Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documentation
• Conventions

Part I Oracle Secure Backup Concepts

1 Introduction to Oracle Secure Backup

• What Is Oracle Secure Backup?
  • Oracle Secure Backup Features
  • Oracle Secure Backup and Recovery Manager
  • Oracle Secure Backup Interfaces
• Oracle Secure Backup and NDMP
• Administrative Domains
  • Host Access Modes
  • Administrative Data
• Users and Classes
  • Oracle Secure Backup Users and Passwords
    • Operating System Accounts
    • NDMP Hosts
  • Oracle Secure Backup Classes and Rights

2 Backup and Restore Concepts

• File System Backup and Restore
  • File System Backups
    • Full and Incremental File System Backups
  • Backup Datasets
  • Scheduled and On-Demand Backups
    • Privileged and Unprivileged Backups
  • Restartable Backups
  • Backup Catalog
    • Catalog Data Selectors
    • Catalog View Modes
  • File System Restore Operations
    • File System Restore Methods
• Database Backup and Recovery
  • Database Backups
    • Backup Sets and Backup Images
    • Database Backup Storage Selectors
  • Database Restore and Recovery
• Jobs and Requests
  • Job Creation
  • Job Logs
  • Job Transcripts
  • Job Summaries
• Tape Devices
  • Tape Drives
  • Tape Libraries
    • Library Elements
    • Library Operations
  • Device Names and Attachments
• Backup Images and Media
  • Backup Images and Sections
  • Volumes
    • Backup Image and Volume Labels
  • Volume Sets
  • Media Families
    • Media Family Attributes
    • Volume Expiration Policies
    • Volumes in a Media Family
• Daemons and Services
  • Types of Daemons
    • Service Daemon
    • Schedule Daemon
    • Index Daemon
    • Apache Web Server Daemon
    • NDMP Daemon
    • Robot Daemon
    • Proxy Daemon
  • Daemon Interaction in a File System Backup
• Defaults and Policies
• Network Backup Security
  • Host Authentication and Communication
    • Identity Certificates and Public Key Cryptography
    • Authenticated SSL Connections
    • Certification Authority
    • Oracle Wallet
    • Web Server Authentication
  • Data Encryption
  • Default Security Configuration

Part II Configuring the Administrative Domain

3 Getting Started

• Before You Begin
• Using the Web Tool
  • Starting the Web Tool
  • Exploring the Web Tool
    • Configure Tab
    • Manage Tab
    • Backup Tab
    • Restore Tab
    • Persistent Page Links
• Using obtool
  • Displaying obtool Invocation Help
  • Starting obtool in Interactive Mode
  • Executing obtool Commands in Interactive Mode
    • Redirecting Input in Interactive Mode
  • Executing obtool Commands in Noninteractive Mode
    • Redirecting Input in Noninteractive Mode
  • Configuring an Administration Domain with obtool
• Using Oracle Enterprise Manager
  • Registering an Administrative Server in Enterprise Manager
  • Accessing the Oracle Secure Backup Web Tool in Enterprise Manager

4 Setting Up the Administrative Domain

• Overview of Administrative Domain Configuration
• Configuring Defaults and Policies
  • About Defaults and Policies Configuration
  • Displaying the Defaults and Policies Page
  • Setting a Policy
  • Resetting a Policy
• Configuring Hosts
  • About Host Configuration
  • Displaying the Hosts Page
  • Adding a Host
  • Pinging a Host
  • Displaying or Editing Host Properties
  • Adding Backup and Restore Environment Variables to an NDMP Host
  • Configuring Preferred Network Interfaces (PNI)
    • Removing a PNI
  • Removing a Host
  • Renaming a Host
  • Updating a Host
• Configuring Tape Devices
  • About Tape Device Configuration
  • Displaying the Devices Page
  • Adding a Device
  • Configuring a Tape Library
    • Configuring Automatic Tape Cleaning for a Library
  • Configuring a Tape Drive
  • Editing Device Properties
  • Removing a Device
  • Renaming a Device
  • Configuring a Device Attachment
    • Editing a Device Attachment
    • Removing a Device Attachment
    • Displaying Device Attachment Properties
    • Pinging a Device Attachment
  • Displaying Device Properties
  • Pinging a Device
  • Discovering NDMP-Based Tape Devices Automatically
• Configuring Classes
  • Displaying the Classes Page
  • Adding a Class
  • Editing a Class
  • Removing a Class
  • Renaming a Class
  • Displaying Class Properties
• Configuring Users
  • About User Configuration
  • Displaying the Users Page
  • Adding a User
  • Editing User Properties
  • Changing a User Password
  • Assigning Windows Account Information
    • Removing a Windows Account
  • Assigning Preauthorized Access
    • Removing Preauthorized Access
  • Renaming a User
  • Removing a User

5 Configuring Backup and Media Settings

• Configuring Media Families
  • About Media Family Configuration
  • Displaying the Media Families Page
  • Adding a Media Family
  • Editing or Displaying Media Family Attributes
  • Removing a Media Family
  • Renaming a Media Family
• Configuring Database Backup Storage Selectors
  • About Database Backup Storage Selector Configuration
  • Displaying the Database Backup Storage Selectors Page
  • Adding a Database Backup Storage Selector
  • Editing a Database Backup Storage Selector
  • Removing a Database Backup Storage Selector
  • Renaming a Database Backup Storage Selector
• Configuring Job Summary Schedules
  • About Job Summary Schedule Configuration
  • Displaying the Job Summaries Page
  • Creating a Job Summary Schedule
  • Editing a Job Summary Schedule
  • Removing a Job Summary Schedule
  • Renaming a Job Summary Schedule

Part III Performing Backup and Restore Operations

6 Using Recovery Manager with Oracle Secure Backup

• Overview of Recovery Manager and Oracle Secure Backup
  • RMAN Environment
  • Interfaces for Managing Database Backup and Recovery
  • RMAN and the Oracle Secure Backup Administrative Domain
    • Single-Host Administrative Domain
    • Multiple-Host Administrative Domain
  • How RMAN Accesses Oracle Secure Backup
• Configuring RMAN and Oracle Secure Backup
  • Configuring RMAN Access to the Oracle Secure Backup SBT Library
  • Creating a Preauthorized Oracle Secure Backup Account
    • How Oracle Secure Backup Preauthorizes SBT Backups
    • Configuring an RMAN Preauthorization
  • Creating Media Families for RMAN Backups
  • Creating a Database Backup Storage Selector
    • About Database Backup Storage Selectors
    • Configuring a Database Backup Storage Selector
  • Setting Media Management Parameters in RMAN
• Performing Backups with RMAN and Oracle Secure Backup
• Performing Recovery with RMAN and Oracle Secure Backup
• Managing RMAN Metadata in Oracle Secure Backup
  • About RMAN and Oracle Secure Backup Metadata
    • Expiration of RMAN Backups
  • Displaying RMAN Job Information in Oracle Secure Backup
    • Displaying Job Transcripts
    • Displaying SBT Errors
  • Displaying Backup Piece Information
  • Adding Information About RMAN Backups to the Oracle Secure Backup Catalog
• Using RMAN and Oracle Secure Backup in a Real Application Clusters Environment

7 Backing Up File System Data

• Overview of File System Backups
  • Overview of Scheduled Backups
    • Choosing a Backup Strategy
    • Choosing a Backup Schedule
    • Configuring a Backup Schedule
  • Overview of On-Demand Backups
• Creating Dataset Files
  • About Dataset Files
    • Including One Host in Every Dataset File
    • Including Multiple Hosts in One Dataset File
  • Displaying the Datasets Page
  • Creating a Dataset File
  • Checking a Dataset File
  • Editing a Dataset File
  • Removing a Dataset File
  • Renaming a Dataset
• Configuring Backup Windows
  • Displaying the Backup Windows Page
  • Creating a Backup Window
    • Specifying a Day Range
    • Specifying a Single Date
  • Removing a Backup Window
• Configuring Backup Schedules
  • About Backup Schedules
  • Displaying the Schedules Page
  • Creating a Backup Schedule
  • Editing a Backup Schedule
  • Removing a Backup Schedule
  • Renaming a Backup Schedule
  • Viewing Schedule Properties
• Configuring Triggers
  • About Triggers
  • Creating a Trigger
    • Creating a Daily Backup Trigger
    • Creating a One-Time Backup Trigger
    • Creating a Monthly Backup Trigger
    • Creating a Quarterly Backup Trigger
    • Creating a Yearly Backup Trigger
  • Editing a Trigger
  • Removing a Trigger
  • Displaying a Trigger Schedule
• Performing On-Demand File System Backups
  • About On-Demand File System Backups
    • Before You Begin
    • On-Demand Backup Work Flow
  • Displaying the Backup Now Page
  • Creating an On-Demand Backup Request
  • Removing a Backup Request
  • Sending Backup Requests to the Scheduler
• Backing Up Critical Data on the Administrative Server

8 Restoring File System Data

• Overview of File System Restore Operations
  • Overview of Restore Operations
• Performing a Catalog-Based Restore Operation
  • Displaying the Backup Catalog Page
  • Browsing the Backup Catalog
  • Creating a Catalog-Based Restore Request
  • Removing a Catalog-Based Restore Request
  • Sending Catalog-Based Restore Requests to the Scheduler
  • Listing All Backups of a Client
• Performing a Raw Restore Operation
  • Displaying the Directly From Media Page
  • Creating a Raw Restore Request
  • Removing a Raw Restore Request
  • Sending Raw Restore Requests to the Scheduler
• Restoring Critical Data on the Administrative Server

Part IV Managing Operations

9 Managing Devices and Media

• Managing Tape Drives
  • About Volume Mount Modes
  • Displaying the Drives Page
  • Mounting a Volume in a Tape Drive
  • Unmounting a Volume from a Tape Drive
• Managing Tape Libraries
  • Displaying the Libraries Page
  • Executing Library Commands
    • Updating an Inventory
    • Importing a Volume
    • Exporting a Volume
    • Inserting a Volume
    • Extracting a Volume
    • Moving a Volume
    • Opening a Door
    • Closing a Door
    • Identifying a Volume
    • Loading a Volume
    • Unloading a Volume
    • Labeling a Volume
    • Unlabeling a Volume
    • Cleaning a Tape Drive
    • Borrowing a Tape Drive
    • Returning a Tape Drive
    • Reusing a Volume
  • Displaying Library Properties
  • Displaying Tape Drive Properties
  • Displaying Library Volumes
  • Displaying the Error Log
• Managing Device Reservations
  • About Device Reservations
  • Displaying the Device Reservations Page
  • Reserving Devices
  • Unreserving Devices
  • Displaying the Error Log

10 Performing Maintenance

• Managing Backup and Restore Jobs
  • Displaying the Jobs Page
  • Displaying Jobs
  • Displaying Job Properties
  • Displaying Job Transcripts
  • Removing a Job
  • Running a Job
  • Canceling a Job
• Browsing Volumes
  • Displaying the Browse Volumes Page
  • Displaying Volumes
  • Displaying Backup Sections
• Managing Backup Images
  • Displaying the Backup Images Page
  • Displaying Backup Images
• Managing Backup Sections
  • Displaying the Backup Sections Page
  • Updating the Catalog After Deletion of Backup Sections
• Managing Checkpoints
  • Displaying the Checkpoints Page
  • Removing a Checkpoint
• Managing Daemons
  • Displaying the Daemons Page
  • Performing Daemon Operations
  • Viewing Daemon Properties
  • Suspending and Resuming Job Dispatching

Part V Advanced Topics

11 Configuring Security: Advanced Topics

• Planning Security for an Administrative Domain
  • Identifying Principals and Assets
  • Identifying Your Backup Environment Type
    • Single System
    • Data Center
    • Corporate Network
  • Choosing Secure Hosts for the Administrative and Media Servers
  • Determining the Distribution Method of Host Identity Certificates
• Configuring Security for the Administrative Domain
  • Providing Certificates for Hosts in the Administrative Domain
    • Configuring the Administrative Server
    • Configuring Media Servers and Clients
  • Setting the Size for Public and Private Keys
    • Setting the Key Size in obparameters
    • Setting the Key Size in the certkeysize Security Policy
    • Setting the Key Size in mkhost
  • Enabling and Disabling Encryption for Backup Data in Transit
  • Enabling and Disabling SSL for Host Authentication and Communication
• Managing Certificates with obcm
  • Exporting Signed Certificates
  • Importing Signed Certificates

12 Using obtar

• About obtar
• Backing Up Data with obtar
  • Creating Backup Images on Tape
  • Using Backup Description Files
  • Making Incremental Backups
  • Creating a Single Backup Image
  • Backing Up Windows Database Components
    • Understanding Windows Database Identifiers
    • Active Directory
    • Certificate Service
    • Cluster Configuration
    • Removable Storage Manager
• Restoring Data with obtar
  • Restoring Data to Its Original Location
  • Restoring Data to a Different Location
  • Using Advanced Restore Features
    • Ensuring that obtar Reads Full Blocks
    • Changing Timestamps
    • Specifying Position Numbers
    • Avoiding File Overwrite
• Listing and Cataloging the Contents of Backups and Volumes with obtar
  • Listing the Contents of a Backup Image
  • Cataloging the Contents of a Backup Image
  • Displaying Volume Labels
• Pre-Labeling Tape Volumes with obtar
• Optimizing Your Use of obtar
  • Using tar with Backup Images Created by obtar
  • Backing Up Symbolic Links
  • Creating Offsite Backups
  • Backing Up and Restoring Raw File Systems
  • Controlling Device Parameters
  • Compacting Sparse Files
  • Changing Criteria for Incremental Backups
  • Changing Default Backup Behavior
  • Using Shell Scripts to Perform Backups
  • Excluding Subdirectories with .ob_no_backup Files
  • Backing Up Across Mount Points
    • Crossing Mount Points with BDF Mount Point Statements
    • Avoiding Mount Points with the -l Option
    • Avoiding Remote Mount Points with the -Xchkmnttab Option
    • Crossing Mount Points with the -Xcrossmp Option
  • Support for Oracle Secure Backup Catalog Files Over 2 GB
  • Retaining Backup Statistics

A NDMP Usage Notes

• Constrained Error Reporting
• Backing Up Individual Files
• Restored File Reporting

Glossary

Index