9-7, 9-8, 9-10, 9-20, 9-21, 9-24, 9-25,

C-10, C-14

network i-8, 12-9, 1-3, 1-7, 1-9, 1-11, 1-17, 1-19, 1-21,

2-3, 2-4, 2-6, 2-11, 2-12, 3-16, 3-23, 3-29, 6-3, 9-4, 9-5,

9-6, 9-8, 9-9, 9-10, B-3, B-25

network attached storage 2-3, 2-4

network file system 1-3

O

offsite 10-3, 10-4, 10-6, 10-8, 11-4, 11-5, 11-12, 11-16, 1-5,

1-10, 3-24, 5-12, 6-3, 6-14, 6-17

onsite 10-17, 11-4, 11-5, 3-24

operator 10-3, 10-4, 10-11, 10-14, 10-16, 11-12, 3-4, 3-6, 5-8,

B-14, B-15

P

passphrase 3-25, 3-26, 3-27, 3-28, 3-29, 3-31, 3-32, 3-33

permission 3-4, 3-9, 3-10, 3-15, 7-4

ping 10-4, 10-8, 10-15, 1-21

preauthorization 1-21, 3-9, 3-11, 3-12, 3-35, 4-10, 8-4

preauthorize 1-21, 3-2, 3-11, 3-12, 3-15, 3-34, 4-10

R

RAID 12-4, 12-6

recycle 10-3, 10-4, 10-6, 10-8, 11-5

retention 10-3, 10-9, 11-3, 11-4, 11-5, 11-9, 1-16, 4-5, 4-16,

4-17, 4-18, 4-24

Ora

cle

Uni

vers

ity a

nd (O

racl

e C

orpo

ratio

n) u

se o

nly.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.


S

SBT 12-9, 12-16, 1-12, 1-26, 3-6, 3-11, 4-10, 4-13, 5-9, 5-15,

8-4, 8-9, B-24, B-25, C-10, C-14

SCSI 12-10, 1-3, 1-9, 1-17, 2-3, 2-4, 8-13, 9-9, 9-10, C-8

SSL 11-6, 1-6, 1-19, 1-21, 3-16, 3-17, 3-18, 3-19, 3-24, 3-29,

7-9, B-3, B-12

T

tape device 10-8, 11-6, 12-11, 1-3, 1-9, 1-11, 1-19, 2-2, 2-3,

2-4, 3-23, 3-29, 4-7, 5-5, 7-4, 8-13, 9-2, 9-10, 9-11, 9-24,

9-27, B-12, B-25, C-3

tape library 10-3, 10-15, 12-14, 1-7, 1-17, 1-18, 1-19, 2-3, 8-4,

9-9, 9-11, 9-12, 9-26, B-25

tape volume 10-4, 10-18, 9-11, B-14

transcript 10-13, 3-5, 3-6, 5-8, 5-9, 6-19, 6-20, 7-10, 8-3,

8-13, 9-16, B-2, B-14, B-15, B-18, B-19, B-20, B-24, C-10, C-14

transient 3-27, 3-28, 3-31

transparent 12-3, 1-11, 3-9, 3-25, 3-26, 3-33, 5-13, B-3, B-4,

B-5, B-6, B-8

trigger 10-12, 11-11, 6-4, 6-12, 6-14, 6-15, 6-16, 6-22, 8-12,

B-14

V

virtual 11-6, 1-10, 1-19, 2-24

volume set 10-10, 1-13, 1-15, 1-16, 3-27, 3-31, 4-17, 4-19, 6-5,

8-13, C-17

W

wallet 1-6, 3-17, 3-19, 3-20, 3-21, 3-22, 3-26, 3-27, 3-29, 3-30,

B-4, B-5, B-8, B-11, B-12, B-13, C-5

write window 10-4, 10-8, 10-10, 11-5, 1-16, 4-17, 6-5, C-17O

racl

e U

nive

rsity

and

(Ora

cle

Cor

pora

tion)

use

onl

y.

Thes

e eK

it m

ater

ials

are

to b

e us

ed O

NLY

by

you

for t

he e

xpre

ss p

urpo

se S

ELF

STU

DY.

SH

ARIN

G T

HE

FILE

IS S

TRIC

TLY

PRO

HIB

ITED

.

Documents

Student Guide - Oracle Secure Backup - Volume I