IC92436: DB2 UPGRADE FAILS WITH "ERROR 1330" DURING TIVOLI STORAGE MANAGER SERVER FIXPACK INSTALLATION

APAR status

• Closed as program error.

Error description

• After Tivoli Storage Manager server fixpack installation, the
  server fails to start with the following message  :
  
   ANR1955E The server detects that the following DB2 level is
  installed on the system: 'DB2 V9.7.500.4312'. The installed DB2
  level is earlier than the required DB2 level: 'DB2
  v9.7.600.413'. The installed version of DB2 must be at the
  required level or later.
  
  The DB2 levels given in the message might be different depending
  on the source and target fixpack levels.
  
  This happens because the install failed  to upgrade DB2 with
  following errors recorded in file  db2_inst.log
  
   1: The db2nmpcfg cmd to be executed is:
  MSI (s) (D4:64) [08:43:28:762]: Product: DB2 Enterprise Server
  Edition - DB2TSM1 --
    Error 1330 A file that is required cannot be installed because
  the cabinet file
  C:\TSM_DIR\TSMSRV~1.1X6\COI\PACKAG~1\DB2\FILES\ESE\image\db2\Win
  dows\BASE0000.cab has an invalid digital signature.  This may
  indicate that the cabinet file is corrupt.
   Error 266 was returned by WinVerifyTrust.
  
  Error 1330.A file that is required cannot be installed because
  the cabinet file
  C:\TSM_DIR\TSMSRV~1.1X6\COI\PACKAG~1\DB2\FILES\ESE\image\db2\Win
  dows\BASE0000.cab has an invalid digital signature.  This may
  indicate that the cabinet file is corrupt.
    Error 266 was returned by WinVerifyTrust.
  Action ended 8:43:28: InstallFinalize. Return value 3.
  
  
  Those errors mean that DB2 failed to validate the certificate
  signature for its installation files.
  This verification request is new with recent DB2 builds. It does
  not depend on the DB2 fixpack level but rather on the DB2
  fixpack build date.
  
  
  Tivoli Storage Manager Versions Affected:
    6.2 and 6.3 on the Windows Platform
  
  
  Initial Impact:   Medium
  
  Additional Keywords:
  TSM install PCA-3G5
  

Local fix

• Follow the DB2 technote below to resolve the issue :
    http://www.ibm.com/support/docview.wss?uid=swg21633808
  
  - Run certmgr.msc from the Windowsﾩ command line and check if
  under "Trusted Root Certification Authorities" you have the
  certificate "VeriSign Class 3 Public Primary Certification
  authority - G5"
  - Import the certificate from a Windowsﾩ server that has this
  certificate.
  - Download it from http://www.verisign.com/support/roots.html
  and import it to the correct location.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All Tivoli Storage Manager server users.     *
  ****************************************************************
  * PROBLEM DESCRIPTION: See APAR description                    *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  *
  

Problem conclusion

• The following note will be placed in the Windows Installation
  Guide and the Problem Determination Guide:
  Important: When you install or upgrade your DB2 product to DB2
  9.7 FP8, an invalid signature in the cabinet file BASE0000.cab
  might cause the installation to fail. Determine if you have
  the "VeriSign Class 3 Public Primary Certification authority -
  G5" trusted certificate. Issue the certmgr.msc command from
  the Windows command line and look in the "Trusted Root
  Certification Authorities" section. If you do not have the
  trusted certificate, import it from a Windows server that has
  it or download it from
  http://www.verisign.com/support/roots.html.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TSM SERVER

• Fixed component ID

  5698ISMSV

Applicable component levels

• R62H PSY

     UP