IT21200: BACKUP OF SYSTEMSTATE CAN ERROR WITH ANS1228E/ANS4987E FOR 'BCD' OBJECT IF 'BCD' IS IN LOWERCASE

IBM Spectrum Protectâ„¢ Client 8.1.4 Downloads and READMEs
IBM Spectrum Protect client 7.1.8.x interim fix downloads

APAR status

• Closed as program error.

Error description

• When performing backup of systemstate on an EFI-based Windows
  platform (2008, 2012 R2 and 2016), the processing of 'bcd'
  object can report the following error:
  
  ANS1228E Sending of object
  '\\?\GLOBALROOT\Device\HarddiskVolume1\EFI\Microsoft\Boot\bcd'
  failed.
  ANS4987E Error processing
  '\\?\GLOBALROOT\Device\HarddiskVolume1\EFI\Microsoft\Boot\bcd':
  the object is in use by another process
  ANS1802E Incremental backup of  'ABCDE\SystemState\NULL\System
  State\SystemState' finished with X failure(s)
  
  if 'bcd' object is in lowercase.
  
  If it is seen as 'BCD' in uppercase the error will not occur.
  
  
  A 'service' trace will show mesages like:
  
   05/04/2017 11:42:31.843 [004124] [4412] :
  ..\..\common\ba\txncon.cpp(4683): PrivFlush: Examining [0]
  '\\?\GLOBALROOT\Device\HarddiskVolume1' '\EFI\Microsoft' '\Boot'
  retries: 2 rc: 0 state: 0002
  05/04/2017 11:42:31.843 [004124] [4412] :
  ..\..\common\ba\txncon.cpp(4683): PrivFlush: Examining [1]
  '\\?\GLOBALROOT\Device\HarddiskVolume1' '\EFI\Microsoft\Boot'
  '\bcd'
  retries: 5 rc: 933 state: 0020
  Failed
  \\?\GLOBALROOT\Device\HarddiskVolume1\EFI\Microsoft\Boot\bcd
  05/04/2017 11:42:31.843 [004124] [4412] :
  ..\..\common\ba\DccTaskletStatus.cpp(2318):      Failed rc = 933
  05/04/2017 11:42:31.843 [004124] [4412] :
  ..\..\common\ba\DccRCMap.cpp(
  770): Enter DccRCMap::ccMap: rc = 933
  
  0005/04/2017 11:42:31.843 [004124] [4776] :
  ..\..\common\fio\ntfileio.cpp(8726): fioPathCase2(\ \): Entry.
  290005 5C5C3F5C05/04/2017 11:42:31.843 [004124] [4776] :
  ..\..\common\fio\ntfileio.cpp(8765): fioPathCase2: Casing
  '\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy6\Windows\system3
  2\CatRoo
  t\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}'
   474C4F42 05/04/2017 11:42:31.843 [004124] [4776] :
  ..\..\common\fio\ntfileio.cpp(10740):
  NameCase(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy6\Windows
  Windows): Entry.
  414C524F 4F545C44 65766963 655C4861 72646469
  736B566F 6C756D65 31001700 055C4546 495C4D69 63726F73 6F66745C
  426F6F74
  00080005 5C626364
  msgText             : ANS4987E Error processing
  '\\?\GLOBALROOT\Device\HarddiskVolume1\EFI\Microsoft\Boot\bcd':
  the
  object is in use by another process
  
  
  
  
    | MDVPARTL 7.1.6.3-TIV_5698MCL | (IT13841)
  
  IBM Spectrum Protect versions affected:
  Client  7.1.6.3 and higher on EFI-based  Windows 2008 and
  Windows 2012 (R2), Windows 2016.
  Client 8.1.x on  EFI-based  Windows 2012 (R2) and  Windows 2016.
  
  
  Initial Impact: Low
  
  Additional Keywords:  TSM IBM Spectrum Protect bcd lowercase
  uppercase casing
  

Local fix

• To rename bcd (lowercase) to BCD (uppercase) , do:
  
  a. Boot the current system into repair mode (choose the option
  to use the command line)
  b. Mount the hidden volume to a drive letter using diskpart
        1). DISKPART> list volume
        Locate the volume number of the FAT32 system volume.
        2). DISKPART> select volume 3
        3). DISKPART> assign letter=w                     (assign
  a letter not
  
  in use by current drives, w is used as an example)
  c. Use the command attrib -h -s bcd
  d. Issue the command rename bcd BCD
  e. Issue the command dir bcd to confirm the name is upper case
  f. Issue the command attrib +h +s bcd
  g. Reboot back to normal mode
  h. Retry the backup again
  
  
  (to unassign the letter, do:
  DISKPART> remove letter=w
  without a reboot needed)
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * The Windows platform Backup-Archive clients 8.1.0.0          *
  * versions                                                     *
  * Backup-archive client version 8.1.0.0 running on Microsoft   *
  * Windows platform                                             *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See Error Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available. This problem is currently *
  * projected to be fixed in levels  8.1.4.                      *
  * Note that this is subject to change at the discretion of     *
  * IBM.                                                         *
  ****************************************************************
  

Problem conclusion

• Client  will not generate the  ANS1228E error message when
  restoring the SYSTEMSTATE for EFI-based computers not depending
  if the BCD store is uppercase or lowercase.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TSM CLIENT

• Fixed component ID

  5698ISMCL

Applicable component levels

• R81W PSY

     UP