Installation and User's Guide

command line (dsmc schedule), wait until a scheduled operation starts,and enter the password for your node when prompted.6. The Tivoli Storage Manager client cannot prompt for the encryption keypassword in scheduler mode. If you are using Tivoli Storage Managerdata encryption, you must run an initial interactive backup once to setup the encryption key by opening the TCP/IP connection from theclient workstation to the server workstation. See Method 1 for moreinformation about setting up this communication. After the encryptionkey is set, you can use server-initiated sessions to back up the filesusing Tivoli Storage Manager encryption.If you set the sessioninitiation option to client, the client initiates sessionswith the server (Method 1) by communicating on the TCP/IP port definedwith the server option tcpport. This is the default. Server promptedscheduling can be used to prompt the client to connect to the server.When using Tivoli Storage Manager across a firewall, consider the following:v In prompted mode the Tivoli Storage Manager server needs to contact the client.In order to do this, some software might need to be installed on the TivoliStorage Manager server to route the request through the firewall. This softwareroutes the server request through a socks port on the firewall. This is typicallycalled socksifying a system. Proxies are not supported, because they only route afew types of communication protocols (HTTP, FTP, GOPHER). Tivoli StorageManager communications are not routed by proxies. It is important to note thatthe client creates a new connection to the Tivoli Storage Manager server whenprompted. This means that the firewall configuration discussed above must be inplace.Related tasks“Configuring the client scheduler” on page 22Related reference“Sessioninitiation” on page 458“Tcpadminport” on page 487“Tcpport” on page 492“Webports” on page 517Configuring Tivoli Storage Manager client/server communication withSecure Sockets LayerSecure Sockets Layer (SSL) allows industry standard SSL-based securecommunications between the Tivoli Storage Manager client and server.The following client components support SSL:v Command-line clientv Administrative command-line clientv Backup-archive client GUIv Client APIOnly outgoing client-server connections support SSL. Incoming connections (forexample, CAD, server-initiated schedule connections) do not support SSL.Client-to-client communications and Web GUI do not support SSL.Each Tivoli Storage Manager server that is enabled for SSL must have a uniquecertificate. The certificate can be one of the following types:Chapter 2. Configure the Tivoli Storage Manager client 27