IBM Support

IT12687: "ANR2097E Unable to retrieve the master encryption key" when issuing dsmserv with runfile option

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • With server version 7.1.3.x and using encrypted cloud-container
    storage pools,
    running "dsmserv -u user_name -i instance_dir runfile=file_name"
    
    will generate following errors related to 'dsmserv.pwd':
    
    ANR2100I Activity log process has started.
    ANR2097E Unable to retrieve the master encryption key from the
    server password
    file, dsmserv.pwd.
    ANR8578E The IBM Tivoli Storage Manager database does not have a
    password for
    the SSL key-ring file.
    ANR4536E File IBM_ProcessorValueUnitTable.xml could not be found
    or opened for
    read access.
    ANR4726I The NAS-NDMP support module has been loaded.
    ANR1794W TSM SAN discovery is disabled by options.
    ANR2251S The ACCESS setting for storage pool
    CLOUD__CONTAINER_ENCRYPTION_POOL was changed
    from READWRITE to UNAVAILABLE.  The pool is enabled for
    encryption, but the
    master encryption key for the server is not available.
    ANR2560I Schedule manager started.
    
    Most operations will succeed from the runfile file_name command
    set, but anything that needs to
    deal with an encrypted cloud-container storage pool will
    potentially have problems due to the fact that  server
    will have marked them as unavailable.
    
    Afterwards, dsmserv can be restarted normally.
    This only affects the 'runfile' option of dsmserv.
    
    Tivoli Storage Manager Server Versions Affected:  7.1.3.x on all
    supported platforms
    
    Initial Impact: Medium
    
    Additional Keywords:  spectrum protect TSM encryption master
    runfile
    

Local fix

  • On restart, update any cloud-container storage pools to
    access=readwrite.
    This will not prevent the ANR2097E error sequence when using
    'runfile' option, but make the storage pools
    available again for use.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * All Tivoli Storage Manager server users.                     *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * See error description.                                       *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Apply fixing level when available. This problem is currently *
    * projected to be fixed in level 7.1.5. Note that this is      *
    * subject to change at the discretion of IBM.                  *
    ****************************************************************
    

Problem conclusion

  • This problem was fixed.
    Affected platforms:  AIX, HP-UX, Solaris, Linux, and Windows.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT12687

  • Reported component name

    TSM SERVER

  • Reported component ID

    5698ISMSV

  • Reported release

    71L

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-12-09

  • Closed date

    2015-12-11

  • Last modified date

    2015-12-11

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    TSM SERVER

  • Fixed component ID

    5698ISMSV

Applicable component levels

  • R71A PSY

       UP

  • R71H PSY

       UP

  • R71L PSY

       UP

  • R71S PSY

       UP

  • R71W PSY

       UP



Document information

More support for: Tivoli Storage Manager

Software version: 71L

Reference #: IT12687

Modified date: 11 December 2015