IC57974: ANR8507W ANR8302E AFTER UPDATE DEVCLASS FROM DRIVEENCRYPTION=ON TO DRIVEE=ALLOW OR DRIVEE=OFF HP LTO4

APAR status

• Closed as program error.

Error description

• These conditions must exist for this problem to occur:
  -
  1. HP LTO4 drives are being used
  2. The LTO devclass was used with driveencryption=on for a
  period of time long enough for volumes to be written
  3. The LTO devclass is changed to driveencryption=off or
  allow.
  -
  Tapes which were encrypted may return ANR8507W and ANR8302E:
  -
  ANR8507W Volume A00019L4 is using an encryption key that
  is not unique and therefore is not secure. (SESSION: xxx,
  PROCESS: XXX)
  ANR8302E I/O error on drive DRIVE03 (/dev/mt2) with volume
  XXXXXXL4 (OP=READ, Error Number=5, CC=424, KEY=07, ASC=74,
  ASCQ=03,~SENSE=F0.00.07.00.04.00.00.10.00.00.00.00.74.03.
  00.00.33.61.00.00.00.00. Description=An undetermined error
  has occurred).  Refer to Appendix C in the 'Messages' manual
  for recommended action.
  -
  The ASC must be 74, and ANR8507W must occur to match this
  problem.
  -
  This problem occurrs because encryption keys necessary
  to retrieve data from the volumes were incorrectly
  deleted from the TSM database. The fix to this problem
  will prevent this situation from occurring.
  -
  This problem does not affect IBM LTO4 drives, or any drive
  which requires the IBM device driver. This problem only
  affects HP LTO4 drives.
  -
  If this problem occurs, contact IBM support immediately.
  
  TSM Versions Affected:
  TSM 5.5.x, 5.4.x
  
  Initial Impact: High
  
  Additional Keywords:
  MSGANR8507W MSGANR8302E driveencryption drivee AME
  

Local fix

• Remove all encrypted tapes from the tape library, or mark them
  unavailable until a fix is available.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All TSM Server users of HP LTO-4 drives      *
  *                 using Application Managed Encryption with    *
  *                 DRIVEENCRYPTION=ON, when device class is     *
  *                 updated to DRIVEENCRYPTION=ALLOW or          *
  *                 DRIVEENCRYPTION=OFF.                         *
  ****************************************************************
  * PROBLEM DESCRIPTION: See Error Description.                  *
  ****************************************************************
  * RECOMMENDATION: Apply fixing level when available. This      *
  *                 problem is currently projected to be fixed   *
  *                 in 5.5.1.1 and  5.4.4.1. Note that this is   *
  *                 subject to change at the discretion of IBM.  *
  ****************************************************************
  *
  

Problem conclusion

• This problem has been fixed.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TSM SERVER

• Fixed component ID

  5698ISMSV

Applicable component levels

• R54A PSY

     UP

• R54H PSY

     UP

• R54L PSY

     UP

• R54S PSY

     UP

• R54W PSY

     UP

• R55A PSY

     UP

• R55H PSY

     UP

• R55L PSY

     UP

• R55S PSY

     UP

• R55W PSY

     UP