diff --git a/tasks/configure_ssh_keys.yml b/tasks/configure_ssh_keys.yml
index 5c89ce23bfef0cc776e5f291eb67e8ff2cc9958a..b6787fb33a4d20826246246eeef0cda15f9b0407 100644
--- a/tasks/configure_ssh_keys.yml
+++ b/tasks/configure_ssh_keys.yml
@@ -7,3 +7,14 @@
     key: "{{ item.key }}"
     state: "{{ item.state | default('present') }}"
   loop: "{{ vault_authorized_keys | flatten(levels=1) }}"
+
+- name: copy deploykey files to managed servers
+  copy:
+    src: "{{ role_path }}/../ansible_vaults/{{ role_name }}/{{ item }}"
+    dest: "~/.ssh/{{ item }}"
+    owner: "root"
+    group: "root"
+    mode: 0400
+  loop:
+    - "id_ed25519_deploykey"
+    - "id_ed25519_deploykey.pub"
diff --git a/tasks/install_ibmsp_client.yml b/tasks/install_ibmsp_client.yml
index fa439c0329b2be5b300c29b10f5c68fa166ff0fd..14859e0fe20d9d3328df598eea03fe768701c709 100644
--- a/tasks/install_ibmsp_client.yml
+++ b/tasks/install_ibmsp_client.yml
@@ -15,7 +15,7 @@
       'tivsm-bacit',
       # TSM ONTAP Bibliothek (Support für NetApp Speicher)
       'tivsm-bahdw',
-      'tivsm-jbb',
+      #'tivsm-jbb',
     ]
     state: latest
 
@@ -58,3 +58,33 @@
     dest: "/opt/tivoli/tsm/client/ba/bin/{{ item }}"
   loop:
     - "dsm.opt"
+    - "dsm.sys"
+
+- name: install check-backup scripts
+  block:
+    - name: check out check-backup Git repo
+      git:
+        repo: "git@git.slub-dresden.de:slub-referat-2-3/check-backup.git"
+        dest: "/tmp/check-backup/"
+        key_file: "~/.ssh/id_ed25519_deploykey"
+        accept_hostkey: true
+        force: true
+    - name: copy binaries and config to the system
+      copy:
+        src: "/tmp/check-backup/Linux{{ item }}"
+        dest: "{{ item.name }}"
+        mode: "{{ item.mode }}"
+      loop:
+        - name: "/etc/logrotate.d/dsmcad"
+          mode: 0444
+        - name: "/usr/share/doc/check-backup.man"
+          mode: 0444
+        - name: "/usr/local/bin/check-backup.sh"
+          mode: 0555
+    - name: template script config
+      template:
+        src: "etc/check-backup.cfg"
+        dest: "/etc/check-backup.cfg"
+        owner: "root"
+        group: "root"
+        mode: 0644
diff --git a/tasks/main.yml b/tasks/main.yml
index 1035288cce49e947644b620f015b07efb4cc30ff..9dc2b73baaac42007bb4682db017d9f2ddf8c2f0 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -18,7 +18,7 @@
 
 ### SSH-KEYS VERWALTEN ###
 - name: configure SSH PublicKeys
-  import_tasks: "configure-ssh-publickeys.yml"
+  import_tasks: "configure_ssh_keys.yml"
   tags: [ssh]
 
 ### SFTP SERVER KONFIGURIEREN ###
diff --git a/templates/etc/check-backup.cfg.j2 b/templates/etc/check-backup.cfg.j2
new file mode 100644
index 0000000000000000000000000000000000000000..be0a8f8c8d686257020d56dd7ff4a36ea0d270ca
--- /dev/null
+++ b/templates/etc/check-backup.cfg.j2
@@ -0,0 +1,53 @@
+#####################################
+#                                   #
+#  CONFIG FILE FOR check-backup.sh  #
+#                                   #
+#####################################
+
+### HELP
+
+# Use this file to set custom configurations for check-backup.sh. These settings
+# will overwrite the defaults that are encoded in the script.
+# As check-backup.sh includes this file, you have to use valid Bash syntax.
+
+
+### CONFIGURATION
+
+## DSM Logs
+# search this path to find logs written by TSM Client
+# Default: DSMLOGS_PATH="/var/log/"
+DSMLOGS_PATH="/var/log/"
+# array of log file names
+# Default: DSMLOGS=("dsmsched.log" "dsmerror.log")
+DSMLOGS=("dsmsched.log" "dsmerror.log")
+
+## Log rotation
+# general log directory on the system
+# Default: BACKUP_FOLDER_PATH="/var/log/"
+BACKUP_FOLDER_PATH="/var/log/"
+# save rotated logs to this directory
+# Default: LOG_BACKUP_FOLDER="${BACKUP_FOLDER_PATH}/tsm_logs_archive/"
+LOG_BACKUP_FOLDER="${BACKUP_FOLDER_PATH}/tsm_logs_archive/"
+# save this many generations of rotated logs
+# Default: LOG_RETENTION_COUNT=5
+LOG_RETENTION_COUNT=5
+
+## Error capture
+# Regex to search for error messages
+# Default: REGEX="ANS[0-9]{4}[ES]"
+REGEX="ANS[0-9]{4}[ES]"
+
+## E-Mail settings
+# name of TSM node
+# Default: NODENAME="sdvazubitest"
+NODENAME="{{ ansible_hostname }}"
+# email recipient
+# Default: EMAIL_TO="randy.schoelzel@slub-dresden.de"
+EMAIL_TO="{{ vault_ibmsp_mail_to }}"
+# email carbon copy recipients
+# EMAIL_CC="~c Vorname.Nachname@slub-dresden.de,root@${HOSTNAME}"		# example
+# Default: EMAIL_CC=""
+EMAIL_CC="{{ vault_ibmsp_mail_cc }}"
+# email sender
+# Default: EMAIL_FROM="TSM-Backup-PostSchedCmd@${HOSTNAME}"
+EMAIL_FROM="TSM-Backup-PostSchedCmd@${HOSTNAME}"