Restore and recover the following security data:
-
User profiles
-
Authorization lists
-
Authority holders
Procedures
To restore one or more user profiles, follow these steps:
-
From the CommCell Browser, expand Client Computers > client > File System > defaultBackupSet.
-
Right-click the *SEC subclient and click Browse and Restore.
-
In the Browse and Restore Options dialog box, click View Content.
-
From the list of items that appear, select the objects to restore, and click Recover All Selected.
The Restore Options dialog box appears.
-
On the General tab, from the Destination Client list, select the source computer.
-
Click OK.
To monitor the progress of the restore job, see Job Controller.
To restore all user profiles, follow these steps:
NOTE
Perform the following steps from a valid console. The system will be put in a restricted state for approximately 10-20 minutes.
-
From the CommCell Browser, expand Client Computers > client > Proxy Client File System > defaultBackupSet.
-
Right-click the *SEC subclient and click Browse and Restore.
-
In the Browse and Restore Options dialog box, click View Content.
-
From the list of items that appear, select the System Security folder, and click Recover All Selected.
The Restore Options dialog box appears.
-
On the General tab, from the Destination Client list, select the source computer, and click OK.
-
View the restore job details. You can view details in the Job Controller.
-
In Events tab, find event
23:174
and note the tape library, volume and sequence number. -
Complete the restore using the commands in restricted state.
For example, to restore Tape Library: TAPMLB02, Volume: HS0047, and Sequence number: 5, the command is:
RSTUSRPRF DEV(TAPMLB02) VOL(HS0047) SEQNBR(5) ENDOPT(*LEAVE)
. -
From the Commcell Browser, expand Storage Resources > Libraries > VTL Library > Drive Pool.
-
Right click on any one of the drives, and mark the status to offline for maintenance.
Take note of this drive’s serial number.
-
From the Commcell Browser, expand Storage Resources > Libraries > VTL Library > Media by Location > Media in Library.
-
Identify the required tape volume (which you noted in step 8), and mount it to the drive you previously marked as offline for maintenance.
-
Using the serial number, find the tape drive description name:
-
On the IBM i Client Console, run the following command:
QSYS/WRKHDWRSC TYPE(*STG)
-
Select the Tape Library shown in the Event Message (TAPMLB02), and select option [9=Work with resource].
-
Using option [7-Display resource detail], look for the tape resource details to find the tape drive with serial number.
For example, in the GUI, the serial number for the tape drive selected is ‘1500004001’. The tape drive resource details will be shown as follows:
Resource name . . . . . . . : TAP01
Text . . . . . . . . . . . . : Tape Unit
Type-model . . . . . . . . . : 3580-006
Serial number . . . . . . . : YFC500004001
Part number . . . . . . . . :
-
Return to the resource list. Using option [5=Work with configuration descriptions], identify the device description that is assigned to this resource.
-
-
On the IBM i Client Console, vary on the selected drive:
VRYCFG CFGOBJ(TAP01) CFGTYPE(*DEV) STATUS(*ON) ASCVRYOFF(*N)
-
Bring IBM i Client system to restricted state.
-
Restore User profiles and attributes using command:
RSTUSRPRF DEV(TAP01) VOL(*MOUNTED) SEQNBR(5) ENDOPT(*LEAVE)
-
Run
RSTAUT
command to restore user authorities. -
On the IBM i Client Console, vary off the selected drive:
VRYCFG CFGOBJ(TAP01) CFGTYPE(*DEV) STATUS(*ON) ASCVRYOFF(*N)
-
Start IBM i Client subsystems.
-
From the Commcell Console, enable the drives in the VTL library.