Oracle Secure Backup and Operator's manual

Oracle® Secure Backup
Installation and Configuration Guide
Release 10.3
E12835-06
December 2010
How to install, uninstall, and manage hardware and network
configuration in Oracle Secure Backup

Oracle Secure Backup Installation and Configuration Guide, Release 10.3
E12835-06
Copyright © 2006, 2010, Oracle and/or its affiliates. All rights reserved.
Primary Author: Craig B. Foch
Contributing Author: Lance Ashdown, Padmaja Potineni
Contributors: Anand Agrawal, Tammy Bednar, George Claborn, Michael Chamberlain, Sumit Chougule,
Donna Cooksey, Rhonda Day, Senad Dizdar, Tony Dziedzic, Judy Ferstenberg Panock, Steven Fried, Geoff
Hickey, Ashok Joshi, Cris Pedregal-Martin, Chris Plakyda, George Stabler, Radhika Vullikanti, Joe Wadleigh,
Steve Wertheimer
This software and related documentation are provided under a license agreement containing restrictions on
use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your
license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license,
transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse
engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is
prohibited.
The information contained herein is subject to change without notice and is not warranted to be error-free. If
you find any errors, please report them to us in writing.
If this software or related documentation is delivered to the U.S. Government or anyone licensing it on
behalf of the U.S. Government, the following notice is applicable:
U.S. GOVERNMENT RIGHTS Programs, software, databases, and related documentation and technical data
delivered to U.S. Government customers are "commercial computer software" or "commercial technical data"
pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As
such, the use, duplication, disclosure, modification, and adaptation shall be subject to the restrictions and
license terms set forth in the applicable Government contract, and, to the extent applicable by the terms of
the Government contract, the additional rights set forth in FAR 52.227-19, Commercial Computer Software
License (December 2007). Oracle USA, Inc., 500 Oracle Parkway, Redwood City, CA 94065.
This software is developed for general use in a variety of information management applications. It is not
developed or intended for use in any inherently dangerous applications, including applications which may
create a risk of personal injury. If you use this software in dangerous applications, then you shall be
responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure the safe use
of this software. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of
this software in dangerous applications.
Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks
of their respective owners.
This software and documentation may provide access to or information on content, products, and services
from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all
warranties of any kind with respect to third-party content, products, and services. Oracle Corporation and
its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of
third-party content, products, or services.

iii
Contents
Preface ................................................................................................................................................................. ix
Audience....................................................................................................................................................... ix
Documentation Accessibility..................................................................................................................... ix
Related Documents ..................................................................................................................................... x
Conventions ................................................................................................................................................. x
1 Introduction to Oracle Secure Backup
What Is Oracle Secure Backup? ............................................................................................................. 1-1
Oracle Secure Backup Concepts............................................................................................................ 1-2
Oracle Secure Backup Administrative Domains and Hosts ........................................................ 1-2
Host Roles in an Administrative Domain ............................................................................... 1-2
Host Naming in an Administrative Domain .......................................................................... 1-3
Oracle Secure Backup Host Access Modes ............................................................................. 1-3
Oracle Secure Backup Administrative Domain: Examples.......................................................... 1-4
Tape Devices....................................................................................................................................... 1-5
Tape Drives.................................................................................................................................. 1-5
Tape Libraries.............................................................................................................................. 1-7
Virtual Tape Libraries ................................................................................................................ 1-9
Device Names and Attachments ........................................................................................... 1-10
Oracle Secure Backup Interfaces........................................................................................................ 1-10
System Requirements for Oracle Secure Backup ........................................................................... 1-11
Disk Space Requirements for Oracle Secure Backup................................................................. 1-11
Other System Requirements for Oracle Secure Backup ............................................................ 1-12
Linux Media Server System Requirement: SCSI Generic Driver ............................................. 1-12
Acquiring Oracle Secure Backup Installation Media .................................................................... 1-12
Installation and Configuration Overview........................................................................................ 1-13
About Upgrade Installations............................................................................................................... 1-14
Preparing Administrative Domain Hosts for Upgrade to Release 10.3.................................. 1-14
2 Installing Oracle Secure Backup on Linux or UNIX
Overview of Oracle Secure Backup Linux and UNIX Installation................................................. 2-1
Prerequisites for Installing Oracle Secure Backup on Linux and UNIX....................................... 2-2
Prerequisites for Installation on Linux............................................................................................ 2-2
Required SCSI Tape Device Parameters on Linux and UNIX..................................................... 2-3
Assigning Oracle Secure Backup Logical Unit Numbers to Devices.................................. 2-3

iv
Extracting Oracle Secure Backup from OTN Download on Linux or UNIX ................................ 2-4
Preparing to Install Oracle Secure Backup on Linux and UNIX..................................................... 2-5
Creating the Oracle Secure Backup Home .......................................................................................... 2-5
Loading Oracle Secure Backup Software on Linux or UNIX Using setup Script........................ 2-6
Configuring Installation Parameters in the obparameters File....................................................... 2-7
Installing Oracle Secure Backup on Linux or UNIX with installob............................................... 2-8
Installing or Uninstalling Oracle Secure Backup on AIX ............................................................. 2-12
Installing or Uninstalling Oracle Secure Backup on HP-UX........................................................ 2-12
Creating Attach Points with makedev .............................................................................................. 2-12
Identifying and Configuring AIX Devices .................................................................................. 2-13
Identifying and Configuring AIX Devices in a Switched Fibre Channel Configuration .........
2-13
Identifying and Configuring AIX Devices in a Point-to-Point or FC-AL Configuration.........
2-15
Identifying and Configuring HP-UX Devices............................................................................. 2-16
Identifying and Configuring Linux Attach Points..................................................................... 2-18
Configuring the Solaris sgen Driver to Provide Oracle Secure Backup Attach Points......... 2-18
Enabling the Solaris sgen Driver for Changer and Sequential Devices........................... 2-19
Utilizing sgen Attach Points................................................................................................... 2-20
Performing an Upgrade Installation on Linux or UNIX................................................................ 2-20
Uninstalling Oracle Secure Backup on Linux or UNIX................................................................. 2-20
3 Installing Oracle Secure Backup on Windows
Preliminary Steps ..................................................................................................................................... 3-1
Disabling Removable Storage Service on Windows Media Servers ............................................. 3-2
Extracting Oracle Secure Backup from OTN Download on Windows.......................................... 3-2
Running the Oracle Secure Backup Windows Installer ................................................................... 3-3
Configuring Oracle Secure Backup ................................................................................................... 3-14
Configuring Firewalls for Oracle Secure Backup on Windows................................................... 3-18
Upgrade Installation on Windows 32-Bit ......................................................................................... 3-19
Upgrade Installation on Windows x64 .............................................................................................. 3-20
Uninstalling Oracle Secure Backup on Windows........................................................................... 3-20
4 Oracle Secure Backup User Interfaces
Using Oracle Secure Backup in Enterprise Manager ........................................................................ 4-1
Enabling Oracle Secure Backup Links in Oracle Enterprise Manager ....................................... 4-2
Registering an Administrative Server in Oracle Enterprise Manager........................................ 4-3
Accessing the Web Tool from Enterprise Manager....................................................................... 4-3
Using the Oracle Secure Backup Web Tool ......................................................................................... 4-4
Starting a Web Tool Session ............................................................................................................. 4-4
Web Tool Home Page........................................................................................................................ 4-5
Persistent Page Links ................................................................................................................. 4-6
Web Tool Configure Page................................................................................................................. 4-7
Web Tool Manage Page..................................................................................................................... 4-8
Web Tool Backup Page................................................................................................................... 4-10
Web Tool Restore Page................................................................................................................... 4-10
Using obtool ........................................................................................................................................... 4-11

v
Displaying Help for Invoking obtool........................................................................................... 4-11
Starting obtool in Interactive Mode.............................................................................................. 4-11
Running obtool Commands in Interactive Mode....................................................................... 4-12
Redirecting obtool Input from Text Files ............................................................................ 4-12
Executing obtool Commands in Noninteractive Mode............................................................. 4-12
Running Multiple Commands in Noninteractive Mode.................................................... 4-12
Redirecting Input in Noninteractive Mode.......................................................................... 4-12
Ending an obtool Session............................................................................................................... 4-13
Starting obtool as a Specific User.................................................................................................. 4-13
5 Configuring and Managing the Administrative Domain
Administrative Domain Configuration Overview ............................................................................ 5-1
Administrative Domain Configuration Steps: Outline................................................................. 5-1
Configuring the Administrative Domain with Hosts....................................................................... 5-2
About Administrative Domain Host Configuration..................................................................... 5-2
Viewing the Hosts in the Administrative Domain........................................................................ 5-3
Adding a Host to the Administrative Domain.............................................................................. 5-3
Adding the Media Server Role to an Administrative Server....................................................... 5-6
Adding Backup and Restore Environment Variables to an NDMP Host.................................. 5-8
Configuring Preferred Network Interfaces (PNI) ......................................................................... 5-8
Pinging a Host .................................................................................................................................... 5-9
Viewing or Editing Host Properties ................................................................................................ 5-9
Updating a Host ................................................................................................................................. 5-9
Removing a Host............................................................................................................................. 5-10
Adding Tape Devices to an Administrative Domain ..................................................................... 5-10
Tape Device Names ........................................................................................................................ 5-11
About Configuring Tape Drives and Libraries........................................................................... 5-11
Updating a Tape Device Inventory....................................................................................... 5-12
Displaying the Devices Page ......................................................................................................... 5-13
Configuring a Tape Library........................................................................................................... 5-14
Configuring Automatic Tape Cleaning for a Library......................................................... 5-16
Configuring a Tape Drive.............................................................................................................. 5-17
Discovering Tape Devices Automatically on NDMP Hosts..................................................... 5-19
Configuring an NDMP Copy-Enabled Virtual Tape Library................................................... 5-20
Adding a Tape Device Attachment.............................................................................................. 5-21
Pinging a Device Attachment................................................................................................. 5-22
Displaying Device Attachment Properties........................................................................... 5-22
Multiple Attachments for SAN-Attached Tape Devices........................................................... 5-23
Configuring Multihosted Device Objects.................................................................................... 5-23
Creating Attach Points for Solaris 10 SCSI and Fibre Channel Devices ................................. 5-24
Verifying and Configuring Added Tape Devices ........................................................................... 5-24
Pinging a Tape Device.................................................................................................................... 5-24
Displaying Device Properties........................................................................................................ 5-24
Editing Device Properties .............................................................................................................. 5-25
Verifying Tape Device Configuration.......................................................................................... 5-25
Setting Serial Number Checking................................................................................................... 5-26

vi
6 Managing Security for Backup Networks
Backup Network Security Overview.................................................................................................... 6-1
Planning Security for an Administrative Domain............................................................................. 6-2
Identifying Assets and Principals.................................................................................................... 6-2
Identifying Your Backup Environment Type ................................................................................ 6-3
Single System............................................................................................................................... 6-3
Data Center .................................................................................................................................. 6-4
Corporate Network..................................................................................................................... 6-6
Choosing Secure Hosts for the Administrative and Media Servers........................................... 6-6
Determining the Distribution Method of Host Identity Certificates.......................................... 6-7
Trusted Hosts............................................................................................................................................. 6-8
Host Authentication and Communication .......................................................................................... 6-9
Identity Certificates and Public Key Cryptography ..................................................................... 6-9
Authenticated SSL Connections.................................................................................................... 6-10
Certification Authority................................................................................................................... 6-10
Automated and Manual Certificate Provisioning Mode ................................................... 6-11
Oracle Wallet.................................................................................................................................... 6-11
Oracle Secure Backup Encryption Wallet............................................................................. 6-12
Web Server Authentication............................................................................................................ 6-13
Revoking a Host Identity Certificate............................................................................................ 6-13
Encryption of Data in Transit.............................................................................................................. 6-14
Default Security Configuration.......................................................................................................... 6-15
Configuring Security for the Administrative Domain .................................................................. 6-16
Providing Certificates for Hosts in the Administrative Domain ............................................. 6-16
Configuring the Administrative Server................................................................................ 6-16
Configuring Media Servers and Clients............................................................................... 6-17
Setting the Size for Public and Private Keys ............................................................................... 6-18
Setting the Key Size in obparameters.................................................................................... 6-18
Setting the Key Size in the certkeysize Security Policy ...................................................... 6-19
Setting the Key Size in mkhost............................................................................................... 6-19
Enabling and Disabling SSL for Host Authentication and Communication.......................... 6-20
Managing Certificates with obcm...................................................................................................... 6-21
Exporting Signed Certificates........................................................................................................ 6-21
Importing Signed Certificates ....................................................................................................... 6-21
A Oracle Secure Backup Directories and Files
Oracle Secure Backup Home Directory .............................................................................................. A-1
Administrative Server Directories and Files...................................................................................... A-1
Media Server Directories and Files...................................................................................................... A-4
Client Host Directories and Files ......................................................................................................... A-5
B Oracle Secure Backup obparameters Installation Parameters
customized obparameters ...................................................................................................................... B-1
start daemons at boot.............................................................................................................................. B-2
identity certificate key size.................................................................................................................... B-2
create preauthorized oracle user........................................................................................................... B-2

vii
default UNIX user ................................................................................................................................... B-3
default UNIX group ................................................................................................................................ B-3
linux ob dir and solaris64 ob dir .......................................................................................................... B-3
linux db dir and solaris64 db dir.......................................................................................................... B-4
linux temp dir and solaris64 temp dir................................................................................................. B-4
linux links and solaris64 links.............................................................................................................. B-4
ask about ob dir ...................................................................................................................................... B-5
default protection .................................................................................................................................... B-5
run obopenssl........................................................................................................................................... B-6
C Determining Linux SCSI Parameters
Determining SCSI Device Parameters on Linux............................................................................... C-1
D Oracle Secure Backup and ACSLS
About ACSLS ........................................................................................................................................... D-1
ACSLS and Oracle Secure Backup....................................................................................................... D-2
Communicating with ACSLS................................................................................................................ D-3
Drive Association .................................................................................................................................... D-3
Volume Loading and Unloading .......................................................................................................... D-3
Imports and Exports................................................................................................................................ D-3
Access Controls........................................................................................................................................ D-4
Scratch Pool Management ..................................................................................................................... D-4
Modified Oracle Secure Backup Commands..................................................................................... D-4
Unsupported Oracle Secure Backup Commands.............................................................................. D-5
Installation and Configuration............................................................................................................. D-5
Index

viii

ix
Preface
This Preface contains these topics:
■Audience
■Documentation Accessibility
■Related Documents
■Conventions
Audience
This guide is intended for system administrators and database administrators who
install the Oracle Secure Backup software. These administrators might also perform
backup and restore operations. To use this document, you must be familiar with the
operating system environment on which you plan to use Oracle Secure Backup. To
perform Oracle database backup and restore operations, you should also be familiar
with Recovery Manager concepts.
Documentation Accessibility
Our goal is to make Oracle products, services, and supporting documentation
accessible to all users, including users that are disabled. To that end, our
documentation includes features that make information available to users of assistive
technology. This documentation is available in HTML format, and contains markup to
facilitate access by the disabled community. Accessibility standards will continue to
evolve over time, and Oracle is actively engaged with other market-leading
technology vendors to address technical obstacles so that our documentation can be
accessible to all of our customers. For more information, visit the Oracle Accessibility
Program Web site at http://www.oracle.com/accessibility/.
Accessibility of Code Examples in Documentation
Screen readers may not always correctly read the code examples in this document. The
conventions for writing code require that closing braces should appear on an
otherwise empty line; however, some screen readers may not always read a line of text
that consists solely of a bracket or brace.
Accessibility of Links to External Web Sites in Documentation
This documentation may contain links to Web sites of other companies or
organizations that Oracle does not own or control. Oracle neither evaluates nor makes
any representations regarding the accessibility of these Web sites.

x
Access to Oracle Support
Oracle customers have access to electronic support through My Oracle Support. For
information, visit http://www.oracle.com/support/contact.html or visit
http://www.oracle.com/accessibility/support.html if you are hearing
impaired.
Related Documents
For more information about backing up and restoring file systems with Oracle Secure
Backup, see the following Oracle resources:
■Oracle Secure Backup Migration Guide
This book explains how to migrate from Reliaty Backup to Oracle Secure Backup.
■Oracle Secure Backup Reference
This manual contains information about the command-line interface for Oracle
Secure Backup.
■Oracle Secure Backup Administrator's Guide
This book describes how to use Oracle Secure Backup to perform backup and
restore operations. The book is oriented to the Oracle Secure Backup Web tool,
which is a Web-based GUI interface.
For more information about database backup and recovery, including the Recovery
Manager (RMAN) utility, see the following Oracle resources:
■Oracle Database Backup and Recovery Advanced User's Guide
This book provides an overview of backup and recovery and discusses backup
and recovery strategies. It provides instructions for basic backup and recovery of
your database using Recovery Manager (RMAN).
The Oracle Secure Backup product site is located at the following URL:
http://www.oracle.com/technology/products/secure-backup
The Oracle Secure Backup download site is located at the following URL:
http://www.oracle.com/technology/software
Conventions
The following text conventions are used in this document:
Convention Meaning
boldface Boldface type indicates graphical user interface elements associated
with an action, or terms defined in text or the glossary.
italic Italic type indicates book titles, emphasis, or placeholder variables for
which you supply particular values.
monospace Monospace type indicates commands within a paragraph, URLs, code
in examples, text that appears on the screen, or text that you enter.

Introduction to Oracle Secure Backup 1-1
1
Introduction to Oracle Secure Backup
This chapter provides an introduction to Oracle Secure Backup and includes advice on
planning and configuring your administrative domain.
This chapter contains these sections:
■What Is Oracle Secure Backup?
■Oracle Secure Backup Concepts
■Oracle Secure Backup Interfaces
■System Requirements for Oracle Secure Backup
■Acquiring Oracle Secure Backup Installation Media
■Installation and Configuration Overview
■About Upgrade Installations
What Is Oracle Secure Backup?
Oracle Secure Backup enables reliable data protection through file-system backup to
tape. It supports every major tape drive and tape library in SAN, Gigabit Ethernet
(GbE), and SCSI environments using standard tape formats.
Oracle Secure Backup supports Internet Protocol v4 (IPv4), Internet Protocol v6 (IPv6),
and mixed IPv4/IPv6 environments on all platforms that support IPv6.
Using Oracle Secure Backup on your network enables you to take data from a
networked host running Oracle Secure Backup or a NAS device that support NDMP,
and back up that data on a tape device on the network. That data can include ordinary
file-system files and databases backed up with Recovery Manager (RMAN).
As part of the Oracle storage solution, Oracle Secure Backup provides scalable
distributed backup and recovery capabilities. It reduces complexity of your backup
solution, by:
■Integrating with the Oracle stack for maximum ease of use in a single Oracle
solution to back up your data from disk to tape
■Employing single-vendor technical support for database and file-system backup
and recovery to tape
■Using existing or new hardware, with broad tape device support in SCSI, GbE,
and SAN environments with dynamic tape drive sharing for maximum tape drive
utilization
See Also: Oracle Secure Backup Administrator's Guide for conceptual
information about Oracle Secure Backup

Oracle Secure Backup Concepts
1-2 Oracle Secure Backup Installation and Configuration Guide
Oracle Secure Backup eliminates integration challenges with ready-to-use tape
management software that provides single-vendor support. Oracle Secure Backup also
reduces your costs. When using Oracle Secure Backup with RMAN to back up and
recover databases and files to and from tape, no third-party tape management
software is required. Oracle Secure Backup provides the media management layer
needed to use tape storage with RMAN.
Centralized administration, heterogeneous network support, and flexible scheduling
simplify and automate protection of the entire Oracle environment, including database
data and file-system data such as the contents of the Oracle home.
Oracle Secure Backup Concepts
This section discusses Oracle Secure Backup concepts that enable you to better
understand the installation process.
This section contains these topics:
■Oracle Secure Backup Administrative Domains and Hosts
■Oracle Secure Backup Administrative Domain: Examples
■Tape Devices
Oracle Secure Backup Administrative Domains and Hosts
Oracle Secure Backup organizes hosts and tape devices into an administrative domain,
representing the network of hosts containing data to be backed up, hosts with attached
tape devices on which backups are stored, and each tape device with its attachment to
the hosts. A host can belong to only one administrative domain.
Host Roles in an Administrative Domain
Each host in an administrative domain must be assigned one or more of the following
Oracle Secure Backup roles:
■Administrative server
Each administrative domain must have exactly one administrative server. During
postinstallation configuration, the administrative server must be configured with
complete data regarding the other hosts in the administrative domain, their roles,
and their attached tape devices. This configuration information is maintained in a
set of configuration files stored on the administrative server.
The administrative server runs the scheduler, which starts and monitors each
backup job. The scheduler also keeps a backup catalog with metadata for all
backup and restore operations performed in the administrative domain.
■Media server
A media server is a host with at least one tape device attached to it. A media
server transfers data to or from a volume loaded on one of these tape devices. A
media server has at least one attachment to a tape drive or library. It might have
attachments to multiple tape libraries.
You specify the attachments between media servers and tape devices during
postinstallation configuration of Oracle Secure Backup.
■Client
The client role is assigned to any host that has access to file-system or database
data that can be backed up or restored by Oracle Secure Backup. Any host where

Oracle Secure Backup Concepts
Introduction to Oracle Secure Backup 1-3
Oracle Secure Backup is installed can be a client, including hosts that are also
media servers or the administrative server. A network-attached storage device
that Oracle Secure Backup accesses through NDMP can also serve the client role.
Host Naming in an Administrative Domain
You must assign each host in an administrative domain a unique name to be used in
Oracle Secure Backup operations. Typically, the host name in your DNS for this host is
a good choice for the Oracle Secure Backup host name. However, you can assign a
different name to a host.
Oracle Secure Backup Host Access Modes
Communication among hosts in an administrative domain is always based on NDMP,
but implementations and versions of NDMP vary. Oracle Secure Backup supports two
host access modes: primary access mode and NDMP access mode.
Primary access mode is used among hosts on which Oracle Secure Backup is installed.
Oracle Secure Backup daemons run in the background on the host, communicate with
the administrative server using the Oracle Secure Backup implementation of NDMP,
and perform backup and restore tasks. Hosts on which databases reside are typically
accessed using primary access mode.
NDMP access mode is used to communicate with devices such as storage appliances
that do not run Oracle Secure Backup natively. For example, devices from third-party
vendors such as Network Appliance and EMC are supported only in NDMP access
mode. Each NDMP host uses a vendor-specific implementation of the NDMP protocol
to back up and restore file systems. Some devices support older versions of the NDMP
protocol. When adding such devices to the administrative domain, extra parameters
might be required.
Oracle Secure Backup supports NDMP versions 3 and 4, and various extensions to
version 4. It automatically negotiates with other, non-Oracle NDMP components to
select a mutually supported protocol version. Between its own components, Oracle
Secure Backup uses NDMP version 4. When communicating with hosts that are not
running Oracle Secure Backup, Oracle Secure Backup usually chooses the protocol
version proposed by that host when the connection is established. You can change the
NDMP protocol version with which Oracle Secure Backup communicates to a specific
host. You might want to do this when testing or troubleshooting.
Note: A host can be assigned multiple roles in an administrative
domain. For example, a host with a tape drive attached could be both
the administrative server and media server for a network that
includes several other clients. For more examples of administrative
domains, see "Oracle Secure Backup Administrative Domain:
Examples" on page 1-4.
See Also: "Choosing Secure Hosts for the Administrative and Media
Servers" on page 6-6
Note: In Oracle Enterprise Manager, primary access mode is referred
to as native access mode. In the Oracle Secure Backup Web tool and
the output of some obtool commands such as lshost, primary
mode is referred to as OB access mode.

Oracle Secure Backup Concepts
1-4 Oracle Secure Backup Installation and Configuration Guide
Oracle Secure Backup Administrative Domain: Examples
Figure 1–1 shows a minimal administrative domain, in which a single host is
administrative server, media server, and client. An Oracle database also runs on the
same host.
Figure 1–1 Administrative Domain with One Host
Figure 1–2 shows a possible Oracle Secure Backup administrative domain that
includes three client hosts, one administrative server, and one media server. A NAS
appliance contains ordinary file data. One client based on UNIX and another based on
Windows contain databases and other file data. Oracle Secure Backup can back up to
tape the non-database files on file systems accessible on client hosts. RMAN can back
up to tape database files through the Oracle Secure Backup SBT interface.
Tape
Library
Tape
. . . . . .
. . . . . .
. . . . . .
. . . . . .
. . . . . .
Offsite
Storage
Restore
Backup
Oracle
Database
Linux
Recovery
Manager
Administrative Server,
Media Server, and Client

Oracle Secure Backup Concepts
Introduction to Oracle Secure Backup 1-5
Figure 1–2 Oracle Secure Backup Administrative Domain with Multiple Hosts
Tape Devices
Oracle Secure Backup maintains information about each tape library and tape drive so
that you can use them for local and network backup and restore operations. You can
configure tape devices during installation or add a new tape device to an existing
administrative domain. When configuring tape devices, the basic task is to inform
Oracle Secure Backup about the existence of a tape device and then specify which
media server can communicate with this tape device.
This section contains these topics:
■Tape Drives
■Tape Libraries
■Device Names and Attachments
Tape Drives
A tape drive is a tape device that uses precisely controlled motors to wind a tape from
one reel to another. The tape passes a read/write head as it winds. Most magnetic tape
systems use small reels fixed inside a cartridge to protect the tape and make handling
of the tape easier.
Tape
Library
Tape
. . . . . .
. . . . . .
. . . . . .
. . . . . .
. . . . . .
Offsite
Storage
RestoreBackup
Oracle
Secure Backup
Media Server
Oracle
Secure
Backup
Administrative
Server
Oracle
Database
Oracle
Database
Oracle Secure
Backup Clients
Data Flow
Control Flow
Oracle
Secure
Backup
Catalog
NDMP
OB
OB
NAS
Appliance
UNIX Linux
Linux
Windows
Recovery
Manager
Recovery
Manager

Oracle Secure Backup Concepts
1-6 Oracle Secure Backup Installation and Configuration Guide
A magnetic cassette or tape is sequential-access storage. It has a beginning and an end,
which means that to access data in the middle of the tape, a tape device must read
through the beginning part of the tape until it locates the desired data.
In a typical format, a tape drive writes data to a tape in blocks. The tape drive writes
each block in a single operation, leaving gaps between the blocks. The tape runs
continuously during the write operation.
The block size of a block of data is the size of the block in bytes as it was written to
tape. All blocks read or written during a given backup or restore operation have the
same block size. The blocking factor of a block of data expresses the number of
512-byte records contained in the block. For example, the Oracle Secure Backup
default blocking factor (128) results in a tape block size of 128*512 bytes or 64 KB.
The maximum blocking factor is an upper limit on the blocking factor that Oracle
Secure Backup uses. This limit comes into play particularly during restores, when
Oracle Secure Backup must pick an initial block size to use without knowing the actual
block size on the tape. The maximum blocking factor limits this initial block size to a
value that is acceptable to both the tape device and the underlying operating system.
When Oracle Secure Backup starts a backup, it decides what block size to use based on
several factors. Listed in order of precedence, these factors are:
■Blocking factor specified using the obtar -b option
This option can also be specified as part of the operations/backupoptions
policy. If this option is specified, then it overrides all other factors.
■Configuration of the tape drive to be used
You can specify what blocking factor, maximum blocking factor, or both that
Oracle Secure Backup should use for a particular tape drive when you configure
that drive. You might want to do this if you have tape drives with very different
block size limits.
■Domain-wide blocking factors or maximum blocking factors set with the
media/blockingfactor and media/maxblockingfactor policies.
■The default blocking factor (128) and maximum blocking factor (128), resulting in
a block size of 64K
When a blocking factor has been nominated by one or another of these factors, it must
pass the following tests:
■The block size must be less than or equal to the maximum block size (blocking
factor) put in effect by whatever policies or tape drive configuration attributes are
in force.
■The block size must be supported by the tape drive and attach point in question.
Sometimes a tape drive, device driver, or kernel operating system has a limitation
that supersedes all other considerations.
See Also: Oracle Secure Backup Reference for more information on the
obtar -b option and the operations/backupoptions policy
See Also: "Configuring a Tape Drive" on page 5-17
See Also: Oracle Secure Backup Reference for more information on the
media/blockingfactor and media/maxblockingfactor
policies

Oracle Secure Backup Concepts
Introduction to Oracle Secure Backup 1-7
When Oracle Secure Backup begins a restore operation, it does not know what block
size was used to write a given tape. Because issuing a read for a too-small block would
result in an error condition and a tape reposition, Oracle Secure Backup always starts a
restore operation by reading the largest possible block size. This is either the current
setting of the media/maxblockingfactor policy or the tape drive configuration
attribute. The maximum blocking factor, therefore, must always be greater than or
equal to the largest block size you ever want to restore.
After the first read from the backup image, Oracle Secure Backup compares the
amount of data requested to the actual size of the block and adjusts the size of
subsequent reads to match what is on the tape.
Each tape drive supports a specific tape format. Typical tape formats include:
■8mm
■4mm, or Digital Audio Tape (DAT)
■Advanced Intelligent Tape (AIT)
■Digital Data Storage (DDS)
■Digital Linear Tape (DLT) and Super DLT (SDLT)
■Linear Tape-Open (LTO), an open alternative to the proprietary DLT format
Information about the tape formats of tape devices supported by Oracle Secure
Backup is available at the following URL:
http://www.oracle.com/technology/products/secure-backup
Tape Libraries
A tape library is a robotic tape device that accepts SCSI commands to move a volume
between a storage element and a tape drive. A tape library is often referred to as a
robotic tape device, autochanger, or medium changer.
A tape library contains one or more tape drives, slots to hold tape cartridges, and an
automated method for loading tapes. Figure 1–3 illustrates a tape library that contains
four tape drives.

Oracle Secure Backup Concepts
1-8 Oracle Secure Backup Installation and Configuration Guide
Figure 1–3 Tape Library
Oracle Secure Backup automates the management of tape libraries, thereby enabling
efficient and reliable use of their capabilities. Oracle Secure Backup controls the tape
library robotics so that tapes can be managed easily.
Oracle Secure Backup supports the following features of tape libraries:
■Automatic loading and unloading of volumes
When you add a tape library to your administrative domain, it is configured in
automount mode by default. In this mode, Oracle Secure Backup sends commands
to the robotic arm of the tape library to mount tapes for backup and restore
operations. When a new volume is needed, Oracle Secure Backup scans the tape
library until it finds a suitable volume. If sufficient eligible tapes are contained in
the tape library storage elements, then no operator intervention is required to load
the volumes needed to store the complete backup image.
■Barcode readers
A barcode is a symbol code that is physically applied to volumes for identification
purposes. Some tape libraries have an automated barcode reader. Oracle Secure
Backup can use barcodes to identify tapes in a tape library.
■Automatic tape drive cleaning
Oracle Secure Backup checks for cleaning requirements when a tape is loaded into
or unloaded from a tape drive. If cleaning is required, then Oracle Secure Backup
loads a cleaning cartridge, waits for the cleaning cycle to complete, replaces the
cleaning cartridge in its original storage element, and continues with the requested
load or unload. You can also schedule a cleaning interval.
As shown in Figure 1–3, a tape library has a set of addressable elements, each of which
can contain or move a tape. Libraries can contain the following types of elements:
■Storage element (se)
Tape Library
Robotic Control
. . . . . .
. . . . . .
. . . . . .
. . . . . .
. . . . . .
Drive
. . . . . .
. . . . . .
. . . . . .
. . . . . .
. . . . . .
Drive
. . . . . .
. . . . . .
. . . . . .
. . . . . .
. . . . . .
Drive
. . . . . .
. . . . . .
. . . . . .
. . . . . .
. . . . . .
Drive
Library robotics (mte)
move tape to and from
drives to slots
Type drive (dte)
writes data to and
reads data from
tape volumes
Storage elements (se)
house tapes
Device connectivity
varies by device:
SCSI, Fibre, and
i SCSI

Oracle Secure Backup Concepts
Introduction to Oracle Secure Backup 1-9
This element is an internal slot in a tape library where a tape cartridge can reside.
■Data transfer element (dte)
This element represents a tape device capable of reading or writing the physical
volume. Typically, a data transfer element (DTE) is a tape drive used to back up
or restore data on a tape.
■Medium transport element (mte)
This element represents the robotics mechanism used to move tapes between other
elements in the tape library. Typically, a medium transport element is a robot arm
that moves tape cartridges from tape library slots to tape drives.
■Import/export element (iee)
This is an element by which media can be imported to and exported from the tape
library. Typically, an import/export element is a door-like mechanism that an
operator uses to transfer tapes into and out of the library. After the door is closed,
the robotic arm transfers cartridges to internal slots in the library. Because the
library itself is not opened during this procedure, no re-inventory is required.
Many of the Oracle Secure Backup tape library commands require you to specify one
or more tape library elements, in particular, storage elements and import/export
elements. Except in the inventory display, media transport elements are never
referenced. Data transfer elements are referenced only in the inventory display and
indirectly by the tape drive (if any) that you select for an operation.
Oracle Secure Backup refers to elements by their abbreviation (mte, se, iee, or dte)
followed by the number of the element, for example, se5, iee2, dte1. When multiple
elements of a type exist, element numbering starts at 1. When only one element of a
type exists, the number can be omitted. Thus, iee1 and iee both refer to the first and
only import/export element. If the abbreviation is omitted, then a storage element is
assumed. For example, se4 and 4both refer to the fourth storage element. For some
commands, you can specify a range of storage elements, for example, 1-5.
Oracle Secure Backup supports several tape library operations. The following
operations are the most basic:
■Inserting and extracting volumes
■Loading and unloading volumes
■Moving volumes
■Importing and exporting volumes
Virtual Tape Libraries
A virtual tape library is one or more large-capacity disk drives partitioned into virtual
physical tape volumes. To Oracle Secure Backup the virtual tape library appears to be
a physical tape library with at least one volume and at least one tape drive. The
volumes and tape drives in the virtual tape library can be configured to match
common physical tapes and tape drives.
Backup operations performed to a virtual tape library complete faster than backup
operations to actual tape drives, because the underlying storage device is direct access
media. But a virtual tape library is not suitable for long time storage, because it has
See Also:
■Oracle Secure Backup Reference for a description of the tape library
commands that you can run in obtool

Oracle Secure Backup Interfaces
1-10 Oracle Secure Backup Installation and Configuration Guide
limited storage capacity. If you back up to a virtual tape library, then you can take
advantage of its faster backup and then use the volume migration feature of Oracle
Secure Backup to migrate the data to tapes at a later point of time.
Device Names and Attachments
Because Oracle Secure Backup manages tape drive operations, it must be able to
identify the tape drive and determine whether the tape drive is housed in a tape
library. Oracle Secure Backup must further determine if a storage element is available
for storing a volume while not in use by the tape drive. Thus, each tape device must be
uniquely identified within Oracle Secure Backup by a user-defined name.
Oracle Secure Backup distinguishes a tape device and the means by which the tape
device connects to a host. To be usable by Oracle Secure Backup, each tape device
must have at least one attachment, which describes a data path between a host and the
tape device. An attachment usually includes the identity of a host plus a attach point
name in Linux or UNIX, a device name in Windows, or a NAS device name. In rare
cases, additional information is needed for the attachment definition.
Oracle Secure Backup Interfaces
There are four different interfaces for accessing different elements of Oracle Secure
Backup:
■The obtool command line utility provides the fundamental interface for Oracle
Secure Backup functions, including configuration, media handling, and backup
and restore of file-system files.
■Oracle Enterprise Manager offers access to most Oracle Secure Backup functions
available through obtool as part of its Database Control and Grid Control
interfaces.
■Oracle Secure Backup includes its own Web-based interface, called the Oracle
Secure Backup Web tool, which exposes all functions of obtool. The Oracle
Secure Backup Web tool is primarily intended for use in situations where Oracle
Secure Backup is being used independently of an Oracle Database instance. It does
not provide access to database backup and recovery functions.
The Oracle Secure Backup Web tool supports Internet Protocol v4 (IPv4), Internet
Protocol v6 (IPv6), and mixed IPv4/IPv6 environments on all platforms that
support IPv6.
■Backup and restore operations for Oracle Database instances and configuration of
the Oracle Secure Backup media management layer are performed through the
RMAN command-line client or through Oracle Enterprise Manager.
See Also:
■"Adding Tape Devices to an Administrative Domain" on
page 5-10 to learn how to configure a tape device
■Oracle Secure Backup Reference for a description of the mkdev
command aspec placeholder, which describes the syntax and
naming conventions for device attachments
Note: Oracle Secure Backup documentation focuses on the use of
Enterprise Manager wherever possible, and describes the Oracle
Secure Backup Web Tool only when there is no equivalent
functionality in Enterprise Manager, as in a file-system backup.