main content

SupportConnect - BrightStor Storage Newsletter, Version 06.13

NOTE: E-News technical information is dynamic and links in archived copies of these technical newsletters may eventually become invalid as the products evolve. Please check the support web page for your product to get the latest technical information.

E-News

BrightStor® Storage Newsletter
Version 06.13
December 14, 2006

In This Newsletter

Product News

	>	New Security Updates Released for BrightStor® ARCserve® Backup and BrightStor® Enterprise Backup
	>	BrightStor® ARCserve® Backup for Laptops & Desktops r11.1 Service Pack 2 Released
	>	CA Introduces Product Line Communities for Storage Customers

Product Updates

	>	HIPERs: High Impact/Pervasive Problems BrightStor® CA-1® Tape Management System BrightStor® CA-Dynam®/TLMS Tape Management System BrightStor® CA-Disk™ Backup and Restore
	>	CA Message Manager r11.5 - Assentor Discovery
	>	CA Message Manager GroupWise Capture Agent
	>	CA Message Manager Mailbox Management for Lotus Notes (Assentor PMM Notes)
	>	BrightStor® ARCserve® Backup r11.5 for Windows
	>	BrightStor® ARCserve® Backup r11.1 for Linux
	>	BrightStor® ARCserve® Backup r11.1 for UNIX
	>	BrightStor® ARCserve® Backup r11.1 for Windows
	>	BrightStor® ARCserve® Backup v9.01 for Windows
	>	BrightStor® Enterprise Backup v10.5 for Windows

General Information

	>	Preventing 3YY Abends From BrightStor® CA-1® Tape Management System When Active at a DR Location
	>	BrightStor® Tape Encryption r12 SP2 Enhancements
	>	BrightStor® ARCserve® Backup for Windows r11.5: Integrating With Unicenter® NSM 3.1

Special Events

>

CA World® 2007

Product News

New Security Updates Released for BrightStor® ARCserve® Backup and
BrightStor® Enterprise Backup
A new security update has been released for BrightStor ARCserve Backup and BrightStor Enterprise Backup to address a new security risk in the BrightStor® Discovery service, discovered by Assurent. This new security risk affects the base product, options, and all agents and components. The following products are affected:

BrightStor ARCserve Backup r11.1
BrightStor ARCserve Backup v9.01
BrightStor Enterprise Backup v10.5

Please note that BrightStor ARCserve Backup r11.5 Service Pack 2 is NOT affected. If Service Pack 2 is not applied to a server running BrightStor ARCserve Backup r11.5 (or any of its agents, options, or other components), CA strongly recommends that it be applied as soon as possible to address this vulnerability.

For other versions, the following security updates should be applied to any Windows server running a BrightStor ARCserve Backup or BrightStor Enterprise Backup agent, base product, option, or other component. These security updates can be downloaded from:

BAB r11.1 - supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84609
BAB v9.01 - supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84610
BEB v10.5 - supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84611

BrightStor® ARCserve® Backup for Laptops & Desktops r11.1 Service Pack 2 Released
Service Pack 2 for BrightStor ARCserve Backup for Laptops & Desktops r11.1 is now available for all languages. This new service pack contains all fixes in Service Pack 1, in addition to new fixes.
This is available for download at:
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO83833.

CA Introduces Product Line Communities for Storage Customers
CA has introduced global virtual customer communities called Product Line Communities. Product Line Communities (PLC) focus on a variety of CA products and solutions as well as specific platforms and technologies. The PLCs provide a forum for active and ongoing communication between customers, development, and support. For CA Storage Solutions, we have the following Product Line Communities:

PLC - Information Management:
Products include: CA Message Management solutions (formerly Assentor from iLUMIN),
CA MDY solutions (formerly MDY).

PLC - Recovery Management:
Products include: BrightStor® ARCserve® Backup, BrightStor® ARCserve® Backup for Laptops & Desktops, XOSoft (WANSync, WANSyncCD, Assured Recovery, Enterprise Rewinder, InMotion)

PLC - Mainframe Storage Management:
Products include: BrightStor® CA-Vantage™ Storage Resource Manager, BrightStor®
CA-Allocate™ DASD Space and Placement, BrightStor® CA-Vtape™ Virtual Tape System, BrightStor® CA-1® Tape Management, BrightStor® CA-Dynam®/TLMS Tape Management, BrightStor® CA-Disk™ Backup and Restore, BrightStor® Tape Encryption

Benefits of belonging to a CA PLC include:

Access to a forum for exchanging information, experiences, and best practices
Ability to voice business issues with peers - including industry standards, government regulations, and/or other trends
Access to the PLC website for access to product line information (product road maps, presentations, etc.)
Increasing the technical advantage of your organization
Discovering new ways to leverage CA solutions, increase access to product knowledge, and improve user experience
Providing an excellent entry point for new users

Communication with CA - CA PLCs assist in providing feedback to CA to ensure that solutions align with specific IT and business challenges by:

Conducting regular webcast presentations from CA development discussing current product releases and road maps
Prioritizing and voting on selected product enhancements
Participating in technical discussion forums
Voicing issues, concerns, and suggestions regarding product direction - to assist in guiding the future of CA solution offerings

PLC membership is open to all customers who are actively using CA solutions. You can join a PLC by visiting the CA Customer Communities website at causergroups.com. You can email the Customer Programs Team at customerprograms@ca.com.

Product Updates

HIPERs: High Impact/Pervasive Problems
BrightStor® CA-1® Tape Management System (10/01 through 11/30)
Release: 11.5
QO83180
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO83180
QO82064
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO82064
QO82414
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO82414

BrightStor® CA-Dynam®/TLMS Tape Management System (10/01 through 11/30)
Release: 11.5
QO82064
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO82064
QO82414
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO82414

BrightStor® CA-Disk™ Backup and Restore (09/01 through 11/30)
Release: 11.5
QO82424
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO82424
QO82486
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO82486
QO82283
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO82283
QO83528
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO83528

CA Message Manager r11.5 - Assentor Discovery
New service packs available for r2.0 and r1.6 at:
supportconnectw.ca.com/public/assentor/downloads/assentdisc-solpatch.asp.

CA Message Manager GroupWise Capture Agent
New service packs available for r11.5 at:
supportconnectw.ca.com/public/msggrpcaptat/downloads/msggrpcaptat-solpatch.asp.

CA Message Manager Mailbox Management for Lotus Notes (Assentor PMM Notes)
New CA Message Manager Mailbox Management for Lotus Notes r11.5 Service Pack now available at:
supportconnectw.ca.com/public/msgmgrlotus/downloads/msgmgrlotus-solpatch.asp.

BrightStor® ARCserve® Backup r11.5 for Windows
QO84383 - Update to address multiple NAS Option issues.
This is available for download at:
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84383.

QO84317 - New patch to correct possible fatal corruption of the built-in BrightStor ARCserve Backup VLDB database. This patch is not needed if MS-SQL is being used as the backend database.
This is available for download at:
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84317.

QO84016 - Fix for backup jobs crashing or hanging after saving DR information to adrnet.ini on a MSCS environment.
This is available for download at:
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84016.

BrightStor® ARCserve® Backup r11.1 for Linux
QO84014 - Tape engine/added device support updates. Adds support for additional devices and addresses tape engine-related issues.
This is available for download at:
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84014.

BrightStor® ARCserve® Backup r11.1 for UNIX
QO84008, QO84009, and QO84012 - Tape engine/added device support updates. Adds support for additional devices and addresses tape engine-related issues.
These are available for download at:
AIX:
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84008.
HP-UX:
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84012.
SUN:
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84009.

BrightStor® ARCserve® Backup r11.1 for Windows
QO84318 - New patch to correct possible fatal corruption of the built-in BrightStor ARCserve Backup VLDB database. This patch is not needed if MS-SQL is being used as the backend database.
This is available for download at:
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84318.

BrightStor® ARCserve® Backup v9.01 for Windows
QO84319 - New patch to correct possible fatal corruption of the built-in BrightStor ARCserve Backup VLDB database. This patch is not needed if MS-SQL is being used as the backend database.
This is available for download at:
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84319.

BrightStor® Enterprise Backup v10.5 for Windows
QO84353 - New patch to correct possible fatal corruption of the built-in BrightStor® ARCserve® Backup VLDB database. This patch is not needed if MS-SQL is being used as the backend database.
This is available for download at:
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=QO84353.

General Information

Preventing 3YY Abends From BrightStor® CA-1® Tape Management System
When Active at a DR Location
Many sites still report different 3YY abends after restoring BrightStor CA-1 (CA-1) at a DR location. The usual reason is that they did NOT follow the "Alternate TMC Backup and Restore Method for Disaster Recovery" process documented in section 8.5.3 of the CA-1 Systems Programmers Guide. The possibility of getting a 3YY exists if the TMC is simply backed up (using either TMSCOPY or a full-volume backup utility such as DFDSS or FDR) and then restored at the DR location. These backup utilities can backup the TMC starting at the top of the file and copying (quickly) to the bottom. The problem is that between the time that Control-Record-2 is read (the second record in the TMC) and the time that the DSNB record pointed to as the next-free-DSNB is read is probably many seconds/minutes later. By that time, it is very possible that another job on another system sharing this TMC created a secondary file. So, by the time the DSNB record is backed up, it is no longer a "free DSNB". This will result in a 3YY-112 abend at the DR location when an attempt to create a secondary file is made. It should be noted that a restore of the TMC at the primary data center will NOT result in such a situation, because the active AUDIT file will be used in addition to the last TMSCOPY backup.

The alternate TMC backup method described in the manual basically does a normal backup of the TMC using TMSCOPY and then does a backup of the AUDIT file using IEBGENER. Then, at the DR location, you first restore the AUDIT file and then restore the TMC using both the backup AND the AUDIT dataset. The result of this restore procedure will be a "snap-shot" of the TMC as it existed at exactly the time that Control-Record-4 (first record in the AUDIT file) was backed up. Using this methodology, no 3YY abends will occur at the DR location when you create secondary files tracked by CA-1. This will allow for an error-free disaster recovery test - at least as far as CA-1 is concerned!

BrightStor® Tape Encryption r12 SP2 Enhancements
The following new features are included in BrightStor Tape Encryption (BTE) r12 SP2 which is now generally available.

Multiplatform Decryption Utility (MDU)

The Multiplatform Decryption utility is a new feature that expands the Business to Business (B2B) tape exchange functionality. It allows Windows and UNIX users to decrypt files encrypted by BrightStor Tape Encryption (BTE) on z/OS.

The utility is written in Java™ and utilizes the industry standard decryption routines provided in the Java™ Cryptography Extension.

The MDU does not require that the full BTE product be installed on the distributed system. The MDU requires that the Java™ Runtime Environment 1.5.0_06 be installed.

Initial platforms supported include:

Microsoft Windows®
Linux
Sun Solaris™

This new B2B format, known as "code book", does not use Digital Certificates and implements a different way of creating and protecting B2B tapes. Tapes files supported by the MDU must be created using the code book methodology on the z/OS platform. The code books are extracted from the BTE database and sent separately to the partner companies where they are imported and used by the MDU to decrypt the tape.

SMF Records Created for Encryption / Decryption Activity

This feature allows users to optionally create SMF user records logging encryption and decryption activity. New control statements are provided to allow the user to select the SMF user record number to use (in the range of 128-255) and a record subtype. The encryption/decryption detail record includes information on the creating job, program, step, data set name, date, and time (and more) as well as information about the encryption algorithm, the CPU time consumed, and the number of bytes and blocks encrypted or decrypted.

This feature provides users the ability to provide their own reports on BTE's encryption or decryption activities. Standard utilities and vendor programs can be used to format the SMF data.

Full CPACF Exploitation - ICSF No Longer Required

The main goal of this enhancement is to allow those customers storing the keys into the BTE Primary/Mirror Databases and using CPACF (IBM's CP Assist for Cryptographic Functions) for encryption/decryption processing, to implement BTE without the need to have IBM's Integrated Cryptographic Services Facility (ICSF) started on the system. The ability to run without ICSF makes the installation, implementation, and disaster recovery of BTE significantly easier.

In environments supporting CPACF, BTE currently interfaces to ICSF only to invoke three different hashing algorithms: SHA-1, SHA-256, and MD5. The SHA-1 algorithm is always available on CPACF and the SHA-256 hashing algorithm is available on the CPACF delivered with all z9 systems.

With this feature, the calls to ICSF for the SHA-1 and SHA-256 hashing algorithms have been replaced with logic to use the machine instructions implemented on the CPACF processor.

BTE systems implemented on processors not supporting CPACF will still require ICSF to be running on the system.

New Secure Key Processing Options

Many customers have purchased an IBM PCI crypto processor such as the PCICC, PCIXCC, or CEX2C to allow them to use secure keys for encryption services. Secure keys (currently supported for DES-based algorithms only) are managed in clear form only when they are used inside the PCI crypto processor circuits, adding an additional layer of security to key management. On the downside, the PCI crypto processors cannot achieve the high performance and throughput that can be obtained using CPACF or CCF. For specific applications, many customers are willing to suffer decreased performance to gain the increased security the PCI crypto processor offers.

Prior to this feature, BTE always uses a CCF or CPACF processor if one is found on the system to optimize performance. This feature provides a new parmlib attribute to implement secure keys for encryption and decryption processing on selected key names. When a key name is defined to take advantage of this extra security layer, BTE will interface with ICSF to perform the encryption or decryption processing inside the PCI crypto processor.

BrightStor® ARCserve® Backup for Windows r11.5:
Integrating With Unicenter® NSM 3.1
A new document, showing step-by-step how to set up BAB r11.5 to work with Unicenter NSM 3.1, has been posted to SupportConnect^SM.
This guide can be found at:
supportconnect.ca.com/sc/redir.jsp?reqPage=search&searchID=TEC411542.

Special Events

CA World® 2007
Registration for CA World 2007 is officially open and, this year, CA World will change your World. CA World goes way beyond introduction - it is about demonstrating how our technology solutions can help drive success for the smartest people in IT.

Returning to the Venetian Las Vegas and Sands Expo and Convention Center April 22 - 26, 2007, CA World 2007 offers:

Hundreds of Thought Provoking Sessions - Learn best practices from industry luminaries, attend informative strategy sessions by CA leaders, see product and service demonstrations from CA partners, and benefit from the thought-provoking implementation experiences of fellow customers.
Visionary Keynotes - Hear about the timely and thought-provoking strategies, innovations, and broader industry trends that shape our fast-moving technology world.
Unparalleled Networking Opportunities - Enjoy quality time with your peers, CA representatives, and CA partners in a relaxed and informative atmosphere.
State-of-the-Art Exhibition Center - Preview the latest CA and partner solutions and technologies.
Technical Campgrounds - Meet one-on-one with the CA development and support staff responsible for the products you use. Ask questions, solve problems, and prepare for release upgrades.
Entertainment and Enlightenment - Enjoy performances and presentations from world-renowned entertainers and industry visionaries.

You are subscribed as &*TO;.

To subscribe, unsubscribe, or change the format for this or other newsletters, please go to our E-News subscription page. You can also unsubscribe by sending an email to: editor_brightstor@ca.com with "Unsubscribe enews_brightstor" (without the quotes) in the message body. You must include the exact email address that you wish to unsubscribe.
Feedback? Comments? Suggestions?
Send an email to: editor_brightstor@ca.com. All submissions become the property of the publisher and may or may not be reprinted.
NOTE: This address should be used only for feedback on this newsletter. Requests for technical support should be submitted through normal channels.

main content

Page Tools

print