Installing on macOS¶

First of all, get the latest-released TSM bundle (comes in .DMG format), since recent macOS requires a recent TSM to work, this folder holds 7.1.8.x.:

Latest V7 patch release

Mac TSM client 7.1.8.11

Latest V8 release

Mac TSM client 8.1.21.0

Install it as usual on Mac by attaching the DMG as a disk and then click on the installer icon.

Then grab this script certificate installation script for macOS and the certificate in PEM format here BaaS service CA root certificate.

#!/bin/sh

PASSWORD=$(mktemp -d /tmp/temp-one-time-idXXXXXXXXXXXXX)
rmdir $PASSWORD

KDB="/Library/Application Support/tivoli/tsm/client/ba/bin/dsmcert.kdb"
GSK8CAPICMD=/Library/ibm/gsk8/bin/gsk8capicmd

rm -f "/Library/Application Support/tivoli/tsm/client/ba/bin/dsmcert.*"

if [ -f SafeDC-Net-Root-CA.pem ]; then
   $GSK8CAPICMD -keydb -create -db "$KDB" -pw "$PASSWORD" -stash

   $GSK8CAPICMD -cert -add -db "$KDB" -format ascii -stashed \
                 -label "SafeDC Net Root CA" \
                 -file SafeDC-Net-Root-CA.pem

    $GSK8CAPICMD -cert -list -db "$KDB" -stashed
else
    echo "SafeDC cert file SafeDC-Net-Root-CA.pem missing,"
    echo "please place it in current dir and re-run script"
    exit 1
fi

Put the PEM file next to the script and run the script. It will clean out any previous certificates in the IBM TSM certificate database. If you haven't been running TSM over TLS it will only contain IBM default entries which are of no use. It will not affect any other system or application certificate bundles. It will also not use any of them.

After this, the example configuration files can be collected from the BaaS Portal. TSM for macOS will read preference files from /Library/Application Support/tivoli/tsm/client/ba/bin/dsm.* but apart from that works like any other Unix system in terms of how to write Include/Exclude paths and so on. Any generic unix TSM guide will probably work if you replace /opt/ with /Library/Application Support/ for where to find TSM files.

The command line backup client "dsmc" ends up in /usr/local/bin/dsm c and the GUI in your Applications folder as two programs, both "Tivoli Storage Manager" and "TSM tools for administrators" where the first only works if you already are logged in as an admin, otherwise it isn't allowed to read config files and hence won't reach the TSM server, and the second will first run sudo, and then start TSM as an admin.