Skip to main content

COPCOM119E exception occurred after database move


Technote (FAQ)


Question

When performing a database move from another system be sure to also copy the database-key stored in crypto.xml.

Cause

COPCOM119E An exception occurred when performing the cryptographic operation: Given final block not properly padded.

Answer

The problem is due to the fact that the crypto keys of the new TPM server installation have been regenerated and now after restoring the old database, the data are not decrypted properly. The only solution is to use the old crypto.xml file. All of the sensitive data in the database is encrypted using the database key stored in crypto.xml. This file is located in $TIO_HOME/config directory.

There are two steps in order to move a database from one TPM system to another one:
1. restore the database
2. Copy database-key stored in old crypto.xml file to the new crypto.xml file.

Here is a sample crypto.xml file:

<keys-configuration>

<!-- database-key is a MANDATORY key and used to encrypt sensitive information in the database.
It is a different key then the configuration one. -->

<database-key>m7OPRuPBFrM7q5gWRbO8gFekFTKUQLDB</database-key>

<!-- configuration-key is an OPTIONAL key.
When configured, that is the key used to encrypt *ALL* passwords in configuration files.
Comment the line out if you choose not to have this encryption (ONLY FOR DEVELOPMENT).
-->

<!-- below is a sample configuration key -->
<configuration-key>ZxZeiWgI4GJtSryKxEbHc3Zh6bCeVMcj</configuration-key>
</keys-configuration>


Related information

White Paper: Tivoli Provisioning Manager and Tivoli Ser

Cross reference information
Segment Product Component Platform Version Edition
Systems and Asset Management Tivoli Provisioning Manager for Software AIX, Linux, Solaris, Windows 5.1.1.3
Systems and Asset Management Tivoli Intelligent Orchestrator AIX, Linux, Solaris, Windows 5.1.1.3

Rate this page:

(0 users)Average rating

Copyright and trademark information

IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.

Rate this page:


(0 users)Average rating

Add comments

Document information

Tivoli Provisioning Manager


Software version:
5.1.1.3, 7.1.1, 7.2.1


Operating system(s):
AIX, Linux, Solaris, Windows


Reference #:
1304316


Modified date:
2010-12-02

Translate my page

Content navigation