resiliency orchestration 7.3 installation guide · 2018-10-13 · 3.2.1 supported versions of...
Post on 01-Aug-2020
4 Views
Preview:
TRANSCRIPT
Installation Guide
Version 7.3
IBM Resiliency Orchestration Contents
©IBM Corporation 2017, 2018 2
DISCLAIMER
IBM believes that the information in this publication is accurate as of its publication date. The
information is subject to change without notice.
COPYRIGHT
©IBM Corporation 2017, 2018. All Rights Reserved.
Printed August 2018.
Use, copy, and distribution of any IBM software described in this publication needs an
applicable software license.
No part of this product or document may be reproduced, stored in a retrieval system, or
transmitted, in any form by any means, electronic, mechanical, photocopy, recording, or
otherwise, without prior written authorization of IBM Corporation and its licensers, if any.
IBM Resiliency Orchestration Contents
©IBM Corporation 2017, 2018 3
Contents
1 Installation Overview .............................................................................................................. 17
1.1 Introduction .................................................................................................................................... 17
1.2 Software Package Components ........................................................................................................ 17
1.2.1 Resiliency Orchestration Server .......................................................................................................... 17
1.2.2 IBM Resiliency Orchestration Site Controller (Agent Node) ............................................................... 17
1.2.3 Advanced Reporter .............................................................................................................................. 18
1.2.4 IBM Resiliency Orchestration Agents .................................................................................................. 18
1.2.5 IBM Resiliency File Replicator .............................................................................................................. 18
1.3 Downloading the Software Package ................................................................................................. 19
1.3.1 Software Versions ................................................................................................................................ 19
1.3.2 Software Package ................................................................................................................................ 19
1.4 Scope of this Document ................................................................................................................... 20
2 System Requirements .............................................................................................................. 21
2.1 System Requirements for IBM Resiliency Orchestration Server and IBM Resiliency Orchestration HA Server. ............................................................................................................................................ 21
2.2 System Requirements for Site Controller .......................................................................................... 22
2.2.1 Introduction to the Site Controller ...................................................................................................... 22
2.2.2 Hosted Location of the Site Controller ................................................................................................ 22
2.2.3 Site Controller Types Supported ......................................................................................................... 23
2.2.4 System requirements for Linux based Site Controller ......................................................................... 23
2.2.5 System requirements for Windows based Site Controller .................................................................. 24
2.2.6 System requirements for Site Controller with Local Agents ............................................................... 24
2.2.7 System requirements for Installing Advanced Reporter ..................................................................... 25
2.2.8 System requirements for Installing Local Agents ................................................................................ 25
2.2.9 System requirements for Installing Resiliency File Replicator (SFR) ................................................... 25
2.3 System Requirements for Staging Server .......................................................................................... 25
3 Prerequisites ........................................................................................................................... 26
3.1 GPL Dependencies for IBM Resiliency Orchestration ......................................................................... 26
3.2 Supported OS and features .............................................................................................................. 26
3.2.1 Supported versions of MariaDB and Tomcat ...................................................................................... 26
3.2.2 Supported OS for IBM Resiliency Orchestration and Site Controller .................................................. 27
3.2.3 Supported OS Versions for Agents ...................................................................................................... 27
3.2.4 Supported Browsers ............................................................................................................................ 29
4 Preparing the IBM Resiliency Orchestration Server .................................................................. 30
4.1 Server Hardware ............................................................................................................................. 30
4.2 Installation of the RHEL OS .............................................................................................................. 30
4.3 Installation of MariaDB .................................................................................................................... 30
4.4 Installing Tomcat ............................................................................................................................. 30
4.5 Configuring MariaDB ....................................................................................................................... 31
IBM Resiliency Orchestration Contents
©IBM Corporation 2017, 2018 4
4.5.1 Preset Users for MariaDB .................................................................................................................... 31
4.5.2 Creating New Users in MariaDB .......................................................................................................... 31
5 Installing the IBM Resiliency Orchestration Application Software ............................................. 32
5.1 Prerequisites for Installing the IBM Resiliency Orchestration Application Software ........................... 32
5.2 Prerequisites for Cyber Resiliency Platform ...................................................................................... 32
5.3 Mode of installing the Resiliency Orchestration Application Software ............................................... 34
5.4 Installation of Resiliency Orchestration Application Server in Graphical Mode .................................. 34
5.5 Post Installation Steps ..................................................................................................................... 46
5.5.1 Post Installation Steps for Cyber Resiliency Platform ......................................................................... 47
6 Installing IBM Resiliency Orchestration Server on Linux Cluster in the Graphical Mode ............. 50
6.1 System Requirements ...................................................................................................................... 50
6.2 Installation of Resiliency Orchestration Server ................................................................................. 50
6.2.1 Installation of Linux Enterprise Server OS ........................................................................................... 51
6.2.2 Installation of Linux Cluster ................................................................................................................. 51
6.2.3 Additional Settings for Linux Installation............................................................................................. 51
6.2.4 Installation of IBM Resiliency Orchestration Server Platform on Linux Cluster Nodes ....................... 52
6.2.5 Post-Installations of IBM Resiliency Orchestration Server Platform on Linux Cluster ........................ 52
6.2.6 Installation of Resiliency Orchestration Server Software .................................................................... 52
6.3 Starting and Stopping Resiliency Orchestration Server ...................................................................... 52
6.4 Configuring Linux Cluster ................................................................................................................. 53
6.4.1 Linux Cluster Checking the Application Status by Exit Code ............................................................... 53
6.4.2 Linux Cluster Administration ............................................................................................................... 54
7 Installing the IBM Resiliency Orchestration Server on Linux in the Silent Mode ........................ 55
7.1 Editing the Properties File ................................................................................................................ 55
7.1.1 PanacesServerInstaller.properties file ................................................................................................. 55
7.1.2 PanacesAgentsInstaller.properties file ................................................................................................ 56
8 Configuring Resiliency Orchestration Server ............................................................................. 59
8.1 Configuring Resiliency Orchestration application to use the MariaDB ............................................... 59
8.2 Configuring Resiliency Orchestration with different MariaDB user password .................................... 60
8.3 Server (OS) Hardening ..................................................................................................................... 60
8.4 Running the SecurityUserInjection script .......................................................................................... 61
8.5 Configuring Resiliency Orchestration for Optimal Performance ......................................................... 61
8.6 Configuration Changes in Tomcat ..................................................................................................... 63
8.7 Port Forwarding .............................................................................................................................. 65
8.7.1 Prerequisites for Port Forwarding ....................................................................................................... 65
8.7.2 Configuring ActiveMQ Broker to support Port Forwarding................................................................. 65
8.7.3 Configuration ....................................................................................................................................... 66
8.7.4 HTTP configuration (/etc/httpd/conf/httpd.conf) .............................................................................. 67
8.7.5 SSL configuration (/etc/httpd/conf.d/ssl.conf) ................................................................................... 68
8.7.6 Server Certificate ................................................................................................................................. 68
8.8 Steps to Enable Compression in Tomcat Server ................................................................................ 70
IBM Resiliency Orchestration Contents
©IBM Corporation 2017, 2018 5
8.9 Configuring Current Events .............................................................................................................. 70
8.9.1 Logs Retention ..................................................................................................................................... 71
8.9.2 Fetch Logs ............................................................................................................................................ 71
8.10 Troubleshooting Proxy Errors ........................................................................................................... 71
8.10.1 Preset Users for Resiliency File Replicator (SFR) ................................................................................. 72
8.11 Configuring Resiliency Orchestration application to use the Resiliency File Replicator ....................... 72
8.12 Localizing the IBM Resiliency Orchestration Application for languages other than English ................. 72
8.12.1 Prerequisites ........................................................................................................................................ 73
8.12.2 Configuring the OS and VNC console .................................................................................................. 73
8.12.3 Configuring the MariaDB ..................................................................................................................... 74
8.12.4 Configuring the Resiliency Orchestration Server properties ............................................................... 75
8.12.5 Post configuration steps ...................................................................................................................... 75
8.13 Configuring IBM Resiliency Orchestration Server and Site Controller for Secured Communication by Using the ActiveMQ Broker ............................................................................................................. 76
8.13.1 Changing the Default Passwords for the Roles: Admin, Producer, and Consumer ............................. 76
8.13.2 Replacing the Encrypted Passwords in the credentials-enc.properties file..................... 80
8.13.3 Locating the Encrypted Passwords ...................................................................................................... 82
8.13.4 Accessing ActiveMQ Console............................................................................................................... 82
8.14 Viewing the HTML Dashboard .......................................................................................................... 83
8.15 Removing Temp Folders Created in CR Platform ............................................................................... 83
9 Starting and Stopping Resiliency Orchestration Server ............................................................. 85
9.1.1 Starting Resiliency Orchestration Server ............................................................................................. 85
9.1.2 Starting Resiliency Orchestration Server in Recover Mode ................................................................ 85
9.1.3 Stopping Resiliency Orchestration Server ........................................................................................... 85
9.1.4 Restarting Resiliency Orchestration Server ......................................................................................... 85
9.1.5 Checking Resiliency Orchestration Server Status ................................................................................ 85
9.1.6 Resiliency Orchestration Server Remote Services ............................................................................... 85
9.1.7 Checking Resiliency Orchestration Server Available Modes ............................................................... 86
10 Installing Agent Node Server or Site Controller on Linux........................................................... 87
10.1 Installation Overview ...................................................................................................................... 87
10.2 Client Browser Prerequisite ............................................................................................................. 87
10.3 Ports Used by Linux Based Site Controller ........................................................................................ 87
10.4 Prerequisites ................................................................................................................................... 87
10.5 Installing Site Controller in GUI Mode in Linux .................................................................................. 87
10.6 Installing Site Controller in Silent Mode in Linux ............................................................................... 93
10.6.1 Editing Properties File .......................................................................................................................... 94
10.6.2 Agent Node Silent Mode Installation .................................................................................................. 95
10.6.3 Post Installation Steps after you install the Site Controller in Linux ................................................... 95
10.6.4 Patch Update for Site Controller ......................................................................................................... 96
10.6.5 Starting Agent Node Manually ............................................................................................................ 96
10.6.6 Stopping Agent Node Manually ........................................................................................................... 97
IBM Resiliency Orchestration Contents
©IBM Corporation 2017, 2018 6
10.7 Uninstalling Site Controller .............................................................................................................. 97
10.7.1 Uninstalling Agent Node in GUI Mode ................................................................................................ 97
10.7.2 Uninstalling Agent Node in Silent Mode ............................................................................................. 99
10.8 Installing Agent Node Server or Site Controller in MS Windows ........................................................ 99
10.9 Installation Overview ...................................................................................................................... 99
10.10 Installation and Services ............................................................................................................ 99
10.11 Client Browser Prerequisite ....................................................................................................... 99
10.12 Ports Used by Windows Based Site Controller ............................................................................ 99
10.13 Prerequisites ........................................................................................................................... 100
10.14 Installing Site Controller in GUI Mode in Windows ................................................................... 100
10.15 Installing Site Controller in Windows in Silent Mode ................................................................ 105
10.15.1 Editing Properties File ............................................................................................................... 106
10.16 Post Installation Steps after you install the Site Controller in Windows ..................................... 107
10.17 Starting or Stopping Site Controller Manually ........................................................................... 108
10.17.1 Using the Windows Command Prompt ..................................................................................... 108
10.17.2 Using the Windows GUI............................................................................................................. 109
10.18 Configuring End Points and Site Controller to use the PowerShell framework ........................... 109
10.19 Uninstalling Site Controller ...................................................................................................... 110
10.19.1 Uninstalling Site Controller in GUI Mode .................................................................................. 110
10.19.2 Uninstalling Agent Node in Silent Mode ................................................................................... 111
11 Installing Agents on MS Windows Server ............................................................................... 112
11.1 Prerequisites for Installing Resiliency Orchestration Agents ............................................................ 112
11.2 MS Windows Server Requirements ................................................................................................ 112
11.3 Installation of supported JRE ......................................................................................................... 113
11.4 Host Machines with Virtual IP Address ........................................................................................... 113
11.5 Specific Prerequisites ..................................................................................................................... 113
11.5.1 MSSQL Agent ..................................................................................................................................... 113
11.5.2 Oracle Agent ...................................................................................................................................... 114
11.6 Installation of Agents .................................................................................................................... 114
11.7 Debugging Agent Installation on Windows Server .......................................................................... 124
11.8 Starting and Stopping of Agent Services on Windows Server ........................................................... 124
12 Installing Agents on Solaris Server ......................................................................................... 126
12.1 Prerequisites for Installing Resiliency Orchestration Agents ............................................................ 126
12.2 Solaris Server Requirements .......................................................................................................... 126
12.3 Host Machines with Virtual IP Address ........................................................................................... 127
12.4 Installation of Agents .................................................................................................................... 127
12.5 HA Configuration ........................................................................................................................... 136
12.6 Debugging Agent Installation on Solaris Server ............................................................................... 136
12.7 Starting and Stopping Agents on Solaris Server .............................................................................. 137
12.7.1 Solaris OS Agent................................................................................................................................. 137
12.7.2 PFR Agent .......................................................................................................................................... 137
IBM Resiliency Orchestration Contents
©IBM Corporation 2017, 2018 7
12.7.3 Sybase Agent ..................................................................................................................................... 137
12.7.4 SRS Agent ........................................................................................................................................... 138
12.7.5 Oracle Agent ...................................................................................................................................... 138
12.7.6 TrueCopy ........................................................................................................................................... 138
12.7.7 Listing the Running Agents ................................................................................................................ 138
13 Installing Agents on Linux Server ........................................................................................... 139
13.1 Installation of Agents .................................................................................................................... 139
13.2 Debugging Agent Installation on Linux Server ................................................................................. 149
13.3 Starting and Stopping Agents on Linux Server ................................................................................ 149
13.3.1 Linux OS Agent ................................................................................................................................... 149
13.3.2 PFR Agent .......................................................................................................................................... 149
13.3.3 Oracle Agent ...................................................................................................................................... 149
13.3.4 Oracle Data Guard Agent ................................................................................................................... 150
13.3.5 PostgreSQL Agent .............................................................................................................................. 150
13.3.6 Listing the Agents that are Running .................................................................................................. 150
14 Installing Agents on HPUX Server ........................................................................................... 151
14.1 Installation of Agents .................................................................................................................... 151
14.2 Debugging Agent Installation on HPUX Server ................................................................................ 161
14.3 Starting and Stopping Agents on HPUX Server ................................................................................ 161
14.3.1 HPUX OS Agent .................................................................................................................................. 161
14.3.2 PFR Agent .......................................................................................................................................... 162
14.3.3 Oracle Agent ...................................................................................................................................... 162
14.3.4 Oracle Data Guard Agent ................................................................................................................... 162
14.3.5 Listing the Agents that are Running .................................................................................................. 162
15 Installing Agents on AIX Server .............................................................................................. 163
15.1 Prerequisites for Installing Resiliency Orchestration Agents ............................................................ 163
15.2 AIX Server Requirements ............................................................................................................... 163
15.3 Host Machines with Virtual IP Address ........................................................................................... 163
15.4 Installation of Agents .................................................................................................................... 164
15.5 Starting and Stopping of Agents on AIX Server ............................................................................... 173
15.5.1 AIX OS Agent ...................................................................................................................................... 173
15.5.2 PFR Agent .......................................................................................................................................... 173
15.5.3 Oracle Agent ...................................................................................................................................... 173
15.5.4 Oracle Data Guard Agent ................................................................................................................... 174
15.5.5 Listing the Agents that are Running .................................................................................................. 174
16 Installing Resiliency Orchestration Advanced Reporter .......................................................... 175
16.1 Prerequisites ................................................................................................................................. 175
16.2 Installing Advanced Reporter in GUI Mode ..................................................................................... 175
16.3 Configuring Openreports ............................................................................................................... 179
16.4 Installing the Advanced Reporter in Silent Mode ............................................................................ 180
16.4.1 Editing Properties File ........................................................................................................................ 180
IBM Resiliency Orchestration Contents
©IBM Corporation 2017, 2018 8
16.4.2 Installing Resiliency Orchestration Advanced Reporter on Linux ..................................................... 180
17 Installing IBM Resiliency Orchestration Server OVA ............................................................... 182
17.1 Minimum System Requirements .................................................................................................... 182
17.2 Assumptions ................................................................................................................................. 182
17.3 Installing Resiliency Orchestration Server Virtual Appliance for VMWare ........................................ 182
17.3.1 Prerequisites ...................................................................................................................................... 182
17.4 Installation Procedure ................................................................................................................... 182
18 Installing Resiliency Orchestration Site Dashboard ................................................................. 184
18.1 Prerequisites ................................................................................................................................. 184
18.2 GUI Mode Installation of Resiliency Orchestration Site Dashboard .................................................. 184
19 Installing Resiliency Orchestration Using Silent Mode Installation .......................................... 189
19.1 Editing Properties File .................................................................................................................... 189
20 Installing Resiliency Orchestration Agent Server in Silent Mode ............................................. 193
20.1 Installing Agent Server in Silent Mode on Windows System ............................................................ 193
20.2 Starting Silent Mode Installation on Solaris/Linux/HPUX/AIX Servers ............................................. 193
20.3 Vault Configuration ....................................................................................................................... 193
21 Installing the Resiliency Orchestration Agent Server in Silent Mode ....................................... 195
21.1 Installing Agent Server on Windows in the Silent Mode .................................................................. 195
21.2 Installing Agent Server on Solaris, Linux, HPUX, or AIX in the Silent Mode ....................................... 195
21.3 Vault Configuration ....................................................................................................................... 196
21.4 Post Upgrade Tasks ....................................................................................................................... 196
21.5 Server Memory Management ........................................................................................................ 197
21.6 Backup and Fallback Plan ............................................................................................................... 197
21.6.1 Backup Plan ....................................................................................................................................... 197
21.6.2 Fallback Plan ...................................................................................................................................... 198
22 Upgrading the Resiliency Orchestration Advanced Reporter .................................................. 199
23 Upgrading Resiliency Orchestration Agents ............................................................................ 200
23.1 Prerequisites ................................................................................................................................. 200
23.2 Resiliency Orchestration Agent Upgrade [Optional] ........................................................................ 200
23.3 Upgrading Agents on Linux Server .................................................................................................. 200
23.3.1 Prerequisites before upgrading agents on Linux Server ................................................................... 200
23.3.2 Limitations ......................................................................................................................................... 201
23.3.3 Upgrading Agents on Linux Server in GUI mode ............................................................................... 201
24 Upgrading Resiliency Orchestration Agents Using Silent Mode Installation ............................. 212
24.1 Prerequisites before upgrading agents on AIX Server...................................................................... 212
24.2 Limitations .................................................................................................................................... 212
24.3 Editing Properties File .................................................................................................................... 212
24.3.1 PanacesAgentsInstaller.properties file: ............................................................................................. 212
24.4 Upgrading Agents in Silent Mode on Windows ............................................................................... 214
24.5 Upgrading Agents in Silent Mode on Solaris, Linux, HPUX, AIX Servers ............................................ 214
IBM Resiliency Orchestration Contents
©IBM Corporation 2017, 2018 9
25 Installing Third-party Software .............................................................................................. 215
25.1 Red Hat Enterprise Linux (RHEL) Versions ....................................................................................... 215
25.1.1 RHEL 5.6 (32-Bit) ................................................................................................................................ 215
25.1.2 RHEL 5.5 (64-Bit) ................................................................................................................................ 215
25.1.3 RHEL 5.7 (64-Bit) ................................................................................................................................ 215
25.1.4 RHEL 6.X (64-Bit) ................................................................................................................................ 215
25.1.5 RHEL 7.X (64-Bit) ................................................................................................................................ 216
25.2 Advanced Interactive eXecutive (AIX) ............................................................................................. 216
25.3 HPUX 64-Bit Itanium ...................................................................................................................... 216
25.4 HPUX 64-Bit Parisac ....................................................................................................................... 216
25.5 Solaris_Sparc ................................................................................................................................. 217
25.6 Solaris_Intel .................................................................................................................................. 217
26 Uninstalling Resiliency Orchestration Agent Node .................................................................. 218
27 Uninstalling Resiliency Orchestration Server .......................................................................... 220
27.1 Uninstalling by using the Silent Mode ............................................................................................ 220
27.2 Uninstalling by using the GUI ......................................................................................................... 220
27.3 Uninstalling by using the Command Prompt ................................................................................... 223
28 Uninstalling of Agents ........................................................................................................... 224
28.1 Agents on Windows ....................................................................................................................... 224
28.2 Agents on Solaris ........................................................................................................................... 224
28.3 Agents on Linux ............................................................................................................................. 225
28.4 Agents on HPUX ............................................................................................................................ 225
28.5 Agents on AIX ................................................................................................................................ 225
29 Installing Resiliency Orchestration OS Command Processor ................................................... 226
29.1 Prerequisites ................................................................................................................................. 226
29.2 Overview ...................................................................................................................................... 226
29.3 Installing OS Command Processor .................................................................................................. 227
29.3.1 Extracting Installation File ................................................................................................................. 227
29.3.2 Authorizing APF for TCMD, ZCMD, GCMD, and XCMD ...................................................................... 228
29.3.3 Defining Userid SANOVI to RACF/Other Security Program ............................................................... 229
29.4 Verifying Sz/OS CP (Command Processor) Install ............................................................................ 229
30 Migrating the Resiliency Orchestration Server ....................................................................... 232
30.1 Migrating to new Server with Same IP ........................................................................................... 232
30.2 Migrating to new Server with New IP ............................................................................................. 234
31 Troubleshooting .................................................................................................................... 236
31.1 MariaDB Services Not Starting ....................................................................................................... 236
31.1.1 Resolution .......................................................................................................................................... 236
31.2 Resiliency Orchestration Start Fails with Error ActiveMQ Failed to Start .......................................... 237
31.2.1 Resolution .......................................................................................................................................... 237
31.3 Subsystem Discovery Failing for Oracle Solution ............................................................................. 237
IBM Resiliency Orchestration Contents
©IBM Corporation 2017, 2018 10
31.3.1 Resolution .......................................................................................................................................... 237
31.4 Agent Not Starting on Windows Server .......................................................................................... 237
31.4.1 IBM Resiliency File Replicator Service ............................................................................................... 238
31.4.2 PFR Agent .......................................................................................................................................... 238
31.4.3 MSSQL Agent For MSSQL 2005 .......................................................................................................... 238
31.4.4 Windows OS Agent ............................................................................................................................ 239
31.5 Agent Not Stating on Solaris Server ................................................................................................ 239
31.5.1 Sybase Agent ..................................................................................................................................... 239
31.5.2 IBM Resiliency File Replicator Service ............................................................................................... 239
31.5.3 PFR Agent .......................................................................................................................................... 240
31.5.4 Solaris OS Agent................................................................................................................................. 240
31.5.5 SRS Agent ........................................................................................................................................... 240
31.6 Agent Not Stating on Linux Server .................................................................................................. 240
31.6.1 IBM Resiliency File Replicator Service ............................................................................................... 241
31.6.2 PFR Agent .......................................................................................................................................... 241
31.6.3 Linux OS Agent ................................................................................................................................... 241
31.7 Agent Not Starting on AIX Server ................................................................................................... 241
31.7.1 IBM Resiliency File Replicator Service ............................................................................................... 241
31.7.2 PFR Agent .......................................................................................................................................... 242
31.7.3 AIX OS Agent ...................................................................................................................................... 242
31.8 Agent Not Starting on HPUX Server ................................................................................................ 242
31.8.1 IBM Resiliency File Replicator Service ............................................................................................... 242
31.8.2 PFR Agent .......................................................................................................................................... 243
31.8.3 HPUX OS Agent .................................................................................................................................. 243
31.9 HA Configuration ........................................................................................................................... 243
31.10 NAT IP ..................................................................................................................................... 243
31.10.1 CFG file for NAT IP ..................................................................................................................... 244
31.11 Web Browser Displays Certificate Error .................................................................................... 244
31.12 Server/Advanced Reporter Installation Fails with UnsatisfiedLinkError ..................................... 245
31.13 Port Forwarding ...................................................................................................................... 245
31.13.1 Verify Firewall Status ................................................................................................................. 245
31.13.2 Add Exception to Firewall .......................................................................................................... 245
31.13.3 Open Ports ................................................................................................................................. 246
31.14 Create Server Certificate and Server Private Key Reference ...................................................... 246
31.15 Analyse HTTPD Logs ................................................................................................................ 246
31.16 Install httpd, SSL Packages ....................................................................................................... 247
31.16.1 Download/Mount the Operating System ISO ........................................................................... 247
31.16.2 Install the httpd, SSL Packages .................................................................................................. 247
32 License Information ............................................................................................................... 248
32.1 GPL License Information ................................................................................................................ 248
IBM Resiliency Orchestration List of Figures
©IBM Corporation 2017, 2018 11
List of Figures
Figure 1: IBM Resiliency Orchestration Installer ............................................................................................. 35
Figure 2: IBM Resiliency Orchestration Server Installation - MySQL root password ...................................... 35
Figure 3: IBM Resiliency Orchestration Server Installation - Tomcat Home................................................... 36
Figure 4: IBM Resiliency Orchestration Server Installation - Introduction ..................................................... 36
Figure 5: IBM Resiliency Orchestration Server Installation – License Agreement .......................................... 37
Figure 6: IBM Resiliency Orchestration Server Installation - Choose Install Folder........................................ 38
Figure 13: IBM Resiliency Orchestration Server Installation - Confirmation message ................................... 42
Figure 17: IBM Resiliency Orchestration Agent Node Installer ...................................................................... 88
Figure 18: IBM Resiliency Orchestration Agent Node Installation on Linux - Introduction ............................ 89
Figure 19: IBM Resiliency Orchestration Agent Node Installation on Linux - Choose Install Folder .............. 89
Figure 20: IBM Resiliency Orchestration Agent Node Installation on Linux – IBM Resiliency Orchestration Agent Node IP Address Configuration ................................................................................................. 90
Figure 21: IBM Resiliency Orchestration Agent Node Installation on Linux - Pre-Installation Summary ....... 91
Figure 22: IBM Resiliency Orchestration Agent Node Installation on Linux - Installing IBM Resiliency Orchestration Agent Node .................................................................................................................. 91
Figure 23: IBM Resiliency Orchestration Agent Node Installation on Linux - Starting IBM Resiliency Orchestration Agent Node .................................................................................................................. 92
Figure 24: IBM Resiliency Orchestration Agent Node Installation on Linux - Installation Completed ........... 93
Figure 25: Uninstall IBM Resiliency Orchestration Agent Node ..................................................................... 98
Figure 26: Uninstall Complete Screen ............................................................................................................. 98
Figure 27: IBM Resiliency Orchestration Agent Node Installer on Windows ............................................... 101
Figure 28: IBM Resiliency Orchestration Agent Node Installation on Windows - Introduction ................... 101
Figure 29: IBM Resiliency Orchestration Agent Node Installation on Windows- Choose Install Folder ...... 102
Figure 30: IBM Resiliency Orchestration Agent Node Installation on Windows – IBM Resiliency Orchestration Agent Node IP Address Configuration........................................................................ 102
Figure 31: IBM Resiliency Orchestration Agent Node Installation on Windows - Pre-Installation Summary103
Figure 32: IBM Resiliency Orchestration Agent Node Installation on Windows - Installing IBM Resiliency Orchestration Agent Node ................................................................................................................ 104
Figure 33: IBM Resiliency Orchestration Agent Node Installation on Windows - Starting IBM Resiliency Orchestration Agent Node ................................................................................................................ 104
Figure 34: IBM Resiliency Orchestration Agent Node Installation on Windows - Installation Completed .. 105
Figure 35: Uninstall IBM Resiliency Orchestration Agent Node ................................................................... 110
Figure 36: Uninstall Complete Screen ........................................................................................................... 111
Figure 37: IBM Resiliency Orchestration Agent Installer .............................................................................. 115
Figure 38: IBM Resiliency Orchestration Agents Installation on Windows Server - Introduction ................ 116
Figure 39: IBM Resiliency Orchestration Agents Installation on Windows Server - Choose Install Folder .. 116
Figure 40: IBM Resiliency Orchestration Agents Installation on Windows Server - Choose Agents - Windows ............................................................................................................................................ 117
Figure 41: IBM Resiliency Orchestration Agents Installation on Windows Server - Choose Shortcut Folder118
Figure 42: IBM Resiliency Orchestration Agents Installation on Windows Server - Agent Configuration ... 119
IBM Resiliency Orchestration List of Figures
©IBM Corporation 2017, 2018 12
Figure 43: IBM Resiliency Orchestration Agents Installation on Windows Server - IBM Resiliency Orchestration IP Address Configuration ............................................................................................ 120
Figure 44: IBM Resiliency Orchestration Site Controller IP Address Configuration on Windows Server ..... 120
Figure 45: IBM Resiliency Orchestration Agents Installation on Windows Server - Pre-Installation Summary ............................................................................................................................................ 121
Figure 46: IBM Resiliency Orchestration Agents Installation on Windows Server - Installing IBM Resiliency Orchestration Agents......................................................................................................................... 121
Figure 47: IBM Resiliency Orchestration Agents Installation on Windows Server - Starting Agents ........... 122
Figure 48: IBM Resiliency Orchestration Agents Installation on Windows Server - Install Complete .......... 123
Figure 49: IBM Resiliency Orchestration Agent Installer .............................................................................. 128
Figure 50: IBM Resiliency Orchestration Agents Installation on Solaris Server - Introduction .................... 128
Figure 51: IBM Resiliency Orchestration Agents Installation on Solaris Server - Choose Install Folder ....... 129
Figure 52: IBM Resiliency Orchestration Agents Installation on Solaris Server - Choose Agents - Solaris ... 129
Figure 53: IBM Resiliency Orchestration Agents Installation on Solaris Server - Choose Link Folder .......... 130
Figure 54: IBM Resiliency Orchestration Agents Installation on Solaris Server - Agent Configuration ........ 131
Figure 55: IBM Resiliency Orchestration Agents Installation on Solaris Server - Agent Configuration ........ 131
Figure 56: IBM Resiliency Orchestration Agents Installation on Solaris Server - IBM Resiliency Orchestration IP Address Configuration ............................................................................................ 132
Figure 57: IBM Resiliency Orchestration Site Controller IP Address Configuration on Solaris Server .......... 133
Figure 58: IBM Resiliency Orchestration Agents Installation on Solaris Server - Pre-Installation Summary 133
Figure 59: IBM Resiliency Orchestration Agents Installation on Solaris Server - Installing IBM Resiliency Orchestration Agents......................................................................................................................... 134
Figure 60: IBM Resiliency Orchestration Agents Installation on Solaris Server - Starting Agents ................ 135
Figure 61: IBM Resiliency Orchestration Agents Installation on Solaris Server - Install Complete .............. 136
Figure 62: IBM Resiliency Orchestration Agent Installer .............................................................................. 140
Figure 63: IBM Resiliency Orchestration Agents Installation on Linux Server - Introduction....................... 140
Figure 64: IBM Resiliency Orchestration Agents Installation on Linux Server - Choose Install Folder ......... 141
Figure 65: IBM Resiliency Orchestration Agents Installation on Linux Server - Choose Agents - Linux ....... 141
Figure 66: IBM Resiliency Orchestration Agents Installation on Linux Server - Choose Link Folder ............ 142
Figure 67: IBM Resiliency Orchestration Agents Installation on Linux Server - Agent Configuration .......... 143
Figure 68: IBM Resiliency Orchestration Agents Installation on Linux Server - Agent Configuration .......... 144
Figure 69: IBM Resiliency Orchestration Agents Installation on Linux Server - Agent Configuration .......... 144
Figure 70: IBM Resiliency Orchestration Agents Installation on Linux Server - IBM Resiliency Orchestration IP Address Configuration ............................................................................................ 145
Figure 71: IBM Resiliency Orchestration Site Controller IP Address Configuration on Linux Server ............ 146
Figure 72: IBM Resiliency Orchestration Agents Installation on Linux Server - Pre - Installation screen ..... 146
Figure 73: IBM Resiliency Orchestration Agents Installation on Linux Server - Installing IBM Resiliency Orchestration Agents......................................................................................................................... 147
Figure 74: IBM Resiliency Orchestration Agents Installation on Linux Server - Starting Agents .................. 148
Figure 75: IBM Resiliency Orchestration Agents Installation on Linux Server - Install Complete ................ 148
Figure 76: IBM Resiliency Orchestration Agent Installer .............................................................................. 152
Figure 77: IBM Resiliency Orchestration Agents Installation on HPUX Server - Introduction ...................... 153
Figure 78: IBM Resiliency Orchestration Agents Installation on HPUX Server - Choose Install Folder ........ 153
IBM Resiliency Orchestration List of Figures
©IBM Corporation 2017, 2018 13
Figure 79: IBM Resiliency Orchestration Agents Installation on HPUX Server - Choose Agents - HPUX ...... 154
Figure 80: IBM Resiliency Orchestration Agents Installation on HPUX Server - Choose Link Folder ........... 155
Figure 81: IBM Resiliency Orchestration Agents Installation on HPUX Server - Agent Configuration ......... 155
Figure 82: IBM Resiliency Orchestration Agents Installation on HPUX Server - Agent Configuration ......... 156
Figure 83: IBM Resiliency Orchestration Agents Installation on HPUX Server - Agent Configuration ......... 156
Figure 84: IBM Resiliency Orchestration Agents Installation on HPUX Server - IBM Resiliency Orchestration IP Address configuration ............................................................................................ 157
Figure 85: IBM Resiliency Orchestration Site Controller IP Address Configuration on HPUX Server ........... 158
Figure 86: IBM Resiliency Orchestration Agents Installation on HPUX Server - Pre-Installation Summary . 158
Figure 87: IBM Resiliency Orchestration Agents Installation on HPUX Server - Installing IBM Resiliency Orchestration Agents......................................................................................................................... 159
Figure 88: IBM Resiliency Orchestration Agents Installation on HPUX Server - Starting Agents ................. 160
Figure 89: IBM Resiliency Orchestration Agents Installation on HPUX Server - Install Complete ................ 161
Figure 90: IBM Resiliency Orchestration Agent Installer .............................................................................. 165
Figure 91: IBM Resiliency Orchestration Agents Installation on AIX Server - Introduction .......................... 165
Figure 92: IBM Resiliency Orchestration Agents Installation on AIX Server - Choose Install Folder ............ 166
Figure 93: IBM Resiliency Orchestration Agents Installation on AIX Server - Choose Agents - AIX ............. 167
Figure 94: IBM Resiliency Orchestration Agents Installation on AIX Server - Choose Link Folder ............... 168
Figure 95: IBM Resiliency Orchestration Agents Installation on AIX Server - Agent Configuration ............. 169
Figure 96: IBM Resiliency Orchestration Agents Installation on AIX Server - Agent Configuration ............. 170
Figure 97: IBM Resiliency Orchestration Agents Installation on AIX Server - IBM Resiliency Orchestration IP Address configuration ................................................................................................................... 171
Figure 98: IBM Resiliency Orchestration Site Controller IP Address Configuration on AIX Server ............... 171
Figure 99: IBM Resiliency Orchestration Agents Installation on AIX Server - Pre-Installation Summary ..... 172
Figure 100: IBM Resiliency Orchestration Advanced Reporter Installer ...................................................... 176
Figure 101: IBM Resiliency Orchestration Advanced Reporter Installation - Tomcat Path .......................... 177
Figure 102: IBM Resiliency Orchestration Advanced Reporter Installation - Introduction .......................... 177
Figure 103: IBM Resiliency Orchestration Advanced Reporter Installation - Pre-Installation Summary ..... 178
Figure 104: IBM Resiliency Orchestration Site Dashboard Introduction ...................................................... 185
Figure 105: IBM Resiliency Orchestration Site Dashboard - MySQL root password .................................... 185
Figure 106: IBM Resiliency Orchestration Site Dashboard – Choose Tomcat Home .................................... 186
Figure 107: IBM Resiliency Orchestration Site Dashboard – IP address ....................................................... 186
Figure 108: IBM Resiliency Orchestration Site Dashboard – Google Apis Key ............................................. 187
Figure 109: IBM Resiliency Orchestration – Pre-Installation Summary ........................................................ 187
Figure 110: IBM Resiliency Orchestration - Installing Site Dashboard ......................................................... 188
Figure 111: IBM Resiliency Orchestration Site Dashboard – Installation Completed .................................. 188
Figure 112: Upgrade IBM Resiliency Orchestration Advance Reporter - Metadata Refresh Screen for Advanced Reporter ............................................................................................................................ 199
Figure 113: Upgrade Agents on Linux Server - Introduction ........................................................................ 202
Figure 114: Upgrade Agents on Linux Server - Choose Install Folder ........................................................... 202
Figure 115: Upgrade Agents on Linux Server - Choose Install Set ................................................................ 203
Figure 116: Upgrade Agents on Linux Server - Choose Agents - Linux ......................................................... 204
IBM Resiliency Orchestration List of Figures
©IBM Corporation 2017, 2018 14
Figure 117: Upgrade Agents on Linux Server - Choose Link Folder .............................................................. 205
Figure 118: Upgrade Agents on Linux Server - Agent Configuration ............................................................ 206
Figure 119: Upgrade Agents on Linux Server - Agent Configuration ............................................................ 207
Figure 120: Upgrade Agents on Linux Server – NAT IP Address Configuration ............................................ 207
Figure 121: Upgrade Agents on Linux Server – Site Controller Configuration ............................................. 208
Figure 122: Upgrade Agents on Linux Server - Pre-Installation Summary .................................................... 209
Figure 123: Upgrade Agents on Linux Server - Installing IBM Resiliency Orchestration Agents .................. 209
Figure 124: Upgrade Agents on Linux Server - Starting Agents .................................................................... 210
Figure 125: Upgrade Agents on Linux Server - Upgrade Complete .............................................................. 211
Figure 126: Uninstall IBM Resiliency Orchestration Agent Node ................................................................. 218
Figure 127: Uninstall Complete screen ......................................................................................................... 219
Figure 128: Uninstall IBM Resiliency Orchestration Server – Introduction screen ...................................... 221
Figure 129: Uninstall IBM Resiliency Orchestration Server – Uninstalling… screen ..................................... 222
Figure 130: Uninstall IBM Resiliency Orchestration Server – Uninstall Complete screen ............................ 223
Figure 131: Uninstall Complete screen ......................................................................................................... 224
Figure 132: Resiliency Orchestration Workflow ........................................................................................... 227
Figure 133: SzCPIVP....................................................................................................................................... 230
IBM Resiliency Orchestration List of Tables
©IBM Corporation 2017, 2018 15
List of Tables
Table 1. Java tools available in IBM Resiliency Orchestration Server package ............................................... 19
Table 2. System requirements for IBM Resiliency Orchestration Server........................................................ 21
Table 3. System requirements for the Linux based Site Controller ................................................................ 23
Table 4. System requirements for the Linux based co-hosted Site Controller ............................................... 23
Table 5. System requirements for the Windows based Site Controller ......................................................... 24
Table 6. System requirements for Site Controller with Local Agents ............................................................. 24
Table 7. Prerequisites...................................................................................................................................... 26
Table 8. Supported Versions of MariaDB and Tomcat .................................................................................... 26
Table 9. Supported OS for IBM Resiliency Orchestration and Site Controller ................................................ 27
Table 10. Supported Agents in the IBM Resiliency Orchestration .................................................................. 27
Table 11. Supported Browsers for IBM Resiliency Orchestration .................................................................. 29
Table 12. Configuring Resiliency Orchestration server for optimal performance .......................................... 61
IBM Resiliency Orchestration Preface
©IBM Corporation 2017, 2018 16
Preface
The IBM Resiliency Orchestration Installation Guide provides concepts and procedures to
install the IBM Resiliency Orchestration Product. This guide is intended for administrators
responsible for installing, configuring and maintaining the product.
Note
The company name IBM and IBM Corporation are used interchangeably. The terminology
IBM Resiliency Orchestration used in this document refers to and stand for the IBM
Resiliency Orchestration Application. The terminologies Site Controller and Agent Node
are used interchangeably.
Purpose
The Installation Guide helps you to install the IBM Resiliency Orchestration Application and
its components, by providing you with instructions and detailed procedures.
Audience
This manual is for administrators who are responsible for installation, configuration and
uninstallation of IBM Resiliency Orchestration software and its services.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 17
1 Installation Overview
1.1 Introduction
The IBM Resiliency Orchestration is an industry leading software product for managing the Enterprise Business Continuity Processes by providing a comprehensive Disaster Recovery (DR) solution. The IBM Resiliency Orchestration automates DR workflows by inter-operating with several industry leading Databases, Replications, and Cluster Products.
The IBM Resiliency Orchestration Application supports a wide range of operating systems, databases and their replication schemas that you can choose from to customize your disaster recovery solution for your specific business requirements.
1.2 Software Package Components
Find information about the components in the IBM Resiliency Orchestration Software Package that you can choose to install. For downloading instructions,
see Downloading the Software Package.
1.2.1 Resiliency Orchestration Server
The IBM Resiliency Orchestration Server contains the application binaries that set up the IBM Resiliency Orchestration GUI, the IBM Resiliency Orchestration Remote Agents, the IBM Resiliency Orchestration Web Services, the associated libraries, and other application files. The Server component part of the IBM Resiliency Orchestration Product is to be installed on a server hardware.
Before you install the IBM Resiliency Orchestration Server, you must prepare the server hardware with supported RHEL operating system and then install the MariaDB database software.
Note
This is a mandatory software that you must download and install as part of the IBM
Resiliency Orchestration DR Solution.
1.2.2 IBM Resiliency Orchestration Site Controller (Agent Node)
The Agent Node also called as the Site Controller, hosts the necessary or applicable Agents to manage the Endpoints remotely. The Site Controller manages the Agents for IBM Resiliency Orchestration by optimizing the communication between an Agent and the IBM Resiliency Orchestration Server.
The Site Controller augments by acting as a gateway for the set of agents for communicating with the IBM Resiliency Orchestration Server.
Note
This is a mandatory software that you must download and install as part of the IBM
Resiliency Orchestration DR Solution.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 18
1.2.3 Advanced Reporter
Advanced Reports module is a powerful, flexible, and easy to use reporting solution that provides browser based, parameter driven, dynamic report generation and flexible report scheduling capabilities.
Advanced Reports supports a variety of open source reporting engines, including JasperReports, JFreeReport, JXLS, and Eclipse BIRT,these are used to provide support a wide range of reporting requirements and capabilities. Advanced Reports also supports QueryReports and ChartReports, easy to create SQL based reports that do not require a predefined report definition.
Note
This is an optional feature software that you can download and install to use the
Advanced Reports feature in the IBM Resiliency Orchestration GUI.
1.2.4 IBM Resiliency Orchestration Agents
The Agents play a vital role in monitoring and managing the Endpoints and the applications on the Endpoints. The IBM Resiliency Orchestration Agents are specifically designed to manage applications, components, datasets, and the protection or replication schemas that are hosted on the Production or Primary Endpoints. The same Agents are used to manage the DR Endpoints too. The Agents are collectively managed by the IBM Resiliency Orchestration Site Controller.
If the Agents are installed in the Endpoint hardware, then they are called as Local Agents (the agents are Local to the PR or DR Endpoint). If the Agents are installed in the node where the IBM Resiliency Orchestration Server is installed, then they are called as Remote Agents (the agents are remote to the PR or DR Endpoint).
Note
This is an optional software that you can download and install if you want to install
Agents as Local Agents, in the IBM Resiliency Orchestration DR Solution.
1.2.5 IBM Resiliency File Replicator
The Resiliency File Replicator is an enterprise replication software developed by IBM. The Resiliency File Replicator can be used to replicate data (files and directories) across hosts connected within Local or Remote locations. It works with both Local Area Network (LAN) and Wide Area Network (WAN). It can transfer files between any network-shared drives and across heterogeneous platforms. Resiliency File Replicator supports one-to-one, one-to-many, and many-to-one configurations.
Note
This is an optional software provided as a free-of-charge software that you can download
and install if you want to use this application for File Replication.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 19
1.3 Downloading the Software Package
1.3.1 Software Versions
1.3.1.1 Licensed Version
You can download the licensed versions of the IBM Resiliency Orchestration
software that is available on the IBM Passport Advantage (PA) Portal.
(https://www-01.ibm.com/software/passportadvantage/)
1.3.1.2 Software Fixes and Updates
You can also download the IBM Resiliency Orchestration software fixes and
updates that are available on the IBM Fix Central Portal (https://www-
945.ibm.com/support/fixcentral/).
1.3.2 Software Package
The IBM Resiliency Orchestration Software package contains the following components:
a. IBM Resiliency Orchestration Server (Server)
b. IBM Resiliency Orchestration Site Controller (Agent Node)
c. Advanced Reporter Services (Advanced Reporter)
d. IBM Resiliency Orchestration Agents (Agents)
e. IBM Resiliency File Replicator (SFR)
Note:
The name in brackets, indicates the name used in the software package. Ensure to
choose the version of the Service or Fix Pack you want to download and then, select all or
the components you want, for that version to download.
1.3.2.1 Java tools available in the IBM Resiliency Orchestration Server
Package
Find information about the versions of Java Tools that are available for your use,
contained in the Resiliency Orchestration Server package, as listed in Table 1.
Table 1. Java tools available in IBM Resiliency Orchestration Server
package
Java Tools OS Version Remarks
j2re_1.8.0_131 Windows 2008, Windows 2012
j2re_1.8.0_131 HPUX
j2re_1.8.0_131 Solaris 10
j2re_1.8.0_131 AIX 7
j2re_1.8.0_131 Linux 5.0, 6.0 Enterprise Server
Edition
Used to install the
Database Agent System
j2re_1.8.0_131 Linux 6.0 Enterprise Server Edition Used to install the IBM
Resiliency Orchestration
Server System
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 20
1.4 Scope of this Document
The IBM Resiliency Orchestration Installation Guide provides the installation and configuration procedures for the following components that are available in the Software Package:
a. IBM Resiliency Orchestration Server
b. IBM Resiliency Orchestration Site Controller
c. Advanced Reporter Services (Advanced Reporter)
d. IBM Resiliency Orchestration Agents (Agents)
Note:
The Installation procedures for the IBM Resiliency File Replicator is not documented
in this document. For the installation procedures for IBM Resiliency File Replicator,
refer to the IBM Resiliency File Replicator Installation Guide V 7.2.
For the procedures to upgrade to the latest versions of the IBM Resiliency
Orchestration Application software and its components, refer to the IBM Resiliency
Orchestration Upgrade Guide V 7.3.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 21
2 System Requirements
Find information about the minimum system requirements to install the different software components in the IBM Resiliency Orchestration Package.
1. System requirements for IBM Resiliency Orchestration Server. For details,
see System Requirements for IBM Resiliency Orchestration Server.
1. System requirements for Site Controller. For details, see System
Requirements for Site Controller.
2. System requirements for installing the Advanced Reporter. For details, see
System requirements for Installing Advanced Reporter.
3. System requirements for installing the Local Agents. For details, see System
requirements for Installing Local Agents.
4. System requirements for installing the SFR. For details, see System
requirements for Installing .
2.1 System Requirements for IBM Resiliency Orchestration Server and IBM Resiliency Orchestration HA Server.
The system requirements are defined based on the number of Endpoints, which needs to be managed. An endpoint is the server used for production irrespective of physical or logical sites it spans. It can be a VM, a hypervisor, a server running applications or softwares, and requires to be protected.
The system requirements for IBM Resiliency Orchestration and IBM Resiliency
Orchestration HA are shown in Table 2.
Attention
The operational limit for managing the Production Endpoints by a single Administrator is
observed to be 200. If the number of Production Endpoints managed by a single
Administrator exceeds 500, under standard test conditions, it has been observed that
there is a time delay in the loading of the IBM Resiliency Orchestration GUI.
Table 2. System requirements for IBM Resiliency Orchestration Server
Number of Production Endpoints Managed
Resiliency Orchestration Server Memory
Resiliency Orchestration Server Cores (CPU Intel Xeon 2.27GHz)
Resiliency Orchestration Server Disk Partition Recommendation
100 8 GB 4 /opt: 50 GB (For IBM Resiliency
Orchestration Binaries)
/opt/$DRM$/var/log: 100 GB (Debug
logs of IBM Resiliency Orchestration)
/var: 100 GB (Maria DB Volume)
/backup: 100 GB (Maria DB Backup)
200 8 GB 6
500 16 GB 8
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 22
Number of Production Endpoints Managed
Resiliency Orchestration Server Memory
Resiliency Orchestration Server Cores (CPU Intel Xeon 2.27GHz)
Resiliency Orchestration Server Disk Partition Recommendation
/boot: 2 GB
/swap: 2 times the RAM size
1000 32 GB 8 /opt: 50 GB (For IBM Resiliency
Orchestration Binaries)
/opt/$DRM$/var/log: 200 GB (Debug
logs of IBM Resiliency Orchestration)
/var: 200 GB (Maria DB Volume)
/backup: 200 GB (Maria DB Backup)
/boot: 2 GB
/swap: 2 times the RAM size
1200 32 GB 8
1500 32 GB 8
2000 32 GB 8
2500 64 GB 12
3000 64 GB 12
Ensure that in your primary (PR) infrastructure including storage and network (for example, RAID protected storage, dual network interfaces, and so on) there is no single point of failure.
2.2 System Requirements for Site Controller
2.2.1 Introduction to the Site Controller
Site Controller is mandatory for production deployments of IBM Resiliency Orchestration. Site Controller is a facilitator between agents and IBM Resiliency Orchestration Server, when Site Controller goes down, agents are not available and hence no monitoring and the management of DR is compromised for the endpoints managed by that Site Controller until the Site Controller is up.
Site controller can manage its agents, when Site Controller is installed within LAN, it helps in reducing the bandwidth usage as the communication over WAN to IBM Resiliency Orchestration Server is greatly reduced.
2.2.2 Hosted Location of the Site Controller
You can install the Site Controller in the following locations:
a. Co-hosted with the IBM Resiliency Orchestration. The Site Controller is installed in the same hardware in which the IBM Resiliency Orchestration Server is installed. You must use the Linux based Site Controller for installation if you are co-hosting the Site Controller along with the IBM Resiliency Orchestration.
b. Hosted independently of the IBM Resiliency Orchestration. The Site Controller is installed in a separate server and its location is independent of the IBM Resiliency Orchestration Server location. You can use either the Linux based or Windows based Site Controller for installation if you are hosting the Site Controller independently of the IBM Resiliency Orchestration.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 23
2.2.3 Site Controller Types Supported
The following types of Site Controllers are available as supported for installation based on the OS platforms on which the Site Controller can be installed.
a. Linux based Site Controller with only Remote Agents supported. For details,
see System requirements for Linux based Site Controller.
b. Windows based Site Controller with only Remote Agents supported. For
details, see System requirements for Windows based Site Controller.
c. System requirements for Site Controller with only Local Agents supported.
For details, see System requirements for Site Controller with Local Agents.
2.2.4 System requirements for Linux based Site Controller
The system requirements for the Linux based Site Controller on which only
Remote Agents are deployed is shown in Table 3 and the system requirements
for the co-hosted Site Controller in Linux Server is shown in Table 4.
Table 3. System requirements for the Linux based Site Controller
Number of Remote Agents Managed
Resiliency Orchestration Site Controller Memory
Resiliency Orchestration Site Controller Cores (CPU Intel Xeon 2.27 GHz)
Minimum Disk Partition Requirements for Resiliency Orchestration Site Controller
50 8 GB 2 /opt: 50 GB (For Resiliency
Orchestration Binaries)
/opt/$Agents$/remote: 200 GB
/var: 50 GB
/boot: 2 GB
/swap: 2 times the RAM size
100 16 GB 2
375 64 GB 4
750 128 GB 4
Table 4. System requirements for the Linux based co-hosted Site
Controller
Number of Endpoints Managed
Resiliency Orchestration Site Controller Memory
Resiliency Orchestration Site Controller Cores (CPU Intel Xeon 2.27 GHz)
Minimum Disk Partition Requirements for Resiliency Orchestration Site Controller
100 24 GB 6 Cores /opt: 100 GB (For IBM Resiliency
Orchestration Binaries)
/opt/$DRM$/var/log: 300 GB (Debug logs of IBM Resiliency Orchestration)
/var: 100 GB (Maria DB Volume)
/boot: 2 GB
/opt: 200 GB
&EAMSROOT/remote: 100 GB
/swap: 2 times the RAM size
200 40 GB 8 Cores
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 24
Note
You should decide whether to install the Linux based Site Controller as co-hosted with
the IBM Resiliency Orchestration depending on the following criteria:
Number of Production Endpoints that you intend to deploy now.
Number of Production Endpoints that you intend to deploy in the near future.
Cost of additional hardware for deploying the Site Controller independent of the IBM
Resiliency Orchestration.
If you intend to scale-up the IBM Resiliency Orchestration Application Server, then
the scaling-up of the co-hosted site controller may not be feasible and you must
deploy the Site Controller on a separate server.
You must configure the IBM Resiliency Orchestration Application Server for two
different IPs, one for the IBM Resiliency Orchestration Application and one for the co-
hosted Site Controller.
Ensure that you are considering the system requirements for the combined
requirements for the IBM Resiliency Orchestration Application and the co-hosted Site
Controller, when both IBM Resiliency Orchestration and Site Controller Services are
deployed together.
2.2.5 System requirements for Windows based Site Controller
The system requirements for the Windows based Site Controller on which only
remote agents are deployed is shown in Table 5.
Table 5. System requirements for the Windows based Site Controller
Number of Remote Agents Managed
Resiliency Orchestration Site Controller Memory
Resiliency Orchestration Site Controller Cores (CPU Intel Xeon 2.27 GHz)
Minimum Disk Partition Requirements for Resiliency Orchestration Site Controller
50 8 GB 2 Ensure that a minimum of 300
GB is available in the partition
where you want to install the
Site Controller.
100 16 GB 2
2.2.6 System requirements for Site Controller with Local Agents
The system requirements for the Windows based Site Controller on which only
local agents are deployed on the endpoint, is shown in Table 6.
Table 6. System requirements for Site Controller with Local Agents
Number of Local Agents Managed
Resiliency Orchestration Site Controller Memory
Resiliency Orchestration Site Controller Cores (CPU Intel Xeon 2.27GHz)
Resiliency Orchestration Site Controller Disk Partition Recommendation
100 8 GB 4 /opt: 50 GB (For IBM Resiliency
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 25
Number of Local Agents Managed
Resiliency Orchestration Site Controller Memory
Resiliency Orchestration Site Controller Cores (CPU Intel Xeon 2.27GHz)
Resiliency Orchestration Site Controller Disk Partition Recommendation
200 8 GB 4 Orchestration Binaries)
/opt/$Agents$/remote: 200 GB
(optional but recommended)
/var: 50 GB
/boot: 2 GB
/swap: 2 times the RAM size
500 8 GB 4
1000 16 GB 4 /opt: 50 GB (For IBM Resiliency
Orchestration Binaries)
/opt/$Agents$/remote: 200 GB
(optional but recommended)
/var: 50 GB
/boot: 2 GB
/swap: 2 times the RAM size
2.2.7 System requirements for Installing Advanced Reporter
Find the minimum system requirements for installing the IBM Resiliency Orchestration Advanced Reporter software.
The Advanced Reporter software to be installed on the IBM Resiliency Orchestration Server requires 256 MB memory and 10 GB disk space.
2.2.8 System requirements for Installing Local Agents
The IBM Resiliency Orchestration Agents to be installed on the endpoint requires 256 MB memory and 10 GB disk space.
2.2.9 System requirements for Installing Resiliency File Replicator
(SFR)
Find the minimum system requirements for installing the optional software, IBM Resiliency File Replicator (SFR) on the Endpoints.
The SFR application to be installed on the Endpoint requires 1.25 GB memory and 10 GB disk space.
2.3 System Requirements for Staging Server
Staging is similar to endpoint managed. So the standard configuration set for end point can be used for Staging Server.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 26
3 Prerequisites
Before you proceed to downloading and installing the IBM Resiliency Orchestration software, ensure that you have read and complied with the prerequisites.
Table 7. Prerequisites
Prerequisite Mandatory (Yes or No)
Remarks
Installing the GPL Dependencies
Yes Before you install the IBM Resiliency Orchestration Server, you must install the GPL Licenses.
Installing the MariaDB Yes Before you install the IBM Resiliency Orchestration Server, you must install the MariaDB and configure it.
Installing the Tomcat Yes Before you install the IBM Resiliency Orchestration Server, you must install the Tomcat and configure it.
3.1 GPL Dependencies for IBM Resiliency Orchestration
Based on the features, download the GPL dependent binaries from this link: GPL
dependent binaries (https://sourceforge.net/projects/gnu-utils/files/binaries/)
before you install the IBM Resiliency Orchestration.
You must complete the steps mentioned in Installing Third-party Software.
For more information about the GPL licenses, see GPL License Information.
3.2 Supported OS and features
3.2.1 Supported versions of MariaDB and Tomcat
Find information about the versions and OS supported for the MariaDB and
Tomcat, as shown in Table 8.
Table 8. Supported Versions of MariaDB and Tomcat
Description Version OS
MariaDB 10.1.19 RHEL 7.1, or Later
Tomcat 7.0.90 RHEL 7.1, or Later
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 27
3.2.2 Supported OS for IBM Resiliency Orchestration and Site
Controller
Find information about the OS supported for the IBM Resiliency Orchestration
application and the Site Controller, as shown in Table 9.
Table 9. Supported OS for IBM Resiliency Orchestration and Site
Controller
Description OS
IBM Resiliency Orchestration RHEL 7.1, RHEL 7.3
IBM Resiliency Orchestration – HA RHEL 7.1, RHEL 7.3
Linux based Site Controller, when co-
hosted with IBM Resiliency
Orchestration or independently of the
IBM Resiliency Orchestration
RHEL 7.3
Windows based Site Controller, when
hosted independently of the IBM
Resiliency Orchestration
Windows 2012 Standard Edition
3.2.3 Supported OS Versions for Agents
The versions of the supported OS shown for the Agent in Table 10 should match
with the system you are using, for the Agent to function correctly. The following are the information about the IBM Resiliency Orchestration Agents and the details of their supported versions of OS and databases.
Table 10. Supported Agents in the IBM Resiliency Orchestration
Agent Platform Version of Database or Application
Supported on OS Version
Supported Agents
DB2 Agent Intel
AMD
DB2 9.x AIX 6.x
AIX 7.x
Windows
Linux
Local
EMC SRDF
Agent
Intel
AMD
Sun/Sparc
Symmetrix CLI
(SYMCLI)
Version:
V7.3.0.1 (Edit
Level: 1214)
Solaris 10
Solaris 11
Window 2003
Local and Remote
Hitachi
Replication
Agent
SUN/Sparc
PA-RISC
Sybase ASE
15.x
Solaris 10
Solaris 11
AIX 6.x, AIX 7.x
Local and Remote
IBM Global
Mirror using
OS Agent
SUN/Sparc
AIX
IBM DSCLI
Version
6.6.0.345
Solaris 10
AIX 5
Local and Remote
IBM z System
z/OS LPARs
IBM z System
2817-M80 Not Applicable zOS 2.1 & 2.2,
HMC 2.12.0 & above
Local
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 28
Agent Platform Version of Database or Application
Supported on OS Version
Supported Agents
Agent Windows 7-
IBM CSM
2.12.0
MS Exchange
Agent
Intel Not Applicable Windows 2016 Local
MS SQL
Agent
Intel
AMD
MSSQL 2008,
MSSQL 2012
Windows 2016
Windows 2012
Enterprise Edition
Local and Remote
MSSQL Agent Intel
AMD
MSSQL 2005
MSSQL 2008
MSSQL 2012
Windows 2016
Windows 2012
Enterprise Edition
Local and Remote
MySQL Agent Intel MySQL 5.5 RHEL 6.x Local and Remote
Oracle Agent Intel
AMD
Sun/Sparc
AIX
Oracle 10g
Oracle 11g
Oracle 12c
Solaris 10, Solaris 11,
Windows 2016,
Windows 2012
Standard Edition,
Windows 2012
Enterprise Edition
AIX 6.x, AIX 7.x
HP-UX 11i
RHEL 5.x, 6.x, 7.x
Local and Remote
Oracle
Dataguard
Intel
AMD
SUN/Sparc
PA-RISC
Oracle 10g
Oracle 11g
Oracle 12c
Solaris 10, Solaris 11
Windows 2016
Windows 2012
Enterprise Edition
AIX 6.x
HP-UX 11i
RHEL 5, RHEL 6,
RHEL 7
Local and Remote
OS Agent Intel
AMD
SUN/Sparc
PA-RISC
Not Applicable Solaris 10, Solaris 11
Windows 2016
Windows 2012
Enterprise Edition,
AIX6.x
HP-UX 11i
RHEL 5, RHEL 6,
RHEL 7
Local and Remote
PostgreSQL
Agent
Intel PostgreSQL 9.2 RHEL 5.6 Local and Remote
SAP HANA
Agent
SAP HANA
SPS11, and
Later
SUSE Linux Enterprise
Server 11 SP4
RHEL 7.4
Remote
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 29
Agent Platform Version of Database or Application
Supported on OS Version
Supported Agents
SRS Agent SUN/Sparc
PA-RISC
Sybase 15 with
embedded
RSSD
Solaris 10, Solaris 11
AIX 6.x, AIX 7.x
Local
Sybase Agent SUN/ Sparc
PA-RISC
Sybase ASE
15.x
Solaris 10, Solaris 11
AIX 6.*
Local
3.2.4 Supported Browsers
Table 11. Supported Browsers for IBM Resiliency Orchestration
Browser OS Version Remarks
Firefox 46.x, and above
Google Chrome 52.x , and above
Windows 7
Windows 8
Note
IBM Resiliency Orchestration GUI does not support multiple tabs or multiple windows for
pages that require user inputs such as Discovery or configuration for single logged on
session and Group assignment for a particular user.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 30
4 Preparing the IBM Resiliency Orchestration Server
4.1 Server Hardware
Evaluate the number of Servers you want to set up to host the IBM Resiliency Orchestration Applications, Site Controllers, IBM Resiliency Orchestration Agents, IBM Resiliency Orchestration Database, and Browser.
For determining your system requirements, see the details under System
Requirements.
Proceed to install the RHEL OS, IBM Resiliency Orchestration Database, and Tomcat on the Server, where you intend to install the IBM Resiliency Orchestration Application Software.
4.2 Installation of the RHEL OS
You must install the RHEL Server OS on the Server on which you want to install the IBM Resiliency Orchestration Application Software.
1. Refer to the Linux OS Installation procedures from the official RHEL website, for the instructions for downloading and installing the Linux OS.
2. Install the Linux Enterprise Server OS and ensure to set the following conditions during the installation:
Set up the partitions for the different binaries as indicated in the system requirements section. For details, see System Requirements for the IBM Resiliency Orchestration Server.
Do not set up the Firewall. Select the No Firewall option, during the installation.
4.3 Installation of MariaDB
Download and install the MariaDB that is the IBM Resiliency Orchestration Database. For information about installing MariaDB, refer to the MariaDB 10.1.19 document, which is available from the MariaDB website link https://downloads.mariadb.org/mariadb/10.1.19/.
Note: If MySQL is upgraded to MariaDB, run the following command.
sudo mysql_upgrade
4.4 Installing Tomcat
Download and install the Tomcat. For information about installing Tomcat, refer to the Tomcat Apache website (https://tomcat.apache.org/download-70.cgi#7.0.90).
When Tomcat is successfully installed, delete the following default files and folders from the TOMCAT_HOME path:
/docs/
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 31
/examples/servlets/index.html
/examples/jsp/index.html
/examples/websocket/index.xhtml
/nessus-check/default-404-error-page.html
4.5 Configuring MariaDB
Configure the MariaDB for the following settings:
Preset Users for MariaDB
Creating New Users for the MariaDB
4.5.1 Preset Users for MariaDB
IBM Resiliency Orchestration uses MariaDB for persistence. During the installation of the IBM Resiliency Orchestration Application Software, the following MariaDB user is created with all privileges:
panaces
The IBM Resiliency Orchestration Application Software is configured to use the
panaces User for accessing the MariaDB, until you change the user in the
MariaDB. Ensure to change the Preset User to a User of your choice.
4.5.2 Creating New Users in MariaDB
Create new Users and credentials in the MariaDB. Ensure that new Users are set up with all privileges. For instructions about creating a new user in the MariaDB, refer to the MariaDB User Guide on the MariaDB website (https://downloads.mariadb.org/mariadb/10.1.19/).
Note
Ensure to select the document for the version of the supported MariaDB you installed.
You must use the created User credentials to replace the IBM Resiliency Orchestration Preset user credentials in the IBM Resiliency Orchestration Application files at the time of configuring the installed IBM Resiliency Orchestration Application.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 32
5 Installing the IBM Resiliency Orchestration Application Software
You can install the IBM Resiliency Orchestration Application Software on a Linux machine and on a machine in a Linux Cluster.
5.1 Prerequisites for Installing the IBM Resiliency Orchestration Application Software
1. You should complete the following installations:
Installation of Linux Enterprise Server OS
Installation of the MariaDB (MariaDB V10.1.19 on RHEL 7.3; MariaDB V10.1.16 on RHEL 7.1)
Installation of the Tomcat Server
2. You must have root or root equivalent privileges to install IBM Resiliency Orchestration Application Server.
3. Edit the file /etc/sysconfig/selinux to include the option
SELINUX=permissive.
4. Check /etc/hosts file to ascertain if the localhost alias exists or not. If it
does not exist, add the localhost alias, and the IP address of the IBM Resiliency Orchestration Application Server.
For Example: <ip-address><localhost> <hostname>
5. If you need to use the vault integration feature of the product, confirm that the following required vault integration library files from your vault vendor are available:
j2ssh-core-0.2.9.jar
javapasswordsdk.jar
edmz-par-api.jar
6. You must have downloaded the IBM Resiliency Orchestration Application Software. For details on the software package and downloading procedures,
see Software Package Components and Downloading the Software Package.
7. Make sure the my.conf file has 644 permission.
5.2 Prerequisites for Cyber Resiliency Platform
Along with prerequisites listed in the prerequisites for IBM Resiliency Orchestration section, the following are prerequisites if Cyber Resiliency Platform is enabled:
Resiliency Orchestration Server with Site Controller is required. Refer to Resiliency Orchestration Server Installation and Site Controller Installation guide for details
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 33
Staging Server (Linux, CentOS, and Windows) for Linux endpoints and Staging Server (Windows) for Window Point that is used to mount the IBM COS as a file system. You need to install S3FS packages on Staging Server to enable the integration.
If the OS (Operating System) of Staging Server is Windows, you need to install local OS agent on Staging Server.
The relevant ports should be open for accessibility. For Resiliency File Replicator in secure mode, the following port 46443 should be opened in primary component, Site Controller, and Staging Server.
S3FS-FUSE should be installed on the staging / Linux Server, which connects to the IBM COS.
CISCO Switch: The following are prerequisites for Cisco Switch:
The secured jump box Linux machine should be having access to CISCO switches and accessible to IBM Resiliency Orchestration. Linux component or Site controller Server can be used as the jump box.
Discovery of Cisco switch should be done using username only and without specifying any value for password. The only limitation with this approach is that after saving the details the Credentials status will show as ‗Fail‘(with Red cross)
You should enable the SSH keygen from the Linux dependent component to the Cisco switch with the provided username during Cisco Subsystem discovery
OS user, who runs the application (root, panacesuser) on the jump box, should be mapped to a Cisco user.
IBM COS: IBM COS (Cloud Object Storage) is required to maintain the golden copy of platform configurations. The following are prerequisites for IBM COS:
The user should have an account and valid credentials to access IBM COS.
The IBM COS should be accessible through Resiliency Orchestration and discovered as a management service in Resiliency Orchestration Server.
At least one bucket should be precreated and available
The IBM COS is mounted as a file system on Staging Server.
Service Now: If you have Service Now application installed and configured, it can be integrated in Resiliency Orchestration Server. The following are prerequisites for Service Now:
You need to set up your user credentials in the Service Now application.
The Service Now application should be enabled to allow access from the IBM Resiliency Orchestration application. You need to provide the details for
servicenowclient.properties file configuration.
You should use the Oauth to authenticate and get access tokens. Resiliency Orchestration is prepackaged with REST client which supports this.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 34
Confirm that the IBM Resiliency Orchestration application is registered in the Service Now Application registry.
DVS: vCenter Server Authentication. User should have an account with vCenter and discover vCenter as Management service prior to DVS (Distributed Virtual Switch) subsystem discovery.
5.3 Mode of installing the Resiliency Orchestration Application Software
You can install the IBM Resiliency Orchestration software by using any of the following methods:
Graphical Mode
Graphical mode installation is an interactive, GUI-based method for installing the IBM Resiliency Orchestration software. You can use the Graphical mode for installing the Resiliency Orchestration Application Software on: Linux, Windows, Solaris, HPUX, and AIX platforms.
Silent Mode
Silent mode installation is a non-interactive method of installing IBM Resiliency Orchestration Software. This method requires the use of .properties file for selecting the installation options. It is supported on Linux, Solaris, HPUX, and AIX platforms.
5.4 Installation of Resiliency Orchestration Application Server in Graphical Mode
This IBM Resiliency Orchestration Application Software is packaged into an image file called install.bin in the Server Package. The package contains all the binaries and other software packages to install and run the IBM Resiliency Orchestration Application.
This software installation involves installing IBM Resiliency Orchestration Server binaries, BCS modules, IBM Resiliency Orchestration Server agents, and other software binaries.
1. Execute the following command, depending on the version of the RHEL OS:
sh install.bin
or
./install.bin
Note
Java will be installed automatically after execution of this command.
2. After extracting the files from the install.bin, IBM Resiliency Orchestration Server installation starts with the following screen. A progress bar at the bottom of the screen indicates the loading of the installer.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 35
Figure 1: IBM Resiliency Orchestration Installer
3. After displaying the IBM Resiliency Orchestration Installer screen, the MariaDB 10.1.19 root password window is displayed.
Figure 2: IBM Resiliency Orchestration Server Installation - MySQL root
password
4. Enter the password for the MariaDB 10.1.19 root user.
5. Click Next. The Tomcat Home window is displayed (Version 7.0.55)
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 36
Figure 3: IBM Resiliency Orchestration Server Installation - Tomcat Home
6. Click Choose… to browse and select the location of Tomcat. When Tomcat is located and then selected, the path appears in the Please Choose a Folder: box in Tomcat Home screen. $TOMCAT_HOME or {TOMCAT_HOME} placeholder will use the specified folder, for example, /opt/softwares/tomcat7.
7. Click Next, the Introduction window is displayed.
Figure 4: IBM Resiliency Orchestration Server Installation -
Introduction
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 37
8. Click Next. The License Agreement window will be displayed as shown in the following figure:
Figure 5: IBM Resiliency Orchestration Server Installation – License
Agreement
9. Click the appropriate option button after perusal of the License Agreement. The options are:
Option Button Description
I accept the terms of the
License Agreement
Click this option button for acceptance of the
License Agreement.
I do NOT accept the terms
of the License Agreement
Click this option button for rejection of the License
Agreement and then click Next. A pop-up is shown
which allows the user to either Accept the License
Agreement or to Quit.
10. Click Next to proceed with the installation. The Choose Install Folder window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 38
Figure 6: IBM Resiliency Orchestration Server Installation - Choose
Install Folder
11. To Enable SSH Key generation:
Figure 7: IBM Resiliency Orchestration Server Installation SSH Key
Generation
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 39
12. Select a path to install the software by clicking Choose. $EAMSROOT or {EAMSROOT}placeholder that is referred in this document will point to this folder. Click on Next button.
Figure 8: IBM Resiliency Orchestration Server Installation – Sanovi User
Account
13. Click Next. The User Management System window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 40
Figure 9: IBM Resiliency Orchestration Server Installation – User
Management System
14. Select the appropriate User Management System type. The two options are: Basic User Management System and Advanced User Management System.
15. Click Next. The Pre-Installation Summary window is displayed.
Figure 10: IBM Resiliency Orchestration Server Installation - Pre-
Installation Summary
16. Go through the pre-installation summary to verify the inputs provided. If you want to change the inputs, click Previous and modify.
17. Click Install. The Installing IBM Resiliency Orchestration Server window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 41
Figure 11: IBM Resiliency Orchestration Server Installation - Installing
IBM Resiliency Orchestration Server
18. Click ok on SSL enabled on Mariadb dialog box
Figure 12: IBM Resiliency Orchestration Server Installation – SSL
enabled on Mariadb
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 42
19. IBM Resiliency Orchestration Server Installation automatically uploads the IBM Resiliency Orchestration Schema. If it already exists, a dialog box is displayed as shown below, that confirms if you want to drop the existing IBM Resiliency Orchestration Schema and replace it through installer.
Figure 137: IBM Resiliency Orchestration Server Installation -
Confirmation message
20. Click No to continue the installation with the existing schema. Click Refresh to drop and recreate IBM Resiliency Orchestration Schema.
Note
To replace the database schema manually, type the following command:
# sudo mysqldump –u root –-databases panaces pfr –R –-triggers -p >
backup_file_name.sql
# Drop the existing databases if they already exist
sudo mysqladmin –u root drop panaces
sudo mysqladmin –u root drop pfr
# sudo mysql -u root < $EAMSROOT/lib/mysql_schema_InnoDB.sql
# sudo mysql -u root < $EAMSROOT/lib/pfr.sql
# sudo $EAMSROOT/installconfig/importTemplateEvents.sh
21. The Advanced User Server Details screen will be displayed if Advanced User Management System was selected in Step 15. Select the server type and provide the required details for connecting to the external server, as shown in the following two figures.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 43
Figure 14: IBM Resiliency Orchestration Server Installation - Advanced
User Server Details 1
Figure 15: IBM Resiliency Orchestration Server Installation - Advanced
User Server Details 2
22. Click Next. The Support User Account window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 44
Figure 16: IBM Resiliency Orchestration Server Installation - Support
User Account
23. A user account with user name support is created for use by IBM Resiliency Orchestration Server. Enter the password for this account in the Password box. Reenter the password in the Confirm Password box
Note
For invalid passwords, a dialog box displays an error message.
24. Click Next. Once the metadata information is created by the installer, IBM Resiliency Orchestration Server will configure the system with events and events correlation template definitions.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 45
Figure 17: IBM Resiliency Orchestration Server Installation - System
Configuration
25. Click Next. In case you get a warning message saying ―Unable to find configuration file (my.cnf)‖, than update max allowed packet to 16MB in my.cnf configuration file and restart the mysql service.
26. Click Next. The Installation Completed window is displayed, indicating successful installation.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 46
Figure 18: IBM Resiliency Orchestration Server Installation -
Installation Completed
27. Click Done to complete the installation process.
5.5 Post Installation Steps
1. Delete the $TOMCAT_HOME/webapps/PanacesGUI/test folder.
2. Download the ThirdPartyJSLib.zip file from the link GPL dependent binaries (https://sourceforge.net/projects/gnu-utils/files/binaries/).
3. Extract the ThirdPartyJSLib.zip file to /tmp.
4. Copy /tmp/ThirdPartyJSLib/*.* to the $TOMCAT_HOME/webapps/PanacesGUI/scripts/ folder.
5. Remove /tmp/ThirdPartyJSLib*.*
6. Add all the vault integration library files to the following locations:
{TOMCAT_HOME}/webapps/PanacesGUI/WEB-INF/lib
{TOMCAT_HOME}//webapps/PanacesGUI/pages/classes/lib
{TOMCAT_HOME}//webapps/userPortal/WEB-INF/lib
{TOMCAT_HOME}//webapps/userPortal/pages/classes/lib
{EAMSROOT}/agents/vault/{yourVaultName}/lib
{EAMSROOT}/lib
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 47
Note
You need to set the execute (770) and Tomcat user group permissions for the vault
integration library files in the TOMCAT_HOME locations.
You need to set the execute (770) and Panaces user group permissions for the vault
integration library files in the EAMSROOT locations.
7. If you would like to use the Cisco UCS Director (Unified Computing System Director) integration feature of the product, procure the following library files and replace at the respective locations:
{EAMSROOT}/lib/ucsd-oa-annotations.jar
{EAMSROOT}/lib/ucsd-oa-api.jar
{EAMSROOT}/lib/ucsd-rest-api-sdk-v2.ja
{EAMSROOT}/lib/cuic-sdk-v2-0.jar
{EAMSROOT}/lib/inframgr.jar
8. Backup $TOMCAT_HOME/webaps/PanacesGUI/WEB-INF/lib/PanacesGUI.jar
9. Download PanacesGUI.jar from fix central to IBM Resiliency Orchestration Server
$TOMCAT_HOME/webaps/PanacesGUI/WEB-INF/lib folder.
10. Run the following scripts:
Goto $EAMSROOT/bin
sudo ./SecurityUserInjection.sh
11. Start the IBM Resiliency Orchestration Services. See Starting and Stopping
Resiliency Orchestration Server.
5.5.1 Post Installation Steps for Cyber Resiliency Platform
You need to perform the following configuration in the panaces.properties file:
5.5.1.1 Mapping Staging Server to Site Controller
The OS for the windows staging is Windows Server, the OS for linux, cisco, and dvs staging should be Linux or Centos Server. You need to perform the following configuration for mapping Staging Server to Site Controller:
crplatform.linux.staging.server_<SC_IP>=<Staging_server_IP>
crplatform.windows.staging.server_<SC_IP>=<Staging_server_IP>
crplatform.cisco.staging.server_<SC_IP>=<Staging_server_IP>
crplatform.dvs.staging.server_<SC_IP>=<Staging_server_IP>
You can either use the same Site Controller and Staging Server or different combination
for each component shown in this section.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 48
For Example:
a) Linux can use <SC_IP1> and <Stage_server_IP1>
Cisco can use <SC_IP1> and <Stage_server_IP1>
DVS can use <SC_IP1> and <Stage_server_IP1>
b) Linux can use <SC_IP2> and <Stage_server_IP1>
Cisco can use <SC_IP1> and <Stage_server_IP2>
DVS can use <SC_IP3> and <Stage_server_IP3>
5.5.1.2 Mapping Folder
You need to use the default settings, or you can provide the path for the following default folders:
Note: It is highly recommended that the user should use default settings.
a. Temporary folder location on Staging Server: You can use the following path for the corresponding temporary folder location on Staging Server:
crplatform.linux.tempDir=/tmp/
crplatform.windows.tempDir=C:/tmp/
crplatform.cisco.tempDir=/tmp/
crplatform.dvs.tempDir=/tmp/
b. Path for Golden copy folders: You can use the following path for the corresponding golden copy on Staging Server:
crplatform.staging.linux.goldenCopyDir=/goldenCopy/
crplatform.staging.windows.goldenCopyDir=C:/goldenCopy/
crplatform.staging.cisco.goldenCopyDir=/goldenCopy/
crplatform.staging.dvs.goldenCopyDir=/goldenCopy/
c. Diff result folders: You can use the following path for the corresponding diff result folders on Staging Server:
crplatform.staging.linux.diffResultDir=/diffFileResult/
crplatform.staging.windows.diffResultDir=C:/diffFileResult/
crplatform.staging.cisco.diffResultDir=/diffFileResult/
crplatform.staging.dvs.diffResultDir=/diffFileResult/
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 49
5.5.1.3 IBM COS Mount Storage
The following are configuration parameters for mounting IBM COS:
crplatform.CLOUD_TYPE=IBM
<Organization_Name>=<bucket_name>
For Example: Default=Newbucket
Note: The user needs to provide the organization name and the bucket name that is created in IBM Object storage.
crplatform.CRED_FILE_PATH=<COS_password_file_path>
For Example: crplatform.CRED_FILE_PATH=$HOME/.cos_creds
5.5.1.4 Configuring Jump Box for Cisco
You need to perform the following steps to configure Jump Box(Dependent component) for Cisco:
1. Configure jump box in panaces.properties file as shown in the following snippet.
crplatform.cisco.dependent_comp_<CISCO_IP>=<DEPENDENT_COMP_
_IP>
2. Discover the jump box as Linux Component from UI.
Note: If Jump box is not configured in property file, or Jump box is not discovered as Linux component from UI, Cisco RALs uses Site controller as dependent component.
Restart the Panaces Server when the settings are performed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 50
6 Installing IBM Resiliency Orchestration Server on Linux Cluster in the Graphical
Mode
This chapter outlines the procedures for installing IBM Resiliency Orchestration Server on Linux Cluster.
6.1 System Requirements
For the system requirements for installing IBM Resiliency Orchestration Server on Linux Cluster.
Note
Ensure that IBM Resiliency Orchestration Server installation location is on the shared
volume. This is the location of the installed software as explained in the sections below.
6.2 Installation of Resiliency Orchestration Server
IBM Resiliency Orchestration Server Software is installed on a dedicated Linux Server as the IBM Resiliency Orchestration Master. The server software requires the IBM Resiliency Orchestration Server Platform package and MariaDB software to be installed on the same server.
The cluster management system features data integrity and application availability, using redundant hardware, shared disk storage, power management, robust cluster communication and application failover mechanisms.
Perform the following steps on the dedicated Linux Server to install and setup the IBM Resiliency Orchestration Master Server:
1. Install the Linux Enterprise Server OS (RHEL 7.1 or 7.3).
2. Install Linux Cluster with these configurations: DLM mode, GFS Shared file system with a minimum of 30 GB, IP service and script service for MariaDB, and IBM Resiliency Orchestration.
3. Install the MariaDB 10.1.19 (for RHEL 7.3) standard software and MariaDB 10.1.16 (for RHEL 7.1). The MariaDB 10.1.19 database should be in the shared disk.
4. Install the IBM Resiliency Orchestration Server Software.
5. Set up the environment.
Note
Refer to Step 5 under Installation of IBM Resiliency Orchestration Server Platform
on Linux Cluster Nodes to set up the environment.
Follow the sections given below to complete the IBM Resiliency Orchestration Server installation.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 51
6.2.1 Installation of Linux Enterprise Server OS
1. Install the Linux Enterprise Server OS without firewall settings and MariaDB database package.
IBM Resiliency Orchestration uses the following ports:
For accessing the Resiliency Orchestration GUI - ports 8443
For communication among the Resiliency Orchestration and Site Controller, and Agents – ports 42443 and 45443
Important:
Ensure to allow the required ports when configuring the Firewall at the Operating System
level.
2. Allow the software to install the packages selected by default and choose all packages available under ‗Development‘ list, and make sure that "Postgre SQL Database and MariaDB Database" are not selected under ‗Server‘ list. Do not click ―Details‖ hyperlink to make further selections.
3. Edit the file /etc/sysconfig/selinux to include the option "SELINUX=permissive".
4. Check /etc/hosts file to ascertain if localhost alias exists or not. If it doesn‘t exist, add the localhost alias, and the IP address of the IBM Resiliency Orchestration Server system.
For Example: 127.0.0.1 localhost localhost
<ip-address> <localhost> <hostname>
6.2.2 Installation of Linux Cluster
Install Linux Cluster version 1.9.43 with DLM Mode for GFS shared volume and IP service. To install and configure Linux cluster refer to the following documents:
RED HAT Cluster suite rh-cs-en-4 and rh-gfs-en-6_1 from RED HAT
6.2.3 Additional Settings for Linux Installation
1. Open a terminal, log in as root and issue the following command, whenever the system is rebooted.:
# /sbin/sysctl -w net.ipv4.tcp_retries2=4
2. To avoid this, perform the following steps:
Open the ‗conf‘ file by issuing the following command:
vi /etc/sysctl.conf
Add the following statement and save it:
edit /etc/sysctl.conf with “net.ipv4.tcp_retries2=4” at the end of
the file.
3. Reboot the system.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 52
6.2.4 Installation of IBM Resiliency Orchestration Server Platform on
Linux Cluster Nodes
Use the ―clusvcadm‖ utility to relocate user services between cluster nodes for installation, and perform the following steps to install IBM Resiliency Orchestration Server platform on two cluster nodes, for example, it can be Cluster Node A and Cluster Node B.
1. Create a directory titled ‗mysql‘ in <shared cluster volume> by issuing the following command, only if it does not exist:
cd /<shared volume>
mkdir mysql
2. Create Soft link for ‗Mysql‘ Database folder by issuing the following command:
cd /var/lib
ln –s <shared Cluster Volume>/mysql /mysql
3. Create ‗panaces‘ folder under the shared volume. To create it, run following command at the shared volume:
mkdir <shared volume> /panaces
4. Once ―panaces‖ link is created, check for its existence with the following command:
ls panaces (or) ls
5. Set up environment variable EAMSROOT to /opt/panaces at command line:
export EAMSROOT=/opt/panaces
6.2.5 Post-Installations of IBM Resiliency Orchestration Server
Platform on Linux Cluster
Use the ―clusvcadm‖ utility to relocate cluster to a cluster node, for example, Cluster Node A, and perform the following steps:
1. Start MariaDB services whenever the system is rebooted by issuing the following command:
# /etc/init/mysql start &
2. Check whether you are able to log in to MariaDB as root, using the following command:
# mysql -u root
6.2.6 Installation of Resiliency Orchestration Server Software
For the procedure to install IBM Resiliency Orchestration Server software, refer to the section Installation of Resiliency Orchestration Server:
6.3 Starting and Stopping Resiliency Orchestration Server
For the procedures to start and stop IBM Resiliency Orchestration Server, see Starting and Stopping Resiliency Orchestration Server.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 53
6.4 Configuring Linux Cluster
The following information applies to Red Hat Linux Enterprise Linux 5.0 Server edition.
In Linux Cluster, configure MariaDB and IBM Resiliency Orchestration application startup files as script files for application failover. Linux Cluster will start and stop the application from these script files.
To configure MariaDB and IBM Resiliency Orchestration applications on the cluster, create the following scripts files on /opt/panaces/bin folder.
Create Mysqlbat.sh file for MariaDB Server and type the following code:
start()
{
sh /etc/init.d/mysql start
}
stop()
{
sh /etc/init.d/mysql stop
}
status()
{
mysqladmin status
}
if [ "#1" = "start" ] ; then
start
elif [ "#1" = "stop" ] ; then
stop
elif [ "#1" = "status" ] ; then
status
fi
6.4.1 Linux Cluster Checking the Application Status by Exit Code
For IBM Resiliency Orchestration Linux cluster integration, add the following exit code value in installation folder/panaces/bin/panaces.sh file.
Find the status() function in panaces file. Add exit 9 as given in the code below:
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 54
status()
{ add the following case in Panaces Binary
panaces_running
if [ #? = 0 ] ; then
echo "Panaces server is not running"
exit 9
else
echo "Panaces server is running"
fi
tomcat_running
if [ #? = 0 ] ; then
echo "Tomcat server is not running"
exit 9
else
echo "Tomcat server is running"
fi
}
A sample Cluster Configuration is given below:
<resources>
<clusterfs device="/dev/sdb1" force_unmount="1" fstype="gfs"
mountpoint="/panacs" name="mygfs" options=""/>
<ip address="<IP>" monitor_link="1"/>
<script file="/opt/panaces/bin/panaces.sh" name="Panaces"/>
<script file="/opt/panaces/bin/mysqlbat.sh" name="mysql"/
</resources>
Note
After the installation is complete, relocate the cluster and test the application’s function
from both the servers.
6.4.2 Linux Cluster Administration
For Linux cluster administration, refer to Red Hat Linux Documentation
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 55
7 Installing the IBM Resiliency Orchestration Server on Linux in the Silent Mode
When you install IBM Resiliency Orchestration in Silent mode, the installation program uses the .properties file for server (PanacesServerInstaller.properties) as well as agents (PanacesAgentsInstaller.properties), to determine which installation options should be implemented. Therefore, before you can run the installation program in Silent mode, you must edit the respective properties file in which you specify the installation options that you want to invoke, while performing the IBM Resiliency Orchestration Server and Agents installation.
7.1 Editing the Properties File
Perform the following steps to edit the properties files.
1. Download the Binaries and properties files from the IBM Passport Advantage site to a location on the intended Resiliency Orchestration Server, Assuming binary file and property files are available in /opt/Server and the logged in user has sudo permissions equivalent to root
2. Open the properties file by using the following command:
cd /opt/Server
sudo vi PanacesServerInstaller.properties
3. Modify the respective properties file for the key words shown in the following tables, to reflect your configuration.
7.1.1 PanacesServerInstaller.properties file
The following table describes the keywords in the PanacesServerInstaller.properties file.
Key word Description
INSTALLER_UI Displays the mode of installation as “silent”.
MODIFY_SYSTEM_FILES=1 It modifies system files, i.e.
/etc/hosts,/etc/sysconfig/selinux,
/etc/sysctl.conf
KEYSTORE_FILE_PATH Add the keystore path.
For example:
/opt/panaces/installconfig/keystore/sanovi.key
store
USER_INSTALL_DIR Enter the default path for the directory to
install the IBM Resiliency Orchestration Server
software.(default path is /opt/panaces/ )
REFRESH_EXISTING_SCHEMA When the Schema Refresh option is chosen,
the old schema which is already available in
the system will be refreshed.Default is 0, if set
to 0 the schema will not be refreshed and
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 56
Key word Description
when set to 1 schema will be refreshed/reset.
STOP_IBM_RESILIENCY_ORCHESTR
ATION_AND_UNINSTALL
If set to 1, it will stop the running services and
uninstall.
If set to 0, the services will be running and the
uninstaller will quit. The logs will be available
in the \temp directory.
MariaDB_ROOT_PASSWORD Enter the password to connect to the MariaDB
database.
Note: If password is not present, keep the
field empty.
USER_MANAGEMENT_MODE Basic ADVANCED
ADVANCED_SERVER_TYPE NA LDAP or AD
Default: AD
ADVANCED_SERVER_URL NA Enter the Advanced Server URL of
AD/ LDAP Server
ADVANCED_SERVER_DOMAIN NA The Server Domain is applicable
only to AD.
Note: we should not enter domain
for LDAP
DIRECTORY_USERNAME NA Enter the User name for reading
the external system for AD/LDAP
Server.
DIRECTORY_PASSWORD NA Enter the Password for reading
the external system for AD/ LDAP
Server.
SEARCH_BASE_FOR_READING_ROL
ES
NA Enter the searchbase string for
AD/ LDAP Server.
LICENSE_ACCEPTED Enter the value “TRUE” Otherwise, the
Installation will display an error message as
EULA is not accepted.
SUPPORT_USER_PASSWORD Enter the password for support user(default
=Drmsupport123$).
TOMCAT_HOME Enter the Tomcat Installation directory path.
7.1.2 PanacesAgentsInstaller.properties file
The following table describes the keywords in the
PanacesAgentsInstaller.properties file.
Keyword Description
INSTALLER_UI Displays the mode of installation as “silent”.
MSSQL_AGENT_WINDOWS_CHK
Sanovi File replicator _AGENT_CHK
SYBASE_AGENT_SOL_CHK
Enter 1 to install the agent.
Enter 0 to not install the agent.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 57
Keyword Description
SRS_AGENT_CHK
ORACLE_AGENT_CHK
ORACLE_DATA_GUARD_AGENT_CHK
TRUE_COPY_AGENT_CHK
SRDF_AGENT_CHK
HPXP_AGENT_CHK
DB2_AGENT_CHK
POSTGRES_AGENT_CHK
USER_INPUT_RESULT_JAR_MSSQL Enter the full path of the directory where the
MSSQL Jar files have been installed.
For example: On Windows, the location of the
Jar files would be C:\Program Files\Microsoft
SQL Server 2000 or 2005 Driver for JDBC\lib
USER_INPUT_ORACLE_HOME Enter the full path of the directory where the
Oracle is installed.
USER_INPUT_RESULT_JAR_ORA Enter the full path of the directory where the
Oracle Jar files have been installed.
Usually it is $ORACLE_HOME/jdbc/lib
USER_INPUT_RESULT_JLIB_ORA Enter the full path of directory where jar
libraray files are located. Usually it is
$ORACLE_HOME/jlib
USER_INPUT_RESULT_JAR_SYBASE Enter the full path of the directory where the
Sybase Jar files have been installed.
For Example: <sybase installation
path>/jConnect-5_5/classes.
USER_INPUT_RESULT_SYBASE_LOG
IN
Enter the Sybase Admin login ID.
USER_INPUT_RESULT_PRIMARY_PA
NACES_SERVER_IP
Enter the IP address of the primary server.
USER_INPUT_RESULT_SECONDARY_
PANACES_SERVER_IP
Enter the IP address of the secondary server.
PANACES_AGENT_NODE_ADDRESS Enter the IP address of IBM Resiliency
Orchestration Agent.
REG_PANACES_CLASSPATH Displays the IBM Resiliency Orchestration
classpath. By default, the following classpath
is displyed:
lax.nl.env.PANACES_CLASSPATH
USER_INPUT_RESULT_DB2DIR Enter DB2 installation path
USER_INPUT_RESULT_DB2_INSTAN
CEUSER
Enter DB2 instance username
USER_INSTALL_DIR The full pathname for the directory in which
you want to install the agent software.
AGENTS_START_YES Enter 1 if you want to start the agents
automatically after the IBM Resiliency
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 58
Keyword Description
Orchestration installation.
Enter 0 if you want to start the agents
manually.
Refer to the Starting and Stopping of Agents
in the respective Installation of Agents chapter
in this guide for more information.
USER_INPUT_RESULT_POSTGRES_L
OGIN
By default, "postgres" will be prefilled as the
login ID.
USER_INPUT_RESULT_NAT_IP NAT IP Address
USER_INPUT_RESULT_SITE_CONTR
OLLER_IP
Enter Site Controller IP address.
CHOSEN_INSTALL_SET= Enter Upgrade
Note: This is used only during Upgrade
1. Execute the following command to start the installation.
sudo /opt/Server/install.bin –f
/opt/Server/PanacesServerInstaller.properties
2. Follow the Post Installation Steps.
Note
Restart the Resiliency Orchestration Server after updating the parameters in the above
table
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 59
8 Configuring Resiliency Orchestration Server
You can configure the Resiliency Orchestration application Server for the following mandatory and optional features:
Mandatory Features
Configuring Resiliency Orchestration application to use the MariaDB
Server (OS) Hardening
Running the SecurityUserInjection script
Optional Features
Configuring Resiliency Orchestration for Optimal Performance
Configuring Resiliency Orchestration to use the Resiliency File Replicator (SFR)
8.1 Configuring Resiliency Orchestration application to use the MariaDB
The Resiliency Orchestration application software is installed with a preset User credentials for accessing the MariaDB. You can configure IBM Resiliency Orchestration application software to use a different MariaDB user credentials.
You must first set up a new user credentials after installing the MariaDB. For
instructions, see Creating New Users in MariaDB. Ensure that the new user you
create in the MariaDB is set up with all privileges.
To configure the Resiliency Orchestration application software for the new MariaDB user, complete the following steps:
1. Navigate to the directory where the Resiliency Orchestration application software is installed, by entering the following command at the command prompt:
# cd installconfig
2. In this directory, enter the following command at the command prompt to display the properties file for the Resiliency Orchestration application:
# vi panaces.properties file
3. In the panaces.properties file change the preset value for the parameter
panaces.mysql.username, to the new user name that you created in the
MariaDB. The preset parameter for the MariaDB user is set as panaces.
panaces.mysql.username = <new mariadb user>
4. Save and close the panaces.properties file.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 60
8.2 Configuring Resiliency Orchestration with different MariaDB user password
When password(s) for the MariaDB users are changed, perform the following steps to configure IBM Resiliency Orchestration with the new password.
1. Navigate to user installation directory (where IBM Resiliency Orchestration Server is installed). To navigate to the bin directory, enter the following command at the command prompt:
# cd bin
2. To provide MariaDB user password for Resiliency Orchestration Server, run the following command:
# sudo ./changeDBPassword.sh panaces.mysql.password
3. Upon running the above command, you will be prompted to provide the password. Provide the password and press 'enter'. Password(s) provided will be encrypted and saved into panaces.properties file.
8.3 Server (OS) Hardening
Complete the following steps to harden the Resiliency Orchestration Server:
Note
$EAMSROOT will point to the Resiliency Orchestration installation directory. For
Example: /opt/panaces/ is the $EAMSROOT.
1. Set the password for IBM user
passwd sanovi
2. Change to bin directory
cd $EAMSROOT/bin
3. Execute the script to secure the server
./serverHardening.sh
4. Reboot the server to take effect of changes for server hardening with the following command
reboot
5. Since the root user is disabled, Login using sanovi user
6. Change directory by entering the following command:
cd $EAMSROOT
As the server is hardened now, you must prefix sudo for all commands you run subsequently. For example, to start Resiliency Orchestration services, you can run the following command:
sudo ./panaces start
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 61
7. Run the SecurityUserInjection script. For instructions, see Running the
SecurityUserInjection script.
Important
If the Server Hardening script has been executed and permission level changed in
$EAMSROOT/* or $TOMCAT_HOME/* by any new folders or files created such as by
advanced reporter, birt, and so on, you must execute SecurityUserInjection.sh script.
8.4 Running the SecurityUserInjection script
After the Server OS is hardened the first time, whenever you edit or add files or folders in the Resiliency Orchestration application software you must ensure that you run the SecurityUserInjection script.
Complete the following steps to run the SecurityUserInjection script:
1. Go to $EAMSROOT/bin/
2. Run the following command:
sudo SecurityUserInjection.sh
8.5 Configuring Resiliency Orchestration for Optimal Performance
Depending on the expected number of groups that will be supported by IBM Resiliency Orchestration Software, Java maximum heap memory limit parameter needs to be specified. It is defined in the variable named DRM_SERVER_JVM_MEM, which is located at starting lines of the Resiliency Orchestration startup script named panaces available under $EAMSROOT/bin/. Default value of this variable is set to -Xmx2048m.
Update the following parameters shown in Table 12 for optimal performance
depending on the expected number of recovery groups for your installation:
Table 12. Configuring Resiliency Orchestration Server for optimal
performance
No. of Recovery Groups
File Name and Path Parameters Value
250 $EAMSROOT/installconfig/pan
aces.properties
panaces.mysql.maxconnection 500
$EAMSROOT/installconfig/pan
aces.properties
panaces.acp.server.concurrentReq
uestProcessCount
500
/etc/my.cnf max_connections 500
500 $EAMSROOT/installconfig/pan
aces.properties
panaces.mysql.maxconnection 1000
$EAMSROOT/installconfig/pan
aces.properties
panaces.acp.server.concurrentReq
uestProcessCount
1000
/etc/my.cnf max_connections 1000
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 62
The panaces.acp.server.concurrentRequestProcessCount parameter is to set the number of threads that process the messages from agents.
The panaces.mysql.maxconnection parameter is to set the number of open mysql connections to DB.
For an optimal performance, you can set the number of processes for Resiliency Orchestration at a value equal to 10000. You can set this limit in /etc/security/limits.conf file. Edit this file by altering or appending the following to set the limit:
root soft nproc 10240
root hard nproc 10240
root soft nofile 20480
root hard nofile 20480
After making these changes, restart the Resiliency Orchestration Application Server. For instructions to start the Resiliency Orchestration Server, see .
Note
By default, IBM Resiliency Orchestration Server and Agents communication is secure
with TLS using TLSv1.2 protocol.
Resiliency Orchestration also provides support for lower communication protocols: SSL and NONSECURE for communication between Resiliency Orchestration Server and Agents.
The property panaces.acp.communicationType in
<EAMS_ROOT>/installconfig/panaces.properties is used to set the
communication protocol between Resiliency Orchestration Server and Agents.
You need to configure the Resiliency Orchestration Server and Agents to use the same communication type.
Resiliency
Orchestration
Server
New Local Agents Old Local Agents
SECURE SECURE SECURE
NONSECURE NONSECURE NONSECURE
SECUREWITHTLS SECUREWITHTLS (TLS1.2) SECUREWITHTLS
(TLS1.0)
The Resiliency Orchestration Server supports backward compatibility for old agents. If the Resiliency Orchestration Server is configured with SECUREWITHTLS, the user needs to configure old agents also with SECUREWITHTLS and TLS1.0 protocol is used for communication with old agents. If the configuration change is performed, the user needs to restart the old
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 63
agents. If the old agents are upgraded to newer versions, the TLS1.2 protocol is used for communication.
Some properties enables the user to choose a specific protocol and cipher. If no specific protocol is mentioned, Resiliency Orchestration Server will accept TLSv1.2, TLSv1.1, and TLSv1.0 connections as follows:
panaces.acp.communicationTLSProtocolVersion = TLSv1.2,TLSv1.1,TLSv1
If no specific cipher is mentioned, a default cipher is used to encrypt and decrypt the data over Resiliency Orchestration Agent communication as follows:
panaces.acp.communicationTLSCipher = default
8.6 Configuration Changes in Tomcat
You should use secure mode of GUI access. The following are the steps to enable secure mode of GUI access (redirects nonsecure access to secure access):
1. Get the KEYSTORE file with the password.
The default Sanovi KEYSTORE file/Password(Certificate) is shipped with product.
To use a Customer certificate, get the KEYSTORE file and password from customer.
2. Open server.xml using, sudo vi $TOMCAT_HOME/conf/server.xml
3. Add/edit the below connectors with the following details to update the file: (Assuming EAMSROOT as /opt/panaces)
Use the following details for nonsecure to secure redirection configuration:
<Connector executor="tomcatThreadPool"
port="8080" protocol="HTTP/1.1"
connectionTimeout="20000"
redirectPort="8443" compression="on"
compressionMinSize="2048"
nocompressionUserAgents="gozilla, traviata"
compressableMimeType="text/html,text/xml,text/plain,text/css,t
ext/javascri
pt,text/json,application/x-
javascript,application/javascript,application/json"/>
<Connector port="8443"
protocol="org.apache.coyote.http11.Http11NioProtocol"
SLEnabled="true"
maxThreads="150" scheme="https" secure="true"
minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" disableUploadTimeout="true"
clientAuth="false" sslEnabledProtocols="TLSv1"
keystoreFile="/opt/panaces/installconfig/keystore/sanovi.keyst
ore"
keystorePass="^vMkT%678#4-06Gjue672Kwo95dzg" compression="on"
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 64
compressionMinSize="2048"
nocompressionUserAgents="gozilla,traviata"
compressableMimeType="text/html,text/xml,text/plain,text/css,t
ext/javascri
pt,text/json,application/x-
javascript,application/javascript,application/json"/>
Use the following details for default port configuration:
Note
The default port configuration requires the tomcat services to be started with root
user.
<Connector executor="tomcatThreadPool"
port="80" protocol="HTTP/1.1"
connectionTimeout="20000"
redirectPort="443" compression="on"
compressionMinSize="2048"
nocompressionUserAgents="gozilla, traviata"
compressableMimeType="text/html,text/xml,text/plain,text/css,t
ext/javascri
pt,text/json,application/x-
javascript,application/javascript,application/json"/>
<Connector port="443"
protocol="org.apache.coyote.http11.Http11NioProtocol"
SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" disableUploadTimeout="true"
clientAuth="false" sslEnabledProtocols="TLSv1"
keystoreFile="/opt/panaces/installconfig/keystore/sanovi.keyst
ore"
keystorePass="^vMkT%678#4-06Gjue672Kwo95dzg" compression="on"
compressionMinSize="2048"
nocompressionUserAgents="gozilla,traviata"
compressableMimeType="text/html,text/xml,text/plain,text/css,t
ext/javascri
pt,text/json,application/x-
javascript,application/javascript,application/json"/>
4. Open $TOMCAT_HOME/webapps/PanacesGUI/WEB-INF/web.xml
Search for servlet-mapping --- at /app/*. The searched content displays the following snippet:
<servlet-mapping>
<servlet-name>spring</servlet-name>
<url-pattern>/app/*</url-pattern>
</servlet-mapping>
Add the following content after </servlet-mapping>
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 65
<security-constraint>
<web-resource-collection>
<web-resource-name>Entire Application</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
Restart the Resiliency Orchestration services , with the following command:
sudo $EAMSROOT/bin/panaces restart
Port number is not required in the URL while accessing Resiliency Orchestration GUI and IBM Resiliency File Replicator GUI through browser.
For Example: If the user enters in weburl as http:// <Resiliency Orchestration IP>/PanacesGUI, it auto redirects the web url to https:// =<Resiliency Orchestration IP>/PanacesGUI
8.7 Port Forwarding
IBM Resiliency Orchestration uses the following ports:
8443: The port 8443 needs to be opened for secure GUI access
22: The port 22 needs to be opened for communicating with Low touch agent
80: The port 80 needs to be opened for HTTP for IBM upgrade assist
42443 and 45443: The ports 42443 and 45443, need to be opened for secured communication amongst Resiliency Orchestration Server, Site Controller, and Agents.
You can reduce the number of open ports by using the following Port forwarding procedures.
8.7.1 Prerequisites for Port Forwarding
The following are prerequisites for port forwarding:
Httpd service. Apache service should be installed
Server Certificate
SSLCertificateKeyFile
http modules: Mod_ssl, mod_proxy, mod_proxy_http
8.7.2 Configuring ActiveMQ Broker to support Port Forwarding
To configure the ActiveMQ Broker to support the Port Forwarding, complete the following tasks:
Enabling HTTPS Transport Connector
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 66
Importing HTTPD Certificate
Configuring Site Controller for Port Forwarding
8.7.2.1 Enabling HTTPS Transport Connector
1. Go to the <Resiliency Orchestration installation path>/tools/apache-activemq-5.13.2/conf/ folder and open the files activemq-security.xml and activemq.xml
2. Uncomment the line starting with the string <transportConnector name="https"
Note
For https port forwarding, the host name of the server in which Site Controller is installed
should not have special characters.
8.7.2.2 Importing HTTPD Certificate
You need to perform the following steps for importing httpd certificate:
1. Copy the SSL Server certificate, which is used in the httpd configuration section, to a folder.
2. Run the following command to import httpd certificate to /opt/panaces/installconfig/keystore/panacesACP.truststore:
keytool -import -alias "panacesacp_keystore" -file <httpd
certificate, which is copied in the folder> -keystore
$EAMSROOT\installconfig\keystore\panacesACP.trustStore
3. Enter the default password: uyts637KHDS337$%
Note
It is recommended that the users should create own truststore and keystore and use it as
corresponding values for the truststore and keystore. The users should also create own
password.
8.7.2.3 Configuring Site Controller for Port Forwarding
You need to perform the following steps for setting up the Site Controller to communicate with the Resiliency Orchestration on the HTTPS port:
Replacing the Port and Protocol attributes in the Sitecontroller.cfg file
Go to: ${EAMSROOT}/installconfig/
Open the Sitecontroller.cfg file
Update the Port and Protocol attributes as shown in the following example:
MQ_RO_CONNECTION_PROTOCOL=https
MQ_RO_CONNECTION_PORT=43443
Save the Sitecontroller.cfg file
8.7.3 Configuration
This section describes port forwarding from secure https (443) to the following ports:
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 67
Resiliency Orchestration Server secure tomcat secure port 8443
Resiliency Orchestration Server nonsecure tomcat port 8080
Resiliency Orchestration features using other ports 8082
ActiveMQ Broker feature that uses port 43443
ActiveMQ Admin Console that uses port 8162 (optional)
You must perform the following steps for enabling port forwarding:
8.7.4 HTTP configuration (/etc/httpd/conf/httpd.conf)
The user needs to perform the following http configuration:
1. Run the following command to enable proxy_module, proxy_http_module, and mod_ssl module in /etc/httpd/conf/httpd.conf folder of Apache Web Server.
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_http_module
modules/mod_proxy_http.so
LoadModule ssl_module modules/mod_ssl.so
2. Run the following command to provide the path to refer to the ssl.conf file.
Include conf.d/ssl.conf
3. In SSL, specify the following details so that Port 443 should be listening.
Listen 443 ssl
Listen 80
4. The user needs to provide the following proxy configuration and forward the configuration.
ProxyRequests Off
# Control Client Access
<Proxy https://<IP:8443/>Order Deny,Allow
Allow from all
</Proxy>
# Set TCP/IP network buffer size for better throughput (bytes)
ProxyReceiveBufferSize 4096
ServerName localhost
ProxyPass /PanacesGUI https://<IP>:8443/PanacesGUI
ProxyPassReverse /PanacesGUI https://<IP>:8443/PanacesGUI
ProxyPass /rmi http://<IP>:8081/rmi
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 68
ProxyPassReverse /rmi http://<IP>:8081/rmi
ProxyPass /rmi http://<IP>:80/rmi
ProxyPassReverse /rmi http://<IP>:80/rmi
ProxyPass /IBMRODashboard https://<IP>:8443/IBMRODashboard
ProxyPassReverse /IBMRODashboard https://<IP>:8443/IBMRODashboard
ProxyPass /cdrm-ws http://<IP>:8080/cdrm-ws
ProxyPassReverse /cdrm-ws http://<IP>:8080/cdrm-ws
ProxyPass /rest http://<IP>:8082/rest
ProxyPassReverse /rest http://<IP>:8082/restote
ProxyPass /admin https://<IP>/admin
ProxyPassReverse /admin https://<IP>/admin
ProxyPass /MQB https://<IP>:43443/MQB
ProxyPassReverse /MQB https://<IP>:43443/MQB
Timeout 2400
ProxyTimeout 2400
ProxyBadHeader Ignore
ServerRoot "/etc/httpd"
Note: The user needs to perform this configuration, if required.
For Example: If the requirement is Site Dashboard, the user needs to add
IBMRODashboard proxy entries.
8.7.5 SSL configuration (/etc/httpd/conf.d/ssl.conf)
The user needs to provide the following configurations for SSL (specified in bold are configured, you need to specify the certificate and key path as per customer environment):
Comment 443 port https port: The user needs to provide the following details to configure SSL for listening to 443 https port.
#Listen 443 https
8.7.6 Server Certificate
The user needs to specify SSLCertificateFile at a PEM encoded certificate. If the certificate is encrypted, the server prompts for a pass phrase.
Note
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 69
A kill-HUP will prompt again. A new certificate can be generated using the genkey(1)
command.
The user needs to provide the following details to configure SSL Server certificate.
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
For Example: You need to provide the following details to configure SSL Server certificate in Resiliency Orchestration Server.
SSLCertificateFile /opt/tomcat7/conf/ibm.crt
Server Private Key: If the key is not combined with the certificate, you need to specify the key file.
Note
If you have a RSA and a DSA private key, you can configure the keys in parallel to also
allow the use of DSA ciphers, and so on.
The user needs to provide the following details to configure SSL Server private key:
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
For Example: You need to provide the following details to configure SSL Server private key in Resiliency Orchestration Server.
SSLCertificateKeyFile {TOMCAT_HOME}/conf/ibm.key
Enable/Disable SSL for this virtual host: The user needs to provide the following details to enable/disable SSL for the virtual host.
SSLEngine on
SSLProxyEngine on
SSLProxyVerify none
SSLProxyCheckPeerCN off
SSLProxyCheckPeerName off
SSL Protocol support: The user needs to provide the following details for SSL protocol support:
List the enable protocol levels with which clients will be able to connect.
Disable SSLv2 access by default.
Uncomment the following command to Disable all, enable requried
#SSLProtocol –ALL +TLSv1 +TLSv1.1 +TLSv1.2
Enable all, disable required as shown in the following command.
SSLProtocol all -SSLv2 -SSLv3
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 70
Inter-Process Session Cache: You need to provide the mechanism to use and then the expiring timeout (in seconds) to configure the SSL session cache as shown in the following snippet:
# SSLSessionCache shmcb:/run/httpd/sslcache(512000)
SSLSessionCache dbm:/run/httpd/sslcache
SSLSessionCacheTimeout 300
8.8 Steps to Enable Compression in Tomcat Server
Below tag in the server.xml enables compression.
Note
Compression will be enabled if the file size is more than 2KB.
Connector port=“8080” maxHttpHeaderSize=“8192”
maxThreads=“150” minSpareThreads=“25” maxSpareThreads=“75”
enableLookups=“false” redirectPort=“8443” acceptCount=“100”
compressionMinSize=“2048”
compression=“on”
compressableMimeType=“text/html,text/xml,text/plain,text/css,
text/javascript,text/json,application/x-javascript,
application/javascript,application/json”
connectionTimeout=“20000” disableUploadTimeout=“true”
URIEncoding=“utf-8” />
<Connector port=“8443” maxHttpHeaderSize=“8192”
maxThreads=“150” minSpareThreads=“25” maxSpareThreads=“75”
enableLookups=“false” disableUploadTimeout=“true”
acceptCount=“100” scheme=“https” secure=“true”
compressionMinSize=“2048”
compression=“on”
compressableMimeType=“text/html,text/xml,text/plain,text/css,
text/javascript,text/json,application/x-javascript,
application/javascript,application/json”
client{uth=“false” sslEnabledProtocols=“TLSv1”
keystoreFile="{EAMSROOT}/installconfig/keystore/sanovi.keystore"
keystorePass="^vMkT%678#4-06Gjue672Kwo95dzg"/>
Note
To change security constraint in web.xml, user have to wait till war is extracted in the first
start.
8.9 Configuring Current Events
User can view more/less events by changing the value of "sanovi.events.displayDuration.hours" in $EAMSROOT/installconfig/panaces.properties file. If this parameter is not specified or invalid integer is specified, then it will be defaulted to 120hrs. Specifying zero might result in no events or very few events occurred within a past few seconds to be shown. It should be noted that changing this parameter will also affect the number of events shown in "Monitor->Continuity" listing page. User is
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 71
expected to use "Event Reports" if he wants to see history of events for a longer duration (say months) as supposed to increasing this parameter. Changing this value does not require a server restart and this value will be taken when the next refresh of the page happens.
Something here The aging period can be configured by editing/adding "sanovi.closeEventsInDays" property in $EAMSROOT/installconfig/panaces.properties file. The value for this property should be a numeric value representing number of days. If this property is not specified or invalid value is provided, the System default it to 5 days. Specifying zero will disable automatic Closure of events. Altering this property does not require restart of Resiliency Orchestration Server.
8.9.1 Logs Retention
Server logs and Site Controller logs are written at $EAMSROOT/var/log and for the remote agent logs in Site Controller are written at $EAMSROOT/remote/var/log
The logs retention will be default set to 7 days, however this can configurable.
For Resiliency Orchestration Server and Site Controller to configure the log retention update the purge.server.logfiles parameter in $EAMSROOT/installconfig/panaces.properties
For remote agents in Site Controller to configure the log retention update the purge.server.logfiles parameter in $EAMSROOT/remote/installconfig/panaces.properties.
8.9.2 Fetch Logs
When the panaces is running with nonroot, the system logs will not be fetched until read permission is granted for the nonroot user. The nonroot user, by default, does not have read permission for the system logs (/var/log/messages and so on).
8.10 Troubleshooting Proxy Errors
Issue: Once the port forwarding configuration done, while accessing application with https://<IP>/PanacesGUI (which means accessing with default secure port) you may get the following error:
The proxy server could not handle the request GET /PanacesGUI/
Reason: Error during SSL Handshake with remote server‖
Resolution: The SSL handshake issue will come if remote server certificate name
validation fails or the keystore certificate expires, So update the ssl.conf file with
parameters “SSLProxyCheckPeerName off” and “SSLProxyCheckPeerCN off”
Assuming the keystore for the tomcat is not expired, if expired as a workaround
set “SSLProxyCheckPeerExpire off” however, it is recommended to renew the tomcat keystore certificate.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 72
Once set , restart the httpd service using the command: sudo systemctl restart httpd
8.10.1 Preset Users for Resiliency File Replicator (SFR)
During the installation of the Resiliency Orchestration application software, the following Resiliency File Replicator (SFR) user is created with all privileges:
pfradmin
The Resiliency Orchestration application software is configured to use the
pfradmin User for accessing the Resiliency File Replicator, until you change the
user in the Resiliency File Replicator.
8.11 Configuring Resiliency Orchestration application to use the Resiliency File Replicator
The Resiliency Orchestration application software is installed with a preset User credentials for accessing the Resiliency File Replicator. You can configure IBM Resiliency Orchestration application software to use a different Resiliency File Replicator user credentials.
You must first set up a new user credentials after installing the Resiliency File Replicator. Ensure that the new user you create in the Resiliency File Replicator is set up with all privileges.
To configure the Resiliency Orchestration application software for the new Resiliency File Replicator user, complete the following steps:
1. Navigate to the directory where the Resiliency Orchestration application software is installed, by entering the following command at the command prompt:
# cd installconfig
2. In this directory, enter the following command at the command prompt to display the properties file for the Resiliency Orchestration application:
# vi panaces.properties file
3. In the panaces.properties file change the preset value for the parameter
panaces.mysql.username, to the new user name that you created in the Resiliency File Replicator. The preset parameter for the Resiliency File
Replicator user is set as pfradmin.
panaces.mysql.username = <new pfr user>
4. Save and close the panaces.properties file.
8.12 Localizing the IBM Resiliency Orchestration Application for languages other than English
You can configure the IBM Resiliency Orchestration components such as the OS, Console, and MariaDB for displaying and storing text in languages other than English.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 73
For example, if you are using the IBM Resiliency Orchestration application installed with Japanese as the language of operation, and you want the interface to display text you enter in Japanese, store data into the MariaDB in Japanese, search for and display records from the MariaDB in Japanese, you must configure the IBM Resiliency Orchestration application as instructed in the following sections.
Configure the OS and VNC console
Configure the MariaDB
Configure the Resiliency Orchestration Server properties
8.12.1 Prerequisites
You must stop all processes in the IBM Resiliency Orchestration application before you continue with the following procedure.
8.12.2 Configuring the OS and VNC console
Note:
You must have SuperAdmin privileges to do this task.
To configure the OS and VNC Console, complete the following steps:
1. Locate and open the .bash_profile file from the path: /root
2. Add the following text:
export LANG=ja_JP.UTF-8
3. Save the .bash_profile file
4. Enter the following command:
~/.bash_profile
5. To verify if the changes are implemented in the IBM Resiliency Orchestration application, enter the following command:
$ locale
6. The options for the language set (ja_JP.UTF-8) is displayed for the various parameters, as shown in the sample screenshot.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 74
7. Proceed to configuring the MariaDB.
8.12.3 Configuring the MariaDB
Note:
You must have SuperAdmin privileges to do this task.
To configure the MariaDB, complete the following steps:
1. Locate and open the my.cnf file from the path: /etc/my.cnf
2. Add utf8 as the default character set under the following sections in the
my.cnf file:
[client]
default-character-set=utf8
[mysql]
default-character-set=utf8
[mysqld]
datadir=/var/lib/mysql
socket=/var/lib/mysql/mysql.sock
user=mysql
character-set-server=utf8
3. Save and close the my.cnf file.
4. Proceed to configuring the Resiliency Orchestration Server properties.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 75
8.12.4 Configuring the Resiliency Orchestration Server properties
Note: You must have SuperAdmin privileges to do this task.
To configure the Resiliency Orchestration Server properties (server.xml file), complete the following steps:
1. After logging in the IBM Resiliency Orchestration Server using Putty, locate
the server.xml file in the path: $TOMCAT_HOME/conf
2. Open the server.xml file by entering the following command:
sudo vi $TOMCAT_HOME/conf/server.xml
3. Add the following configuration for the Connector Port (8443)
4. Add URIEncoding=―utf-8‖ after the last entry under the <Connector port=―8443‖ >
The following is an example with the URI encoding added:
<Connector port=“8443” maxHttpHeaderSize=“8192”
maxThreads=“150” minSpareThreads=“25” maxSpareThreads=“75”
enableLookups=“false” disableUploadTimeout=“true”
acceptCount=“100” scheme=“https” secure=“true”
compressionMinSize=“2048” compression=“on”
compressableMimeType=“text/html,text/xml,text/plain,text/css,
text/javascript,text/json,application/x-javascript,
application/javascript,application/json”
client{uth=“false” sslEnabledProtocols=“TLSv1”
keystoreFile="/opt/panaces/installconfig/keystore/sanovi.keystore"
keystorePass="^vMkT%678#4-06Gjue672Kwo95dzg" URIEncoding=“utf-8” />
5. You need to save the following cipher value in the server.xml file:
ciphers="TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA"
6. Save and close the server.xml file.
8.12.5 Post configuration steps
1. Restart the MySQL service by entering the following command:
$ service mysql restart
2. Restart the IBM Resiliency Orchestration services by entering the following command:
sudo $EAMSROOT/bin/panaces restart
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 76
8.13 Configuring IBM Resiliency Orchestration Server and Site Controller for Secured Communication by Using the ActiveMQ Broker
After the installation of the IBM Resiliency Orchestration Server and the Site Controller, you must complete the procedures described in this section to enable secured communication between the Resiliency Orchestration and the Site Controller by using the ActiveMQ Broker feature. This feature is enabled in the IBM Resiliency Orchestration application from the version 7.2.3.1.
The Resiliency Orchestration provides you with Default Passwords for the following Roles:
Admin – Is the User with roles of an Admin who can view the status of messages and change the message priorities on the ActiveMQ Broker.
Producer – Is the Server with an authority to post messages on the ActiveMQ Broker.
Consumer - Is the Server with an authority to listen to the messages posted on the ActiveMQ Broker.
Important:
o Ensure to change the default passwords in the IBM Resiliency Orchestration
application after downloading the Service Pack (7.2.3.1) from the IBM Passport
Advantage Portal.
o Changing the passwords or customizing the passwords will ensure that the secure
communication between the IBM Resiliency Orchestration application and the
Site Controller in your infrastructure will be contained to within your organization
and prevent querries from unauthorized Users.
Perform the following procedures in sequence to ensure that you have set up the ActiveMQ Broker for the secured communication between the IBM Resiliency Orchestration application and the Site Controller.
8.13.1 Changing the Default Passwords for the Roles: Admin, Producer, and Consumer
Important:
The Default Passwords for the Roles (Producer and Consumer) must be changed for
both the IBM Resiliency Orchestration Server and the Site Controller Server and on
the ActiveMQ Broker (on both the IBM Resiliency Orchestration Server and the Site
Controller Server). This is to ensure that both (Resiliency Orchestration and Site
Controller) can function as the Producer and Consumer and the ActiveMQ Broker
recognizes the Producer and Consumer Roles.
In the normal set of communication between the IBM Resiliency Orchestration Server
and the Site Controller Server, following are the roles that are performed:
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 77
IBM Resiliency Orchestration will function as the Producer when the messages are
generated by the Resiliency Orchestration and the Site Controller will function as the
Consumer for the same messages, by receiving them.
Site Controller will function as the Producer when the messages are generated by the
Site Controller and the IBM Resiliency Orchestration will function as the Consumer for
the same messages, by receiving them.
The ActiveMQ Broker functions as the mediator (on both the Resiliency Orchestration
and Site Controller) for receiving and posting messages, recognizing the Producer and
Consumer and allowing the messages to flow to the authentic sender or receiver.
1. Generating encrypted custom passwords. Encrypted Custom Passwords must be generated for the Admin, Producer and Consumer Roles defined for the
2. Replacing the encrypted custom passwords in the related properties files.
See the following sections for the procedures:
Changing the Default Admin Password
Changing the Default Passwords for the ActiveMQ Broker
Changing the Default Passwords in the Resiliency Orchestration and Site Controller Configurations
8.13.1.1 Changing the Default Admin Password
Complete the following steps to change the default passwords that the IBM Resiliency Orchestration application provides.
1. Changing the Default Admin Password
The default Admin Password is Adw1np@s51S3cRt$ and is located in the
jetty-realm.properties file.
Choose a custom password.
Note:
Ensure to choose a password that has a minimum of 20 alpha-numeric
characters. Supported characters are: Capital Alphabets (A-Z), Lower
Alphabets (a-z), Numbers (0-9). Special characters are not allowed.
Proceed to encrypting the custom password. Go to the Next Step.
2. Encrypting the New Admin Password
The custom or new password must be encrypted. To encrypt the new password, go to the following location:
$EAMSROOT/lib
Run the following command:
java -cp jetty-util-9.3.9.v20160517.jar org.eclipse.jetty.util.security.Password admin <New Password>
The new encrypted password is displayed as shown in the following example:
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 78
CRYPT:PASSWORD
Proceed to replacing the encrypted custom password in the properties file.
3. Replacing the Encrypted Password in the jetty-realm.properties file
Go to: /opt/panaces/tools/apache-activemq-5.13.2/conf/
Open the jetty-realm.properties file
Under the section:
# username: password [,rolename ...]
Update the new encrypted password as shown in the following example:
admin: CRYPT:PASSWORD, admin
Remove the Line that has the following value:
user: user, user
Go to the Next Step.
4. Proceed to changing the Default passwords for the Resiliency Orchestration Server ActiveMQ Broker. For instructions, see Changing the Default Passwords for the ActiveMQ Broker.
8.13.1.2 Changing the Default Passwords for the ActiveMQ Broker
Complete the following steps to change the default Producer and Consumer passwords that the provided for the ActiveMQ Broker in the Resiliency Orchestration and the Site Controller Servers.
1. Changing the Default Producer and Consumer Passwords
The default Producer and Consumer Passwords are located in the credentials-enc.properties file in the Resiliency Orchestration and the Site Controller Servers.
Choose a custom password. Ensure that you create custom passwords for the following types:
producer_ro custom password
consumer_ro_custom password
producer_sc_custom password
consumer_sc_custom password
Note:
Ensure to choose a password that has a minimum of 20 alpha-numeric
characters. Supported characters are: Capital Alphabets (A-Z), Lower
Alphabets (a-z), Numbers (0-9). Special characters are not allowed.
Proceed to encrypting the custom password.
2. Encrypting the New Passwords
The custom or new passwords for both the Producer and Consumer roles for the Resiliency Orchestration and the Site Controller, must be encrypted.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 79
Encrypting passwords for the Resiliency Orchestration ActiveMQ
To encrypt the new passwords, go to the following location in the Resiliency Orchestration Server:
${EAMSROOT}/tools/apache-activemq-5.13.2/bin
To encrypt the custom Producer password for the Resiliency Orchestration, run the following command:
./activemq encrypt --password activemq --input <producer_ro custom password>
The new encrypted password is displayed as shown in the following example:
(Producer_RO Encrypted Password)
To encrypt the custom Consumer password, run the following command:
./activemq encrypt --password activemq --input <consumer_ro custom password>
The new encrypted password is displayed as shown in the following example:
(Consumer_RO Encrypted Password)
3. Encrypting passwords for the Site Controller ActiveMQ
To encrypt the new passwords, go to the following location in the Site Controller Server:
${EAMSROOT}/tools/apache-activemq-5.13.2/bin
To encrypt the custom Producer password for the Site Controller, run the following command:
./activemq encrypt --password activemq --input <producer_sc custom password>
The new encrypted password is displayed as shown in the following example:
(Producer_SC Encrypted Password)
To encrypt the custom Consumer password, run the following command:
./activemq encrypt --password activemq --input <consumer_sc custom password>
The new encrypted password is displayed as shown in the following example:
(Consumer_SC Encrypted Password)
Ensure that you have encrypted the custom passwords and have noted them as shown in the following example:
producer_ro custom password - encrypted as - Producer_RO Encrypted
Password
consumer_ro_custom password - encrypted as - Consumer_RO Encrypted
Password
producer_sc_custom password - encrypted as - Producer_SC Encrypted
Password
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 80
consumer_sc_custom password - encrypted as - Consumer_SC Encrypted
Password
Important:
Ensure that you use the same custom passwords for encryption and replacing in the
Resiliency Orchestration and Site Controller configurations file, detailed in Changing
the Default Passwords in the Resiliency Orchestration and Site Controller
Configurations.
Proceed to replacing the encrypted custom password in the properties file. Go to the Next Step.
8.13.2 Replacing the Encrypted Passwords in the credentials-
enc.properties file
8.13.2.1 Replacing Encrypted passwords for the Resiliency Orchestration ActiveMQ
Go to the following location in the Resiliency Orchestration Server: ${EAMSROOT}/tools/apache-activemq-5.13.2/conf/
Open the credentials-enc.properties file
Update the encrypted passwords as shown in the following example:
producer.password=ENC(Producer_RO Encrypted Password)
consumer.password=ENC(Consumer_RO Encrypted Password)
8.13.2.2 Replacing Encrypted passwords for the Site Controller ActiveMQ
Go to the following location in the Site Controller Server: ${EAMSROOT}/tools/apache-activemq-5.13.2/conf/
Open the credentials-enc.properties file
Update the encrypted passwords as shown in the following example:
producer.password=ENC(Producer_SC Encrypted Password)
consumer.password=ENC(Consumer_SC Encrypted Password)
Proceed to changing the Default passwords in the Resiliency Orchestration and Site Controller Configurations. For instructions, see Changing the Default Passwords in the Resiliency Orchestration and Site Controller Configurations.
8.13.2.3 Changing the Default Passwords in the Resiliency Orchestration and Site Controller Configurations
Complete the following steps to change the default Producer and Consumer passwords that are provided for the Resiliency Orchestration and Site Controller in their corresponding configuration files.
8.13.2.4 Changing the Default and updating Configurations for the Resiliency Orchestration
1. The default Producer and Consumer Passwords are located in the panaces.properties file.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 81
Use the custom passwords that you used to encrypt for the Resiliency Orchestration and Site Controller in Changing the Default Passwords for the ActiveMQ Broker, as shown in the following example:
producer_ro custom password
consumer_ro_custom password
Proceed to encrypting the custom password.
2. Encrypting the New Passwords
The custom or new passwords for both the Producer and Consumer roles, must be encrypted. To encrypt the new passwords, go to the following location in the Resiliency Orchestration Server:
${EAMSROOT}/tools/bin/
To encrypt the custom Producer password, run the following command:
./Encryptor.sh <producer custom password>
The new encrypted password is displayed as shown in the following example:
(Producer Encrypted Password)
To encrypt the custom Consumer password, run the following command:
./Encryptor.sh <consumer custom password>
The new encrypted password is displayed as shown in the following example:
(Consumer Encrypted Password)
Proceed to replacing the encrypted custom password in the properties file.
3. Replacing the Encrypted Passwords in the panaces.properties file
Go to: ${EAMSROOT}/installconfig/
Open the panaces.properties file
Update the encrypted passwords as shown in the following example:
MQ_SC_BROKER_PRODUCER_USERNAME=producer
MQ_SC_BROKER_PRODUCER_PASSWORD=(Producer Encrypted Password)
MQ_RO_BROKER_CONSUMER_USERNAME=consumer
MQ_RO_BROKER_CONSUMER_PASSWORD=(Consumer Encrypted Password)
8.13.2.5 Changing the Default and updating Configurations for the Site
Controller
1. The default Producer and Consumer Passwords are located in the Sitecontroller.cfg file.
Use the custom passwords that you used to encrypt for the Resiliency Orchestration and Site Controller in Changing the Default Passwords for the ActiveMQ Broker, as shown in the following example:
producer_sc_custom password
consumer_sc_custom password
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 82
Proceed to encrypting the custom password.
2. Encrypting the New Passwords
The custom or new passwords for both the Producer and Consumer roles, must be encrypted. To encrypt the new passwords, go to the following location in the Site Controller Server:
${EAMSROOT}/tools/bin/
To encrypt the custom Producer password, run the following command:
./Encryptor.sh <producer custom password>
The new encrypted password is displayed as shown in the following example:
(Producer Encrypted Password)
To encrypt the custom Consumer password, run the following command:
./Encryptor.sh <consumer custom password>
The new encrypted password is displayed as shown in the following example:
(Consumer Encrypted Password)
Proceed to replacing the encrypted custom password in the properties file.
3. Replacing the Encrypted Passwords in the Sitecontroller.cfg file
Go to: ${EAMSROOT}/installconfig/
Open the Sitecontroller.cfg file
Update the encrypted passwords as shown in the following example:
MQ_RO_BROKER_PRODUCER_USERNAME=producer
MQ_RO_BROKER_PRODUCER_PASSWORD=(Producer Encrypted Password)
MQ_SC_BROKER_CONSUMER_USERNAME=consumer
MQ_SC_BROKER_CONSUMER_PASSWORD=(Consumer Encrypted Password)
8.13.3 Locating the Encrypted Passwords
You can find the log of all Passwords that you have encrypted in the Encryptor.log file.
To locate the Encryptor.log file go to:
/opt/panaces/var/log/
Open the Encryptor.log file.
8.13.4 Accessing ActiveMQ Console
You can access the ActiveMQ Console to view the messages that are queued in the ActiveMQ Brokers on either the Resiliency Orchestration or the Site Controller servers. As an Admin User, you can also set or change the priorities of the messages on the ActiveMQ Broker.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 83
To Access the ActiveMQ Console, use the following IP:
https://<HOSTIP>:8162/
Where:
Host IP is the IP of the Resiliency Orchestration Server or the Site Controller Server depending on which ActiveMQ Broker you want to access
8162 is the port that is used to view the messages on the ActiveMQ Broker.
8.14 Viewing the HTML Dashboard
You can access or switch between the Flex Dashboardand HTML Dashboard (enabled by default) by using the following URLs for the Manager Dashboard and the Operational Dashboard:
a. Manager Dashboard:
https://<Resiliency Orchestration IP>:8443/PanacesGUI/flex/SanoviDashboard.jsp [Flex]
http://< Resiliency Orchestration IP >:8080/PanacesGUI/flex/SanoviDashboardPlain.jsp [HTML]
b. Operational Dashboard:
http{://< Resiliency Orchestration IP >:8443/PanacesGUI/flex/OperationalDashboard.jsp [Flex]
http://< Resiliency Orchestration IP >:8080/PanacesGUI/flex/OperationalDashboardPlain.jsp [HTML]
Note
The panaces.properties file is by default configured to HTML [panaces.dashboard=HTML]
8.15 Removing Temp Folders Created in CR Platform
The scan workflow creates temporary folders in Site Controller and Staging servers. These folders are configured in the property file. Multiple execution makes the temp folder grow in size and it needs to be removed. The following are steps for removing the temp folders in Site Controller and Staging servers:
2. User can utilize the delete commands specific to Linux or Windows to remove the temp folder that is created.
3. User needs to have appropriate permissions on Linux and Windows to execute these commands.
4. This has to be done on both the Site Controller and the Staging machines. 5. This is an operational activity which user should execute after making sure
that there are no pending alerts that are awaiting any user action
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 84
1. For Staging Server, the procedure is same, however the user should manually copy the relevant scripts from the Site Controller bin location to Staging Server, as shown in the following procedures:
Copy the shell script LinuxScanWorkflowTempCleanup.sh for a Linux staging box.
Copy the batch script WindowsScanWorkflowTempCleanup.bat for a Windows staging box.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 85
9 Starting and Stopping Resiliency Orchestration Server
9.1.1 Starting Resiliency Orchestration Server
To start the IBM Resiliency Orchestration Server, perform the following steps:
1. Open a terminal using sanovi user
2. Enter the following command at the command prompt:
sudo $EAMSROOT/bin/panaces start
Starting IBM Resiliency Orchestration Server for the first time takes five minutes to register its components. IBM Resiliency Orchestration GUI operation will be available after the component registration. Wait till the GUI becomes available to you.
9.1.2 Starting Resiliency Orchestration Server in Recover Mode
The user needs to perform the following steps to start IBM Resiliency Orchestration Server in recover mode:
1. Open a terminal using sanovi user
2. Enter the following command at the command prompt:
sudo $EAMSROOT/bin/panaces recover
9.1.3 Stopping Resiliency Orchestration Server
1. Open a terminal using sanovi user
2. Enter the following command at the command prompt:
sudo $EAMSROOT/bin/panaces stop
9.1.4 Restarting Resiliency Orchestration Server
To restart the IBM Resiliency Orchestration Server, perform the following steps:
1. Open a terminal using sanovi user
2. Enter the following command at the command prompt:
sudo $EAMSROOT/bin/panaces restart
9.1.5 Checking Resiliency Orchestration Server Status
1. Open a terminal using sanovi user
2. Enter the following command at the command prompt:
sudo $EAMSROOT/bin/panaces status
9.1.6 Resiliency Orchestration Server Remote Services
The user needs to confirm that remote services are running with panaces user
1. If the services are not running with panaces user, run the following script to stop the services:
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 86
sudo ./invokeAgentCommand.sh <agent script> stop <IP> LINUXSERVER
2. The user needs to run the following script to start remote services:
sudo ./invokeAgentCommand.sh <agent script> start <IP> LINUXSERVER
Note
The invokeAgentCommand.sh script is available at EAMSROOT/bin
9.1.7 Checking Resiliency Orchestration Server Available Modes
You need to perform the following steps to check the available modes of IBM Resiliency Orchestration Server:
1. Open a terminal using sanovi user
2. Enter the following command at the command prompt:
sudo $EAMSROOT/bin/panaces help
This command will display the following options:
start: Start the IBM Resiliency Orchestration Server and Tomcat Server
restart: Restart the IBM Resiliency Orchestration Server and Tomcat Server
stop: Stop the IBM Resiliency Orchestration Server and Tomcat Server
recover: Starts the IBM Resiliency Orchestration Server in recovery mode with Tomcat Server
status: Shows whether IBM Resiliency Orchestration Server and Tomcat is running or not
help: Shows this help
debug: Runs Tomcat and IBM Resiliency Orchestration, with remote debugging enabled (To debug Tomcat, connect to port 8000. To debug IBM Resiliency Orchestration, connect to port 8001)
Note
Do not stop IBM Resiliency Orchestration Server immediately after starting as this
might not stop Tomcat, or event registration may not happen properly.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 87
10 Installing Agent Node Server or Site Controller on Linux
10.1 Installation Overview
Site Controller Software has the following components for installation:
Agent Node Server GUI mode installation
Agent Node Server Silent mode installation
10.2 Client Browser Prerequisite
Browser OS Version/Patch Remarks
Firefox 26 and
above and Google
chrome 32 and
above
MS Windows 7 and MS Windows 8, MS
Windows 2012
10.3 Ports Used by Linux Based Site Controller
The following default port is used in the communication protocol:
Port Description
8162, 42443 and
45443
For communication between Site Controller and IBM Resiliency
Orchestration Server, Agents.
10.4 Prerequisites
Based on the features, download the GPL dependent binaries from this link GPL dependent binaries prior to Site Controller installation. Refer to IBM Resiliency Orchestration Installation Guide.
You can perform the following method to install Site Controller:
Graphical Mode: Graphical mode installation is an interactive, GUI-based method for installing Site Controller. It is supported on Linux platform.
Silent Mode: Silent mode installation is a non-interactive method of installing Site Controller. This method requires the use of properties file for selecting installation options. It is supported on Linux.
10.5 Installing Site Controller in GUI Mode in Linux
This section describes the procedure to install the Agent Node Server on Linux (RHEL 7.x). Additional steps that you must perform are also included within.
Note
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 88
You must have root or root equivalent privileges to install Agent Node. The Site Controller
and Agent Node services are installed when the installation file is executed.
To install Agent Node, perform the following steps:
1. Download the Agent Node binaries from the given ftp path.
2. Execute the following command (use whichever is applicable):
sh SiteController.bin (or) ./SiteController.bin at the command prompt
to run Agent Node installer.
Note
The user needs a free space of approximately 700 MB in the server where the Site
Controller needs to be installed, prior to executing the above command.
3. If the command to run the Agent Node installer is executed, Agent Node installation starts with the screen as shown in the following figure:
Note
If the RHEL version is not 5.0 ES/AS and 6.0, or 7.x, a warning message will be displayed
on the screen. However, the user can continue with the installation.
Figure 8: IBM Resiliency Orchestration Agent Node Installer
4. After displaying the IBM Resiliency Orchestration Agent Node Installer screen, the Introduction window is displayed as shown in the following figure:
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 89
Figure 9: IBM Resiliency Orchestration Agent Node Installation on Linux
- Introduction
5. Click Next. The Choose Install Folder window is displayed.
Figure 10: IBM Resiliency Orchestration Agent Node Installation on Linux
- Choose Install Folder
6. Select a path to install the software by clicking Choose. Alternatively, you can click Restore Default Folder to restore the default path. The default path
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 90
is /opt/panaces. It is recommended that you use the default path, which is displayed.
7. Click Next. The IBM Resiliency Orchestration Agent Node IP Address Configuration window is displayed.
Figure 11: IBM Resiliency Orchestration Agent Node Installation on Linux
– IBM Resiliency Orchestration Agent Node IP Address Configuration
8. Enter the IP addresses of the primary and secondary IBM Resiliency Orchestration servers, and IBM Resiliency Orchestration Agent Node Address. In a nonNAT environment, NAT IP address field should be left blank.
Note
In NAT environment, Primary and secondary IBM Resiliency Orchestration Server public
IP should be provided. Agent node address should be the public IP and NAT IP address
should be the private IP of the server where you are installing.
To change NAT IP configuration after installation or to troubleshoot, refer to NAT IP of the Troubleshooting chapter in Resiliency Orchestration Installation Guide.
9. Click Next. The Pre-Installation Summary window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 91
Figure 12: IBM Resiliency Orchestration Agent Node Installation on Linux
- Pre-Installation Summary
10. Verify the inputs provided. If you want to change the inputs, click Previous and modify the details.
11. Click Install. The Installing IBM Resiliency Orchestration Agent Node window is displayed.
Figure 13: IBM Resiliency Orchestration Agent Node Installation on Linux
- Installing IBM Resiliency Orchestration Agent Node
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 92
12. Once the installation is complete, the Starting IBM Resiliency Orchestration Agent Node window is displayed.
Figure 14: IBM Resiliency Orchestration Agent Node Installation on Linux
- Starting IBM Resiliency Orchestration Agent Node
13. On the Starting IBM Resiliency Orchestration Agents Node window, perform either of the following:
Click Yes to start the agent services automatically.
Click No to start the agent services manually.
Note
The best practice is not to change the default value displayed on the Starting IBM
Resiliency Orchestration Agent Node window.
14. Click Next. The Installation Completed window is displayed indicating successful installation.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 93
Figure 15: IBM Resiliency Orchestration Agent Node Installation on Linux
- Installation Completed
15. Click Done to complete the installation process.
Note
When the installation is carried on silent mode or GUI mode, restart with a Putty session.
16. Post installation, add the following properties in /opt/panaces/installconfig/SiteController.cfg file:
MAX_SC_CONNECTION_REQUEST_HANDLING_SIZE=50
Note:
Determine the number of agents that will connect to the site controller. Set
MAX_SC_CONNECTION_REQUEST_HANDLING_SIZE to 1.5 times the number of agents.
For example, for 100 agents set MAX_SC_CONNECTION_REQUEST_HANDLING_SIZE to
150.
17. Start the Agent Node manually.
10.6 Installing Site Controller in Silent Mode in Linux
In silent mode installation method, the installation program reads the settings for your configuration from the properties file prior to installation. The installation program does not display any configuration options during the installation process.
The following sections describe how to install Agent Node server using the installation program in silent mode on Linux platforms. It is assumed that user have acquired the installation program and properties file from the FTP server.
Note
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 94
Confirm that the hardware and software configuration required for Site Controller
installation is in place.
10.6.1 Editing Properties File
When installing Agent Node in silent mode, the installation program uses the properties file for server (PanacesAgentNodeInstaller.properties) to determine which installation options should be implemented. You need to edit the respective properties file in which you specify the installation options that you want to invoke, while performing the Agents installation and then you can run the installation program in silent mode. Perform the following steps to edit the properties files.
1. Get the files from the FTP server and copy properties files by running the following command:
cp AgentNode/PanacesAgentNodeInstaller.properties /tmp
cp AgentNode/SiteController.bin /tmp
2. Open the properties file by using the following command:
vi /tmp/ PanacesAgentNodeInstaller.properties
3. Modify the respective properties file for the key words shown in the following tables, to reflect your configuration.
PanacesAgentNodeInstaller.properties file: The following table displays the description of corresponding keywords.
Keyword Description
INSTALLER_UI Displays the mode of installation as ―silent‖.
MODIFY_SYSTEM_FILES=1
It modifies the following system files:
/etc/hosts,/etc/sysconfig/selinux,
/etc/sysctl.conf
USER_INSTALL_DIR
Enter the path for the directory to install the
Site Controller Server software (default path
is /opt/panaces/ )
USER_INPUT_RESULT_PRIMARY_
PANACES_SERVER_IP Enter the IP address of the primary server.
USER_INPUT_RESULT_SECONDAR
Y_PANACES_SERVER_IP
Enter the IP address of the secondary
server.
PANACES_AGENT_NODE_ADDRES
S Enter the IP address of Local machine.
USER_INPUT_RESULT_SITE_CONT
ROLLER_IP=
Enter the IP address of Site Controller
Agent.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 95
Keyword Description
AGENTNODE_START_YES
Enter 1 if you want to start the agents
automatically after the installation.
Enter 0 if you want to start the agent
manually.
4. Proceed to the Post installation procedure. For instructions, see Post Installation Steps.
10.6.2 Agent Node Silent Mode Installation
The following section provides steps to install Agent Node in silent mode on Linux server.
/tmp/SiteController.bin –f /tmp/PanacesAgentNodeInstaller.properties
Note
In silent mode, uninstallation does not check whether services are running or not. The
user needs to make sure that services are stopped before uninstallation in silent mode.
10.6.3 Post Installation Steps after you install the Site Controller in Linux
1. In Site Controller installation folder, perform the following steps:
Go to the location: $EAMSROOT/installconfig/
Open the SiteController.cfg file
Add the following property:
MAX_SC_CONNECTION_REQUEST_HANDLING_SIZE=50
Note:
Determine the number of agents that will connect to the site controller. Set
MAX_SC_CONNECTION_REQUEST_HANDLING_SIZE to 1.5 times the number of agents.
For example, for 100 agents set MAX_SC_CONNECTION_REQUEST_HANDLING_SIZE to
150.
2. Enter the value of the ACP keystore in the \installconfig\SiteController.cfg file.
For Example: panaces.acp.keystore=
Note
The value of the ACP keystore will be the path where ACP key store exists, which means
<Site controller installation folder>\installconfig\keystore\panacesACP.keystore. Enter
the path with a \\ for file separator, for example,
c:\\Sitecontroller\\installconfig\\keystore\\panacesACP.keystore
3. Enter the path of the truststore in the same SiteController.cfg file.
For Example: panaces.acp.truststore=
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 96
Note
This value of the ACP truststore will be the path where ACP trust store exists, which
means <Site controller installation folder>\installconfig\keystore\
panacesACP.truststore. Enter the path with a \\ for file separator, for example,
c:\\Sitecontroller\\installconfig\\keystore\\ panacesACP.truststore
Ensure to create your own truststore and keystore and use them as the corresponding values for the truststore and keystore.
4. Copy the Actifio_getStatus.tcl file from IBM Resiliency Orchestration Server from $EAMSROOT/agents folder to $EAMSROOT/agents folder.
10.6.4 Patch Update for Site Controller
Perform the following steps to apply the patch in Site Controller:
1. Log in to the Resiliency Orchestration Server and perform the following steps:
a. Go to $EAMSROOT (assume /opt/panaces is EAMSROOT).
b. Download UpdateEAMSROOT.sh from Fix Central to $EAMSROOT/bin.
c. Edit the parameter currentPath in UpdateEAMSROOT.sh with
/opt/panaces.
d. Run the following command to create tar ball.
sudo tar -cvf DRM_AllFiles_Patch.tar lib/* work/* scripts/*
agents/* bin/* installconfig/* templates/* bin/*
e. Copy the DRM_AllFiles_Patch.tar to the Site Controller EAMSROOT
path.
2. Log in to Site Controller and perform the following steps:
a. Go to EAMSROOT path ( assume /opt/SiteController is EAMSROOT)
b. Run the following command to extract the tar and retain the old files.
tar --keep-old-files -xvf DRM_AllFiles_Patch.tar
c. Go to $EAMSROOT/bin
d. Run the following command.
sudo ./SecurityUserInjection.sh
e. Run the following command to update scripts from Site Controller EAMSROOT.
sh UpdateEAMSROOT.sh <SiteController EAMSROOT>
10.6.5 Starting Agent Node Manually
User can start the Site Controller manually by logging in to Agent Node server and performing the following steps:
1. Enter in the $EAMSROOT/bin folder.
2. Run the following command to start Site Controller.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 97
sh SiteController.sh start
or
./SiteController.sh start
Run the following command to start Agent Node.
sh LinuxOSAgent.sh start
or
./LinuxOSAgent.sh start
10.6.6 Stopping Agent Node Manually
User can stop the Site Controller manually by logging in to Agent Node server and performing the following steps:
1. Enter in the $EAMSROOT/bin folder.
2. Run the following command to stop Site Controller.
sh SiteController.sh stop
or ./SiteController.sh stop
3. Run the following command to stop Agent Node.
sh LinuxOSAgent.sh stop
or ./LinuxOSAgent.sh stop
10.7 Uninstalling Site Controller
This section describes the procedure to uninstall Site Controller in GUI mode and Silent mode.
10.7.1 Uninstalling Agent Node in GUI Mode
Perform the following steps to uninstall Agent Node in GUI mode:
1. Enter in the <$EAMSROOT>/UninstallerData folder.
2. Click the Uninstall_IBM_Resiliency_Orchestration_Agent_Node
file. The Uninstall IBM Resiliency Orchestration Agent Node window displays, as shown in the following figure:
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 98
Figure 16: Uninstall IBM Resiliency Orchestration Agent Node
3. Click Uninstall.
4. The uninstallation process begins and lasts for a few seconds. When the process is complete, the following window is displayed:
Figure 17: Uninstall Complete Screen
5. Click Done to close this window.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 99
10.7.2 Uninstalling Agent Node in Silent Mode
Perform the following steps to uninstall Agent Node in silent mode:
1. Enter in the <$EAMSROOT>/UninstallerData folder.
2. Run the following command to uninstall Site Controller.
sh Uninstall_IBM_Resiliency_Orchestration_Agent_Node or ./ Uninstall_IBM_Resiliency_Orchestration_Agent_Node
10.8 Installing Agent Node Server or Site Controller in MS Windows
10.9 Installation Overview
Site Controller Software has the following components for installation:
Agent Node Server GUI mode installation (Graphical Mode: Graphical mode installation is an interactive, GUI-based method for installing Site Controller. It is supported on Linux platform.)
Agent Node Server Silent mode installation (Silent Mode: Silent mode installation is a noninteractive method of installing Site Controller. This method requires the use of properties file for selecting installation options. It is supported on Linux.)
10.10 Installation and Services
Perform installations and services in the following order:
1. Install the IBM Resiliency Orchestration
2. Installation of Site Controller by using either the GUI mode or Silent mode
3. Configuring Agents to use PowerShell framework
4. Start Site Controller
5. Start Agent Node on Site Controller
10.11 Client Browser Prerequisite
Browser OS Version/Patch
Firefox 26 and
above and Google
chrome 32 and
above
MS Windows 7 and MS Windows 8, MS
Windows 2012
10.12 Ports Used by Windows Based Site Controller
The following ports are used in the communication protocol.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 100
Port Description
5985 For HTTP communication between the Agents and Windows
based Site Controller
5986 For HTTPS (secure) communication between the Agents and
Windows based Site Controller
8162, 42443 For communication between the Windows based Site Controller
and the IBM Resiliency Orchestration Server
10.13 Prerequisites
Based on the features, download the GPL dependent binaries from this link GPL dependent binaries prior to Site Controller installation. Refer to IBM Resiliency Orchestration Installation Guide.
10.14 Installing Site Controller in GUI Mode in Windows
This section describes the procedure to install the Agent Node Server on MS Windows. Additional steps that you must perform are also included within.
Note
You must have root or root equivalent privileges to install Agent Node. The Site Controller
and Agent Node services are installed when the installation file is executed.
To install Agent Node, perform the following steps:
1. Download the Agent Node binaries from the given ftp path.
2. Files are available in the zipped format in the AgentNode folder.
3. Right-click on SiteController.exe and then, select the option Run as administrator.
Note
The user needs a free space of approximately 700 MB in the server where the Site
Controller needs to be installed, prior to executing the above command.
4. If the command to run the Agent Node installer is executed, Agent Node installation starts with the screen as shown in the following figure:
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 101
Figure 18: IBM Resiliency Orchestration Agent Node Installer on Windows
5. After displaying the IBM Resiliency Orchestration Agent Node Installer screen, the Introduction window is displayed as shown in the following figure:
Figure 19: IBM Resiliency Orchestration Agent Node Installation on
Windows - Introduction
6. Click Next. The Choose Install Folder window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 102
Figure 20: IBM Resiliency Orchestration Agent Node Installation on
Windows- Choose Install Folder
7. Select a path to install the software by clicking Choose. Alternatively, you can click Restore Default Folder to restore the default path. The default path is $EAMSROOT. It is recommended that you use the default path, which is displayed.
8. Click Next. The IBM Resiliency Orchestration Agent Node IP Address Configuration window is displayed.
Figure 21: IBM Resiliency Orchestration Agent Node Installation on
Windows – IBM Resiliency Orchestration Agent Node IP Address
Configuration
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 103
9. Enter the IP addresses of the primary and secondary IBM Resiliency Orchestration servers, and IBM Resiliency Orchestration Agent Node Address. In a nonNAT environment, NAT IP address field should be left blank.
Note
In NAT environment, Primary and secondary IBM Resiliency Orchestration Server public
IP should be provided. Agent node address should be the public IP and NAT IP address
should be the private IP of the server where you are installing.
To change NAT IP configuration after installation or to troubleshoot, refer to NAT IP of the Troubleshooting chapter in Resiliency Orchestration Installation Guide.
10. Click Next. The Pre-Installation Summary window is displayed.
Figure 22: IBM Resiliency Orchestration Agent Node Installation on
Windows - Pre-Installation Summary
11. Verify the inputs provided. If you want to change the inputs, click Previous and modify the details.
12. Click Install. The Installing IBM Resiliency Orchestration Agent Node window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 104
Figure 23: IBM Resiliency Orchestration Agent Node Installation on
Windows - Installing IBM Resiliency Orchestration Agent Node
13. Once the installation is complete, the Starting IBM Resiliency Orchestration Agent Node window is displayed.
Figure 24: IBM Resiliency Orchestration Agent Node Installation on
Windows - Starting IBM Resiliency Orchestration Agent Node
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 105
14. On the Starting IBM Resiliency Orchestration Agents Node window, perform either of the following:
Click Yes to start the agent services automatically.
Click No to start the agent services manually.
Note
There are some post installation steps so, choose No.
15. Click Next. The Installation Completed window is displayed indicating successful installation.
Figure 25: IBM Resiliency Orchestration Agent Node Installation on
Windows - Installation Completed
16. Click Done to complete the installation process.
Note
When the installation is carried on silent mode or GUI mode, restart with a Putty session.
17. Proceed to the Post installation procedure. For instructions, see Post Installation Steps after you install the Site Controller in Windows.
10.15 Installing Site Controller in Windows in Silent Mode
In silent mode installation method, the installation program reads the settings for your configuration from the properties file prior to installation. The installation program does not display any configuration options during the installation process.
The following sections describe how to install Agent Node server using the installation program in silent mode on Linux platforms. It is assumed that user have acquired the installation program and properties file from the FTP server.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 106
Note
Confirm that the hardware and software configuration required for Site Controller
installation is in place.
10.15.1 Editing Properties File
When installing Agent Node in silent mode, the installation program uses the properties file for server (PanacesAgentNodeInstaller.properties) to determine which installation options should be implemented. You need to edit the respective properties file in which you specify the installation options that you want to invoke, while performing the Agents installation and then you can run the installation program in silent mode.
Perform the following steps to edit the properties files.
1. Get the files from the FTP server and copy properties files by running the following command:
cp AgentNode/PanacesAgentNodeInstaller.properties /tmp
cp AgentNode/SiteController.exe /tmp
2. Open the properties file by using the following command:
vi /tmp/ PanacesAgentNodeInstaller.properties
3. Modify the respective properties file for the key words shown in the following tables, to reflect your configuration.
PanacesAgentNodeInstaller.properties file:
Keyword Description
INSTALLER_UI Displays the mode of installation as ―silent‖.
MODIFY_SYSTEM_FILES=1
It modifies the following system files:
/etc/hosts,/etc/sysconfig/selinux,
/etc/sysctl.conf
USER_INSTALL_DIR
Enter the path for the directory to install the
Site Controller Server software (default path
is /opt/panaces/ )
USER_INPUT_RESULT_PRIMARY_
PANACES_SERVER_IP Enter the IP address of the primary server.
USER_INPUT_RESULT_SECONDAR
Y_PANACES_SERVER_IP
Enter the IP address of the secondary
server.
PANACES_AGENT_NODE_ADDRES
S Enter the IP address of Local machine.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 107
Keyword Description
USER_INPUT_RESULT_SITE_CONT
ROLLER_IP=
Enter the IP address of Site Controller
Agent.
AGENTNODE_START_YES
Enter 1 if you want to start the agents
automatically after the installation.
Enter 0 if you want to start the agent
manually. Set this property to manual as
there are some post installation steps.
4. Proceed to the Post installation procedure. For instructions, see Post Installation Steps after you install the Site Controller in Windows.
10.16 Post Installation Steps after you install the Site Controller in Windows
1. In Site Controller installation folder, perform the following steps:
a. Go to the location: $EAMSROOT/installconfig/
b. Open the SiteController.cfg file
c. Add the following property:
MAX_SC_CONNECTION_REQUEST_HANDLING_SIZE=50
Note:
Determine the number of agents that will connect to the site controller. Set
MAX_SC_CONNECTION_REQUEST_HANDLING_SIZE to 1.5 times the number of agents.
For example, for 100 agents set MAX_SC_CONNECTION_REQUEST_HANDLING_SIZE to
150.
2. Enter the value of the ACP keystore in the \installconfig\SiteController.cfg file.
For Example: panaces.acp.keystore=
Note
The value of the ACP keystore will be the path where ACP key store exists, which means
<Site controller installation folder>\installconfig\keystore\panacesACP.keystore. Enter
the path with a \\ for file separator, for example,
c:\\Sitecontroller\\installconfig\\keystore\\panacesACP.keystore
3. Enter the path of the truststore in the same SiteController.cfg file.
For Example: panaces.acp.truststore=
Note
This value of the ACP truststore will be the path where ACP trust store exists, which
means <Site controller installation folder>\installconfig\keystore\
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 108
panacesACP.truststore. Enter the path with a \\ for file separator, for example,
c:\\Sitecontroller\\installconfig\\keystore\\ panacesACP.truststore
Ensure to create your own truststore and keystore and use them as the corresponding values for the truststore and keystore.
10.17 Starting or Stopping Site Controller Manually
User can start, stop or view the status of the Site Controller manually by using the following methods:
Windows Command Prompt
Windows GUI
10.17.1 Using the Windows Command Prompt
You can start, stop, or view the status of the Site Controller by using the Windows Command Prompt.
10.17.1.1 Starting the Site Controller by using Windows Command Prompt
Complete the following steps to Start the Site Controller:
1. Log into the Site Controller Server.
2. Enter in the $EAMSROOT/bin folder.
3. To Start the Site Controller, run the following commands:
$EAMSROOT/bin>ActiveMQ.bat start
$EAMSROOT/bin>SiteController.bat start
$EAMSROOT/bin>WindowsOSAgent.bat start
10.17.1.2 Stopping the Site Controller by using Windows Command Prompt
Complete the following steps to Stop the Site Controller:
1. Log into the Site Controller Server.
2. Enter in the $EAMSROOT/bin folder.
3. To Stop the Site Controller, run the following commands:
$EAMSROOT/bin>WindowsOSAgent.bat stop
$EAMSROOT/bin>SiteController.bat stop
$EAMSROOT/bin>ActiveMQ.bat stop
10.17.1.3 Viewing the Status of the Site Controller by using Windows Command Prompt
Complete the following steps to View the Status of the Site Controller:
1. Log into the Site Controller Server.
2. Enter in the $EAMSROOT/bin folder
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 109
3. To Start the Site Controller, run the following commands:
$EAMSROOT/bin>SiteController.bat status
$EAMSROOT/bin>ActiveMQ.bat status
$EAMSROOT/bin>WindowsOSAgent.bat status
10.17.2 Using the Windows GUI
You can start or stop the Site Controller by using the Windows GUI.
10.17.2.1 Starting the Site Controller by using the GUI
Complete the following steps to Start the Site Controller:
1. Click Start from Windows Task Bar
2. Click Run, and then, enter Services.msc in the Search Bar.
3. Press Enter.
4. Look for the service IBM Resiliency Orchestration ActiveMQ and select it. Right-click to see the options, navigate and then, click Start.
5. Look for the service IBM Resiliency Orchestration SiteController and select it. Right-click to see the options, navigate and then, click Start.
6. Look for the service IBM Resiliency Orchestration WindowsOSAgent and select it. Right-click to see the options, navigate and then, click Start.
10.17.2.2 Stopping the Site Controller by using the GUI
Complete the following steps to Stop the Site Controller:
1. Click Start from Windows Task Bar
2. Click Run, and then, enter Services.msc in the Search Bar.
3. Press Enter.
4. Look for the service IBM Resiliency Orchestration WindowsOSAgent and select it. Right-click to see the options, navigate and then, click Stop.
5. Look for the service IBM Resiliency Orchestration SiteController and select it. Right-click to see the options, navigate and then, click Stop.
6. Look for the service IBM Resiliency Orchestration ActiveMQ and select it. Right-click to see the options, navigate and then, click Stop.
10.18 Configuring End Points and Site Controller to use the PowerShell framework
Ensure to complete the following steps to enable PowerShell framework, on all the systems that have the Agents installed and on the systems that function as the Windows End Points (PR, DR, and Site Controller).
1. Select Start in Windows system and then enter PowerShell.
2. From the listed programs, navigate to Windows PowerShell, right-click, and then select Run as administrator.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 110
3. In the Windows PowerShell command prompt, enter the following commands:
Enable-PSRemoting –Force
Set-Item wsman:\localhost\client\trustedhosts *
Restart-Service WinRM
10.19 Uninstalling Site Controller
This section describes the procedure to uninstall Site Controller in GUI mode and Silent mode.
10.19.1 Uninstalling Site Controller in GUI Mode
Perform the following steps to uninstall Agent Node in GUI mode:
1. Navigate to the location: $EAMSROOT\Bin and click UninstallerSiteController.bat
2. Navigate to the location: $EAMSROOT\UninstallerData
3. Select Uninstall IBM Resiliency Orchestration SiteController.exe, right-click, and then, select Run as administrator.
4. The Uninstall IBM Resiliency Orchestration Agent Node window displays, as shown in the following figure:
Figure 26: Uninstall IBM Resiliency Orchestration Agent Node
5. Click Uninstall.
6. The uninstallation process begins and lasts for a few seconds. When the process is complete, the following window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 111
Figure 27: Uninstall Complete Screen
7. Click Done to close this window.
10.19.2 Uninstalling Agent Node in Silent Mode
Perform the following steps to uninstall Agent Node in silent mode:
1. From the command prompt, go to the location: $EAMSROOT\Bin
2. Run the UninstallerSiteController.bat file
3. Run the following command to uninstall Site Controller.
$EAMSROOT\UninstallerData>Uninstall IBM Resiliency Orchestration SiteController.exe
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 112
11 Installing Agents on MS Windows Server
The agent software is packaged into multiple installation packages IBM Passport Advantage site. It contains all the binaries and packages to run the IBM Resiliency Orchestration agent software. This software installation involves installing the appropriate agent software.
Note
MS Windows OS Agent is automatically installed during installation of agents. IBM
Resiliency File Replicator is automatically installed during installation of IBM Resiliency
File Replicator Agent.
11.1 Prerequisites for Installing Resiliency Orchestration Agents
IBM Resiliency Orchestration Agent Software packages are available for each supported application, protection software and operating system. These agents are installed on the servers involved in the Disaster Recovery solution. The installer installs the IBM Resiliency Orchestration Agent Platform package, required for the agent software installation, on the same server. This installation is done automatically during agent installation. Ensure that you have local system administrative privilege during the installation.
For the installer to install the IBM Resiliency Orchestration Agent Platform package on MS Windows successfully, the following prerequisites must be fulfilled.
Note
Restarting MS Windows Server may be required in certain cases and so, plan the
downtime of the MS Windows Server where the agents are getting installed.
11.2 MS Windows Server Requirements
The server participating in the DR infrastructure needs to incorporate the following requirements:
a. Hardware / Software Requirements: The following are the Windows Server Hardware / Software requirements:
The server must have a minimum of 2 GB RAM.
C drive should have additional 10GB disk size for Agent Software
b. Logs Directory: There must be enough disk space allocated on the server to hold MSSQL transaction logs for up to 5 business days. Take the assistance of the consultant to create the directory size appropriately. This directory can reside on either direct attached storage, or external attached storage.
For Example: Assume that a log of 2MB is generated every 10 minutes. The 1.5GB of log device size.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 113
The replication of database dump, from primary server to remote server and vice versa, may be done manually either on tapes, or any other backup device. It is assumed that the server is configured with appropriate backup software to do the same. If the database dump size is small, the replication may be performed on WAN/LAN itself. In this case, backup software is not required.
If required, reboot the server after successfully completing the following operations:
11.3 Installation of supported JRE
For information on the supported JRE, refer to GPL Dependencies for IBM Resiliency Orchestration in the Prerequisites topic.
11.4 Host Machines with Virtual IP Address
If there is a virtual IP address for the host, or if the host is part of an OS Cluster,
add the entry PANACES_AGENT_NODE_ADDRESS=<IP Address of the Node> in
$EAMSROOT\installconfig\PanacesAgentGeneric.cfg. Using this entry, IBM Resiliency Orchestration Server will always communicate to all agents on this IP address. This could be the Virtual IP or the original IP assigned to the interface.
11.5 Specific Prerequisites
The following are the prerequisites for specific agents; ensure that these prerequisites are met before starting the agents‘ installation.
11.5.1 MSSQL Agent
If you have MSSQL 2000 installed, download the following MSSQL 2000 Jar Files from Microsoft site and put them in the %EAMSROOT%\lib folder.
Mssqlserver.jar
Msutil.jar
Msbase.jar
On Windows, after downloading the jar files, update the CLASSPATH in the System variables with the details of the downloaded jar files (An example for the jar file path: C:\Program Files\Microsoft SQL Server 2000 Driver for JDBC\lib). MSSQL Agent can be installed only after the CLASSPATH has been updated with the jar files.
If you have the MSSQL 2005 already installed, download the following MSSQL 2005 Jar File from Microsoft site and put them in the %EAMSROOT%\lib folder.
sqljdbc.jar
On Windows, after downloading the jar files, update the CLASSPATH in the System variables with the details of the downloaded jar files (An example for the jar file path: C:\Program Files\Microsoft SQL Server 2005 Driver for JDBC\lib). MSSQL Agent can be installed only after the CLASSPATH has been updated with the jar files.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 114
11.5.2 Oracle Agent
Download following JDBC jar files for Oracle Agents and place them in the %ORACLE_ HOME%\jdbc\lib directory:
nls_charset12.jar
ojdbc14.jar
Oracle DG Agent
Download following JDBC jar files for Oracle Agents and place them in the %ORACLE_ HOME%\jdbc\lib directory:
nls_charset12.jar
ojdbc14.jar
Note
If there are some agents already installed and the user tries to install additional agents,
the installer will not continue with the installation. Install the additional agents in a
different location.
Important:
As a part of every agent installation, the OS agent will be installed automatically without
any user input. During the installation process, there will be an option to start the
installed agents automatically. These additional agents should not be started
automatically from the installer option, since the installer will start the new OS agent
also. After the installation is completed, the additional agent can be started from the
services panel.
11.6 Installation of Agents
This section outlines the steps to install all agents on Windows Server. Additional steps that you must perform for specific agents are also included within.
Note
You must have administrator, root or equivalent privileges to install IBM Resiliency
Orchestration Agents.
To install the agents, perform the following steps:
1. Download the Agent Installer executable files from the IBM Passport Advantage site.
2. Files are available in the zipped format in the Agents folder. Extract Files from WindowsDRMAgents.zip for 32-bit Windows Operating Systems and Windows64DRMAgents.zip for 64-bit Windows Operating Systems.
3. Go to the extracted folder and double click the install.exe file. The following are the limitations for installing IBM Resiliency Orchestration Agents on Windows:
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 115
Services can only be registered and started by users having local administrator permissions on the physical target machine, and not remotely.
If Services have to be registered and started from remote machines, such as Terminal Server, then the user must be an Administrator having necessary permissions to the registry and Agents\Windows\System32 directories.
Make sure that you have free space of approximately 700 MB in temp directory, before installation.
Disable the antivirus (if configured or enabled) before installation.
After executing the file, IBM Resiliency Orchestration Agent installation starts with the following screen.
Figure 28: IBM Resiliency Orchestration Agent Installer
After displaying the IBM Resiliency Orchestration Agent Installer screen, the Introduction window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 116
Figure 29: IBM Resiliency Orchestration Agents Installation on Windows
Server - Introduction
4. Go through the installation procedure and click Next. The Choose Install Folder window is displayed.
Figure 30: IBM Resiliency Orchestration Agents Installation on Windows
Server - Choose Install Folder
5. Select a path to install the software by clicking Choose. Alternatively, you can click Restore Default Folder to restore the default path. The default path
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 117
is C:\Program Files\panaces. It is recommended that you use the default path displayed.
6. Click Next. The Choose Agents - Windows window is displayed.
Figure 31: IBM Resiliency Orchestration Agents Installation on Windows
Server - Choose Agents - Windows
The list of agents available is displayed on the Choose Agents - Windows window.
7. Select the checkbox next to the specific agent to install that agent. You can choose to install any or all of the agents.
8. Click Next. The Choose Shortcut Folder window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 118
Figure 32: IBM Resiliency Orchestration Agents Installation on Windows
Server - Choose Shortcut Folder
9. Select an option to create a product icon in the required location. For example, select Other option button to create a product icon in a specific path, or select Don’t create icons button to avoid creating shortcut folders.
Note:
During installation, if In a new Program Group option is selected and if no name is
given for the program group, the option will be ignored and shortcuts will not be created.
Please make sure that the selected path has all the JDBC driver jar file.
10. Click Next. The Agent Configuration window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 119
Figure 33: IBM Resiliency Orchestration Agents Installation on Windows
Server - Agent Configuration
11. Depending on the agent you have selected for installation, perform the steps for the MSSQL Agent:
Enter MSSQL JDBC driver jar file location.
Click Choose button to select the jar file location.
12. Enter the IP addresses of the primary and secondary IBM Resiliency Orchestration servers and IBM Resiliency Orchestration Agent Node Address. In a non-NAT environment NAT IP address field should be left blank.
13. In a NAT environment, enter the primary and secondary Resiliency Orchestration Server‘s public IP. Resiliency Orchestration Agent node address should be the public IP and NAT IP address should be the private IP of the server where you are installing.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 120
Figure 34: IBM Resiliency Orchestration Agents Installation on Windows
Server - IBM Resiliency Orchestration IP Address Configuration
14. Click Next. Enter Site Controller IP Address if required.
Figure 35: IBM Resiliency Orchestration Site Controller IP Address
Configuration on Windows Server
15. Click Next. The Pre-Installation Summary window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 121
Figure 36: IBM Resiliency Orchestration Agents Installation on Windows
Server - Pre-Installation Summary
16. Go through the pre-installation summary to verify the inputs provided. If you want to change the inputs, click Previous and modify.
17. Click Install. The Installing IBM Resiliency Orchestration Agents window is displayed.
Figure 37: IBM Resiliency Orchestration Agents Installation on Windows
Server - Installing IBM Resiliency Orchestration Agents
Once the installation is complete, the Starting Agents window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 122
Figure 38: IBM Resiliency Orchestration Agents Installation on Windows
Server - Starting Agents
18. On the Starting Agents window, perform either of the following:
Click Yes to start the agent services automatically.
Click No to start the agent services manually.
Note
The best practice is not to change the default value displayed on the Starting Agents
window.
19. Restart the agent machine, if the agents do not start after agent installation is complete.
When the installation is carried on silent mode or GUI mode, restart with a Remote Desktop session for Windows.
20. Click Next. The Install Complete window is displayed, indicating successful installation.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 123
Figure 39: IBM Resiliency Orchestration Agents Installation on Windows
Server - Install Complete
21. Click Done to complete the installation process.
22. Download GPL dependent binaries for Windows OS Agent.
Windows -32 BIT
installedlocation/bin/cyggcc_s-1.dll
installedlocation/bin/cygiconv-2.dll
installedlocation/bin/cygintl-8.dll
installedlocation/bin/cygwin1.dll
Windows-64-BIT
installedlocation/bin/cyggcc_s-1.dll
installedlocation/bin/cygiconv-2.dll
installedlocation/bin/cygintl-8.dll
installedlocation/bin/cygwin1.dll
23. Once the installation is complete, verify the individual agent service installation manually, by clicking the Services icon on the Administrative tools group in Control Panel.
Note
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 124
For MS Exchange solution, Remote Agent installation is also supported. Perform the
following:
Remote agent is supported, however, while agent process runs on Agent Node
(Resiliency Orchestration Server), the IBM Resiliency Orchestration MS Exchange
Extensions (powershell extensions) needs to be deployed on the client servers. To
install the extensions, the user has to install the MS Exchange agent (local agent kit).
During installation, do not start any agents or after installation disable the installed
agent services (from service list).
24. Note that there will be not separate installer to install extensions as the number of installations is always going to be very few (only one or two). Hence we will reuse the agent installer itself to deploy local agent as well as Extensions for remote agent.
25. The traditional remote agent model where everything is deployed and executed on agent node (or Resiliency Orchestration Server) is not supported due to security restrictions by MS Domain Management and powershell.
26. Have to import replication workflow from $EAMSROOT/workflows/MSExch/MSExchReplicationInfo_Remote.xml
27. When the installation is carried on silent mode or GUI mode, restart with a Remote Desktop session for Windows.
11.7 Debugging Agent Installation on Windows Server
To debug the installation on Windows Server, and to view or capture the debug output from a Win32 installer, keep the CTRL key pressed immediately after launching the installer, until a console window appears. Before exiting the installer, copy the console output to a text file for later review.
11.8 Starting and Stopping of Agent Services on Windows Server
Note
Make sure that the clock settings on IBM Resiliency Orchestration Server and the agent
server are in sync.
Perform the following steps to view the agents installed on the server:
1. Go to Control Panel.
2. Click Administrative tools on the Control Panel.
3. Click the Services icon on the Administrative Tools window. You can see the agents installed on the server.
The following are the agents supported by IBM Resiliency Orchestration on
Windows Server. Depending on the installed agents, the services window will
show some of the following options:
Panaces Agent for MS Windows OS
Panaces Agent for IBM Resiliency File Replicator
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 125
Panaces Agent for MS SQL Server
IBM Resiliency File Replicator
Panaces Agent for Oracle
Panaces Agent for Oracle DataGuard
SRDF Agent
4. Right-click on the respective service in the Services window and perform the following steps:
Select Start to start the service.
Select Stop to stop the service.
Select Restart to restart the service.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 126
12 Installing Agents on Solaris Server
This software is available on the IBM Passport Advantage site. The Agents.zip when unzipped will result in the Agents folder contain IBM Resiliency IBM Resiliency File Replicator, SRS, and Sybase Agents. It contains all the binaries and packages to run IBM Resiliency Orchestration agents software. This software installation involves installing IBM Resiliency Orchestration agents‘ binaries, and a few miscellaneous software binaries.
Note
Solaris OS Agent is automatically installed during the installation of agents. IBM
Resiliency File Replicator is automatically installed during the installation of IBM
Resiliency IBM Resiliency File Replicator Agent.
12.1 Prerequisites for Installing Resiliency Orchestration Agents
IBM Resiliency Orchestration Agent Software packages are available for each supported application, protection software and operating system. These agents are installed on the servers involved in Disaster Recovery solution. The installer installs IBM Resiliency Orchestration Agent Platform package, required for the installation of agent software, on the same server. This installation happens automatically during agent installation.
For the installer to install IBM Resiliency Orchestration Agent Platform package successfully on Solaris, the following prerequisites must be fulfilled.
12.2 Solaris Server Requirements
The server participating in the DR infrastructure must incorporate the following requirements.
Hardware / Software Requirements: The following are the Solaris Server Hardware / Software requirements:
The server must have a minimum of 2 GB RAM.
If the server is running Sybase, it must have Sybase ASE 12.5 or 15 data center edition.
Set the Solaris machine time to a desired time zone. If the desired time zone to which Solaris machine is to be set is not available, import the time zone from another Solaris machine into /usr/share/lib/zoneinfo directory.
Note
Ensure that the time settings on IBM Resiliency Orchestration Server and the agent
server are in sync.
Logs Directory: The server should have enough allocated disk space to hold Sybase transaction logs, for up to 5 business days. Take the assistance of a
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 127
consultant to size the directory appropriately. This directory can reside on either direct attached storage, or external attached storage.
For Example: Consider that a log of 2MB is generated every 10 minutes. This will require 2MB/log * 6logs/hour * 24 hr/day * 5 days = 1.5GB of log device size.
The replication of database dump from primary server to secondary server and vice versa must be manually done, either on tapes, or on any other backup devices. It is assumed that the server is configured with appropriate backup software to do the same. If the database dump size is small, and primary and remote servers are connected over LAN, the replication may be performed on LAN itself. In this case, backup software is not required.
12.3 Host Machines with Virtual IP Address
If there is a virtual IP address for the host or if the host is part of an OS Cluster, then add the following entry in $EAMSROOT/installconfig/PanacesAgentGeneric.cfg
PANACES_AGENT_NODE_ADDRESS=<IP Address of the Node>.
Using this entry, IBM Resiliency Orchestration Server always communicates to all agents on this IP address. This could be a Virtual IP or the original IP assigned to the interface.
12.4 Installation of Agents
This section outlines the steps to install all agents on Solaris Server. Additional steps that you must perform for specific agents are also included within.
Note
You must have administrator, root or equivalent privileges to install IBM Resiliency
Orchestration Agents.
To install the agents, perform the following steps:
1. Download the Agent Installer executable files from the IBM Passport Advantage site.
2. Files are available in the zipped format in the Agents folder. Extract Files from
SolarisIntel_DRMAgent_7.1.zip for Intel based architecture and
SolarisSparc_DRMAgent_7.1.zip.
3. Goto the extracted folder and execute the following command (Use whichever is applicable):
sh install.bin (or) ./install.bin
Note
Make sure that you have free space of approximately 700 MB in /tmp directory,
before executing the above command.
If server hardening is performed, you need to mention sudo prior to the above
command.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 128
4. After executing the command IBM Resiliency Orchestration Agent installation starts with the following screen.
Figure 40: IBM Resiliency Orchestration Agent Installer
5. After displaying the IBM Resiliency Orchestration Agent Installer screen, the Introduction window is displayed.
Figure 41: IBM Resiliency Orchestration Agents Installation on Solaris
Server - Introduction
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 129
6. Go through the installation procedure and click Next. The Choose Install Folder window is displayed.
Figure 42: IBM Resiliency Orchestration Agents Installation on Solaris
Server - Choose Install Folder
7. Select a path to install the software by clicking Choose. Alternatively, you can click Restore Default Folder to restore the default path. The default path is /opt/panaces. It is recommended that you use the default path displayed.
8. Click Next. The Choose Agents - Solaris window is displayed.
Figure 43: IBM Resiliency Orchestration Agents Installation on Solaris
Server - Choose Agents - Solaris
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 130
The list of agents available is displayed on the Choose Agents - Solaris window.
9. Select the checkbox next to the specific agent to install that agent. You can choose to install any or all of the agents.
10. Click Next. The Choose Link Folder window is displayed.
Figure 44: IBM Resiliency Orchestration Agents Installation on Solaris
Server - Choose Link Folder
11. Choose a path for creating links in the Choose Link Folder window.
Select In your home folder for creating a link in the home folder.
Select Other to enter a specific path.
Select Don’t create links for not creating shortcut folders.
12. Click Next. The Agent Configuration window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 131
Figure 45: IBM Resiliency Orchestration Agents Installation on Solaris
Server - Agent Configuration
13. Enter Sybase JDBC driver jar file location.
14. Click the Choose button to select the jar file location.
Note
Confirm that the selected path has all the JDBC driver jar files.
15. Click Next. For Sybase agent, enter the Sybase Admin login ID for the Sybase database.
Figure 46: IBM Resiliency Orchestration Agents Installation on Solaris
Server - Agent Configuration
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 132
16. Enter the IP addresses of the primary and secondary IBM Resiliency Orchestration servers and IBM Resiliency Orchestration Agent Node Address. In a non-NAT environment NAT IP address field should be left blank.
17. In a NAT environment, provide the Primary and secondary Resiliency Orchestration Server‘s public IP. Resiliency Orchestration Agent node address should be the public IP & NAT IP address should be the private IP of the server where you are installing.
Figure 47: IBM Resiliency Orchestration Agents Installation on Solaris
Server - IBM Resiliency Orchestration IP Address Configuration
Note
To change Nat IP configuration after installation or to troubleshoot the issue refer to NAT
IP in the Troubleshooting section.
18. Click Next. Enter Site Controller IP Address if required.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 133
Figure 48: IBM Resiliency Orchestration Site Controller IP Address
Configuration on Solaris Server
19. Click Next. The Pre-Installation Summary window is displayed.
Figure 49: IBM Resiliency Orchestration Agents Installation on Solaris
Server - Pre-Installation Summary
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 134
20. Go through the pre-installation summary to verify the inputs provided. If you want to change the inputs, click Previous and modify.
21. Click Install. The Installing IBM Resiliency Orchestration Agents window is displayed.
Figure 50: IBM Resiliency Orchestration Agents Installation on Solaris
Server - Installing IBM Resiliency Orchestration Agents
22. Once the installation is complete, the Starting Agents window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 135
Figure 51: IBM Resiliency Orchestration Agents Installation on Solaris
Server - Starting Agents
23. On the Starting Agents window, perform either of the following:
Click Yes to start the agent services automatically.
Click No to start the agent services manually.
Note
The best practice is not to change the default value displayed on the Starting Agents
window.
24. Restart the agent machine, if the agents do not start after agent installation is complete.
25. Click Next. The Install Complete window is displayed, indicating the successful installation.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 136
Figure 52: IBM Resiliency Orchestration Agents Installation on Solaris
Server - Install Complete
26. Click Done to complete the installation process.
Note
After the agent installation, log off and log in again to your computer to effect the IBM
Resiliency Orchestration environment variables settings permanently.
When the installation is carried on silent mode or GUI mode, restart with a Putty session for Unix and Remote Desktop session for Windows.
12.5 HA Configuration
Post Metadata replication, slave server status can display the following error in slave server:
Unable to load replication GTID slave state from mysql.gtid_slave_pos: Table 'mysql.gtid_slave_pos' doesn't exist
In case this error is displayed, run the following command in master and slave server:
sudo mysql_upgrade
12.6 Debugging Agent Installation on Solaris Server
To debug the Agent installation on Solaris Server, refer the log entries made in the file PanacesAgentdebug.log. The file is located in /opt directory.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 137
12.7 Starting and Stopping Agents on Solaris Server
The script for starting and stopping of the agents resides at the following location on the Solaris Server:
/etc/rc3.d
12.7.1 Solaris OS Agent
The script S99PanOSAgt starts the service automatically when the server is rebooted.
Alternatively, the following steps can be used to start or stop the agent manually -
Go to $EAMSROOT and enter the following command:
# nohup ./SolarisOSAgent.sh start &
# nohup . /SolarisOSAgent.sh stop &
Note
Java is not bundled with the installer for Intel Solaris systems. Instead, the system uses
Java installed with the Operating System (OS).
For Intel Solaris machines, the following steps are performed to use Java installed with the OS:
Rename installer bundled java
mv /opt/panaces/jre /opt/panaces/orig_jre
Create softlink to the os java :
ln -s /usr/bin/java/jre /opt/panaces/jre
Note that $EAMSROOT is /opt/panaces as explained in this guide. This is the default location. However, you can install the agents at any other location.
12.7.2 PFR Agent
The script S99PanPFRAgt starts the service automatically when the server is rebooted.
Alternatively, the following steps can be used to start or stop the agent manually -
Go to $EAMSROOT and enter the following command:
# nohup ./PFRAgent.sh start &
# nohup ./PFRAgent.sh stop &
12.7.3 Sybase Agent
The script S99PanSybAgt starts the service automatically when the server is rebooted.
Alternatively, the following steps can be used to start or stop the agent manually -
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 138
Go to $EAMSROOT and enter the following command:
# nohup ./SybaseAgent.sh start &
# nohup ./SybaseAgent.sh stop &
12.7.4 SRS Agent
The script S99PanSRSAgt starts the service automatically when the server is rebooted.
Alternatively, the following steps can be used to start or stop the agent manually -
Go to $EAMSROOT and enter the following command:
# nohup ./SRSAgent.sh start &
# nohup ./SRSAgent.sh stop &
12.7.5 Oracle Agent
The script S99PanOraAgt starts the service automatically when the server is rebooted.
Alternatively, the following steps can be used to start or stop the agent manually -
Go to $EAMSROOT and enter the following command:
# nohup ./OracleAgent.sh start &
# nohup ./OracleAgent.sh stop &
12.7.6 TrueCopy
The script S99PanTrueCopyAgt starts the service automatically when the server is rebooted.
Alternatively, the following steps can be used to start or stop the agent manually -
Go to $EAMSROOT and enter the following command:
$nohup ./TrueCopyAgent.sh start &
$nohup ./TrueCopyAgent.sh stop &
12.7.7 Listing the Running Agents
Enter the following command to check whether the agents installed have been started or not:
# ps –ef | grep –i LAX
This command will list the names of the agents that have been started.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 139
13 Installing Agents on Linux Server
This software is available on the IBM Passport Advantage site and can be accessed by the customer with the given credentials. This software installation involves installing IBM Resiliency Orchestration agents‘ binaries, and a few miscellaneous software binaries.
Note
Linux OS Agent is automatically installed during installation of agents. IBM Resiliency File
Replicator is automatically installed during installation of IBM Resiliency IBM Resiliency
File Replicator Agent.
13.1 Installation of Agents
This section outlines the steps to install all agents on Linux (RHEL 7) Server. Additional steps that you must perform for specific agents are also included within.
Note
You must have administrator, root or equivalent privileges to install IBM Resiliency
Orchestration Agents.
To install the agents, perform the following steps:
1. Download the server binaries from the IBM Passport Advantage site.
2. Browse through IBM Resiliency Orchestration software from the downloaded path and go to the folder to the folder Agent/Linux_DRMAgent_7.1.zip for 32-bit Linux Operating Systems or Agents/ Linux64_DRMAgent_7.1.zip for 64-bit Linux Operating Systems.
3. Execute the following command: (Use whichever is applicable)
sh install.bin (or) ./install.bin
Note
Make sure that you have free space of approximately 700 MB in /tmp directory,
before executing the above command.
If server hardening is performed, you need to mention sudo prior to the above
command.
4. After executing the command, IBM Resiliency Orchestration Agent installation starts with the following screen.
Note
If the RHEL version is not 7, then a warning message will be displayed on the screen.
However, the user can continue with the installation.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 140
Figure 53: IBM Resiliency Orchestration Agent Installer
5. After displaying the IBM Resiliency Orchestration Agent Installer screen, the Introduction window is displayed
Figure 54: IBM Resiliency Orchestration Agents Installation on Linux
Server - Introduction
6. Go through the installation procedure and click Next. The Choose Install Folder window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 141
Figure 55: IBM Resiliency Orchestration Agents Installation on Linux
Server - Choose Install Folder
7. Select a path to install the software by clicking Choose. Alternatively, you can click Restore Default Folder to restore the default path. The default path is /opt/panaces. It is recommended that you use the default path displayed.
8. Click Next. The Choose Agents - Linux window is displayed.
Figure 56: IBM Resiliency Orchestration Agents Installation on Linux
Server - Choose Agents - Linux
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 142
9. The list of agents available is displayed on the Choose Agents - Linux window. Select the checkbox next to the specific agent to install that agent. The user can choose to install any or all of the agents.
10. Click Next. The Choose Link Folder window is displayed.
Figure 57: IBM Resiliency Orchestration Agents Installation on Linux
Server - Choose Link Folder
11. Choose a path for creating links in the Choose Link Folder window.
Select In your home folder for creating a link in the home folder.
Select Other to enter a specific path.
Click Don’t create links for not creating shortcut folders.
12. Click Next. The Agent Configuration window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 143
Figure 58: IBM Resiliency Orchestration Agents Installation on Linux
Server - Agent Configuration
13. Enter the Oracle home directory location. Click Choose button to select the file location.
14. Click Next. Enter the Oracle JDBC driver jar directory. Click Choose button to select the jar file location.
Note
Confirm that the selected path has all the JDBC driver jar files.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 144
Figure 59: IBM Resiliency Orchestration Agents Installation on Linux
Server - Agent Configuration
15. Click Next. Enter the Oracle Java lib directory location. Click the Choose button to select the file location
Figure 60: IBM Resiliency Orchestration Agents Installation on Linux
Server - Agent Configuration
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 145
16. Enter the IP addresses of the primary and secondary IBM Resiliency Orchestration servers and IBM Resiliency Orchestration Agent Node Address. In a non-NAT environment NAT IP address field should be left blank.
In a NAT environment Primary and secondary Resiliency Orchestration Server‘s public IP should be given. Resiliency Orchestration Agent node address should be the public IP and NAT IP address should be the private IP of the server where you are installing.
Figure 61: IBM Resiliency Orchestration Agents Installation on Linux
Server - IBM Resiliency Orchestration IP Address Configuration
For changing NAT IP configuration when installation is complete or troubleshooting NAT IP, refer to NAT IP. Post Metadata replication, slave server status can display the following error in slave server:
Unable to load replication GTID slave state from mysql.gtid_slave_pos: Table 'mysql.gtid_slave_pos' doesn't exist
In case this error is displayed, run the following command in the master and slave server:
sudo mysql_upgrade
17. Click Next. Enter Site Controller IP Address, if required.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 146
Figure 62: IBM Resiliency Orchestration Site Controller IP Address
Configuration on Linux Server
18. Click Next. The Pre-Installation Summary window is displayed.
Figure 63: IBM Resiliency Orchestration Agents Installation on Linux
Server - Pre - Installation screen
19. Go through the pre-installation summary to verify the inputs provided. If you want to change the inputs, click Previous and modify.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 147
20. Click Install. The Installing IBM Resiliency Orchestration Agents window is displayed.
Figure 64: IBM Resiliency Orchestration Agents Installation on Linux
Server - Installing IBM Resiliency Orchestration Agents
21. Once the installation is complete, the Starting Agents window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 148
Figure 65: IBM Resiliency Orchestration Agents Installation on Linux
Server - Starting Agents
22. On the Starting Agents window, perform either of the following:
Click Yes to start the agent services automatically.
Click No to start the agent services manually.
Note
The best practice is not to change the default value displayed on the Starting Agents
window.
Restart the agent machine, if the agents do not start after agent installation is
complete.
23. Click Next. The Install Complete window is displayed, indicating successful installation.
Figure 66: IBM Resiliency Orchestration Agents Installation on Linux
Server - Install Complete
24. Click Done to complete the installation process.
25. Download GPL dependent binaries for Resiliency Orchestration, MySQL Agent.
My SQL
EAMSROOT/lib/mysql-connector-java-5.1.20-bin.jar
Note
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 149
After the agent installation, log off and log in again to your computer to effect IBM
Resiliency Orchestration environment variables settings permanently.
When the installation is carried on silent mode or GUI mode, log off and log in with a
Putty session for Unix as well as for Windows
13.2 Debugging Agent Installation on Linux Server
To debug the Agent installation on Linux Server, refer the log entries made in the
file PanacesAgentDebug.log. The file is located in the /opt directory.
13.3 Starting and Stopping Agents on Linux Server
The script for starting and stopping agents that reside at the following location on Linux Server:
/etc/rc3.d
13.3.1 Linux OS Agent
The script S99PanOSAgt starts the service automatically when the server is rebooted.
Alternatively, the following steps can be used to start or stop the agent manually -
Go to $EAMSROOT and enter the following command:
# nohup ./LinuxOSAgent.sh start &
# nohup ./LinuxOSAgent.sh stop &
Note that $EAMSROOT is /opt/panaces as explained in this guide. This is the default location. However, you can install the agents at any other location.
13.3.2 PFR Agent
The script S99PanPFRAgt starts the service automatically when the server is rebooted.
Alternatively, the following steps can be used to start or stop the agent manually -
Go to $EAMSROOT and enter the following command:
# nohup ./PFRAgent.sh start &
# nohup ./PFRAgent.sh stop &
13.3.3 Oracle Agent
The script S99PanOraAgt starts the service automatically when the server is rebooted.
Alternatively, the following steps can be used to start or stop the agent manually -
Go to $EAMSROOT and enter the following command:
# nohup ./OracleAgent.sh start &
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 150
# nohup ./OracleAgent.sh stop &
13.3.4 Oracle Data Guard Agent
The script S99PanOraAgt starts the service automatically when the server is rebooted. Alternatively, the following steps can be used to start or stop the agent manually:
1. Go to $EAMSROOT and enter the following command to start the agent manually:
# nohup ./dataguardagent.sh start &
2. Enter the following command to start the agent manually:
# nohup ./dataguardagent.sh stop &
13.3.5 PostgreSQL Agent
The script S99PanPostgresAgt starts the service automatically when the server is rebooted.
Alternatively, the following steps can be used to start or stop the agent manually -
Go to $EAMSROOT and enter the following command:
# nohup ./PostgresAgent.sh start &
# nohup ./PostgresAgent.sh stop &
13.3.6 Listing the Agents that are Running
Enter the following command to check whether the agents installed have been started or not:
# ps –ef | grep –i LAX
This command will list the names of the agents that have been started.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 151
14 Installing Agents on HPUX Server
This software is available on the IBM Passport Advantage site. It contains all the binaries and packages to run IBM Resiliency Orchestration agents software. This software installation involves installing IBM Resiliency Orchestration agents‘ binaries, and a few miscellaneous software binaries.
Note
HPUX OS Agent is automatically installed during installation of agents. IBM Resiliency
File Replicator is automatically installed during installation of IBM Resiliency File
Replicator Agent. IBM Resiliency File Replicator replication may not work on Itanium
machines.
1. Install gnu-tar for HPUX for Itanium:
2. Download and manually install the GNU tar files.
3. Create the following soft links, after the installation of gnu tar:
ln -s <agent_install_dir>/tool/usr/local/lib/libiconv.sl
/usr/local/lib/libiconv.sl
ln -s <agent_install_dir>/tool/usr/local/lib/libintl.sl
/usr/local/lib/libintl.sl
14.1 Installation of Agents
This section outlines the steps to install all agents on HPUX Server. Additional steps that you must perform for specific agents are also included within.
Note
You must have root or root equivalent privileges to install IBM Resiliency Orchestration
Agents.
To install the agents, perform the following steps:
1. Download the server binaries from the IBM Passport Advantage site.
2. Browse through IBM Resiliency Orchestration software from the downloaded path and go to the folder Agent/HPUX_DRMAgent_7.1.zip.
3. Goto the extracted folder and execute the following command: (Use whichever is applicable)
sh install.bin (or) ./install.bin
Note
Make sure that you have free space of approximately 700 MB in /tmp directory,
before executing the above command.
If server hardening is performed, you need to mention sudo prior to the above
command.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 152
4. After executing the command, IBM Resiliency Orchestration Agent installation starts with the following screen.
Figure 67: IBM Resiliency Orchestration Agent Installer
5. After displaying the IBM Resiliency Orchestration Agent Installer screen, the Introduction window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 153
Figure 68: IBM Resiliency Orchestration Agents Installation on HPUX
Server - Introduction
6. Go through the installation procedure and click Next. The Choose Install Folder window is displayed.
Figure 69: IBM Resiliency Orchestration Agents Installation on HPUX
Server - Choose Install Folder
7. Select a path to install the software by clicking Choose. Alternatively, you can click Restore Default Folder to restore the default path. The default path is /opt/panaces. It is recommended that you use the default path displayed.
8. Click Next. The Choose Agents - HPUX window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 154
Figure 70: IBM Resiliency Orchestration Agents Installation on HPUX
Server - Choose Agents - HPUX
9. The list of agents available is displayed on the Choose Agents - HPUX window. Select the checkbox next to the specific agent to install that agent. You can choose to install any or all of the agents.
10. Click Next. The Choose Link Folder window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 155
Figure 71: IBM Resiliency Orchestration Agents Installation on HPUX
Server - Choose Link Folder
11. Choose a path for creating links in the Choose Link Folder window.
Select In your home folder for creating a link in the home folder.
Select Other to enter a specific path.
Click Don’t create links for not creating shortcut folders.
12. Click Next. The Agent Configuration window is displayed.
Figure 72: IBM Resiliency Orchestration Agents Installation on HPUX
Server - Agent Configuration
13. Enter the Oracle home directory location. Click Choose button to select the file location.
14. Click Next. Enter the Oracle JDBC driver jar directory. Click Choose button to select the jar file location.
Note
Confirm that the selected path has all the JDBC driver jar files.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 156
Figure 73: IBM Resiliency Orchestration Agents Installation on HPUX
Server - Agent Configuration
15. Click Next. Enter the Oracle Java lib directory location. Click the Choose button to select the file location
Figure 74: IBM Resiliency Orchestration Agents Installation on HPUX
Server - Agent Configuration
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 157
16. Enter the IP addresses of the primary and secondary IBM Resiliency Orchestration servers and IBM Resiliency Orchestration Agent Node Address. In a non-NAT environment NAT IP address field should be left blank.
In a NAT environment Primary and secondary Resiliency Orchestration erver‘s public IP should be given. Resiliency Orchestration Agent node address should be the public IP & NAT IP address should be the private IP of the server where you are installing.
Figure 75: IBM Resiliency Orchestration Agents Installation on HPUX
Server - IBM Resiliency Orchestration IP Address configuration
For changing NAT IP configuration post installation or troubleshooting, refer to Troubleshooting NAT IP. Post Metadata replication, slave server status can display the following error in slave server:
Unable to load replication GTID slave state from mysql.gtid_slave_pos: Table 'mysql.gtid_slave_pos' doesn't exist
In case this error is displayed, run the following command in Master and Slave server:
sudo mysql_upgrade
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 158
Figure 76: IBM Resiliency Orchestration Site Controller IP Address
Configuration on HPUX Server
17. Click Next. Enter Site Controller IP Address if required.
18. Click Next. The Pre-Installation Summary window is displayed.
Figure 77: IBM Resiliency Orchestration Agents Installation on HPUX
Server - Pre-Installation Summary
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 159
19. Go through the pre-installation summary to verify the inputs provided. If you want to change the inputs, click Previous and modify.
20. Click Install. The Installing IBM Resiliency Orchestration Agents window is displayed.
Figure 78: IBM Resiliency Orchestration Agents Installation on HPUX
Server - Installing IBM Resiliency Orchestration Agents
21. Once the installation is complete, the Starting Agents window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 160
Figure 79: IBM Resiliency Orchestration Agents Installation on HPUX
Server - Starting Agents
22. On the Starting Agents window, perform either of the following:
Click Yes to start the agent services automatically.
Click No to start the agent services manually.
Note
The best practice is not to change the default value displayed on the Starting Agents
window.
23. Restart the agent machine, if the agents do not start after agent installation is complete.
24. Click Next. The Install Complete window is displayed, indicating the successful installation.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 161
Figure 80: IBM Resiliency Orchestration Agents Installation on HPUX
Server - Install Complete
25. Click Done to complete the installation process.
Note
After the agent installation, log off and log in again to your computer to effect the IBM
Resiliency Orchestration environment variables settings permanently.
When the installation is carried on silent mode or GUI mode, restart with a Putty session for Unix and Remote Desktop session for Windows.
14.2 Debugging Agent Installation on HPUX Server
To debug the Agent installation on HPUX Server, refer to the log entries made in
the file PanacesAgentDebug.log. The file is located in the /opt directory.
14.3 Starting and Stopping Agents on HPUX Server
14.3.1 HPUX OS Agent
The following steps can be used to start or stop the agent manually -
Go to $EAMSROOT and enter the following command:
# nohup ./HPUXOSAgent.sh start &
# nohup ./HPUXOSAgent.sh stop &
Note that $EAMSROOT is /opt/panaces as explained in this guide. This is the default location. However, you can install the agents at any other location.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 162
14.3.2 PFR Agent
The following steps can be used to start or stop the agent manually -
Go to $EAMSROOT and enter the following command:
# nohup ./PFRAgent.sh start &
# nohup ./PFRAgent.sh stop &
14.3.3 Oracle Agent
The following steps can be used to start or stop the agent manually -
Go to $EAMSROOT and enter the following command:
# nohup ./OracleAgent.sh start &
# nohup ./OracleAgent.sh stop &
14.3.4 Oracle Data Guard Agent
The following steps can be used to start or stop the agent manually -
Go to $EAMSROOT and enter the following command:
# nohup ./DataGuardAgent.sh start &
# nohup ./DataGuardAgent.sh stop &
14.3.5 Listing the Agents that are Running
Enter the following command to check whether the agents installed have been started or not:
# ps –ef | grep –i LAX
This command will list the names of the agents that have been started.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 163
15 Installing Agents on AIX Server
This software is available on the IBM Passport Advantage site. It contains all the binaries and packages to run IBM Resiliency Orchestration agents software. This software installation involves installing IBM Resiliency Orchestration agents‘ binaries, and a few miscellaneous software binaries.
Note
AIX OS Agent is automatically installed during installation of agents. IBM Resiliency File
Replicator is automatically installed during installation of IBM Resiliency File Replicator
Agent.
15.1 Prerequisites for Installing Resiliency Orchestration Agents
IBM Resiliency Orchestration Agent Software packages are available for each supported application, protection software, and operating system. These agents are installed on the servers involved in the Disaster Recovery solution. The installer installs the IBM Resiliency Orchestration Agent Platform package, required for agent software to be installed, on the same server. This installation happens automatically during agent installation.
For the installer to install IBM Resiliency Orchestration Agent Platform package successfully on AIX, the following prerequisites must be fulfilled.
15.2 AIX Server Requirements
The server participating in the DR infrastructure must incorporate the following requirements:
Hardware / Software Requirements: The following are the AIX Server Hardware / Software requirements:
The server must have a minimum of 2 GB RAM.
Confirm that the AIX machine is set to a desired time-zone.
AIX 6.1 TL7 (6100-07) or later is required to work with Java 8. For details, refer to https://www-01.ibm.com/support/docview.wss?uid=isg3T1022644#requirements
Note
Confirm that the time settings on IBM Resiliency Orchestration Server and the agent
server are in sync.
15.3 Host Machines with Virtual IP Address
If there is a virtual IP address for the host or if the host is part of an OS Cluster, add the
following entry in $EAMSROOT/installconfig/PanacesAgentGeneric.cfg
PANACES_AGENT_NODE_ADDRESS=<IP Address of the Node>. Using this entry, IBM
Resiliency Orchestration Server always communicates to all agents on this IP address.
This could be a Virtual IP or the original IP assigned to the interface.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 164
15.4 Installation of Agents
This section outlines the steps to install all agents on AIX Server. Additional steps that you must perform for specific agents are also included within.
Note
You must have administrator, root or equivalent privileges to install IBM Resiliency
Orchestration Agents.
To install the agents, perform the following steps:
1. Download the server binaries from the IBM Passport Advantage site.
2. Browse through IBM Resiliency Orchestration software from the downloaded path and go to the folder to the folder Agent/AIX_DRMAgent_7.1.zip.
3. Go to the extracted folder and execute the following command: (Use whichever is applicable)
sh install.bin (or) ./install.bin
Note
Ensure that you have free space of approximately 700 MB in /tmp directory, before
executing the above command.
If server hardening is performed, you need to mention sudo prior to the above
command.
4. After executing the command, IBM Resiliency Orchestration Agent installation starts with the following screen.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 165
Figure 81: IBM Resiliency Orchestration Agent Installer
5. After displaying the IBM Resiliency Orchestration Agent Installer screen, the Introduction window is displayed.
Figure 82: IBM Resiliency Orchestration Agents Installation on AIX
Server - Introduction
6. Go through the installation procedure and click Next. The Choose Install Folder window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 166
Figure 83: IBM Resiliency Orchestration Agents Installation on AIX
Server - Choose Install Folder
7. Select a path to install the software by clicking Choose. Alternatively, you can click Restore Default Folder to restore the default path. The default path is /opt/panaces. It is recommended that you use the default path displayed.
8. Click Next. The Choose Agents - AIX window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 167
Figure 84: IBM Resiliency Orchestration Agents Installation on AIX
Server - Choose Agents - AIX
9. The list of agents available is displayed on the Choose Agents - AIX window. Select the checkbox next to the specific agent to install that agent. You can choose to install any or all of the agents.
10. Click Next. The Choose Link Folder window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 168
Figure 85: IBM Resiliency Orchestration Agents Installation on AIX
Server - Choose Link Folder
11. Choose a path for creating links on the Choose Link Folder window.
Select In your home folder for creating a link in the home folder.
Select Other to enter a specific path.
Click Don’t create links for not creating shortcut folders.
12. Click Next. The Agent Configuration window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 169
Figure 86: IBM Resiliency Orchestration Agents Installation on AIX
Server - Agent Configuration
13. Enter the DB2 Instance user login ID. Click Next.
Note
If PFR agent is select, then installer skips this step and displays IBM Resiliency
Orchestration Server IP Address Configuration window as PFR Agent does not require
any configuration.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 170
Figure 87: IBM Resiliency Orchestration Agents Installation on AIX
Server - Agent Configuration
14. Enter the IP addresses of the primary and secondary IBM Resiliency Orchestration servers and IBM Resiliency Orchestration Agent Node Address. In a non-NAT environment NAT IP address field should be left blank.
In a NAT environment Primary and secondary Resiliency Orchestration Server‘s public IP should be given. Resiliency Orchestration Agent node address should be the public IP and NAT IP address should be the private IP of the server where you are installing
For changing NAT IP configuration post installation or troubleshooting, refer to Troubleshooting NAT IP. Post Metadata replication, slave server status can display the following error in slave server:
Unable to load replication GTID slave state from mysql.gtid_slave_pos: Table 'mysql.gtid_slave_pos' doesn't exist
In case this error is displayed, run the following command in the master and slave server:
sudo mysql_upgrade
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 171
Figure 88: IBM Resiliency Orchestration Agents Installation on AIX
Server - IBM Resiliency Orchestration IP Address configuration
15. Click Next. Enter Site Controller IP Address if required.
Figure 89: IBM Resiliency Orchestration Site Controller IP Address
Configuration on AIX Server
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 172
16. Click Next. The Pre-Installation Summary window is displayed.
Figure 90: IBM Resiliency Orchestration Agents Installation on AIX
Server - Pre-Installation Summary
17. Go through the pre-installation summary to verify the inputs provided. If you want to change the inputs, click Previous and modify.
18. Click Install. The Installing IBM Resiliency Orchestration Agents window is displayed.
19. Once the installation is complete, the Starting Agents window is displayed.
20. On the Starting Agents window, perform either of the following:
Click Yes to start the agent services automatically.
Click No to start the agent services manually.
Note
The best practice is not to change the default value displayed on the Starting Agents
window.
21. Restart the agent machine, if the agents do not start after agent installation is complete.
22. Click Next. The Install Complete window is displayed, indicating successful installation.
23. Click Done to complete the installation process.
Note
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 173
After the Agent installation, log off and log in again to your computer to effect the IBM
Resiliency Orchestration environment variables settings permanently.
When the installation is carried on silent mode or GUI mode, restart with a Putty session for UNIX and Remote Desktop session for Windows.
15.5 Starting and Stopping of Agents on AIX Server
The script for starting and stopping of the agents resides at the following location on AIX Server:
/etc/rc.d/rc2.d
15.5.1 AIX OS Agent
The script S99PanOSAgt starts the service automatically when the server is rebooted.
Alternatively, the following steps can be used to start or stop the agent manually -
Go to $EAMSROOT and enter the following command:
# nohup ./AIXOSAgent.sh start &
# nohup ./AIXOSAgent.sh stop &
Note that $EAMSROOT is /opt/panaces as explained in this guide. This is the default location. However, you can install the agents at any other location.
15.5.2 PFR Agent
The script S99PanPFRAgt starts the service automatically when the server is rebooted.
Alternatively, the following steps can be used to start or stop the agent manually -
Go to $EAMSROOT and enter the following command:
# nohup ./PFRAgent.sh start &
# nohup ./PFRAgent.sh stop &
15.5.3 Oracle Agent
The script S99PanOraAgt starts the service automatically when the server is rebooted.
Alternatively, the following steps can be used to start or stop the agent manually -
Go to $EAMSROOT and enter the following command:
# nohup ./OracleAgent.sh start &
# nohup ./OracleAgent.sh stop &
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 174
15.5.4 Oracle Data Guard Agent
The script S99PanOraAgt starts the service automatically when the server is rebooted. Alternatively, the following perform the following steps to start or stop the agent manually:
1. Go to $EAMSROOT and enter the following command to start the agent manually:
# nohup ./DataGuardAgent.sh start &
24. Enter the following command to stop the agent manually:
# nohup ./DataGuardAgent.sh stop &
15.5.5 Listing the Agents that are Running
Enter the following command to check whether the agents installed have been started or not:
# ps –ef | grep –i LAX
This command will list the names of the agents that have been started.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 175
16 Installing Resiliency Orchestration Advanced Reporter
IBM Advanced Reporter is the licensed feature. You can install it in GUI mode only. It is supported only in Linux platform, to be installed on Resiliency Orchestration Server.
16.1 Prerequisites
IBM Resiliency Orchestration Server should be already installed in the machine, else installer will display an error and quit.
You can install the Resiliency Orchestration Advanced Reporter in the following methods:
Installing by using the GUI. For instructions, see Installing Advanced Reporter
in GUI Mode.
Installing by using the Silent Mode. For instructions, see Installing the
Advanced Reporter in Silent Mode.
16.2 Installing Advanced Reporter in GUI Mode
To install the advanced reporter, perform the following steps. The commands specified in the following points must be provided at the command prompt:
1. Download the Advanced Reporter binaries from the IBM Passport Advantage site.
2. IBM Resiliency Orchestration Advanced Reporter can be installed only if you log in as Root user. Go to Advanced Reporter folder and execute the following command.
sh install.bin (or) ./install.bin
Note
If server hardening is performed, you need to mention sudo prior to the above command.
3. After executing the command IBM Resiliency Orchestration Advanced Reporter installation starts with the following screen.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 176
Figure 91: IBM Resiliency Orchestration Advanced Reporter Installer
A warning message is shown if Linux version is not RHEL 5 or RHEL 6. User can still Continue.
4. After displaying the IBM Resiliency Orchestration Advanced Reporter Installer screen, the MariaDB root password window is displayed.
5. Enter password for MariaDB root user or leave it blank if there is no password.
Warning message is shown if MariaDB version is not 10.1.17 or 10.1.19. User can
still Continue.
Note
Click the Cancel button to quit the installation.
6. Click Next. The Tomcat Home window is displayed.
7. Click Choose… to browse and select the location of Tomcat.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 177
Figure 92: IBM Resiliency Orchestration Advanced Reporter Installation -
Tomcat Path
8. When Tomcat is located and then selected, the path appears in the Please Choose a Folder: box in Tomcat Home screen. Click Next, the Introduction window is displayed.
Figure 93: IBM Resiliency Orchestration Advanced Reporter Installation -
Introduction
9. Click Next. The Choose IBM Resiliency Orchestration Server Folder window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 178
10. Select the path where IBM Resiliency Orchestration Server software is installed. Click Choose… to select the installation path. The default path is /opt/panaces.
Note
If the IBM Resiliency Orchestration Server is not installed in the given path, an error
message is displayed.
11. Click Next. The Pre-Installation Summary window is displayed.
Figure 94: IBM Resiliency Orchestration Advanced Reporter Installation -
Pre-Installation Summary
Note
Read through the pre-installation summary to verify the inputs provided. If you want to
change the inputs, click Previous and modify.
12. Click Install. The Installing Sanovi Advanced Reporter window is displayed.
13. IBM Resiliency Orchestration Advanced Reporter Installation automatically uploads the IBM Resiliency Orchestration Advanced Reporter schema. If it already exists, a dialog box is displayed as shown below, that confirms if you want to drop the existing IBM Resiliency Orchestration Advanced Reporter schema and replace it through installer.
14. Click No to continue the installation with the existing schema. Click Refresh to drop and recreate the IBM Resiliency Orchestration Advanced Reporter schema.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 179
15. After the installation is complete, the Installation Completed window is displayed, indicating successful installation.
16. Click Done to complete the installation process.
16.3 Configuring Openreports
Perform the following steps to configure Openreports:
1. Download openreports3.2.tar.gz $TOMCAT_HOME of Resiliency Orchestration Server from sourceforge content server (https://sourceforge.net/projects/gnu-utils/files/binaries/)
The tarball contains openreports.war, mariadb-java-client-1.1.8.jar,jasperreports-4.5.0.jar & jasperreports-javaflow-4.5.0.jar files.
2. Confirm that the user of openreports3.2.tar.gz file has Tomcat permissions, if the user does not have Tomcat permissions, change the Tomcat permissions (Tomcat user and Tomcat user group) manually.
3. Remove existing openreports.war(which is 0kb) file and open reports folder if exists already.
4. Untar openreports3.2.tar.gz using below commands
cd $TOMCAT_HOME; tar -xvzf openreports3.2.tar.gz
5. After untaring openreports3.2.tar.gz, openreports/WEB-INF/lib structure is created under $TOMCAT_HOME/webapps/ along with the following jar files: mariadb-java-client-1.1.8.jar,jasperreports-4.5.0.jar & jasperreports-javaflow-4.5.0.jar
6. Rename the existing openreports folder as openreports_bak
7. Prior to copying openreports.war, change the permission of $TOMCAT_HOME /webapps/openreports/WEB-INF to 757 temporarily.
8. Copy $TOMCAT_HOME/openreports.war to $TOMCAT_HOME/webapps. Revert the permission of $TOMCAT_HOME /webapps/openreports/WEB-INF when you have copied openreports.war.
9. Unzip the openreports.war at $TOMCAT_HOME/webapps by executing the following command if the TOMCAT service does not unzip openreports.war
unzip $TOMCAT_HOME/webapps/openreports.war -d openreports
10. Delete the jar files by executing the following command.
rm -f WEB-INF/lib/jasperreports-3.5.1.jar WEB-INF/lib/jasperreports-3.5.1-javaflow.jar
11. Copy mariadb-java-client-1.1.8.jar,jasperreports-4.5.0.jar & jasperreports-javaflow-4.5.0.jar files from $TOMCAT_HOME/webapps/openreports_bak/WEB-INF/lib to $TOMCAT_HOME/webapps/openreports/WEB-INF/lib
12. Delete the openreports_bak folder.
13. Go to $EAMSROOT/lib.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 180
14. Unzip openreports_dependencies.zip by executing the following command:
unzip openreports_dependencies.zip -d openreports_dependencies
15. After executing the above command, openreports_dependencies folder will be created under /$EAMSROOT/lib
16. copy classes folder from $EAMSROOT/lib/openreports_dependencies/WEB-INF to $TOMCAT_HOME/webapps/openreports/WEB-INF
17. copy etl.jar from $EAMSROOT/lib/openreports_dependencies/WEB-INF/lib to $TOMCAT_HOME/webapps/openreports/WEB-INF/lib
18. Login to mysql by executing the following commands at mysql prompt
use advancedreporter;
update REPORT_DATASOURCE set DRIVER='org.mariadb.jdbc.Driver';
19. Restart IBM Resiliency Orchestration services to access open reports.
16.4 Installing the Advanced Reporter in Silent Mode
In Silent mode installation method, the installation program reads the settings of the previous configuration from the .properties file that the user has created prior to installation. The installation program does not display any configuration options during the installation process.
The following sections describe how to install IBM Resiliency Orchestration Advanced Reporter, using the installation program in silent mode on Linux platform. It is assumed that the user has acquired the installation program from the IBM Passport Advantage site.
16.4.1 Editing Properties File
Before the user can run the installation program for Advanced Reporter in Silent mode, the properties file must be edited as per the following instructions.
To edit PanacesServerInstaller.properties file:
1. Get the Advanced Reporter Installer binary and PanacesServerInstaller.properties file from the IBM Passport Advantage site and copy it to /tmp folder.
cp Server/PanacesServerInstaller.properties /tmp/
cp AdvancedReporter/install.bin /tmp
2. Open the properties file by using the following command:
vi /tmp/PanacesServerInstaller.properties
3. Modify the MariaDB_ROOT_PASSWORD to modify MariaDB root user password.
16.4.2 Installing Resiliency Orchestration Advanced Reporter on Linux
Perform the following steps to install Advanced Reporter on Linux system.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 181
1. Log on to Linux system.
2. Navigate to the directory that contains the installation file.
3. Launch the installation by entering the following command:
/tmp/install.bin –f /tmp/PanacesServerInstaller.properties
Note
To verify the Advanced Reported installation was successful, go to $EAMSROOT and
verify that the reports folder is created and contains the required files.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 182
17 Installing IBM Resiliency Orchestration Server OVA
This chapter outlines the procedures for installing the IBM Resiliency Orchestration Server OVA.
IBM Resiliency Orchestration Server OVA software is delivered as the following file:
ResiliencyOrchestration_OVF10.ova: IBM Resiliency Orchestration Virtual Appliance for VMware
17.1 Minimum System Requirements
The following is the minimum system requirements for IBM Resiliency Orchestration Server.
2 vCPU
8 GB Memory
100 GB Hard Disk
17.2 Assumptions
It is assumed that the administrator who is installing and configuring IBM Resiliency Orchestration
Software is familiar with administering Cisco UCS Director Software including restarting UCS
Director services by accessing the UCS Director shell.
17.3 Installing Resiliency Orchestration Server Virtual Appliance for VMWare
17.3.1 Prerequisites
You need administrator privileges to connect to VMware VSphere
If you do not want to use DHCP, you need the following information: IP address, subnet mask, and default gateway.
17.4 Installation Procedure
1. Login to vCenter using the VMware vSphere Client
2. In the Navigation pane, choose the Data Center for IBM Resiliency Orchestration Server deployment.
3. Choose File >Deploy OVF Template.
4. The Deploy OVF Template window appears.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 183
5. In the Source pane, browse to the location where SanoviCC_OVF10.ova is located, choose the file, and click Open.
6. In the OVF Template Details pane, verify the details and click Next.
7. In the End User License Agreement pane, read the license agreement, and click Accept.
8. In the Name and Location pane, enter the name for the VM and choose the Data Center where IBM Resiliency Orchestration should be deployed
9. In the Host/Cluster pane, choose the required host, cluster, or resource pool, and click Next.
10. In the Datastore pane, choose the location to store IBM Resiliency Orchestration VM files, and click Next.
11. In the Disk Format pane, choose one of the following radio buttons and click Next to create disks:
Thin Provisioned format—To allocate storage on demand as data is written to disk.
Thick Provisioned (Lazy Zeroed) format —To allocate storage immediately in thick format.
Thick Provisioned (Eager Zeroed) format —To allocate storage in thick format. It might take longer
12. In the Network Mapping pane, choose your network and click Next.
13. In the IP Address Allocation pane, leave the fields blank for DHCP, or enter the values for static IP
14. Click Next.
15. In the Ready to complete pane, verify the options selected, and click Finish.
16. Power on the VM once the upload is completed.
Note
The above steps for Deployment can be used for SanoviSiteController.ova which includes
Sanovi Agent Node and Site Controller binaries.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 184
18 Installing Resiliency Orchestration Site Dashboard
IBM Resiliency Orchestration Site Dashboard is the licensed feature. You can install it in GUI mode only. It is supported only in Linux platform, to be installed on Resiliency Orchestration Server.
18.1 Prerequisites
The following are the prerequisites for installing Resiliency Orchestration site dashboard:
IBM Resiliency Orchestration Server should be already installed in the machine, else installer will display an error and quit.
The Google map API key has to be generated to use google maps. Refer to https://developers.google.com/maps/premium/prelaunch-checklist for details.
18.2 GUI Mode Installation of Resiliency Orchestration Site Dashboard
You need to perform the following steps to install the site dashboard:
1. Download the Site Dashboard binaries from the IBM Passport Advantage site.
2. IBM Resiliency Orchestration Site Dashboard can be installed only if you log in as Root user. Run the following command in the Site Dashboard folder.
sh install.bin (or) ./install.bin
Note
If server hardening is performed, you need to mention sudo prior to the above command.
3. After executing the command, IBM Resiliency Orchestration Site Dashboard installation starts with the IBM Resiliency Orchestration Site Dashboard Introduction window is displayed as shown in the following figure:
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 185
Figure 95: IBM Resiliency Orchestration Site Dashboard Introduction
4. After displaying the IBM Resiliency Orchestration Site Dashboard Introduction screen, the IBM Resiliency Orchestration Software License Agreement window is displayed as shown in the following figure:
Figure 96: IBM Resiliency Orchestration Site Dashboard - MySQL root
password
Note
Click the Cancel button to quit the installation.
5. Click Next. The Choose Tomcat home Folder window is displayed as shown in the following figure:
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 186
Figure 97: IBM Resiliency Orchestration Site Dashboard – Choose Tomcat
Home
6. Click Choose… to browse and select the location of Tomcat.
7. Click Next. The IBM Resiliency Orchestration IP Address window is displayed as shown in the following figure:
Figure 98: IBM Resiliency Orchestration Site Dashboard – IP address
8. Enter the IP address of the current machine.
9. Click Next. The IBM Resiliency Orchestration Google Apis Key window is displayed as shown in the following figure:
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 187
Figure 99: IBM Resiliency Orchestration Site Dashboard – Google Apis Key
10. Click Next. The IBM Resiliency Orchestration Pre-Installation Summary screen is displayed as shown in the following figure:
Figure 100: IBM Resiliency Orchestration – Pre-Installation Summary
Note
Read through the preinstallation summary to verify the inputs provided. If you want to
change the inputs, click Previous and modify.
11. Click Install. The IBM Resiliency Orchestration Installing Site Dashboard window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 188
Figure 101: IBM Resiliency Orchestration - Installing Site Dashboard
12. After the installation is complete, the IBM Resiliency Orchestration Installation Completed window is displayed indicating successful installation.
Figure 102: IBM Resiliency Orchestration Site Dashboard – Installation
Completed
13. Click Done to complete the installation process.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 189
19 Installing Resiliency Orchestration Using Silent Mode Installation
In Silent mode installation method, the installation program reads the settings for your configuration from the properties file that you modify prior to installation. The installation program does not display any configuration options during the installation process. Silent mode installation is supported on Windows, Linux, Solaris, HPUX and AIX platforms.
The following sections describe how to install IBM Resiliency Orchestration, using the installation program in silent mode on Windows, Linux, Solaris, HPUX and AIX platforms. It is assumed that you have acquired the installation program from the IBM Passport Advantage site.
Note
Confirm that the hardware and software configuration required for IBM Resiliency
Orchestration installation is in place.
19.1 Editing Properties File
When you install IBM Resiliency Orchestration in Silent mode, the installation program uses the .properties file for server (PanacesServerInstaller.properties) as well as agents (PanacesAgentsInstaller.properties), to determine which installation options should be implemented.
Before you run the installation program in Silent mode, you must edit the respective properties file in which you specify the installation options that you want to invoke, while performing the IBM Resiliency Orchestration Server and Agents installation.
Perform the following steps to edit the properties files:
1. Download the binaries and properties files from the FTP server to a location on the intended Resiliency Orchestration Server, assuming binary file and property files are available in /opt/Server and the logged in user has sudo permissions equivalent to root
2. Open the properties file by using the following command:
cd /opt/Server
sudo vi PanacesServerInstaller.properties
3. Modify the respective properties file for the key words shown in the following tables, to reflect your configuration.
The following table describes the keywords of the PanacesServerInstaller.properties file:
Key word Description
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 190
Key word Description
INSTALLER_UI Displays the mode of installation as “silent”.
MODIFY_SYSTEM_FILES=1 It modifies system files, i.e.
/etc/hosts,/etc/sysconfig/selinux,
/etc/sysctl.conf
KEYSTORE_FILE_PATH Add the keystore path.
For example:
/opt/panaces/installconfig/keystore/sanovi.key
store
USER_INSTALL_DIR Enter the default path for the directory to
install the IBM Resiliency Orchestration Server
software.(default path is /opt/panaces/ )
REFRESH_EXISTING_SCHEMA When the Schema Refresh option is chosen,
the old schema which is already available in
the system will be refreshed.Default is 0, if set
to 0 the schema will not be refreshed and
when set to 1 schema will be refreshed/reset.
STOP_IBM_RESILIENCY_ORCHESTR
ATION_AND_UNINSTALL
If set to 1, it will stop the running services and
uninstall.
If set to 0, the services will be running and the
uninstaller will quit. The logs will be available
in the \temp directory.
MariaDB_ROOT_PASSWORD Enter the password to connect to the MariaDB
database.
Note: If password is not present, keep the
field empty.
USER_MANAGEMENT_MODE Basic ADVANCED
ADVANCED_SERVER_TYPE NA LDAP or AD
Default: AD
ADVANCED_SERVER_URL NA Enter the Advanced Server URL of
AD/ LDAP Server
ADVANCED_SERVER_DOMAIN NA The Server Domain is applicable
only to AD.
Note: Do not enter domain for
LDAP
DIRECTORY_USERNAME NA Enter the User name for reading
the external system for AD/LDAP
Server.
DIRECTORY_PASSWORD NA Enter the Password for reading
the external system for AD/ LDAP
Server.
SEARCH_BASE_FOR_READING_ROL
ES
NA Enter the searchbase string for
AD/ LDAP Server.
LICENSE_ACCEPTED Enter the value “TRUE”
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 191
Key word Description
SUPPORT_USER_PASSWORD Enter the password for support user (default
=Drmsupport123$).
TOMCAT_HOME Enter the Tomcat Installation directory path.
The following table describes the key words of the PanacesAgentsInstaller.properties file:
Keyword Description
INSTALLER_UI Displays the mode of installation as
“silent”.
MSSQL_AGENT_WINDOWS_CHK
Sanovi File replicator _AGENT_CHK
SYBASE_AGENT_SOL_CHK
SRS_AGENT_CHK
ORACLE_AGENT_CHK
ORACLE_DATA_GUARD_AGENT_CHK
TRUE_COPY_AGENT_CHK
SRDF_AGENT_CHK
HPXP_AGENT_CHK
DB2_AGENT_CHK
POSTGRES_AGENT_CHK
Enter 1 to install the agent.
Enter 0 to not install the agent.
USER_INPUT_RESULT_JAR_MSSQL Enter the full path of the directory where
the MSSQL Jar files have been installed.
For example: On Windows, the location of
the Jar files would be C:\Program
Files\Microsoft SQL Server 2000 or 2005
Driver for JDBC\lib
USER_INPUT_ORACLE_HOME Enter the full path of the directory where
the Oracle is installed.
USER_INPUT_RESULT_JAR_ORA Enter the full path of the directory where
the Oracle Jar files have been installed.
Usually it is $ORACLE_HOME/jdbc/lib
USER_INPUT_RESULT_JLIB_ORA Enter the full path of directory where jar
libraray files are located. Usually it is
$ORACLE_HOME/jlib
USER_INPUT_RESULT_JAR_SYBASE Enter the full path of the directory where
the Sybase Jar files have been installed.
For example: <sybase installation
path>/jConnect-5_5/classes.
USER_INPUT_RESULT_SYBASE_LOGIN Enter the Sybase Admin login ID.
USER_INPUT_RESULT_PRIMARY_PANAC
ES_SERVER_IP
Enter the IP address of the primary server.
USER_INPUT_RESULT_SECONDARY_PA Enter the IP address of the secondary
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 192
Keyword Description
NACES_SERVER_IP server.
PANACES_AGENT_NODE_ADDRESS Enter the IP address of IBM Resiliency
Orchestration Agent.
REG_PANACES_CLASSPATH Displays the IBM Resiliency Orchestration
classpath. By default, the following
classpath is displyed:
lax.nl.env.PANACES_CLASSPATH
USER_INPUT_RESULT_DB2DIR Enter DB2 installation path
USER_INPUT_RESULT_DB2_INSTANCEU
SER
Enter DB2 instance username
USER_INSTALL_DIR The full pathname for the directory in
which you want to install the agent
software.
AGENTS_START_YES Enter 1 if you want to start the agents
automatically after the IBM Resiliency
Orchestration installation.
Enter 0 if you want to start the agents
manually.
Refer to the Starting and Stopping of
Agents in the respective Installation of
Agents chapter in this guide for more
information.
USER_INPUT_RESULT_POSTGRES_LOGI
N
By default, "postgres" will be pre-filled as
the login ID.
USER_INPUT_RESULT_NAT_IP NAT IP Address
USER_INPUT_RESULT_SITE_CONTROLL
ER_IP
Enter Site Controller IP address.
CHOSEN_INSTALL_SET= Enter Upgrade
Note: This is used only during Upgrade
4. Execute the following command to start the installation.
sudo /opt/Server/install.bin –f
/opt/Server/PanacesServerInstaller.properties
Note
When you are installing the IBM Resiliency Orchestration in the Silent Mode in the
Japanese OS, enter the following command:
sudo ./install.bin -f PanacesServerInstaller.properties -l ja
5. Follow the Post Installation Steps.
Note
Restart the Resiliency Orchestration application Server after you update the parameters
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 193
20 Installing Resiliency Orchestration Agent Server in Silent Mode
20.1 Installing Agent Server in Silent Mode on Windows System
Perform the following steps to install IBM Resiliency Orchestration on Windows system.
1. Log on to Windows system.
2. Open an MS-DOS command prompt window.
3. Go to the directory that contains the installation file and launch the installation procedure by entering the following command:
install.exe –f <complete path of the .properties file with the
properties file name>
For Example: install.exe -f c:\\Progra~1\\panaces\\PanacesAgentsInstaller.properties
Note
After completing the installation of Agents on Windows Server, no status is displayed.
The user does not get information on whether the installation is successful or not.
20.2 Starting Silent Mode Installation on Solaris/Linux/HPUX/AIX Servers
1. Log on to Linux/Solaris/HPUX/AIX system.
2. Navigate to the directory that contains the installation file.
3. Launch the installation by entering the following command:
./install.bin –f <complete path of the .properties file with the
properties file name>
For xample, enter the following command for agents:
./install.bin –f /Agents/ PanacesAgentsInstaller.properties
You need to enter the following command for server:
./install.bin –f /Server/ PanacesServerInstaller.properties
Note
You have to manually start IBM Resiliency Orchestration Server after installing IBM
Resiliency Orchestration.
20.3 Vault Configuration
If you want to use Vault make the following changes before starting Resiliency Orchestration Services.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 194
1. Set parameter IS_SERIALCALL_ENABLED=TRUE in <EAMSROOT>/installconfig/PanacesAgentGeneric.cfg. By default it is false. Make the changes for both PanacesAgentGeneric.cfg (Agent) and panaces.properties (Panaces services).
2. Set parameter sanovi.vault.agent.onstartup = TRUE in <EAMSROOT>/installconfig/panaces.properties. By default it is false.
For more information on Vault Configuration go to IBM Resiliency Orchestration Online Help and navigate to Home> Configuration> Vault Framework or refer to the admin guide.
3. Restart Resiliency Orchestration Server, if the Resiliency Orchestration Server is already started.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 195
21 Installing the Resiliency Orchestration Agent Server in Silent Mode
The following section provides steps to install the software by silent mode on Windows, Linux, Solaris, HPUX, and AIX servers.
Note
In silent mode, uninstallation does not check whether services are running or not. The
user has to confirm that services are stopped prior to uninstallation in silent mode.
21.1 Installing Agent Server on Windows in the Silent Mode
Perform the following steps to install IBM Resiliency Orchestration on Windows system.
1. Log on to Windows system.
2. Open an MS-DOS command prompt window.
3. Go to the directory that contains the installation file and launch the installation procedure by entering the following command:
install.exe –f <complete path of the .properties file with the
properties file name>
For Example: install.exe -f c:\\Progra~1\\panaces\\PanacesAgentsInstaller.properties
Note
After completing the installation of Agents on Windows Server, no status is displayed.
The user does not get information on whether the installation is successful or not.
21.2 Installing Agent Server on Solaris, Linux, HPUX, or AIX in the Silent Mode
1. Log on to Linux/Solaris/HPUX/AIX system.
2. Navigate to the directory that contains the installation file.
3. Launch the installation by entering the following command:
./install.bin –f <complete path of the .properties file with the
properties file name>
For example, enter the following command for agents:
./install.bin –f /Agents/ PanacesAgentsInstaller.properties
You need to enter the following command for server:
./install.bin –f /Server/ PanacesServerInstaller.properties
Note
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 196
You have to manually start IBM Resiliency Orchestration Server after installing IBM
Resiliency Orchestration.
21.3 Vault Configuration
If you want to use Vault, make the following changes prior to starting Panaces service.
Note
Restart Panaces if Panaces is already started after the following changes.
1. Set parameter IS_SERIALCALL_ENABLED=TRUE in
<EAMSROOT>/installconfig/PanacesAgentGeneric.cfg.
By default it is set as FALSE.
2. Make the changes for both the Agent and Resiliency Orchestration Services as
PanacesAgentGeneric.cfg (Agent) and panaces.properties (Resiliency Orchestration Services).
3. Set parameter sanovi.vault.agent.onstartup = TRUE in
<EAMSROOT>/installconfig/panaces.properties.
By default it is set as FALSE.
21.4 Post Upgrade Tasks
Since the mount TCL scripts are modified, the agents using the TCL scripts (HPXP solution) must also be upgraded when the Resiliency Orchestration Server is upgraded, else the mount operations will fail.
After the successful upgrade of the server, the user should clear the browser cache for the GUI changes to take effect completely.
The comparison between previous roles and new role definitions in Basic User Management are given as follows:
The OPERATOR has READ privileges for all the pages including Admin tab.
The ADMINISTRATOR can change their own User Management information and cannot edit or view for other users.
SUPER ADMINISTRATOR has all the privileges as in the previous releases.
NOTIFICATION MEMBER wherein it will not be allowed to login into the system.
SUPPORT USER will now be able to modify his own password on login. This was not supported in the previous releases.
The support user will be present and function as in the previous releases. The user will not be listed to other users who are logged into the system. When
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 197
support logs in, he/she will be able to view the user in the User Listing page and will be able to edit their own password and Home page preference.
For customers who are upgrading, the new user name is also reflected. Existing password will not be changed on upgrade.
The drmadmin user will not be allowed to be deleted by other users with SUPER ADMINISTRATOR role. Only newly created users with SUPER ADMINISTRATOR role can be deleted.
The user name field can accept a maximum up to 64 characters. The same will be reflected in the UI in login page and create/edit user page.
If HA is available, perform the following tasks:
Uninstall on Slave Resiliency Orchestration Server.
Install on Slave Resiliency Orchestration Server. Do not refresh the schema/DB during installation. Do not start Resiliency Orchestration Services on Slave Server.
Restart MariaDB Replication.
Restore required custom workflows/scripts from the backup.
Start the IBM Resiliency Orchestration Server services.
21.5 Server Memory Management
Depending on the expected number of groups that will be supported by IBM Resiliency Orchestration Software, Java maximum heap memory limit parameter needs to be specified. It is defined in the variable named DRM_SERVER_JVM_MEM, which is located at starting lines of the Resiliency Orchestration startup script DRM Install root/bin/panaces. Default value of this variable is set to –Xmx2048m.
The following are the recommended values:
Configuration with more than 100 groups: -Xmx4072m is recommended.
21.6 Backup and Fallback Plan
21.6.1 Backup Plan
Take the backup of the following files and directories:
IBM Server MariaDB Metadata
sudo mysqldump -u root --databases panaces pfr advancedreporter -R
--triggers > backupfilename.sql
IBM Server Installation directory $EAMSROOT
The following system files:
sysctl.conf
any user specific scripts and cron jobentries
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 198
/etc/hosts
User files
If Panaces Server is configured with Linux OS agent:
Agent Binaries
Custom / Field Specific scripts
21.6.2 Fallback Plan
At any time of the upgrade, if there are failures that cannot be corrected within the upgrade window, use the following plan to restore to the old IBM server installation.
Run the following command to drop the existing databases if they already exist:
sudo mysqladmin –u root drop panaces
sudo mysqladmin –u root drop pfr
sudo mysqladmin –u root drop advancedreporter
Restore the MariaDB Metadata from backup.
sudo mysql -u root < backupfilename.sql
Restore the IBM Server software installation directory.
Startup IBM Server Services.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 199
22 Upgrading the Resiliency Orchestration Advanced Reporter
Upgrading IBM Resiliency Orchestration Advanced Reporter is similar to fresh Installation of Advanced Reporter.
However, during the upgrade process you are prompted to refresh the existing advanced reporter metadata.
Select No, to retain the metadata and to upgrade only the binaries of advanced reporter.
Figure 103: Upgrade IBM Resiliency Orchestration Advance Reporter -
Metadata Refresh Screen for Advanced Reporter
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 200
23 Upgrading Resiliency Orchestration Agents
The upgrade of agents on customer servers may be done any time after the IBM Resiliency Orchestration Server software is upgraded.
23.1 Prerequisites
The following are prerequisites for upgrading Resiliency Orchestration Agents:
All the agents need to be stopped before performing any agent upgrade process.
Kill rsync.exe processes started by Panaces agents (PFR), if any.
The user needs to add a permanent firewall rule to allow port 8081(jetty) and 8083(RMI)
Note
If the firewall is off, adding a permanent firewall rule is not required.
The user needs chmod 744 permissions to upload binaries to jackrabbit repository.
23.2 Resiliency Orchestration Agent Upgrade [Optional]
Refer the respective agent upgrade chapters for upgrading the agents from the older version to 7.1 version.
After the agent upgrade, all new workflows or the new actions that got defined in field or bundled with 7.1 releases will work.
Note
Upgrading the agents will retain the existing workflow configuration files in the
$EAMSROOT/work directory to maintain backward compatibility. If new workflows from
the current version are loaded, it may not work with the existing workflow configuration
files. A fresh copy of the configuration file must be copied from
$EAMSROOT/scripts/repository/workflow-config directory to the work directory and must
be configured to be used by the workflow.
The following are the steps to upgrade Resiliency Orchestration agent:
1. For each identified Functional Group, move the Group to maintenance mode.
2. Upgrade the agent software on all servers.
23.3 Upgrading Agents on Linux Server
23.3.1 Prerequisites before upgrading agents on Linux Server
1. Stop all the agents.
2. Make sure that you have free space of approximately 700 MB in /tmp directory, before executing the above command.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 201
23.3.2 Limitations
Agents should be upgraded first and then IBM Resiliency IBM Resiliency File Replicator is upgraded, when IBM Resiliency IBM Resiliency File Replicator is installed with agents.
During upgrade, use old EAMSROOT as installation path.
23.3.3 Upgrading Agents on Linux Server in GUI mode
Perform the following steps for upgrading the agents on Linux Server. The commands specified in the following points must be provided at the command prompt:
To upgrade the agents, perform the following steps:
1. Download the agent binaries from the IBM Passport Advantage site.
2. Browse through IBM Resiliency Orchestration software from the downloaded path and go to the folder to the folder Agent/Linux_DRMAgent_7.1.zip for 32-bit Linux Operating Systems or Agents/ Linux64_DRMAgent_7.1.zip for 64-bit Linux Operating Systems.
3. Go to the extracted folder and execute the following command: (Use whichever is applicable)
sh install.bin (or) ./install.bin
Note
Make sure that you have free space of approximately 700 MB in /tmp directory,
before executing the above command.
If server hardening is performed, you need to mention sudo prior to the above
command.
4. After executing the command, IBM Resiliency Orchestration Agent installation starts with the following screen.
5. After displaying the IBM Resiliency Orchestration Agent Installer screen, the Introduction window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 202
Figure 104: Upgrade Agents on Linux Server - Introduction
6. Go through the installation procedure and click Next. The Choose Install Folder window is displayed.
Figure 105: Upgrade Agents on Linux Server - Choose Install Folder
7. Select a path to install the software by clicking Choose. Alternatively, you can click Restore Default Folder to restore the default path. The default path is
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 203
/opt/panaces. It is recommended that you use the default path. This needs to be the same as that of the previous agent installation.
8. Click Next. The Choose Install Set window is displayed. Select the Upgrade option and click Next
9. The Choose Install Set screen will be displayed only when the user selects the same install location as the current one.
Figure 106: Upgrade Agents on Linux Server - Choose Install Set
10. The Choose Agents - Linux window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 204
Figure 107: Upgrade Agents on Linux Server - Choose Agents - Linux
11. The list of agents available is displayed on the Choose Agents - Linux window. Select the checkbox next to the specific agent to install that agent. You can choose to install any or all of the agents.
12. Click Next. The Choose Link Folder window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 205
Figure 108: Upgrade Agents on Linux Server - Choose Link Folder
13. Choose a path for creating links in the Choose Link Folder window.
Select In your home folder for creating a link in the home folder.
Select Other to enter a specific path.
Select Don’t create links for not creating shortcut folders.
14. Click Next. The Agent Configuration window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 206
Figure 109: Upgrade Agents on Linux Server - Agent Configuration
15. Enter DB2 instance user login ID and click Next.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 207
Figure 110: Upgrade Agents on Linux Server - Agent Configuration
16. Enter the DB2 file location. Click the Choose button to select the jar file location.
17. Click Next. The NAT IP Address Configuration window displays.
Figure 111: Upgrade Agents on Linux Server – NAT IP Address
Configuration
18. Enter the NAT IP Address if applicable and click Next. The Site Controller Configuration window displays.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 208
Figure 112: Upgrade Agents on Linux Server – Site Controller
Configuration
19. Enter the Site Controller IP Address if applicable and click Next. The Pre-Installation Summary window displays.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 209
Figure 113: Upgrade Agents on Linux Server - Pre-Installation Summary
20. Go through the pre-installation summary to verify the inputs provided. If you want to change the inputs, click Previous and modify.
21. Click Install. The Installing IBM Resiliency Orchestration Agents window is displayed.
Figure 114: Upgrade Agents on Linux Server - Installing IBM Resiliency
Orchestration Agents
22. Once the installation is complete, the Starting Agents window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 210
Figure 115: Upgrade Agents on Linux Server - Starting Agents
23. On the Starting Agents window, perform either of the following:
Click Yes to start the agent services automatically.
Click No to start the agent services manually.
Note
The best practice is not to change the default value displayed on the Starting Agents
window.
24. Restart the agent machine, if the agents do not start after agent installation is complete.
25. Click Next. The Upgrade Complete window is displayed, indicating successful upgrade.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 211
Figure 116: Upgrade Agents on Linux Server - Upgrade Complete
26. Click Done to complete the upgrade process.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 212
24 Upgrading Resiliency Orchestration Agents Using Silent Mode Installation
24.1 Prerequisites before upgrading agents on AIX Server
Stop all the agents.
24.2 Limitations
Agents should be upgraded first and then IBM Resiliency IBM Resiliency File Replicator is upgraded, when IBM Resiliency IBM Resiliency File Replicator is installed with agents.
During upgrade, use old EAMSROOT as installation path.
24.3 Editing Properties File
When you upgrade IBM Resiliency Orchestration Agents in Silent mode, the upgrade program uses the .properties file for agents (PanacesAgentsInstaller.properties), to determine which upgrade options should be implemented. Therefore, before you can run the upgrade program in Silent mode, you must edit the respective properties file in which you specify the i upgrade options that you want to invoke, while performing the IBM Resiliency Orchestration Agents upgrade. Perform the following steps to edit the properties files.
1. Get the files from the IBM Passport Advantage site and copy properties files by running the following command:
cp Agents/PanacesAgentsInstaller.properties /tmp
2. Open the properties file by using the following command:
Agents(UNIX)
vi /tmp/PanacesAgentsInstaller.properties
3. Modify the respective properties file for the key words shown in the following tables, to reflect your configuration.
24.3.1 PanacesAgentsInstaller.properties file:
Keyword Description
INSTALLER_UI Displays the mode of installation as
“silent”.
MSSQL_AGENT_WINDOWS_CHK
Sanovi File replicator _AGENT_CHK
SYBASE_AGENT_SOL_CHK
SRS_AGENT_CHK
ORACLE_AGENT_CHK
ORACLE_DATA_GUARD_AGENT_CHK
Enter 1 to install the agent.
Enter 0 to not install the agent.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 213
Keyword Description
TRUE_COPY_AGENT_CHK
SRDF_AGENT_CHK
HPXP_AGENT_CHK
DB2_AGENT_CHK
POSTGRES_AGENT_CHK
USER_INPUT_RESULT_JAR_MSSQL Enter the full path of the directory where
the MSSQL Jar files have been installed.
For example: On Windows, the location of
the Jar files would be C:\Program
Files\Microsoft SQL Server 2000 or 2005
Driver for JDBC\lib
USER_INPUT_ORACLE_HOME Enter the full path of the directory where
the Oracle is installed.
USER_INPUT_RESULT_JAR_ORA Enter the full path of the directory where
the Oracle Jar files have been installed.
Usually it is $ORACLE_HOME/jdbc/lib
USER_INPUT_RESULT_JLIB_ORA Enter the full path of directory where jar
library files are located. Usually it is
$ORACLE_HOME/jlib
USER_INPUT_RESULT_JAR_SYBASE Enter the full path of the directory where
the Sybase Jar files have been installed.
For example: <sybase installation
path>/jConnect-5_5/classes.
USER_INPUT_RESULT_SYBASE_LOG
IN
Enter the Sybase Admin login ID.
USER_INPUT_RESULT_PRIMARY_PA
NACES_SERVER_IP
Enter the IP address of the primary server.
USER_INPUT_RESULT_SECONDARY_
PANACES_SERVER_IP
Enter the IP address of the secondary
server.
PANACES_AGENT_NODE_ADDRESS Enter the IP address of IBM Resiliency
Orchestration Agent.
REG_PANACES_CLASSPATH Displays the IBM Resiliency Orchestration
classpath. By default, the following
classpath is displayed:
lax.nl.env.PANACES_CLASSPATH
USER_INPUT_RESULT_DB2DIR Enter DB2 installation path
USER_INPUT_RESULT_DB2_INSTAN
CEUSER
Enter DB2 instance username
USER_INSTALL_DIR The full pathname for the directory in
which you want to install the agent
software.
AGENTS_START_YES Enter 1 if you want to start the agents
automatically after the IBM Resiliency
Orchestration installation.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 214
Keyword Description
Enter 0 if you want to start the agents
manually.
Refer to the Starting and Stopping of
Agents in the respective Installation of
Agents chapter in this guide for more
information.
USER_INPUT_RESULT_POSTGRES_L
OGIN
By default, "postgres" will be pre-filled as
the login ID.
USER_INPUT_RESULT_NAT_IP NAT IP Address
USER_INPUT_RESULT_SITE_CONTR
OLLER_IP
Enter Site Controller IP address.
CHOSEN_INSTALL_SET=
Enter Upgrade
Note: This is used only during Upgrade
24.4 Upgrading Agents in Silent Mode on Windows
Perform the following steps to upgrade the Agents on Windows:
1. Log on to Windows system.
2. Open an MS-DOS command prompt window.
3. Go to the directory that contains the installation file and launch the installation procedure by entering the following command:
install.exe –f <complete path of the .properties file with the
properties file name>
For Example: install.exe -f c:\\Progra~1\\panaces\\PanacesAgentsInstaller.properties
Note
After completing the installation of Agents on Windows Server, no status is displayed.
The user does not get information on whether the installation is successful or not.
24.5 Upgrading Agents in Silent Mode on Solaris, Linux, HPUX, AIX Servers
1. Log on to Linux/Solaris/HPUX/AIX system.
2. Navigate to the directory that contains the installation file.
3. Launch the installation by entering the following command:
./install.bin –f <complete path of the .properties file with the
properties file name>
For Example: For agents ./install.bin –f /Agents/ PanacesAgentsInstaller.properties
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 215
25 Installing Third-party Software
Download the GPL dependent binaries from this link: GPL Dependent Binaries
(https://sourceforge.net/projects/gnu-utils/files/binaries/).
You can use the procedures in this section to install the required Third-party software that you can download from the GPL Dependent Binaries site.
25.1 Red Hat Enterprise Linux (RHEL) Versions
25.1.1 RHEL 5.6 (32-Bit)
1. Download the software from GPL Dependent Binaries site.
2. Go to the ROOT folder for the Resiliency Orchestration application or its component.
3. Unzip the files by executing following command
tar -xvzf rsync3.0.5-RHEL5.6-32bit.tar.gz
tar -xvzf tar1.19-RHEL5.6-32bit.tar.gz
25.1.2 RHEL 5.5 (64-Bit)
1. Download the software from GPL Dependent Binaries site.
2. Go to the ROOT folder for the Resiliency Orchestration application or its component.
3. Unzip the files by executing following command
tar -xvzf rsync3.0.9-RHEL5.5-64bit.tar.gz
4. Create the following soft link.
ln -s <ROOT>/bin/tar tar
25.1.3 RHEL 5.7 (64-Bit)
1. Download the software from GPL Dependent Binaries site.
2. Go to the ROOT folder for the Resiliency Orchestration application or its component.
3. Unzip the files by executing following command
tar -xvzf rsync3.0.9-RHEL5.7-64bit.tar.gz
4. Create the following soft link.
ln -s <ROOT>/bin/tar tar
25.1.4 RHEL 6.X (64-Bit)
1. Download the software from GPL Dependent Binaries site.
2. Go to the ROOT folder for the Resiliency Orchestration application or its component.
3. Unzip the files by executing following command
tar -xvzf rsync3.0.9-RHEL6-64bit.tar.gz
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 216
tar -xvzf tar1.23-RHEL6-64bit.tar.gz
25.1.5 RHEL 7.X (64-Bit)
1. Download the software from GPL Dependent Binaries site.
2. Go to the ROOT folder for the Resiliency Orchestration application or its component.
3. Unzip the files by executing following command
tar -xvzf rsync3.0.9-RHEL7-64bit.tar.gz
tar -xvzf tar1.23-RHEL7-64bit.tar.gz
25.2 Advanced Interactive eXecutive (AIX)
1. Download the software from GPL Dependent Binaries site.
2. Go to the ROOT folder for the Resiliency Orchestration application or its component.
3. Unzip the files by executing following command
gunzip rsync3.0.5-AIX.tar.gz
tar -xvf rsync3.0.5-AIX.tar.gz
gunzip tar1.14-AIX.tar.gz
tar -xvf tar1.14-AIX.tar.gz
25.3 HPUX 64-Bit Itanium
1. Download the software from GPL Dependent Binaries site.
2. Go to the ROOT folder for the Resiliency Orchestration application or its component.
3. Unzip the files by executing following command
gunzip rsync3.0.9-HPUX11.31-IA.tar.gz
tar -xvf rsync3.0.9-HPUX11.31-IA.tar
gunzip tar1.26-HPUX11.31-IA.tar.gz
tar -xvf tar1.26-HPUX11.31-IA.tar
25.4 HPUX 64-Bit Parisac
1. Download the software from GPL Dependent Binaries site.
2. Go to the ROOT folder for the Resiliency Orchestration application or its component.
3. Unzip the files by executing following command
gunzip rsync3.0.9-HPUX11i-PARISC.tar.gz
tar -xvf rsync3.0.9-HPUX11i-PARISC.tar
gunzip tar1.26-HPUX11i-PARISC.tar.gz
tar -xvf tar1.26-HPUX11i-PARISC.tar
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 217
25.5 Solaris_Sparc
1. Download the software from GPL Dependent Binaries site.
2. Go to the ROOT folder for the Resiliency Orchestration application or its component.
3. Unzip the files by executing following command
tar -xvzf rsync3.0.5-SOLARIS10-SPARC.tar.gz
4. Download and then unzip/untar the following files
tar -xvzf tar1.18-SOLARIS10-SPARC.tar.gz
25.6 Solaris_Intel
1. Download the software from GPL Dependent Binaries site.
2. Go to the ROOT folder for the Resiliency Orchestration application or its component.
3. Unzip the files by executing following command
tar -xvzf rsync3.0.5-SOLARIS10-x86.tar.gz
4. Download and then unzip/untar the following files
tar -xvzf tar1.26-SOLARIS10-x86.tar.gz
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 218
26 Uninstalling Resiliency Orchestration Agent Node
Perform the following steps to uninstall IBM Resiliency Orchestration Agent Node.
1. Go to <$EAMSROOT>/UninstallerData folder.
2. Click Uninstall IBM Resiliency Orchestration Agent Node folder. The Uninstall IBM Resiliency Orchestration Agent Node window opens.
Figure 117: Uninstall IBM Resiliency Orchestration Agent Node
3. Click Uninstall.
4. The uninstallation process begins and lasts for a few seconds. When the process is complete, the following window is displayed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 219
Figure 118: Uninstall Complete screen
5. Click Done to close this window.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 220
27 Uninstalling Resiliency Orchestration Server
This chapter provides detailed information on uninstalling IBM Resiliency Orchestration product on your system.
Note
If you have used Silent mode of installation, you can perform only Silent mode of
uninstallation. After Silent mode of installation, Graphical mode of uninstallation cannot
be performed.
27.1 Uninstalling by using the Silent Mode
If the IBM Resiliency Orchestration Server and/ or Agent is installed through Graphical mode, the uninstallation is possible through both Graphical and Silent mode by using the following commande:
Uninstall_IBM_Resiliency_Orchestration -i silent
Uninstallation of IBM Resiliency Orchestration Server can be performed from:
GUI
Command Prompt
27.2 Uninstalling by using the GUI
To uninstall IBM Resiliency Orchestration Server from GUI, perform the following steps:
1. Go to $EAMSROOT/UninstallerData.
2. Click Uninstall_IBM Resiliency Orchestration_server.
3. The Introduction screen is displayed, as shown in the following figure.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 221
Figure 119: Uninstall IBM Resiliency Orchestration Server – Introduction
screen
4. Click the Uninstall button to continue with Uninstallation. The Uninstalling… screen is displayed, as shown in the following figure.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 222
Figure 120: Uninstall IBM Resiliency Orchestration Server –
Uninstalling… screen
5. Once the uninstaller removes all the features, the Uninstall Complete screen is displayed, as shown in the following figure.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 223
Figure 121: Uninstall IBM Resiliency Orchestration Server – Uninstall
Complete screen
6. Click Done to close the Uninstall IBM Resiliency Orchestration Server window.
Note
The uninstallation of IBM Resiliency Orchestration Server does not delete the database.
You have to manually delete the databases by providing the following command at the command prompt:
#mysql -u root
mysql>drop database panaces;
mysql>drop database pfr;
mysql>drop database advancedreporter;
27.3 Uninstalling by using the Command Prompt
To uninstall IBM Resiliency Orchestration Server from the command prompt, perform the following steps:
# cd $EAMSROOT/UninstallerData
# ./Uninstall_IBM_Resiliency_Orchestration
This process will uninstall all binaries that have been installed while installing IBM Resiliency Orchestration Server. This process will not uninstall Tomcat binaries.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 224
28 Uninstalling of Agents
28.1 Agents on Windows
Perform the following steps to uninstall all agents on your system.
1. Go to C:\Program Files\Panaces\ UninstallerData\ folder.
2. Click Uninstall Agents folder. The Uninstall Agents window opens.
3. Click Uninstall.
4. The uninstallation process begins and lasts for a few seconds. When the process is complete, the following window is displayed.
Figure 122: Uninstall Complete screen
5. Click Done to close this window.
28.2 Agents on Solaris
Perform the following steps to uninstall all agents from your system.
To uninstall Solaris agent(s) from the command prompt, execute the following commands:
# cd $EAMSROOT/UninstallerData
# ./Uninstall_IBM_Resiliency_Orchestration_Agents
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 225
As part of uninstallation, the link names from "/etc/rc3.d" directory should be manually removed.
28.3 Agents on Linux
Perform the following steps to uninstall all agents from your system.
To uninstall Linux agent(s) from command prompt, do the following steps:
# cd $EAMSROOT/UninstallerData
# ./Uninstall_IBM_Resiliency_Orchestration_Agents
As part of uninstallation, the link names from "/etc/rc.d/rc3.d" directory should be manually removed.
28.4 Agents on HPUX
Perform the following steps to uninstall all agents from your system.
To uninstall HPUX agent(s) from command prompt, do the following steps:
# cd $EAMSROOT/UninstallerData
# ./Uninstall_IBM_Resiliency_Orchestration_Agents
As part of uninstallation, the link names from "/etc/rc3.d" directory should be manually removed.
28.5 Agents on AIX
To uninstall AIX agent(s) from command prompt, enter the following commands:
# cd $EAMSROOT/UninstallerData
# ./Uninstall_IBM_Resiliency_Orchestration_Agents
As part of uninstallation, the link names from "/etc/rc.d/rc2.d" directory should be manually removed.
During uninstallation, the following directories will not be deleted, as they might be useful.
var/log
scripts/samples
panacesFileReplicator/filesets
If the above directories are not deleted, the uninstallation process will list the name of these directories. After reviewing its contents, the directories can be deleted.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 226
29 Installing Resiliency Orchestration OS Command Processor
29.1 Prerequisites
Prior installing the IBM Sz/OS CP (Command Processor), you need to install the following components on your z/OS system:
z/OS ICSF: ICSF is a software element of z/OS. ICSF works with the hardware cryptographic features and the Security Server (RACF element) to provide secure, high-speed cryptographic services in the z/OS environment. ICSF provides the application programming interfaces, which allow applications to request the cryptographic services. ICSF is also the means for loading the secure cryptographic features with master key values, allowing the hardware features to be used by applications. The cryptographic feature is secure, high-speed hardware that performs the actual cryptographic functions. Your processor hardware determines the cryptographic feature available to your applications.
Note
If z/OS ICSF is not installed, refer to the following manual: z/OS Cryptographic Services
Integrated Cryptographic Service Facility System Programmer's Guide.
z/OS OpenSSH: OpenSSH provides secure encryption for both remote login and file transfer.
Note
If z/OS OpenSSH is not installed, refer to the following manual: z/OS IBM Ported Tools
for z/OS: OpenSSH User's Guide
29.2 Overview
The IBM Sz/OS CP (Command Processor) enables the IBM Resiliency Orchestration Manager workflows to communicate with z/OS systems. The communication is created by installing several modules in the OMVS subsystem that allow commands to be submitted through SSH communications and through OMVS to execute on your z/OS system. Responses to those commands are then captured and returned to the Resiliency Orchestration Manager Server for further workflow processing.
For example, the following figure displays the Resiliency Orchestration Manager workflow, where Step A checks if the job, JOB123 is executing, if it is, Step B submits JOB456 and Step C is ignored, otherwise if Step A is not executing, Step B is ignored and Step C is completed.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 227
Figure 123: Resiliency Orchestration Workflow
29.3 Installing OS Command Processor
The Resiliency Orchestration OS Command Processor can be installed from a tar
file. The name of the tar file is sanovi-szcpvnnrnn.tar where nn denotes the
version and release number of the tar file.
Note
You need to install OS Command Processor into a directory named /u/sanovi.
The following tasks need to be performed to install the Resiliency Orchestration OS Command Processor from a tar file:
1. Extract Installation File
2. Authorize APF for TCMD, ZCMD, GCMD, and XCMD
3. Define Userid SANOVI to RACF (or other security program)
29.3.1 Extracting Installation File
The following are the steps to extract the installation file:
1. Specify the IP of your z/OS system, enable the download in binary mode, and FTP the SzCP tar file to your z/OS system, as shown in the following example:
ftp xxx.xxx.xxx.xxx <- the ip of your z/OS system
bin <- set binary mode
put /from/sanovi-szcpvnnrnn.tar /to/sanovi-szcpvnnrnn.tar
2. Create the /u/sanovi folder. If you have a previous version installed, copy it
to the backup prior proceeding, for example /u/sanovi-prev-version.
3. Extract the sanovi-szcpvnnrnn.tar file. Specify -xvf to extract and
display the untared files, and then specify the location /xxxx where the tar
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 228
file is FTP‘d in Step 1. The following example displays the snippet for
installing v01r00:
tar -xvf /xxxx/sanovi-szcpv01r00.tar
4. Verify that the following files are extracted in the /u/sanovi folder:
/u/sanovi/TCMD, 12288 bytes, 24 tape blocks
/u/sanovi/ZCMD, 24576 bytes, 48 tape blocks
/u/sanovi/tcmd.sh, 64 bytes, 1 tape block
/u/sanovi/zcmd.sh, 64 bytes, 1 tape block
29.3.2 Authorizing APF for TCMD, ZCMD, GCMD, and XCMD
1. After the untar, the contents of the /u/sanovi folder is displayed as shown
below:
gcmd.sh File rwxrwxrwx fff--- --s- ----
tcmd.sh File rwxr-xr-x fff--- --s- ----
xcmd.sh File rwxr-xr-x fff--- --s- ----
zcmd.sh File rwxr-xr-x fff--- --s- ----
GCMD File rwxrwxrwx fff--- --s- ----
TCMD File rwxr-xr-x fff--- --s- ----
XCMD File rwxr-xr-x fff--- --s- ----
ZCMD File rwxr-xr-x fff--- --s- ----
Note
The contents of /u/sanovi folder displayed from ISPF Data Set List Utility or
Edit Entry Panel is same.
2. Set the APF Extended Attribute ON for TCMD and ZCMD. You can perform this through ISPF, for example using MX (Modify Extended Attributes):
MX TCMD File rwxr-xr-x fff--- --s- ----
3. Enter ―/‖ next to APF Authorized, as shown below
Modify z/OS UNIX File Extended Attributes
Command ===>
Pathname . : /u/sanovi/TCMD
Type . . . : File
Enter "/" to select option
/ Use Shared Address Space
/ APF Authorized
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 229
Program Controlled
Shared Library
4. After APF authorization is turned on for TCMD and ZCMD, verify that the extended attribute displays, as shown below:
Pathname . : /u/sanovi
EUID . . . : 0
Command Filename Message Type Permission Audit Ext Fmat
----------------------------------------------------------
Dir rwxr-xr-x fff--- ----
Dir rwxr-xr-x fff--- ----
gcmd.sh File rwxrwxrwx fff--- --s- ----
tcmd.sh File rwxr-xr-x fff--- --s- ----
xcmd.sh File rwxr-xr-x fff--- --s- ----
zcmd.sh File rwxr-xr-x fff--- --s- ----
GCMD File rwxrwxrwx fff--- a-s- ----
TCMD File rwxr-xr-x fff--- a-s- ----
XCMD File rwxr-xr-x fff--- a-s- ----
ZCMD File rwxr-xr-x fff--- a-s- -------
29.3.3 Defining Userid SANOVI to RACF/Other Security Program
Define a userid named SANOVI to RACF or equivalent security program. The SANOVI userid needs the following OPERPARM attributes set:
OPERPARM INFORMATION
--------------------
STORAGE= 00000
AUTH= MASTER
DOM= ALL
CMDSYS= *
29.4 Verifying Sz/OS CP (Command Processor) Install
1. After the install, verify the install by executing the SzCPIVP Workflow from Resiliency Orchestration. The following figure displays the SzCPIVP Workflow.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 230
Figure 124: SzCPIVP
2. The workflow executes few simple tests to confirm that your install was successful. The following tasks will be performed:
TESTDAL: The TESTDAL enters and returns the output from a z/OS command
―D A,L‖.
TESTJESDA:The TESTJESDA enters and returns the output from a JES
command ―$DA‖.
TSOLISTCAT: The TSOLISTCAT enters and returns the output from a TSO
LISTC command.
TSOLU: The TSOLU enters and returns the output from a TSO LU command.
3. After the workflow is executed, confirm that each step is successful, for example successfully executed actions are displayed as shown below:
4. Click on the expand arrow to the left of each Action to verify that the correct output is returned. For example, your install is complete when the output is returned as shown in the following figure :
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 231
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 232
30 Migrating the Resiliency Orchestration Server
Find information about migrating the IBM Resiliency Orchestration Application Server to a New Server. You can migrate to the new server and retain the Same IP as the old server or set up a New IP for the new server.
Depending on the settings you want, select any one procedure from the following procedures:
Migrating the Resiliency Orchestration Server to a New Server with the Same IP
Migrating the Resiliency Orchestration Server to a New Server with the New IP
30.1 Migrating to new Server with Same IP
Assuming /backup has enough disk space for original and new IBM Resiliency Orchestration Server, EAMSROOT as /opt/panaces, and TOMCAT_HOME as /opt/jboss-ews-2.0/tomcat7, and same OS, with Same MariaDB DB version level
The below steps need to be followed to migrate IBM Resiliency Orchestration Server to new server with same IP
1. Stop all the services in the current IBM Resiliency Orchestration Server.
2. Take the mysql Schema
mysqldump -u root –databases panaces pfr advancedreporter –triggers -
R > /backup/panaces-pfr-advrpt.sql
3. Take EAMSROOT, and TOMCAT Home folder backup
cd /opt
tar –cvzf /backup/EAMSROOT.tar.gz panaces
cd /opt/
tar –cvzf /backup/tomcat7.tar.gz jboss-ews-2.0
4. Copy /backup/panaces-pfr-advrpt.sql /backup/EAMSROOT.tar.gz /backup/tomcat7.tar.gz /etc/security/limit.conf /etc/hosts
/etc/my.cnf to a common share location
5. Note down hostname of original server , at prompt type hostname
6. Note down the port exceptions in firewall , use system-config-firewall or system-config-securitylevel
7. Shutdown the current IBM Resiliency Orchestration Server using poweroff command
8. Bring the New IBM Resiliency Orchestration Server with Same IP with the help of IT.
9. Login to new IBM Resiliency Orchestration Server using putty.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 233
10. Copy from common share folder all files panaces-pfr-advrpt.sql EAMSROOT.tar.gz tomcat7.tar.gz limit.conf hosts my.cnf to /backup
11. Extract IBM Resiliency Orchestration binaries
cd /opt
tar –xvzf /backup/ EAMSROOT.tar.gz
12. Extract Tomcat
cd /opt
tar –xvzf /backup/tomcat7.tar.gz
13. Update EAMSROOT
echo “export EAMSROOT=/opt/panaces” >> /etc/profile
14. refer /backup/limit.conf , /backup/hosts , /backup/my.cnf and update /etc/security/limit.conf /etc/hosts /etc/my.cnf respectively
15. Set hostname same as noted one
hostname <original_server_hostname>
update same in /etc/sysconfig/network
16. Configure the exception ports as noted earlier using system-config-firewall or system-config-securitylevel
17. Restore the mysql schema
mysql -u root < /backup/panaces-pfr-advrpt.sql
18. Create required mysql users along with privileges
Mysql –u root
use mysql;
CREATE USER 'pfradmin'@'localhost' IDENTIFIED BY 'pfradmin123';
GRANT ALL PRIVILEGES ON *.* TO 'pfradmin'@'localhost' IDENTIFIED BY
'pfradmin123' WITH GRANT OPTION;
CREATE USER 'panaces'@'localhost' IDENTIFIED BY 'panaces123';
GRANT ALL PRIVILEGES ON *.* TO 'panaces'@'localhost' IDENTIFIED BY
'panaces123' WITH GRANT OPTION;
CREATE USER 'sanovireporter'@'localhost' IDENTIFIED BY 'sanovi123';
GRANT ALL PRIVILEGES ON *.* TO 'sanovireporter'@'localhost'
IDENTIFIED BY 'sanovi123' WITH GRANT OPTION;
19. Verify the panaces, pfr, advancedreporter databases are available after restored in the new server.
20. Start IBM Resiliency Orchestration Services ;
/opt/panaces/bin/panaces start
21. Verify that the console log shows panaces services started successfully
tail –f /opt/panaces/var/log/console.log
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 234
30.2 Migrating to new Server with New IP
Assuming /backup has enough disk space for original and new IBM Resiliency Orchestration Server, EAMSROOT as /opt/panaces , and TOMCAT_HOME as /opt/jboss-ews-2.0/tomcat7, and same OS, with Same MariaDB DB version level
The below steps need to be followed to migrate IBM Resiliency Orchestration Server to new server with new IP.
1. Stop all the services in the current IBM Resiliency Orchestration Server.
2. Take the mysql Schema
mysqldump -u root –databases panaces pfr advancedreporter –triggers -
R > /backup/panaces-pfr-advrpt.sql
3. Take EAMSROOT , and TOMCAT Home folder backup
cd /opt
tar –cvzf /backup/EAMSROOT.tar.gz panaces
cd /opt/
tar –cvzf /backup/tomcat7.tar.gz jboss-ews-2.0
4. Copy /backup/panaces-pfr-advrpt.sql /backup/EAMSROOT.tar.gz /backup/tomcat7.tar.gz /etc/security/limit.conf /etc/hosts
/etc/my.cnf to /backup of new IBM Resiliency Orchestration Server using scp.
5. Note down the port exceptions in firewall , use system-config-firewall or system-config-securitylevel
6. Login to new IBM Resiliency Orchestration Server using putty
7. Extract IBM Resiliency Orchestration binaries
cd /opt
tar –xvzf /backup/ EAMSROOT.tar.gz
8. Extract Tomcat
cd /opt
tar –xvzf /backup/tomcat7.tar.gz
Update EAMSROOT
echo “export EAMSROOT=/opt/panaces” >> /etc/profile
9. Refer /backup/limit.conf , /backup/hosts , /backup/my.cnf and update /etc/security/limit.conf /etc/hosts /etc/my.cnf respectively
10. Configure the exception ports as noted earlier using system-config-firewall or system-config-securitylevel
11. Restore the mysql schema
mysql -u root < /backup/panaces-pfr-advrpt.sql
12. Verify the panaces, pfr, advancedreporter databases are available after restored in the new server.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 235
13. Create required mysql users along with privileges
Mysql –u root
use mysql;
CREATE USER 'pfradmin'@'localhost' IDENTIFIED BY 'pfradmin123';
GRANT ALL PRIVILEGES ON *.* TO 'pfradmin'@'localhost' IDENTIFIED BY
'pfradmin123' WITH GRANT OPTION;
CREATE USER 'panaces'@'localhost' IDENTIFIED BY 'panaces123';
GRANT ALL PRIVILEGES ON *.* TO 'panaces'@'localhost' IDENTIFIED BY
'panaces123' WITH GRANT OPTION;
CREATE USER 'sanovireporter'@'localhost' IDENTIFIED BY 'sanovi123';
GRANT ALL PRIVILEGES ON *.* TO 'sanovireporter'@'localhost'
IDENTIFIED BY 'sanovi123' WITH GRANT OPTION;
14. Update the following tables to be done for Agent Node and Vault Agent, if we use:
update component set c_ipaddr='New_IBM_Resiliency_Orchestration_IP
where c_id=5;
update agent_csa set
ac_ipaddress='New_IBM_Resiliency_Orchestration_IP where ac_id=168;
update agent_csa set ac_anode_ip='New_IBM_Resiliency_Orchestration_IP
where ac_anode_ip='OLD_IBM_Resiliency_Orchestration_IP';
15. For Vault Changes
update component_OSServer set
cos_mgmt_ipaddr='New_IBM_Resiliency_Orchestration_IP where
cos_mgmt_ipaddr='Old IBM_Resiliency_Orchestration_IP';
16. Start IBM Resiliency Orchestration Services ;
/opt/panaces/bin/panaces start
17. Verify that the console log shows panaces services started successfully
tail –f /opt/panaces/var/log/console.log
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 236
31 Troubleshooting
The information about errors displayed while you are performing different tasks during the installation and configuration of the IBM Resiliency Orchestration software and troubleshooting tips to resolve such errors is described in the topics of this chapter.
31.1 MariaDB Services Not Starting
The MariaDB services should start if Resiliency Orchestration is reinstalled in a different path. If MariaDB fails to start, you need to rollback the mariadb encryption, which is being performed as a part of Resiliency Orchestration installation.
31.1.1 Resolution
The following steps needs to be performed for roll back of encryption of tables:
1. Run the following script in the /opt/panaces/bin folder.
./enableEncryptionOnTables.sh dec <MYSQL_ROOT_PASSWORD>
2. Take a backup of mariadb, run the following command to perform this task by assuming /opt/backup folder exists.
sudo mysqldump –databases panaces pfr advancedreporter –R –
triggers > /opt/backup/metadata.sql
3. Stop mariadb services, run the following command to perform this task.
sudo service mysql stop
or
sudo /bin/systemctl stop mysql
4. Remove the following entries from the mariadb config file /etc/my.cnf:
[mariadb]
plugin-load-add = file_key_management.so file_key_management
file_key_management_filename = /opt/panaces/installconfig/mariadbencryption /keys.txt
innodb_default_encryption_key_id = 1 ssl ssl-ca=/opt/panaces/installconfig/mariadbencryption/ca-cert.pem ssl-cert=/opt/panaces/installconfig/mariadbencryption /server-cert.pem ssl-key=/opt/panaces/installconfig/mariadbencryption /server-key.pem
5. Start mariadb services, run the following command to perform this task.
Sudo service mysql start
6. Restart the Resiliency Orchestration Server.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 237
31.2 Resiliency Orchestration Start Fails with Error ActiveMQ Failed to Start
As part of the installation, the script SecurityUserInjection.sh will run
correctly. In the event this script fails to run correctly on starting the Resiliency
Orchestration Server, the error message ActiveMQ Failed to Start is
displayed.
31.2.1 Resolution
a. Kill the running Java ActiveMQ process by using the command: kill -9 <pid>
b. Run $EAMSROOT/bin/SecurityUserInjection.sh
c. Ensure this script has completed without any errors displayed.
d. Start the Resiliency Orchestration.
31.3 Subsystem Discovery Failing for Oracle Solution
The product by default supports discovery and management for Oracle 12c. Discovery may fail for Oracle 11g.
31.3.1 Resolution
For managing Oracle 11g or lower versions, replace ‗ojdbc8.jar‘ with ‗ojdbc6.jar‘ in the AGENT_CLASSPATH in the following files:
$EAMSROOT/bin/OracleAgent.sh
$EAMSROOT/bin/DataGuardAgent.sh
For Example: AGENT_CLASSPATH=$ORA_CLIENT_HOME/ojdbc6.jar:$EAMSROOT/lib/DGAgentC
SA.jar:$EAMSROOT/lib/jcifs-1.3.18.jar:$EAMSROOT/lib/j-
interopdeps.jar:$EAMSROOT/lib/j-
interop.jar:$EAMSROOT/lib/maverick-legacy-client-1.6.16-all.jar
31.4 Agent Not Starting on Windows Server
Scripts installed along with the installation starts the Agents, when the system is rebooted. Alternatively, you can start the agents manually, without rebooting the system. However, if the agents do not start by any of these methods, do the following:
Check the respective lax files for the agent‘s class path and java path entries. If these entries are incorrect, edit these files and restart the agents once the agent installation is complete.
Perform any of the following procedures depending on the agent selection:
Note
The default value of EAMSROOT is “C:\Program Files\panaces”. If you have installed IBM
Resiliency Orchestration at a different location, then the paths in the following lax files
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 238
would be appropriately set by the installer program. Following is an example, with the
assumption that IBM Resiliency Orchestration has been installed at the default location.
31.4.1 IBM Resiliency File Replicator Service
Open PFRService.lax file that has been installed in the IBM Resiliency File Replicator Service installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:
lax.class.path= C:\Program Files\panaces\lib\commons-lang-
1.0.1.jar;C:\Program Files\panaces\lib\PADS.jar;C:\Program
Files\panaces\lib\log4j.jar;C:\Program
Files\panaces\lib\jacl.jar;C:\Program
Files\panaces\lib\tcljava.jar;C:\Program
Files\panaces\lib\PFR.jar:lax.jar
Edit the IBM Resiliency File Replicator installation path in the
PFRConfiguration.cfg file by following the steps given below:
1. Enter in the $EAMSROOT /installconfig folder.
2. Open the PFRConfiguration.cfg file. Provide the installation path of IBM
Resiliency File Replicator in the PFR_INSTALL_PATH parameter.
3. Replace C:\Program Files\panaces with C:\Progra~1\panaces.
31.4.2 PFR Agent
Open PFRAgent.lax file that has been installed in PFR agent install path. Check if lax.class.path has the following classpath:
lax.class.path= C:\Program Files\panaces\lib\commons-lang-
1.0.1.jar;C:\Program Files\panaces\lib\PADS.jar;C:\Program
Files\panaces\lib\log4j.jar;C:\Program
Files\panaces\lib\tcljava.jar;C:\Program
Files\panaces\lib\jacl.jar;C:\Program
Files\panaces\lib\PFR.jar;C:\Program
Files\panaces\PFRAgentCSA.jar:lax.jar
31.4.3 MSSQL Agent For MSSQL 2005
Open MSSQLAgent.lax file that has been installed in MSSQL agent installation path with a text editor. Check if ―LAX.CLASS.PATH‖ has the following class path:
lax.class.path= C:\Program Files\panaces\lib\commons-lang-
1.0.1.jar;C:\Program Files\panaces\lib\PADS.jar;C:\Program
Files\panaces\lib\log4j.jar;C:\Program
Files\panaces\lib\jacl.jar;C:\Program
Files\panaces\lib\tcljava.jar;C:\sqljdbc.jar;C:\Program
Files\panaces\MSSQLAgentCSA.jar:lax.jar
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 239
31.4.4 Windows OS Agent
Open WindowsOSAgent.lax file that has been installed in Windows OS agent installation path with a text editor. Check if ―LAX.CLASS.PATH‖ has the following class path:
lax.class.path= C:\Program Files\panaces\lib\commons-lang-
1.0.1.jar;C:\Program Files\panaces\lib\PADS.jar;C:\Program
Files\panaces\lib\log4j.jar; C:\Program
Files\panaces\lib\jacl.jar;C:\Program
Files\panaces\lib\tcljava.jar;C:\Program
Files\panaces\WindowsOSAgentCSA.jar; C:\Program
Files\panaces\lib\commons-dbcp-1.2.1.jar;C:\Program
Files\panaces\lib\commons-logging.jar;C:\Program
Files\panaces\lib\commons-pool-1.2.jar;C:\Program
Files\panaces\lib\quartz-all-1.5.2.jar:lax.jar
31.5 Agent Not Stating on Solaris Server
Before starting the agent services, check the respective lax files for the agent‘s class path and java path entries. If these entries are incorrect, edit these files and restart the agents once the agent installation is complete.
Perform any of the following procedures depending on the agent selection:
31.5.1 Sybase Agent
Open Sybase Agent.lax file that has been installed in the Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:
lax.class.path= /opt/panaces/lib/commons-lang-
1.0.1.jar:/opt/panaces/lib/PADS.jar:/opt/panaces/lib/log4j.jar:/opt/pan
aces/lib/jacl.jar:opt/panaces/lib/tcljava.jar:SybaseAgentCSA.jar:opt/pa
naces/lib/SYBASE/ase_125/jConnect-
5_5/classes/jconn2.jar:/SYBASE/ase_125/jConnect-
5_5/classes/jTDS2.jar:lax.jar
Also, check for the java installation path displayed under LAX.NL.CURRENT.VM.
31.5.2 IBM Resiliency File Replicator Service
Open PFRService.lax file that has been installed in the IBM Resiliency File Replicator Service installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:
lax.class.path= /opt/panaces/lib/commons-lang-
1.0.1.jar:/opt/panaces/lib/PADS.jar:/opt/panaces/lib/log4j.jar:/opt/pan
aces/lib/jacl.jar:opt/panaces/lib/tcljava.jar:/opt/panaces/lib/PFR.jar:
lax.jar
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 240
31.5.3 PFR Agent
Before starting the PFR Agent, open PFRAgent.lax file that has been installed in Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:
lax.class.path= /opt/panaces/lib/commons-lang-
1.0.1.jar:/opt/panaces/lib/PADS.jar:/opt/panaces/lib/log4j.jar:/opt/pan
aces/lib/jacl.jar:opt/panaces/lib/tcljava.jar:/opt/panaces/lib/PFRAgent
CSA.jar:lax.jar
Also, check for the java installation path displayed under LAX.NL.CURRENT.VM.
31.5.4 Solaris OS Agent
Open SolarisOSAgent.lax file that has been installed in Solaris OS Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:
lax.class.path= /opt/panaces/lib/commons-lang-
1.0.1.jar:/opt/panaces/lib/PADS.jar:/opt/panaces/lib/log4j.jar:opt/pana
ces/lib/jacl.jar:opt/panaces/lib/tcljava.jar:opt/panaces/lib/SolarisOSA
gentCSA.jar:/opt/panaces/lib/commons-collections-
4.0.jar:/opt/panaces/lib/commons-dbcp-
1.2.1.jar:/opt/panaces/lib/commons-
logging.jar:/opt/panaces/lib/commons-pool-
1.2.jar:/opt/panaces/lib/quartz-all-1.5.2.jar:lax.jar
Also, check for the java installation path displayed under LAX.NL.CURRENT.VM.
31.5.5 SRS Agent
Open SrsAgent.lax file that has been installed in Solaris OS Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:
lax.class.path=/opt/panaces/lib/commons-lang-
1.0.1.jar:/opt/panaces/lib/PADS.jar:/opt/panaces/lib/log4j.jar:/opt/pan
aces/lib/tcljava.jar:/opt/panaces/lib/jacl.jar:.:/opt/panaces/SrsAgentC
SA.jar:lax.jar
Also, check for the java installation path displayed under LAX.NL.CURRENT.VM.
31.6 Agent Not Stating on Linux Server
Before starting the agent services, check the respective lax files for the agent‘s class path and java path entries. If these entries are incorrect, edit these files and restart the agents once the agent installation is complete.
Perform any of the following procedures depending on the agent selection:
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 241
31.6.1 IBM Resiliency File Replicator Service
Open PFRService.lax file that has been installed in the IBM Resiliency File Replicator Service installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:
lax.class.path= /opt/panaces/lib/commons-lang-1.0.1.jar;/opt/panaces/l
ib/PADS.jar;/opt/panaces/lib/log4j.jar;/opt/panaces/lib/jacl.jar;opt/pa
naces/lib/tcljava.jar;/opt/panaces/lib/PFR.jar:lax.jar
31.6.2 PFR Agent
Before starting the PFR Agent, open PFRAgent.lax file that has been installed in Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:
lax.class.path= /opt/panaces/lib/commons-lang-1.0.1.jar;/opt/panaces/l
ib/PADS.jar;/opt/panaces/lib/log4j.jar;/opt/panaces/lib/jacl.jar;opt/pa
naces/lib/tcljava.jar;/opt/panaces/lib/PFRAgentCSA.jar:lax.jar
Also, check for the java installation path displayed under LAX.NL.CURRENT.VM.
31.6.3 Linux OS Agent
Open LinuxOSAgent.lax file that has been installed in Linux OS Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:
lax.class.path= /opt/panaces/lib/commons-lang-1.0.1.jar;/opt/panaces/l
ib/PADS.jar;/opt/panaces/lib/log4j.jar;/opt/panaces/lib/jacl.jar;opt/pa
naces/lib/tcljava.jar;opt/panaces/lib/LinuxOSAgentCSA.jar;/opt/panaces/
lib/commons-collections-4.0.jar;/opt/panaces/lib/commons-dbcp-
1.2.1.jar;/opt/panaces/lib/commons-
logging.jar;/opt/panaces/lib/commons-pool-
1.2.jar;/opt/panaces/lib/quartz-all-1.5.2.jar:lax.jar
Also, check for the java installation path displayed under LAX.NL.CURRENT.VM.
31.7 Agent Not Starting on AIX Server
Before starting the agent services, check the respective lax files for the agent‘s class path and java path entries. If these entries are incorrect, edit these files and restart the agents once the agent installation is complete.
Perform any of the following procedures depending on the agent selection:
31.7.1 IBM Resiliency File Replicator Service
Open PFRService.lax file that has been installed in the IBM Resiliency File Replicator Service installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:
lax.class.path= /opt/panaces/lib/commons-lang-1.0.1.jar:/opt/panaces/l
ib/PADS.jar:/opt/panaces/lib/log4j.jar:/opt/panaces/lib/jacl.jar;opt
/panaces/lib/tcljava.jar:/opt/panaces/lib/PFR.jar:lax.jar
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 242
Also, check for the java installation path displayed under LAX.NL.CURRENT.VM.
31.7.2 PFR Agent
Before starting the PFR Agent, open PFRAgent.lax file that has been installed in the Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:
lax.class.path=/opt/panaces/lib/commons-lang-
1.0.1.jar:/opt/panaces/lib/PADS.jar:/opt/panaces/lib/log4j.jar:
/opt/panaces/lib/jacl.jar;opt/panaces/lib/tcljava.jar:/opt/panaces/lib/
PFR.jar:/opt/panaces/lib/PFRAgentCSA.jar:lax.jar
Also, check for the java installation path displayed under LAX.NL.CURRENT.VM.
In addition to checking class paths for the agents installed as explained in this step, also perform the following step:
31.7.3 AIX OS Agent
Before starting the AIX OS Agent, open AIXOSAgent.lax file that has been installed in the Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:
lax.class.path=/opt/panaces/lib/commons-lang-1.0.1.jar:
/opt/panaces/lib/PADS.jar:/opt/panaces/lib/log4j.jar:
/opt/panaces/lib/jacl.jar;/opt/panaces/lib/tcljava.jar:/opt/panaces/lib
/commons-collections-4.0.jar:/opt/panaces/lib/commons-dbcp-
1.2.1.jar:/opt/panaces/lib/commons-logging.jar:/opt/panaces/lib/quartz-
all-1.5.2.jar:/opt/panaces/AIXOSAgentCSA.jar:lax.jar
Check for the java installation path displayed under LAX.NL.CURRENT.VM.
31.8 Agent Not Starting on HPUX Server
Before starting the agent services, check the respective lax files for the agent‘s class path and java path entries. If these entries are incorrect, edit these files and restart the agents once the agent installation is complete.
Perform any of the following procedures depending on the agent selection:
31.8.1 IBM Resiliency File Replicator Service
Open PFRService.lax file that has been installed in the IBM Resiliency File Replicator Service installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:
lax.class.path= /opt/panaces/lib/commons-lang-
1.0.1.jar;/opt/panaces/lib/
PADS.jar;/opt/panaces/lib/log4j.jar;/opt/panaces/lib/jacl.jar;opt/
panaces/lib/tcljava.jar;/opt/panaces/lib/PFR.jar:lax.jar
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 243
31.8.2 PFR Agent
Before starting the PFR Agent, open PFRAgent.lax file that has been installed in Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:
lax.class.path= /opt/panaces/lib/commons-lang-
1.0.1.jar;/opt/panaces/lib
/PADS.jar;/opt/panaces/lib/log4j.jar;/opt/panaces/lib/jacl.jar;opt
/panaces/lib/tcljava.jar;/opt/panaces/lib/PFRAgentCSA.jar:lax.jar
Also, check for the java installation path displayed under LAX.NL.CURRENT.VM.
31.8.3 HPUX OS Agent
Open HPUXOSAgent.lax file that has been installed in Linux OS Agent installation path with a text editor. Check if LAX.CLASS.PATH has the following class path:
lax.class.path= /opt/panaces/lib/commons-lang-
1.0.1.jar;/opt/panaces/lib/PAD
S.jar;/opt/panaces/lib/log4j.jar;/opt/panaces/lib/jacl.jar;opt/pan
aces/lib/tcljava.jar;opt/panaces/lib/LinuxOSAgentCSA.jar;/opt/pana
ces/lib/commons-collections-4.0.jar;/opt/panaces/lib/commons-dbcp-
1.2.1.jar;/opt/panaces/lib/commons-
logging.jar;/opt/panaces/lib/commons-pool-
1.2.jar;/opt/panaces/lib/quartz-all-1.5.2.jar:lax.jar
Also, check for the java installation path displayed under LAX.NL.CURRENT.VM.
31.9 HA Configuration
Post Metadata replication, slave server status can display the following error in slave server:
Unable to load replication GTID slave state from mysql.gtid_slave_pos: Table 'mysql.gtid_slave_pos' doesn't exist
In case this error is displayed, run the following command in the master and slave server:
sudo mysql_upgrade
31.10 NAT IP
The servers that are being managed have a local IP address, but that these servers have Network Attached Translation (NAT) IP and only the NAT IP is used everywhere. Also, the same local IP address might be used by multiple customers and hence the local IP cannot be used to uniquely identify the server and hence only the NAT IP (which is publicly known) can be used.
Enter the IP addresses of the primary and secondary IBM Resiliency Orchestration servers and IBM Resiliency Orchestration Agent Node Address. In a non-NAT environment, NAT IP address field should be left blank.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 244
In a NAT environment, primary and secondary Resiliency Orchestration Server‘s public IP should be provided. Resiliency Orchestration Agent node address should be the public IP, and NAT IP address should be the private IP of the server where you are installing.
Note
Manual Configuration if NAT IP is not provided during installation.
31.10.1 CFG file for NAT IP
Example IBM Resiliency Orchestration CFG file for NAT IP
PANACES_MASTER_SERVER_ADDRESS=<Resiliency Orchestration IP>//priv IP of
Resiliency Orchestration
PANACES_SLAVE_SERVER_ADDRESS==<Resiliency Orchestration IP>//priv IP of
Resiliency Orchestration
PANACES_AGENT_NODE_ADDRESS==<Resiliency Orchestration IP>//priv IP of
Resiliency Orchestration
PANACES_AGENT_NODE_BIND_ADDRESS= //leave empty
Discover agent node using "PANACES_AGENT_NODE_ADDRESS"
Discover PR & DR using their public IP
Example Local Agent CFG file for NAT IP
PANACES_MASTER_SERVER_ADDRESS==<Resiliency Orchestration IP> //public IP
of Resiliency Orchestration
PANACES_SLAVE_SERVER_ADDRESS==<Resiliency Orchestration IP> //public IP
of Resiliency Orchestration
PANACES_AGENT_NODE_ADDRESS==<Resiliency Orchestration IP> //public IP
of PR/DR (this server)
PANACES_AGENT_NODE_BIND_ADDRESS==<Resiliency Orchestration IP>
//private IP of PR/DR (this server)
Example PFR Configuration CFG file for NAT IP
PUBLIC IP: =<Resiliency Orchestration IP>//private IP of PR/DR
31.11 Web Browser Displays Certificate Error
If secure protocol is used to access the IBM Resiliency Orchestration application and you have used the default certificate provided by IBM, the web browser will display the certificate error. If you proceed further with this certificate, the web browser displays the certificate error. Sometimes, you may not be able to access the application. In this case, you need to obtain a certificate from a certifying authority and import the same into the Sanovi keystore.
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 245
31.12 Server/Advanced Reporter Installation Fails with UnsatisfiedLinkError
While Installing the IBM Resiliency Orchestration or Advanced Reporter, the user may encounter the following UnsatisfiedLinkError:
IAResourceBundle: create resource bundle: en 'SWING' UI not supported by VM. java.lang.UnsatisfiedLinkError: /tmp/install.dir.30775/Linux/resource/jre/lib/i386/xawt/libmawt.so: libXext.so.6: cannot open shared object file: No such file or directory at java.lang.ClassLoader$NativeLibrary.load(Native Method)
This is due to the 32-bit rpm requirement from the Installer, required 32-bit rpms (libXext-1.1-3.el6.i686.rpm libX11-1.3-2.el6.i686.rpm libxcb-1.5-1.el6.i686.rpm libXau-1.0.5-1.el6.i686.rpm libXtst-1.0.99.2-3.el6.i686.rpm libXi-1.3-3.el6.i686.rpm) should be installed to continue installation.
31.13 Port Forwarding
31.13.1 Verify Firewall Status
The following are details to verify the Firewall status.
[sanovi@sbrphln02 lic]$ sudo systemctl status firewalld.service
â firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service;
disabled; vendor preset: enabled)
Active: active (running) since Wed 2017-09-06 23:47:29 IST; 1
day 14h ago
Docs: man:firewalld(1)
Main PID: 29752 (firewalld)
CGroup: /system.slice/firewalld.service
ââ29752 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid
Sep 06 23:47:28 sbrphln02 systemd[1]: Starting firewalld -
dynamic firewall daemon...
Sep 06 23:47:29 sbrphln02 systemd[1]: Started firewalld -
dynamic firewall daemon.
[sanovi@sbrphln02 lic]$
31.13.2 Add Exception to Firewall
The following are details to add exception to firewall.
sudo firewall-cmd --zone=public --add-port=443/tcp –permanent
sudo firewall-cmd --zone=public --add-port=22/tcp –permanent
sudo firewall-cmd --zone=public --add-port=42443/tcp –permanent
sudo firewall-cmd --zone=public --add-port=45443/tcp –permanent
sudo firewall-cmd --zone=public --add-port=8083/tcp –permanent
sudo firewall-cmd --zone=public --add-port=8081/tcp --permanent
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 246
31.13.3 Open Ports
The following are details to list the ports, which are open to access.
[root@sbrphln02 httpd]# firewall-cmd --list-all
public (active)
target: default
icmp-block-inversion: no
interfaces: enp3s0f0
sources:
services: dhcpv6-client ssh
ports: 42443/tcp 45443/tcp 443/tcp 22/tcp 8081/tcp 8083/tcp
protocols:
masquerade: no
forward-ports:
sourceports:
icmp-blocks:
rich rules:
[root@sbrphln02 httpd]#
31.14 Create Server Certificate and Server Private Key Reference
The following snippet shows the details for creating server certificate and server private key reference:
openssl req -new -x509 -days 365 -sha1 -newkey rsa:2048 -nodes -
keyout /opt/tomcat7/conf/ibm.key -out /opt/tomcat7/conf/ibm.crt -
subj "/O=IBM Corporation/OU=PS/CN=sbrphln02.in.ibm.com" -config
"/etc/pki/tls/openssl.cnf"
31.15 Analyse HTTPD Logs
The following are details to see httpd logs:
journalctl -xe
/bin/systemctl status httpd.service ( for checking the status
of httpd service )
Ref:
-- Unit user-0.slice has begun shutting down.
Sep 10 00:51:42 sbrphln02 sudo[10839]: sanovi : TTY=pts/0 ;
PWD=/etc/httpd/conf.d ; USER=root ; COMMAND=/bin/bash
Sep 10 00:51:43 sbrphln02 dbus-daemon[840]: dbus[840]: [system]
Activating service name='org.freedesktop.problems' (using
servicehelper)
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 247
Sep 10 00:51:43 sbrphln02 dbus[840]: [system] Activating service
name='org.freedesktop.problems' (using servicehelper)
Sep 10 00:51:43 sbrphln02 dbus-daemon[840]: dbus[840]: [system]
Successfully activated service 'org.freedesktop.problems'
Sep 10 00:51:43 sbrphln02 dbus[840]: [system] Successfully
activated service 'org.freedesktop.problems'
[root@sbrphln02 ~]#
31.16 Install httpd, SSL Packages
31.16.1 Download/Mount the Operating System ISO
mailcap-2.1.41-2.el7.noarch.rpm
httpd-tools-2.4.6-31.el7.x86_64.rpm
httpd-2.4.6-31.el7.x86_64.rpm
mod_ssl-2.4.6-45.el7.centos.x86_64.rpm
31.16.2 Install the httpd, SSL Packages
rpm -ivh mailcap-2.1.41-2.el7.noarch.rpm httpd-2.4.6-
31.el7.x86_64.rpm httpd-tools-2.4.6-31.el7.x86_64.rpm
rpm -ivh mod_ssl-2.4.6-45.el7.centos.x86_64.rpm
IBM Resiliency Orchestration Installation Guide
©IBM Corporation 2017, 2018 248
32 License Information
32.1 GPL License Information
If you wish to access the source code for any of these packages, it is recommended that you visit the official download site of the package maintainer directly. A link to each download site appears in the table below. These links are provided "as-is" and will take you to sites that are not owned or controlled by IBM. IBM is not accountable for the contents of these sites and is not acting as a distributor of the code on such sites. IBM in no way warrants that the code or other information on these sites is accurate, will function in a particular manner, or is non-infringing of a third party's intellectual property rights. Please contact the maintainers of the code for information on the licenses and documentation that accompany the source code distributed from their site.
Open source licenses such as GNU Public License (GPL) require that IBM makes the source available on request by the client. For packages with such licenses, the client must either go to the official site of the source or download the information from this link: https://sourceforge.net/projects/gnu-utils/files/binaries/.
In addition to GPL, each of these packages include its own licensing information. It is essential to understand the terms and conditions pertaining to the licensing information of the individual tools.
top related