Installation and User's Guide

New for IBM Tivoli Storage Manager Version 6.4This section summarizes changes that were made to Tivoli Storage ManagerVersion 6.4.||||||||||||||||||||||The following features are new for IBM Tivoli Storage Manager in Version 6.4:LDAP authenticationIf your clients log on to a Tivoli Storage Manager server that is at version6.3.3, or newer, you can now configure the server to use an external LDAPserver to provide login authentication for administrators and nodes. IBMTivoli Directory Server version 6.2 and later, and Windows ActiveDirectory version 2003 and later, are the supported LDAP servers. Using anLDAP server for authentication can provide additional security becauseyou can configure password policies that require passwords to use acombination of uppercase and lowercase letters, numbers, and specialcharacters. You can also configure password policies that mandate thecontent of passwords, and when they expire. See the server documentationfor details.Security enhancementsTwo new client options are provided to promote secure communications.“Sslrequired” on page 486The sslrequired option specifies the conditions when SSL is or isnot required when logging on to the Tivoli ® Storage Managerserver or storage agents. To actually enable SSL so client-to-serverand client-to-storage-agent communications are secure, you mustset the client ssl option to yes.“Lanfreessl” on page 410This option specifies whether the Tivoli Storage Manager clientenables SSL when communicating with a Storage Agent.Snapshot differential backups of NetApp filer volumes in a SnapMirrorenvironmentYou can use NetApp's SnapDiff backup processing in conjunction withNetApp's SnapMirror replication to back up NetApp or N-Seriesproduction or remote filer volumes. For more information, see “SnapMirrorsupport for NetApp snapshot-assisted progressive incremental backup(snapdiff)” on page 72.Snapshot differential backups of NetApp vFiler volumesSnapshot differential backups can now be done on NetApp vFiler volumes,if the targeted NetApp vFiler is running ONTAP 8.1.1, or a newer version.The software changes that allow the client to protect vFiler volumes are allin ONTAP. There are no changes to the backup-archive client to use thisnew capability. You use same the client commands and options to protectvFilers that you use for physical filers. Like a physical filer, a vFiler hasunique credentials, including an IP address or hostname, and a user nameand password. The backup-archive client Set Password command must beused to initially store these credentials before a snapshot differentialbackup can be run.Incremental forever virtual machine backup strategyCustomers who use VMware virtual machines can extend existing periodic© Copyright IBM Corp. 1993, 2012 xix