Home > AS/400 Tips > iSeries security tips > Automate disaster recovery restores
iSeries 400 Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

ISERIES SECURITY TIPS

Automate disaster recovery restores


Rich Loeber
07.25.2006
Rating: -4.47- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



Rich Loeber

Part of the job of a security officer is creating, maintaining and testing your disaster recovery plan. A major part of disaster recovery is recreating your computing environment on a completely different system and this always involves data and program restores. You might be one of the fortunate ones that has access to a comprehensive third-party save/restore application that automates the disaster recovery restore process for you. If you're in this group, this article is not for you. But, if you're a small- to medium-sized shop that can't afford (or won't consider) one of these products, then you're on your own to create a workable disaster recovery method.

More Information

If you fall into this group, then you should consider implementing a LODRUN program to automate your disaster recovery process. LODRUN is an OS/400 command that is normally used just by developers of third-party software as a method of controlling the installation process for their software packages. But, LODRUN can easily be used to automate your recovery restore process as well.

When you run the LODRUN program, the command calls a process that looks for a *PGM object at the beginning of the tape with the unique name of QINSTAPP. Once found, it will transfer this *PGM object into the special QTEMP library and then call it, passing along the parameters from the LODRUN command that includes the device name of the tape drive being used.

So, for you to have a controlled restore of your backup tape, all you need to do is create a CL program named QINSTAPP with a single parameter for the tape device name. Then, you can use that CL program to do the controlled restore from the tape onto the new system.

A typical off-site backup tape will contain the following items:

  1. A backup of the user profiles
  2. A backup of the configuration
  3. Backups of the user libraries
  4. Backups of the IFS objects

You are probably already familiar with exactly how you do backups for your shop. To use the LODRUN method for an automated restore, all you need to do is create a CL program named QINSTAPP that will restore the objects from the backup tape in the same sequence in which they are recorded on the tape. Some hints:

  1. Change your save program to transfer the QINSTAPP *PGM object to QTEMP, and then do a SAVOBJ to save it as the very first object on your backup tape.
  2. Be sure that you use the *LEAVE option so that the tape is properly positioned after each restore is completed.
  3. Be sure to run the RSTAUT command after everything has been restored to get the authorities correct.
  4. Use the CHKTAP command at the very end to rewind and/or unload the tape. This will give you better flexibility when it is time to make changes to your program.
  5. Add a clear comment to the CL program you use for creating backups that advises any programmer that works on that program to make sure and mirror any changes in your restore program.
  6. When you first create the QINSTAPP CL program, have your save program handy so that you get the sequence of events absolutely correct.

When you're ready to run the restore, all you'll need to do is mount the tape and issue the LODRUN command. At that point, you custom restore program will take over and give you a quick, complete and controlled restore of your system on your recovery system. If you'd like to see a sample QINSTAPP program, send me an email and I'll send you a shell that I recently created.


If you have specific questions about this topic, email me at rich@kisco.com. All email messages will be answered.

---------------------------
About the author: Rich Loeber is president of Kisco Information Systems Inc. in Saranac Lake, N.Y. The company is a provider of various security products for the iSeries market.


Rate this Tip
To rate tips, you must be a member of Search400.com.
Register now to start rating these tips. Log in if you are already a member.




Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
iSeries security tips
Developing a security incident response system for System i
Tracking remote access users on System i
Setting up security for programmers on IBM i
Controlling remote access on your IBM i
Checking in on your IBM i authorization lists
PCI data security standards and the System i
Securing the integrated file system on IBM System i
Contextual security on IBM i: Limit user profile access
Time for a security checkup for your i
Security monitoring on IBM i: Watching your super users

iSeries system and application security
Developing a security incident response system for System i
Setting up security for programmers on IBM i
Blocking AS/400 DB2 users
Trouble accessing IFS path from Win2k3 server
Checking in on your IBM i authorization lists
Strategies for securing IBM i production files
Changing password security levels and upgrading operating systems on the IBM i
Determine the value of parameter UPPWEI in the DSPUSRPRF field
Define journal code value "K"
Modify content within a journal receiver file

iSeries physical security
Time for a security checkup for your i
Recovering your AS/400 security configuration
A guide to System i security, part 2: Landing and establishing access
A guide to System i security: Descending into the heart of darkness of IT security
Learning guide: Steps to a secure System i
Securing printed output
12 security tips in 12 minutes
Are all of your System i (iSeries) doors closed? -- part 1
Can you trust all those trigger programs?
Learning guide: Simple steps to a secure iSeries

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
midrange  (Search400.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



iSeries Security - Security Tools, Physical Security and System Security
HomeNewsTopicsITKnowledge ExchangeTipsBlogsAsk the ExpertsMultimediaWhite PapersProducts
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 1999 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts