2 Installing Oracle Secure Backup on Windows

2.1 Before You Begin

Perform the following actions before you begin:

• Decide which roles to assign the hosts in your network, as described in "Planning Your Administrative Domain".

• Ensure that each host has a network connection and runs TCP/IP.

• If you are installing Oracle Secure Backup on a media server, physically attach the libraries and drives (if any) that you intend to make available for use by Oracle Secure Backup. Reboot the media server if required.

• For hosts that are to be used in the media server role, follow the procedures in "Preparing Windows Media Servers for Oracle Secure Backup Installation" to prevent conflicts between Oracle Secure Backup and other software on your system.

• Log on to your host as either the Administrator user or as a user that is a member of the Administrators group.

2.2 Preparing Windows Media Servers for Oracle Secure Backup Installation

Preparing Windows hosts for Oracle Secure Backup installation requires the following steps:

• Disabling Drivers on Windows-Based Media Servers

• Disabling Removable Storage Service on Windows Media Servers

2.3 Running the Oracle Secure Backup Windows Installer setup.exe

Complete the following steps to install Oracle Secure Backup as a client, media server, administrative server or any combination of these roles.

During the installation process, the Oracle Secure Backup Setup Wizard copies all Oracle Secure Backup files to the local host and generates Windows Registry entries.

1. Select one of the following install options:

   • If you are installing Oracle Secure Backup from a CD-ROM, insert the CD-ROM. If AutoPlay is enabled, then the setup.exe program starts automatically and opens the Oracle Secure Backup Setup Wizard.

     Note:

     If Windows AutoPlay is not enabled, then open the drive containing the installation CD-ROM using Windows Explorer and run the setup.exe program.

   • If you are installing Oracle Secure Backup from an Oracle Technology Network (OTN) download, then run the setup.exe program from the folder into which the download TAR file contents were extracted, as explained in "Extracting Oracle Secure Backup from OTN Download on Linux or Solaris".

   The Oracle Secure Backup Setup Wizard starts and the Welcome dialog box appears.

   Figure 2-1 Welcome Dialog Box

   
   Description of "Figure 2-1 Welcome Dialog Box"
   
   

2. Click Next to continue.

   The Readme Information dialog box displays.

3. Click Next to continue.

   The Customer Information dialog box displays.

   Figure 2-2 Customer Information Dialog Box

   
   Description of "Figure 2-2 Customer Information Dialog Box"
   
   

4. Enter your customer information as follows:

   1. Enter your name in the User Name box and the name of your company in the Organization box.

   2. Select a target user for the application: Anyone who uses this computer (all users) or Only for me (current user).

5. Click Next to continue.

   The Oracle Secure Backup Setup dialog box appears. (See Figure 2-3.)

   Figure 2-3 Setup Dialog Box

   
   Description of "Figure 2-3 Setup Dialog Box"
   
   

   "Choosing Roles for Hosts in Your Administrative Domain" explains that a single host can assume multiple roles. Roles in Oracle Secure Backup are additive rather than exclusive. You have the following options when choosing roles:

   • To install the Windows host as client only, skip to Step 9.

     Note:

     Every installation of Oracle Secure Backup on Windows includes a client installation.

   • To install the Windows host as a media server, proceed to Step 6.

   • To install the Windows host as an administrative server but not as a media server, skip to Step 7.

6. To install the Windows host as a media server, click the menu of the Media Server icon. Figure 2-4 shows the menu options.

   Figure 2-4 Setup Dialog Box: Media Server Menu

   
   Description of "Figure 2-4 Setup Dialog Box: Media Server Menu"
   
   

   Select This feature will be installed on local hard drive. Selecting this option removes the X from the Media Server icon and includes the Media Server in the installation.

   Caution:

   When there are no media devices attached to a Windows 2000 host, do not install the Windows host as a media server.

   If you configure the media server role on a Windows 2000 host with no attached media devices, then the operating system will continuously try to load the Oracle Secure Backup driver. Continuously trying to load the driver uses most of the available CPU cycles on that system, and renders the system unusable.

   To configure the Windows host to also be an administrative server, proceed to Step 7. Otherwise, skip to Step 9.

7. To install the Windows host as an administrative server, click the menu of the administrative server icon. Figure 2-5 shows the menu options.

   Figure 2-5 Setup Dialog Box: Administrative Server Menu

   
   Description of "Figure 2-5 Setup Dialog Box: Administrative Server Menu"
   
   

   Select This feature will be installed on local hard drive. Selecting this option removes the X from the administrative server icon and includes the administrative server in the installation.

   If you plan to perform Oracle database backups and restores with RMAN, then enable the action for Create "oracle" user in the submenu attached to the administrative server icon.

   Figure 2-6 Setup Dialog Box: Create "Oracle" User Menu

   
   Description of "Figure 2-6 Setup Dialog Box: Create "Oracle" User Menu"
   
   

   If this choice is enabled, the installer creates an Oracle Secure Backup user called oracle (with the rights of the oracle class) whose purpose is to facilitate backup and restore of Oracle databases with Recovery Manager. If the X is removed from Create "oracle" user, then the oracle user is created.

   Note:

   • You only need to create the oracle user if you plan to use Oracle Secure Backup with RMAN.

   • If you intend to use Oracle Secure Backup to perform one-time, RMAN-initiated, or unprivileged backups on Windows clients, then you must modify the Oracle Secure Backup admin and oracle users to assign them Windows credentials (a domain, username and password) that are valid at the client with required privileges after you complete the Oracle Secure Backup installation. Otherwise, Oracle Secure Backup is unable to perform the backup operation. This requirement applies regardless of the platform that acts as the administrative server.

   • Before electing to create an Oracle Secure Backup oracle user, be aware that this choice involves a trade-off between convenience and security.

   See Also:

   Oracle Secure Backup Reference for more information about the oracle class

   If you do not plan to use Oracle Secure Backup to back up your Oracle databases, then leave the Create "oracle" user option unselected. This is the default.

   In addition to the options described in steps 6 and 7, you can perform the following actions in the Oracle Secure Backup Setup dialog box:

   • Click Help for detailed descriptions of the installation options.

   • Click Change to change the destination folder for the installation.

   • Click Space to display the disk space required for the installation.

8. Click Next to continue.

   If you are configuring this host to act as an administrative server, the Oracle Secure Backup Admin User Password dialog box appears. (See Figure 2-7.)

   Figure 2-7 Admin User Password Dialog Box

   
   Description of "Figure 2-7 Admin User Password Dialog Box"
   
   

   Choose a password for the Oracle Secure Backup administrative user, and enter it in both fields, for confirmation. The maximum password length is 16 characters.

   Note:

   Oracle suggests that you choose an administrative user password of at least eight characters in length, containing a mixture of alphabetic and numeric characters. The maximum length is 16 characters.

9. Click Next to continue.

   The Ready to Install the Program dialog box displays.

10. Click Install to start copying files.

    A progress bar appears. When the files are copied the InstallShield Completed dialog box displays.

11. Click Finish to continue.

    The Oracle Secure Backup Configuration dialog box displays.

12. Click Next to continue.

    The Oracle Secure Backup Service Startup dialog box displays.

    Figure 2-8 Oracle Secure Backup Service Startup

    
    Description of "Figure 2-8 Oracle Secure Backup Service Startup"
    
    

13. Click one of the possible modes in which to start the Oracle Secure Backup service. Your choices are:

    • Automatic

      The Oracle Secure Backup service starts automatically when you reboot your host.

    • Manual

      The Oracle Secure Backup service must be started manually by a user who is a member of the Administrators group.

    • Disabled

      The Oracle Secure Backup service is disabled.

14. Click Next to continue.

    The Oracle Secure Backup Service Login dialog box appears.

    Figure 2-9 Service Logon Dialog Box

    
    Description of "Figure 2-9 Service Logon Dialog Box"
    
    

15. Select one of the following options:

    Note:

    By default, the Oracle Secure Backup service logs on as the Local System account, which is an administrative account. You can select the This Account option to specify a different account for the Oracle Secure Backup Service.

    • Select System Account if you plan to run the Oracle Secure Backup service daemon (and associated subordinate daemons) with full privileges.

    • Select This Account if you plan to run the Oracle Secure Backup service daemon (and associated subordinate daemons) with the privilege set associated with an existing Windows user account. You must fill in the Windows user account name and password.

      If you choose this option, ensure that the Windows user account you select meets the following criteria:

      • The account you choose must belong to the Backup Operators group.

      • No change in password at login is required of the account.

      • The account must be set so that the password never expires.

      • The account must have backup and restore rights.

      • The account must be able to restore files and directories.

      • The account must be able to log on as a service.

      • The account must be able to act as part of the operating system.

      • The account must be able to increase quotas.

      • The account must be able to replace a process level token.

16. Click Finish to complete the installation.

    If you installed Windows as an administrative server—or combined media server and administrative server—a Command Prompt window runs briefly in the background. When this window terminates, installation is complete.

When you have performed all of the preceding tasks, Oracle Secure Backup installation on this host is complete. Repeat this installation process for each Windows host in your administrative domain.

2.4 Configuring Firewalls for Oracle Secure Backup on Windows

If your Windows host is protected by a firewall, the firewall must be configured to permit Oracle Secure Backup daemons on the host to communicate with the other hosts in your administrative domain. Oracle Secure Backup includes daemon components that listen on ports 400 and 10000, as well as other dynamically assigned ports.

For example, Windows XP Service Pack 2 and Windows Server 2003 contain a built-in Windows Firewall which, in the default configuration, blocks inbound traffic on ports used by Oracle Secure Backup.

Because the dynamically assigned ports used by Oracle Secure Backup span a broad range of port numbers, your firewall must be configured to allow executables for the Oracle Secure Backup daemons to listen on all ports.