Technote (FAQ)
Question
When performing a database move from another system be sure to also copy the database-key stored in crypto.xml.
Cause
COPCOM119E An exception occurred when performing the cryptographic operation: Given final block not properly padded.
Answer
The problem is due to the fact that the crypto keys of the new TPM server installation have been regenerated and now after restoring the old database, the data are not decrypted properly. The only solution is to use the old crypto.xml file. All of the sensitive data in the database is encrypted using the database key stored in crypto.xml. This file is located in $TIO_HOME/config directory.
There are two steps in order to move a database from one TPM system to another one:
1. restore the database
2. Copy database-key stored in old crypto.xml file to the new crypto.xml file.
Here is a sample crypto.xml file:
<keys-configuration>
<!-- database-key is a MANDATORY key and used to encrypt sensitive information in the database.
It is a different key then the configuration one. -->
<database-key>m7OPRuPBFrM7q5gWRbO8gFekFTKUQLDB</database-key>
<!-- configuration-key is an OPTIONAL key.
When configured, that is the key used to encrypt *ALL* passwords in configuration files.
Comment the line out if you choose not to have this encryption (ONLY FOR DEVELOPMENT).
-->
<!-- below is a sample configuration key -->
<configuration-key>ZxZeiWgI4GJtSryKxEbHc3Zh6bCeVMcj</configuration-key>
</keys-configuration>
Related information
White Paper: Tivoli Provisioning Manager and Tivoli Ser
| Segment | Product | Component | Platform | Version | Edition |
|---|---|---|---|---|---|
| Systems and Asset Management | Tivoli Provisioning Manager for Software | AIX, Linux, Solaris, Windows | 5.1.1.3 | ||
| Systems and Asset Management | Tivoli Intelligent Orchestrator | AIX, Linux, Solaris, Windows | 5.1.1.3 |
Rate this page:
Copyright and trademark information
IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.