IT43758: CTGGE1049 "THE TARGET PRINCIPAL NAME IS INCORRECT" ODBC DRIVER MESSAGE ON MICROSOFT SQL LOG BACKUP

APAR status

• Closed as program error.

Error description

• The IBM Spectrum Protect Plus Microsoft SQL log backup can stop
  with the following job log messages :
  
  SUMMARY,..,CTGGA2398,Starting job for policy sql_SQL_S_Bronze
                       (ID:<SLAID>). id -> <JobId>. IBM Spectrum
                       Protect Plus version 10.1.13-405.
  ...
     INFO,..,CTGGA3149,[<SQLHostAddress>] [<timestamp>] Starting
                       logbackup command.
  ...
    ERROR,..,CTGGE1049,[<SQLHostAddress>] The log backup failed
                       for database [<DBName>] on instance
                       [<instanceName>] error [ERROR [08001]
                       [Microsoft][ODBC Driver 18for SQL Server]
                       SSL Provider: The target principal name is
                       incorrect.].
    ERROR,..,CTGGE1096,[<SQLHostAddress>] An issue was encountered
                       with share management for database
                       [<DBName>] on instance [<instanceName>].
  ...
     INFO,..,CTGGA3150,[<SQLHostAddress>] [<timestamp>] Ending
                       logbackup command.
  ...
     WARN,..,CTGGA3277,[<SQLHostAddress>] Log backup status was
                       reported as failed: null
    ERROR,..,CTGGA3276,Log backup failed for database
                       <SQLHostAddress>-><instanceName>-><DBName>:
                       Exception of type 'SqlLogBackup.
                       GenericCifsControllerException' was thrown.
  
  This happens when encryption is enabled on the SQL server.
  The requirements "Microsoft SQL Server database backup and
  restore requirements" do indicate this encryption possibility :
  "If Force Encryption option is enabled against SQL Server
   Database Engine, a valid certificate must be provisioned, and
   trusted."
  Microsoft reference:
  https://docs.microsoft.com/en-us/sql/database-engine/configure-w
  indows/enable-encrypted-connections-to-the-database-engine?view=
  sql-server-ver16"
  
  Encryption can also be active by default on some SQL servers
  without further configuration which results in an invalid
  certificate information and above error.
  
  IBM Spectrum Protect Plus Versions Affected:
  IBM Spectrum Protect Plus 10.1.x
  
  Additional Keywords: SPP, SPPLUS, TS012722050
  

Local fix

• Generate a valid certificate for the SQL server or disable
  encryption
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect Plus level 10.1.x.                      *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available. This problem is currently *
  * projected to be fixed in IBM Spectrum Protect Plus level     *
  * 10.1.15. Note that this is subject to change at the          *
  * discretion of IBM                                            *
  ****************************************************************
  

Problem conclusion

• This problem has been fixed so that SQL log backup completed
  regardless of SQL server certificate validation configuration.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SP PLUS

• Fixed component ID

  5737SPLUS

Applicable component levels