IBM Support

IT18358: DSMAGENT MAY PRODUCE INCORRECT MESSAGE DURING DATA PROTECTION FOR SQL/EXCHANGE RESTORE WHEN ENCRYPTKEY SAVE IS USED

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as Permanent restriction.

Error description

  • Error Description:
    When trying to restore an encrypted VSS backup by using the IBM
    Spectrum Protect for Mail, Data Protection for MS Exchange or
    the IBM Spectrum Protect for Databases, Data Protection for MS
    SQL  "restorefiles" command,  if the ENCRYPTKEY option is set to
    SAVE (which is not a recommended value for Data Protection for
    SQL and Exchange operations) and the encryption key is not
    currently stored in the registry,  it may fail with error
    "ANS1235E (RC-1)   An unknown system error has occurred from
    which TSM cannot recover."
    
    
    Customer/L2 Diagnostics (if applicable):
    In the dsm agent trace, the messages below may be seen which is
    misleading:
    07/22/2016 15:07:54.788 [004940] [1764] :
    ..\..\common\com\commtcp.cpp(2523): TcpFlush: error 10053 during
    send.
    07/22/2016 15:07:54.788 [004940] [1764] :
    ..\..\common\com\commtcp.cpp(2634): ANS1006I TCP/IP write error
    on socket = 1280, errno = 10053, reason : An established
    connection was aborted by the software in your host machine.
    .
    then it's followed by:
    07/22/2016 15:07:52.767 [004940] [3492] :
    ..\..\common\winnt\psPasswordFile.cpp( 588):
    ReadPswdFromRegistry(): getRegValue(): ERROR_FILE_NOT_FOUND
    07/22/2016 15:07:52.767 [004940] [3492] :
    ..\..\common\winnt\psPasswordFile.cpp( 620):
    ReadPswdFromRegistry(): RegOpenPathEx(): Win32 RC=2
    07/22/2016 15:07:52.778 [004940] [3492] :
    ..\..\common\ba\restcore.cpp(2829): error (16) obtaining
    encryption key from notify function
    07/22/2016 15:07:52.778 [004940] [3492] :
    ..\..\common\ba\restproc.cpp(9722): error 16 From
    rcInitDataTransformer.
    07/22/2016 15:07:52.789 [004940] [3492] :
    ..\..\common\thrd\thrdmgr.cpp( 912): Thread 1st Restore Consumer
    exiting, result =16
    
    IBM Spectrum Protect Client  Versions Affected:
    All Versions on Windows platform
    
    Initial Impact: Low/Medium/High
    Medium
    
    Additional Keywords:
    TSM Tivoli Storage Manager
    

Local fix

  • Use the ENCRYPTKEY value that is recommended by Data Protection
    User's guides, i.e. GENERATE
    
    or
    
    Use the Backup/Archive client to GUI to access the restore data,
    which will prompt for the encryption key.  Enter the encryption
    key value so that it will be saved in the window?s registry.
    Thereafter the Data Protection restorefiles command should be
    able to process successfully.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * Windows DP SQL clients restoring the encrypted data.         *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * See ERROR DESCRIPTION                                        *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    

Problem conclusion

  • This is a limitation of the current implementation. The
    workaround is to use the backup-archive client to back up a
    small file using the ENCRYPTKEY SAVE and INCLUDE.ENCRYPT options
    and the node name and encryption key of the Data Protection node
    whose data you are restoring. This will save the encryption
    password key in the registry in encrypted form. Then try the
    Data Protection application restore operation again.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT18358

  • Reported component name

    TSM CLIENT

  • Reported component ID

    5698ISMCL

  • Reported release

    71W

  • Status

    CLOSED PRS

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-12-19

  • Closed date

    2017-03-07

  • Last modified date

    2017-03-07

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGSG7","label":"Tivoli Storage Manager"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"71W","Line of Business":{"code":"LOB26","label":"Storage"}}]

Document Information

Modified date:
11 January 2022