Fixes are available
APAR status
Closed as Permanent restriction.
Error description
Error Description: When trying to restore an encrypted VSS backup by using the IBM Spectrum Protect for Mail, Data Protection for MS Exchange or the IBM Spectrum Protect for Databases, Data Protection for MS SQL "restorefiles" command, if the ENCRYPTKEY option is set to SAVE (which is not a recommended value for Data Protection for SQL and Exchange operations) and the encryption key is not currently stored in the registry, it may fail with error "ANS1235E (RC-1) An unknown system error has occurred from which TSM cannot recover." Customer/L2 Diagnostics (if applicable): In the dsm agent trace, the messages below may be seen which is misleading: 07/22/2016 15:07:54.788 [004940] [1764] : ..\..\common\com\commtcp.cpp(2523): TcpFlush: error 10053 during send. 07/22/2016 15:07:54.788 [004940] [1764] : ..\..\common\com\commtcp.cpp(2634): ANS1006I TCP/IP write error on socket = 1280, errno = 10053, reason : An established connection was aborted by the software in your host machine. . then it's followed by: 07/22/2016 15:07:52.767 [004940] [3492] : ..\..\common\winnt\psPasswordFile.cpp( 588): ReadPswdFromRegistry(): getRegValue(): ERROR_FILE_NOT_FOUND 07/22/2016 15:07:52.767 [004940] [3492] : ..\..\common\winnt\psPasswordFile.cpp( 620): ReadPswdFromRegistry(): RegOpenPathEx(): Win32 RC=2 07/22/2016 15:07:52.778 [004940] [3492] : ..\..\common\ba\restcore.cpp(2829): error (16) obtaining encryption key from notify function 07/22/2016 15:07:52.778 [004940] [3492] : ..\..\common\ba\restproc.cpp(9722): error 16 From rcInitDataTransformer. 07/22/2016 15:07:52.789 [004940] [3492] : ..\..\common\thrd\thrdmgr.cpp( 912): Thread 1st Restore Consumer exiting, result =16 IBM Spectrum Protect Client Versions Affected: All Versions on Windows platform Initial Impact: Low/Medium/High Medium Additional Keywords: TSM Tivoli Storage Manager
Local fix
Use the ENCRYPTKEY value that is recommended by Data Protection User's guides, i.e. GENERATE or Use the Backup/Archive client to GUI to access the restore data, which will prompt for the encryption key. Enter the encryption key value so that it will be saved in the window?s registry. Thereafter the Data Protection restorefiles command should be able to process successfully.
Problem summary
**************************************************************** * USERS AFFECTED: * * Windows DP SQL clients restoring the encrypted data. * **************************************************************** * PROBLEM DESCRIPTION: * * See ERROR DESCRIPTION * **************************************************************** * RECOMMENDATION: * ****************************************************************
Problem conclusion
This is a limitation of the current implementation. The workaround is to use the backup-archive client to back up a small file using the ENCRYPTKEY SAVE and INCLUDE.ENCRYPT options and the node name and encryption key of the Data Protection node whose data you are restoring. This will save the encryption password key in the registry in encrypted form. Then try the Data Protection application restore operation again.
Temporary fix
Comments
APAR Information
APAR number
IT18358
Reported component name
TSM CLIENT
Reported component ID
5698ISMCL
Reported release
71W
Status
CLOSED PRS
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2016-12-19
Closed date
2017-03-07
Last modified date
2017-03-07
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Applicable component levels
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGSG7","label":"Tivoli Storage Manager"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"71W","Line of Business":{"code":"LOB26","label":"Storage"}}]
Document Information
Modified date:
11 January 2022