Administrator's Guide

Backup and Recovery ScenariosThis section presents scenarios for protecting and recovering a TSM server. You can modify the procedures to meet your needs.DRM can help you track your onsite and offsite volumes and query the TSM server and generate a current, detailed disaster recovery plan for your installation.

These scenarios assume a storage hierarchy consisting of: The default random access storage pools (BACKUPPOOL, ARCHIVEPOOL, and SPACEMGPOOL) TAPEPOOL, a tape storage poolProtecting Your Database and Storage PoolA company's standard procedures include the following: Perform reclamation of its copy storage pool, once a week. Reclamation for the copy storage pools is turned off at other times.Note:In a copy storage pool definition, the REUSEDELAY parameter delays volumes from being returned to scratch or being reused. The value should be set high enough to ensure that the database can be restored to an earlier point-in-time and that the database references to files in the storage pool is still valid. For example, a user may want to retain database backups for seven days and, therefore, sets REUSEDELAY to 7.

Back up its storage pools every night. Perform a full backup of the database once a week and incremental backups on the other days. Ship the database and copy storage pool volumes to an offsite location every day.To protect client data, the administrator does the following:1. Creates a copy storage pool named DISASTER-RECOVERY. Only scratch tapes are used, and the maximum number of scratch volumes is set to 100. The copy storage pool is defined by entering:2. define stgpool disaster-recovery tapeclass pooltype=copy3. maxscratch=1004. Performs the first backup of the primary storage pools.Note:The first backup of a primary storage pool is a full backup and, depending on the size of the storage pool, could take a long time.

5. Defines schedules for the following daily operations:a. Incremental backups of the primary storage pools each night by issuing:b. backup stgpool backuppool disaster-recovery maxprocess=2c. backup stgpool archivepool disaster-recovery maxprocess=2d. backup stgpool spacemgpool disaster-recovery maxprocess=2e. backup stgpool tapepool disaster-recovery maxprocess=2These commands use multiple, parallel processes to perform an incremental backup of each primary storage pool to the copy pool. Only those files for which a copy does not already exist in the copy pool are backed up.Note:Migration should be turned off during the rest of the day. You could add a schedule to migrate from disk to tape at this point. In this way, the backups are done while the files are still on disk.

f. Change the access mode to OFFSITE for volumes that have read-write or read-only access, are onsite, and are at least partially filled. This is done by entering:g. update volume * access=offsite location='vault site info'h. wherestgpool=disaster-recovery whereaccess=readwrite,readonlyi. wherestatus=filling,fullj. Back up the database by entering:k. backup db type=incremental devclass=tapeclass scratch=yes6. Does the following operations nightly after the scheduled operations have completed:a. Backs up the volume history, device configuration, and server options files and the database and recovery log setup.b. Moves the volumes marked offsite, the database backup volumes, volume history files, device configuration files, and server options to the offsite location.c. Identifies offsite volumes that should be returned onsite by using the QUERY VOLUME command:d. query volume stgpool=disaster-recovery access=offsite status=emptyThese volumes, which have become empty through expiration, reclamation, and file space deletion, have waited the delay time specified by the REUSEDELAY parameter. The administrator periodically returns outdated backup database volumes. These volumes are displayed with the QUERY VOLHISTORY command and can be released for reuse with the DELETE VOLHISTORY command.7. Brings the volumes identified in step4consite and updates their access to read-write.Recovering to a Point-in-Time from a DisasterIn this scenario, the processor on which TSM resides, the database, and all onsite storage pool volumes are destroyed by fire. An administrator restores the server to the point-in-time of the last backup.

DRM can help you do these steps.

Do the following:1. Install the TSM server on the replacement processor with the same server options and the same size database and recovery log as on the destroyed system. For example, to initialize the database and recovery log, enter:2. ===> inzsvradsm logvol(log1) dbvol(db1)3. Move the latest backup and all of the DISASTER-RECOVERY volumes onsite from the offsite location.Note:Do not change the access mode of these volumes until after you have completed step7.

4. If a current, undamaged volume history file exists, save it.5. Restore the volume history and device configuration files and the server options. For example, the recovery site might require different device class, library, and drive definitions. For more information, seeUpdating the Device Configuration File.6. Restore the database from the latest backup level by issuing the STRRSTADSM utility (seeRecovering by Using Database and Storage Pool Backups).7. Change the access mode of all the existing primary storage pool volumes in the damaged storage pools to DESTROYED by entering:8. update volume * access=destroyed wherestgpool=backuppool9. update volume * access=destroyed wherestgpool=archivepool10. update volume * access=destroyed wherestgpool=spacemgpool11. update volume * access=destroyed wherestgpool=tapepool12. Issue the QUERY VOLUME command to identify any volumes in the DISASTER-RECOVERY storage pool that were onsite at the time of the disaster. Any volumes that were onsite would have been destroyed in the disaster and could not be used for restore processing. Delete each of these volumes from the database by using the DELETE VOLUME command with the DISCARDDATA option. Any files backed up to these volumes cannot be restored.13. Change the access mode of the remaining volumes in the DISASTER-RECOVERY pool to READWRITE by entering:14. update volume * access=readwrite wherestgpool=disaster-recoveryNote:Clients can get files from TSM at this point. If a client tries to get a file that was stored on a destroyed volume, the retrieval request goes to the copy storage pool. In this way, clients can access their files without waiting for the primary storage pool to be restored. When you update volumes brought from offsite to change their access, you greatly speed recovery time.

15. Define new volumes in the primary storage pool so the files on the damaged volumes can be restored to the new volumes. The new volumes also let clients backup, archive, or migrate files to the server. You do not need to perform this step if you use only scratch volumes in the storage pool.16. Restore files in the primary storage pool from the copies located in the DISASTER-RECOVERY pool by entering:17. restore stgpool backuppool maxprocess=218. restore stgpool archivepool maxprocess=219. restore stgpool spacemgpool maxprocess=220. restore stgpool tapepool maxprocess=2These commands use multiple parallel processes to restore files to primary storage pools. After all the files have been restored for a destroyed volume, that volume is automatically deleted from the database. SeeWhen a Storage Pool Restoration Is Incompletefor what to do if one or more volumes cannot be fully restored.21. To ensure against another loss of data, immediately back up all storage volumes and the database. Then resume normal activity, including weekly disaster backups and movement of data to the offsite location.

Recovering a Lost or Damaged Storage Pool VolumeIf a company makes the preparations described inProtecting Your Database and Storage Poolit can recover from a media loss by using TSM features.In this scenario, an operator inadvertently destroys a tape volume (DSM087) belonging to the TAPEPOOL storage pool. An administrator performs the following actions to recover the data stored on the destroyed volume by using the offsite copy storage pool:1. Determine the copy pool volumes that contain the backup copies of the files that were stored on the volume that was destroyed by entering:restore volume dsm087 preview=volumesonlyThis command produces a list of offsite volumes that contain the backed up copies of the files that were on tape volume DSM087.2. Set the access mode of the copy volumes identified as UNAVAILABLE to prevent reclamation.Note:This precaution prevents the movement of files stored on these volumes until volume DSM087 is restored.

3. Bring the identified volumes to the onsite location and set their access mode to READONLY to prevent accidental writes. If these offsite volumes are being used in an automated library, the volumes must be checked into the library when they are brought back onsite.4. Restore the destroyed files by entering: restore volume dsm087This command sets the access mode of DSM087 to DESTROYED and attempts to restore all the files that were stored on volume DSM087. The files are not actually restored to volume DSM087, but to another volume in the TAPEPOOL storage pool. All references to the files on DSM087 are deleted from the database and the volume itself is deleted from the database.5. Set the access mode of the volumes used to restore DSM087 to OFFSITE using the UPDATE VOLUME command.6. Set the access mode of the restored volumes, that are now onsite, to READWRITE.7. Return the volumes to the offsite location. If the offsite volumes used for the restoration were checked into an automated library, these volumes must be checked out of the automated library when the restoration process is complete.