4 4 3:SEP sesam Quick Install Guide

From SEPsesam

Copyright © SEP AG 1999-2024. All rights reserved.

Any form of reproduction of the contents or parts of this manual is allowed only with the express written permission from SEP AG. When compiling and designing user documentation SEP AG uses great diligence and attempts to deliver accurate and correct information. However, SEP AG cannot issue a guarantee for the contents of this manual.

This is not the latest version of SEP sesam documentation and, as such, does not provide information on features introduced in the latest release. For more information on SEP sesam releases, see SEP sesam Release Versions. For the latest documentation, check SEP sesam Quick Install Guide.


Overview

The complete SEP sesam environment consists of different modules, which can be combined according to your needs to implement optimized backup. Modules interact with one another through SEP APIs which are also used for interaction with another software.

The essential modules of each SEP sesam environment are: SEP sesam Server, SEP sesam GUI, SEP sesam Remote Device Server (RDS), and SEP sesam Client(s). Each module is installed separately. The SEP sesam environment is managed centrally by the SEP sesam GUI.

SEP sesam also provides additional modules and functionality that enable consistent backup of databases (Oracle, MS SQL, IBM DB2, Informix SAP R/3, etc.), applications (such as SAP), groupware systems, and virtualization environments. Some of these extensions are already part of a Client package, and some require a separate license in order to function. For details on licenses, see Licensing. Check the SEP sesam OS and Database Support Matrix to learn what is supported on each of the platforms. For a list of all supported extensions and their configuration, see Extensions.

Once you have determined how you want to set up your SEP sesam environment, you can install the required components. Note that the installation procedure depends on the platform on which you are installing a SEP sesam package and that Java is required on all systems that serve as SEP sesam Server, SEP sesam GUI client or SEP sesam Remote Device Server (RDS) when Si3 deduplication is used. For details, see Installing and Managing Java.

After you have installed and configured your SEP sesam components according to your environment, SEP sesam provides free updates from previous versions of SEP sesam to new versions and new features within the maintenance period. During this period, you can download patches and bug fixes as well as the latest SEP sesam versions, if you have a valid license. For details, see Updating SEP sesam.


SEP sesam Server/Client hardware requirements

The following are the hardware requirements for the SEP sesam Server, RDS or SEP sesam Client. They are similar for both servers, SEP sesam Server and RDS, except for the required space on the file system for the SEP sesam database, which is not necessary for RDS.

  • The hardware requirements for the SEP sesam components represent the common requirements. Additional amount of RAM/CPU may be required for bigger Si3 data stores. For details, see Si3 Deduplication Hardware Requirements.
  • (Windows only) Make sure that you are using CPUs with supported AVX versions (AVX, AVX2, or AVX-512) and FMA3 (Fused Multiply-Add 3-operand Form) or FMA4 (Fused Multiply-Add 4-operand Form) to prevent the Sesam Transfer Protocol Server (STPD) from automatically disabling the HTTPS port. This happens when the CPU instructions are missing due to unsupported AVX. Consequently, the TLS key and certificate cannot be created. For a list of supported AVX versions, see Advanced Vector Extensions.
Requirements SEP sesam Server Standard edition SEP sesam Advanced Server edition SEP sesam Premium Server edition SEP sesam Enterprise Server SEP sesam Client
Memory (without Si3 deduplication) 8 GB RAM Minimum 16 GB RAM 32 GB RAM Minimum 64 GB RAM 2 GB (recommended 4 GB)
Memory (with Si3 deduplication) Minimum 32 GB RAM Minimum 32 GB RAM 64 GB RAM Minimum 128 GB RAM Minimum 8 GB
Core (without Si3 deduplication) 1x CPU with 4 cores (≥ 2,4 GHz) 1x CPU with 8 cores (≥ 2,4 GHz) Minimum 1x CPU with 8 cores (≥ 2,4 GHz) Minimum 2x CPUs with 4 cores (≥ 2,4 GHz) -
Core (with Si3 deduplication) 1x CPU with 6 cores (≥ 2,6 GHz) 2x CPUs with 8 cores (≥ 2,6 GHz) 2x CPUs with minimum 8 cores (≥ 2,6 GHz) Minimum 2x CPUs with 8 cores (≥ 2,6 GHz) -
Minimum hard disk space for SEP sesam metadata 200 GB 300 GB 500 GB 500 GB 4 GB (for all client data)
No. of backup clients Up to 15 Recommended up to 50 Recommended up to 150 Recommended for more than 150 -

Microsoft Windows installation

Prerequisites

  • Before starting the SEP sesam installation, make sure that you are logged in as a local administrator or domain administrator.
  • For remote access via remote desktop connection (RDC), the RDC administrator needs the same access rights as the local administrator.
  • To install any of the SEP sesam components (SEP sesam Server, RDS, Client or GUI), you will require an installation file which can be downloaded from the https://www.sep.de/downloadportal/windows/. Make sure to download the correct file for your processor type.
Note
SEP sesam RDS does not have a dedicated installation package. To install RDS, use the SEP sesam Server package.
  • If you are planning to install a server (including the GUI) or the GUI, Java Runtime Environment (JRE) must be installed on the system, see Installing and Managing Java and check Java versions.
  • SEP sesam GUI requires a screen resolution of at least 1920x1080 (full HD).
  • The .Net Framework 4 is required for server installation and can be deselected for all other SEP sesam components during installation.
  • x86 operating systems with more than 3.25 GB RAM must either reduce the amount of RAM to below to 3.25 GB or migrate to an x64 operating system. This is necessary because SEP sesam requires 64 KB blocks for LTO (Linear Tape Open) whereas an x86 system can only write 32 KB blocks to tape drive because the PAE (Physical Address Extension) is automatically activated. Also, the loader cannot be accessed properly by SEP sesam.
  • SEP sesam uses name resolution for server to client communication. Before installing, you should test the DNS name resolution by simply pinging (using both, long and short name) from the server to the client and back. For details on DNS resolution check, see How to check DNS configuration.
  • Ensure that any used SCSI devices are recognized by the operating system to which you are installing SEP sesam. SEP sesam checks the SCSI bus attached storage devices during the installation and adds its data to the database. SEP sesam can only see devices recognized by the operating system.
  • Disabling the firewall is recommended to avoid problems during the SEP sesam installation. Once SEP sesam is installed, you can enable the firewall with exceptions made for the SEP sesam services.
  • For details on the SEP sesam default ports, see Which are the SEP sesam default TCPIP ports?

Installation

SEP sesam provides four installation packages: SEP sesam Client, SEP sesam GUI, SEP sesam RDS and SEP sesam Server (includes the Client and the GUI components). In the installation example below, we will use the SEP sesam Server installation package.

  1. Locate the download folder where you saved the SEP sesam installation package and double-click the sesam-srv-<Version_ID>-windows.x<SysType>.exe file to start the installation. Note that on Windows 7, you must explicitly execute the .exe file as administrator even if you are logged in as an administrator. Select your installation language and click Next.
  2. Agree to the license agreement and click Next again.
  3. Choose whether you want the SEP sesam services to run under the Standard system account or a Custom user account. It is recommended to give the SEP sesam Server services a Domain user account belonging to the Domain admins and the Local administrators groups. After choosing a user account, click Next.

  4. Select an installation directory for the program files (including the folders <SESAM_ROOT>\bin and <SESAM_ROOT>\skel) and the application data (including the folder <SESAM_ROOT>\var. This folder requires significant storage space if installing a server). Click Next.

  5. In the next window, select which of the four SEP sesam components you want to install (SEP sesam Server, SEP sesam Remote Device, SEP sesam GUI or SEP sesam Client). There is an additional option of installing a GUI with the SEP sesam Remote Device and a client with the SEP sesam GUI.

  6. After selecting a component, click Next.
    Note
    SEP sesam Server package already includes all other components. If you are installing a Remote Device Server (RDS), you can also include a GUI. If you are installing a GUI, you can also include the Client.
  7. Depending on which components you are installing, proceed accordingly:
    • If you are installing the SEP sesam Server, click Install and then Finish to complete the installation.
    • If you are installing the SEP sesam RDS, the SEP sesam GUI or the SEP sesam Client, type the name of the SEP sesam Server (in the example below, the name of the server is Informatix).
    Note
    You must enter the hostname and not the IP address of the SEP sesam Server. The server name may not contain underscores.


  8. Click Next. The firewall information dialog is only intended for informative purposes. Take note of the information and click OK. Click Install to install the selected SEP sesam component and then click Finish to complete the installation.

If you have problems or questions regarding installation, also check FAQ: Installation and configuration.

Updates

SEP sesam provides free updates from previous to new versions and features of SEP sesam within the maintenance period. You can decide to either automatically or manually check for and install updates. See Updating SEP sesam. Installing an update on Windows is easy; simply download the executable file for your version of SEP sesam and install it. Make sure that you select the Update and Repair option, as shown below.


Linux

SEP sesam provides RPM packages for the most common Linux distributions (for example, SuSE and RedHat) and DEB files for Debian Linux distributions. The latter run on most Debian-based distributions, such as Ubuntu. For details on SUSE- and RedHat-based distributions, see RPM Repository. For more information on Debian packages, see Debian Repository.

Tip
SEP sesam provides free updates from previous to new versions and features of SEP sesam within the maintenance period. You can decide to either automatically or manually check for and install updates. To install and update on Linux, you must make the service pack executable after downloading it. For details, see Applying Service Packs on Linux.

Prerequisites

  • Before starting the SEP sesam installation, make sure that you are logged in as the root user.
  • SEP sesam uses network resolution for server to client communication. Before installing, you should test the DNS name resolution by simply pinging (using both, long and short name) from the server to the client and back. For details on the DNS resolution check, see How to check DNS configuration.
  • SEP sesam GUI requires a screen resolution of at least 1920x1080 (full HD).
  • Ensure that any used SCSI devices are recognized by the operating system to which you are installing SEP sesam. SEP sesam checks the SCSI bus attached storage devices during the installation and adds its data to the database. SEP sesam can only see devices recognized by the operating system.
  • Disabling firewall is recommended to avoid problems during the SEP sesam installation. Once SEP sesam is installed, you can enable the firewall with exceptions made for the SEP sesam services.

SEP sesam Server installation

SLES-based distributions

SLES includes the standard tool zypper which is common for package management. With this tool packages can be installed (and uninstalled) in the command line. Before you install any of the SEP sesam components (e.g., Server, Client or GUI), make sure that you have configured the RPM repository for SLES-based distributions properly. For details, see RPM Repository.

The SEP sesam Server package includes all dependencies that are needed for the standard SEP sesam Server installation. For details on the supported SLES versions, see SEP sesam OS and Database Support Matrix.

On SLES12, it is recommended to install required Java packages before installing the SEP sesam Server to avoid possible installation errors. Use the following command sequence:

zypper install java-11-openjdk

To install or update the SEP sesam Server, use the following command:

# zypper install sesam_srv<version.OS.system_type>
Tip
To perform a simple update without adjusting the dependencies of the installed SEP sesam version, e.g., on SLES11, you can use the command rpm -Uvh (only recommended for advanced administrators!). Alternatively, update the server by using the above zypper command.
RHEL/CentOS-based distributions

All RHEL- and CentOS-based distributions include the standard tool yum which is common for package management. With this tool, packages can be installed (and uninstalled) in the command line. Before you install any of the SEP sesam components (e.g., Server, Client or GUI), make sure that you have configured the RPM repository for RHEL-based distributions properly. For details, see RPM Repository.

The SEP sesam Server package includes all dependencies that are needed for standard SEP sesam Server installation. For details on the supported RHEL/CentOS-based versions, see SEP sesam OS and Database Support Matrix.

To install the SEP sesam Server, use the following command:

# yum install sesam_srv<version.OS.system_type>
Note
On RHEL, the SEP sesam installation changes the permissions of /var/run/postgresql to grant SEP sesam users PostgreSQL access privileges.
Debian-based distributions

The Debian-based distribution (Debian/Ubuntu/UCS) includes the standard tool apt-get which is common for package management. With this tool packages can be installed (and uninstalled) in the command line. Before you install any of the SEP sesam components (e.g., Server, Client or GUI), make sure that you have configured the Debian repository properly. For details, see Debian Repository.

The SEP sesam Server package includes all dependencies that are needed for the standard SEP sesam Server installation. For details on the supported Debian-based versions, see SEP sesam OS and Database Support Matrix.

To install the SEP sesam Server, use the following command:

root@hostname#: apt-get install sesam-srv

Use the following command to install *.deb files:

dpkg -i sesam-srv<version.system_type>.deb
Note
Installing SEP sesam on Debian and Ubuntu requires additional steps. For details, see Debian Repository.

SEP sesam Client installation

Note: Because the SEP sesam GUI already contains the client components, the SEP sesam Client package cannot be installed in addition to the GUI.
To install the SEP sesam Client, select the download folder where you have saved the SEP sesam Client installation package.

  • For SLES based distributions, use the following command:
  • # zypper install sesam_cli<version.OS.system_type>
  • For RHEL (Red Hat Enterprise Linux), use the following command:
  • # yum install sesam_cli<version.OS.system_type>
  • For Debian-based distributions, use the following command:
  • root@hostname#: apt-get install sesam-cli Use the following command to install *.deb files: dpkg -i sesam-cli<version.system_type>.deb
    Note
    Installing SEP sesam on Debian and Ubuntu requires additional steps. For details, see Debian Repository.

Run the following command on the client to grant access rights to the SEP sesam Server and to allow it to contact and backup the client:

/opt/sesam/bin/sesam/sm_setup set_client <SEP sesam Server Name>

If you have problems or questions regarding installation, also check FAQ: Installation and configuration.

SEP sesam GUI installation

The SEP sesam GUI package is intended for the administration of the SEP sesam Server from another computer.
Note: Since the GUI component is already included in the SEP sesam Server package, it cannot be installed additionally on the SEP sesam Server.

To install the SEP sesam GUI, select the download folder where you have saved the SEP sesam GUI installation package.

  • For SLES based distributions, use the following command:
  • # zypper install sesam_gui<version.OS.system_type>
  • For RHEL (Red Hat Enterprise Linux), use the following command:
  • # yum install sesam_gui<version.OS.system_type>
  • For Debian-based distributions, use the following command:
  • root@hostname#: apt-get install sesam-gui Use the following command to install *.deb files: dpkg -i sesam-gui<version.system_type>.deb
    Note
    Installing SEP sesam on Debian and Ubuntu requires additional steps. For details, see Debian Repository.

On KDE and Gnome, the installation generates a link on the root user desktop to start the GUI. This link must target the correct SEP sesam Server. Open the link properties and add the following parameter to the command line:

-S <SEP sesam Server Name>

If you have problems or questions regarding installation, also check FAQ: Installation and configuration.

Afterwards, to start the SEP sesam GUI, use the following command:

/opt/sesam/bin/gui/sesam_gui -S <hostname_backup_server>

AIX

For reference which AIX versions are supported and which components are available for AIX, check SEP sesam OS and Database Support Matrix.

Prerequisites

  • Before starting the SEP sesam installation, make sure that you are logged in as the root user.
  • Installing the SEP sesam component for AIX (depending on availability, either the SEP sesam Client or the Remote Tape Server can be installed) requires special RPM packages to be installed using the standard RPM package manager (part of the AIX default installation). You can download the SEP sesam RPM packages from https://www.sep.de/downloadportal/aix/7/ and the required prerequisites from: http://www.oss4aix.org/download/ (openssl and readline) and copy them to the AIX system to /tmp/rpm-packages/. Then install the package via RPM:
  • cd /tmp/rpm-packages/ rpm -i *
  • Note
    For AIX version 7.02, the following folder must be created for sm_ssh to work:
    mkdir  -p /opt/freeware/lib/gcc/powerpc-ibm-aix7.1.0.0/4.8.3/
    
  • The SEP sesam GUI requires Java Runtime Environment to be installed on the system. For details on the required Java version, see Java Compatibility Matrix.

SEP sesam Remote Tape Server or Client installation

  1. Download the relevant SEP sesam package from the https://www.sep.de/downloadportal/aix/7/ and copy it to the /tmp directory on your AIX system. The following example shows the installation of the sesam_rts package. The procedure for installing the SEP sesam Client is slightly different; the name of the package is substituted with sesam_cli.
  2. Unzip the archive by using the following commands:
     gunzip sesam-rts-<version>-aix_powerpc.tgz
     tar -xvf sesam-rts-<version>-aix_powerpc.tar

    A new directory sesam_rts_<version> is created:

     # tar -xvf sesam-rts-4.4.2.58-aix_powerpc.tar 
     x sesam_rts_4.4.2.58
     x sesam_rts_4.4.2.58/aix_rts.4.4.2.58.tgz, 22440192 bytes, 43829 media blocks.
     x sesam_rts_4.4.2.58/sm_setup, 2168068 bytes, 4235 media blocks.
  3. Go to the unzipped directory
    cd sesam_rts_<version>
  4. Execute the setup executable sm_setup as the root user:
     # cd sesam_rts_<version>
     # ./sm_setup
  5. Follow the wizard and select the relevant components that you wish to install, tapeserver or client, respectively:
     # ./sm_setup
     Found 1 valid archive(s): 'aix_rts.4.4.2.58.tgz,'.
     What do you want to install? (tapeserver,client)
     tapeserver
  6. Set the installation directory; the recommended place to install sesam is /opt/sesam. Make sure that there is at least 10 GB of free disk space available. Optionally, choose another installation directory that has enough free space:
     In which directory do you want to install (If not existing it will be created): 
     '''/opt/sesam/'''
     In which directory do you want to install (Read-Write): 
     '''/opt/sesam/'''
  7. Specify the SEP sesam Server hostname in your environment; you must provide the DNS hostname of your backup server. The DNS Server must be correctly resolved on the AIX system. For details, see How to check DNS configuration.
     To which SEP sesam Server should be connected?
     '''backupserver.hostname'''

Once you specify all the required information, the SEP sesam software installation and configuration start. If you have problems starting the SEP sesam services, check the Troubleshooting Guide.

Mac OS X

Prerequisites

  • Before starting the SEP sesam installation, make sure that you are logged in as a local administrator or domain administrator.
  • If you are planning to install a GUI, Java Runtime Environment must be installed on the system. For details on the required Java version, see Java Compatibility Matrix.

Steps

SEP sesam does not provide a dedicated MAC OS package. You should download the latest SEP sesam Linux GUI package from https://www.sep.de/downloadportal/linux/repositories/debian/pool/main/s/sesam-gui/, copy it to your MAC system, extract it with the command:

 ar x <sesam-gui_4.4.3-xx.lenny_i386.deb> && tar xfz data.tar.gz

and copy the extracted directory to your program files directory; then use the <SESAM_BIN>/gui directory:

/opt/sesam/bin/gui/sesam_gui -S <hostname_backup_server>

Or, in case your backup server is a Linux system, you can connect via the command line (X must be enabled) and start the GUI:

/opt/sesam/bin/gui/sesam_gui -S <hostname_backup_server>  

The SEP sesam for Mac OS X supports standard file backups with ACL's. Disaster recovery is not supported!

If you have problems or questions regarding installation, also check FAQ: Installation and configuration.

Univention UCS

For the list of supported Univention UCS versions and available SEP sesam components for UCS, check SEP sesam OS and Database Support Matrix.

Prerequisites

  • Before installing, you should test the DNS name resolution by simply pinging (using both, long and short name) from the server to the client and back. For details on the DNS resolution check, see How to check DNS configuration.
  • Disabling the firewall is recommended to avoid problems during the SEP sesam installation. Once SEP sesam is installed, you can enable the firewall with exceptions made for the SEP sesam services.

Installing SEP sesam on UCS

You can install SEP sesam on UCS by using any of the following options:

Option 1: Installing via the Univention App Center (only the SEP sesam Server and Client)
  1. Open the Univention Management Console in your browser.
  2. Go to Software -> App Center.
  3. Search for SEP sesam.
  4. Install either SEP sesam Server or SEP sesam Client.
Option 2: Installing via the SEP Debian Repository
  1. Open a terminal session as the root user.
  2. Enable Univention unmaintained repositories with the following command (this enables the UCS system to install the dependencies for SEP sesam):
    ucr set repository/online/unmaintained=yes
  3. Add the SEP Debian Repository as described in Debian Repository:
    • UCS 4.2 is based on Debian 8 Jessie.
    • UCS 4.3 is based on Debian 9 Stretch.
  4. Update the repositories by using:
    apt update
  5. Install SEP sesam package via apt: For example, to install the SEP sesam Server package, use
    apt install sesam-srv

    Other options are listed here: Debian Repository.

Option 3: Installing manually
  1. Open a terminal session as the root user.
  2. Enable Univention unmaintained repositories with the following command (this enables the UCS system to install the dependencies for SEP sesam):
    ucr set repository/online/unmaintained=yes
  3. Download the desired installation package from the SEP Download Center.
    • UCS 4.2 is based on Debian 8 Jessie.
    • UCS 4.3 is based on Debian 9 Stretch.
  4. Update the repositories by using:
    apt update
  5. Install SEP sesam package via apt:
    apt install /path/to/downloadedpackage

Configuring UCS firewall

By default, the Univention firewall is included in all UCS installations with all incoming ports blocked. You have to enable access to certain ports to allow SEP sesam to work.

Note
Installing a SEP sesam App Center package will automatically open the required ports for SEP sesam except for the Si3 Replication and REST API.
Disable UCS firewall

You may consider deactivating the UCS firewall completely by setting the Univention Configuration Registry variable security/packetfilter/disabled to true:

ucr set security/packetfilter/disabled=yes
service univention-firewall restart
Use SEP sesam with enabled UCS firewall

Check the list of required ports for SEP sesam: List of Ports Used by SEP sesam.

To open a port or a range of ports, use the following commands:

ucr set security/packetfilter/tcp/portnumber_or_portrange/all=ACCEPT
service univention-firewall restart

Client firewall settings

If you want to back up a client behind a firewall using STPD, you have to specify an open port range in the client's STPD Options as follows:
Open SEP sesam client Properties and switch to the Options tab. If you have installed a client from the App Center, the port range is 11002-11007.

For more information on client configuration, see Configuring Clients.