IT37751: CTGGA2177 "UNEXPECTED ERROR DURING RECOVERY STEP (LOAD STORAGE DATA)" ON RESTORE FROM CLOUD OR ARCHIVES

APAR status

• Closed as program error.

Error description

• Using IBM Spectrum Protect Plus, a restore from Archives or
  from Cloud can stop with the message : "Unexpected error during
  recovery step (Load storage data)" for any restore point stored
  on a cloud or cloud archive end point.
  This is an example of job log output of a restore of a
  Microsoft Exchange Database archived on an IBM Spectrum Protect
  Server :
  
  SUMMARY,<timestamp>,CTGGA2398,Starting job for policy
                                onDemandRestore_1234 (ID:<SLAId>)
                                id -> <JobId>. IBM Spectrum
                                Protect Plus version 10.1.8-4083.
  ...
   DETAIL,<timestamp>,1,CTGGL0055,Recovery policy options:
          {sourceType=Exchange
       selectedSource=[<DBName>]
       sourceSnapshot=[<DBName> - <RestorePointTimeStamp>]
          restoreType=ondemand
    restoreSourceType=repository
        restoreSource=ODE0013P
        restoreMethod=Test
          destination=Restore to original instance
  ...
   DETAIL,<timestamp>,CTGGA1137,Loading snapshot backup
                                information
   DETAIL,<timestamp>,CTGGA2185,Load storage data: Failed
                                (0 objects)
    ERROR,<timestamp>,CTGGA2177,Unexpected error during recovery
                                step (Load storage data). Contact
                                support for further assistance.
  
  In the virgo log, we see the restore process stopping when
  validating the Cloud endpoint certificate that is stored on the
  IBM Spectrum Protect host :
  
  [<timestamp>] INFO  .. Recovery job getting from inventory:
                         http://localhost:8082/api/cloud/
                         <CloudEndPointId>
  [<timestamp>] INFO  .. Recovery job getting from inventory:
                         http://localhost:8082/api/identity/key/
                         <SPPUserPerformingRestoreId>
  [<timestamp>] INFO  .. Recovery job getting from inventory:
                         http://localhost:8082/api/security/
                         certificate/<CloudEndPointCertificateId>
  ...
  [<timestamp>] INFO  .. ERROR_STEP_FAILED_WITH_COUNT_STEPNAME
  [<timestamp>] ERROR .. Unexpected error during recovery step
                         (Load storage data). Contact support for
                         further assistance.
  [<timestamp>] INFO  .. Unhandled exception in recovery job
                         java.lang.NullPointerException: null
          at com.syncsort.dp.xsb.restclient.util.HttpUtil.
             replaceHttpsWithHttp(HttpUtil.java:158)
          at com.catalogic.ecx.serviceprovider.recovery.common.
             Util.getRestObject(Util.java:165)
          at com.catalogic.ecx.serviceprovider.recovery.common.
             Util.getRestObject(Util.java:159)
          at com.catalogic.ecx.serviceprovider.recovery.common.
             Util.getRestObject(Util.java:155)
          at com.catalogic.ecx.serviceprovider.recovery.common.
             cloud.CloudProviderUtilImpl.getCertificate
             (CloudProviderUtilImpl.java:110)
          at com.catalogic.ecx.serviceprovider.recovery.common.
             cloud.CloudProviderUtilImpl.getCloudProviderInfo
             (CloudProviderUtilImpl.java:49)
          at ...
  
  The problem happens because the user logged in the IBM Spectrum
  Protect Plus GUI and performing the restore only has a 'View'
  permission to the Certificates.
  That permission should be sufficient to allow a user to access
  the Cloud endpoint certificate in order to perform a restore.
  
  IBM Spectrum Protect Plus Versions Affected:
  IBM Spectrum Protect Plus 10.1.3 and later
  
  Additional Keywords: SPP, SPPLUS, TS005732040, permission,
                       privilege, ssl, certificate
  

Local fix

• Assign the IBM Spectrum Protect Plus user with the additional
  'Edit' permission to certificates or perform the restore with
  a different user having these permissions.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect Plus level 10.1.8                       *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available. This problem is currently *
  * projected to be fixed in IBM Spectrum Protect Plus level     *
  * 10.1.9. Note that this is subject to change at the           *
  * discretion of IBM                                            *
  ****************************************************************
  

Problem conclusion

• This issue is fixed and now it is allowed to have certificate
  access at view level.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• Platform
  

Fix information

• Fixed component name

  SP PLUS

• Fixed component ID

  5737SPLUS

Applicable component levels