A fix is available
APAR status
Closed as program error.
Error description
Sporadic TLS errors can occur when multiple client sessions are running on the same system. The dsmerror.log will show the following: 11/30/2017 08:55:24 ANS1579E GSKit function GSKKM_ImportKeys failed with 17: GSKKM_ERR_DATABASE_INVALID_FILE_TYPE 11/30/2017 08:55:28 ANS1592E Failed to initialize SSL protocol. 11/30/2017 08:55:28 ANS8023E Unable to establish session with server. The client trace will show the following: 11/30/2017 08:55:24.903 [020286] [706877248] : GSKKeymanager.cpp ( 353): GSKKeymanager::lockKeyDb(): successfully locked the file. 11/30/2017 08:55:24.903 [020286] [706877248] : GSKKeymanager.cpp ( 291): EXIT <===== GSKKeymanager::lockKeyDb 11/30/2017 08:55:24.903 [020286] [706877248] : gskkmlib.cpp ( 796): ENTER =====> GSKKMlib::gskkmImportKeys 11/30/2017 08:55:24.917 [020286] [706877248] : gskkmlib.cpp ( 833): GSKKMlib::gskkmImportKeys Import keys failed. Reason(GSKKM_ERR_DATABASE_INVALID_FILE_TYPE) - rc(17) 11/30/2017 08:55:24.916 [020283] [4145211200] : gskit.cpp (2782): GSKit::getKeyDbNames(): Local key database name is '/root/IBM/SpectrumProtect/certs/dsmcert.kdb' 11/30/2017 08:55:24.916 [020283] [4145211200] : gskit.cpp (2698): EXIT <===== GSKit::getKeyDbNames, rc = 0 11/30/2017 08:55:24.916 [020283] [4145211200] : gskit.cpp ( 934): GSKit::DoImportCertificate(): open key db '/root/IBM/SpectrumProtect/certs/dsmcert.kdb'. 11/30/2017 08:55:24.952 [020283] [4145211200] : gskit.cpp ( 949): GSKit::DoImportCertificate(): GSKKM_OpenKeyDb() failed. err=12 This is a timing issue. The client processes call the functions GSKKM_ImportKeys() and GSKKM_OpenKeyDb() at the same time, and the first function returns the error GSKKM_ERR_DATABASE_INVALID_FILE_TYPE, while the second one returns the error GSKKM_ERR_DATABASE_READ. This is a defect within GSKit affecting all platforms. Products affected: IBM Spectrum Protect Backup-Archive Client version 7.1 and 8.1 on all platforms. IBM Spectrum Protect for Virtual Environments: Data Protection for VMware version 7.1 and 8.1 on Microsoft Windows x64 and Linux x86_64 platforms. IBM Spectrum Protect for Virtual Environments: Data Protection for Microsoft Hyper-V version 7.1 and 8.1 on Microsoft Windows x64 platform. If you are using Backup-Archive Client 7.1 and 8.1, refer to APAR IT23993 Note 1: The Backup-Archive Client is a prerequisite to using the Data Protection for VMware version 7.1. In Data Protection for VMware environments, the Backup-Archive Client is also known as the data mover. Note 2: The Backup-Archive Client is a prerequisite to using the Data Protection for Microsoft Hyper-V versions 7.1 till 8.1.2. In Data Protection for Microsoft Hyper-V environments, the Backup-Archive Client is also known as the data mover. If you are using Data Protection for VMware 8.1, refer to APAR IT26568 If you are using Data Protection for Microsoft Hyper-V 8.1.4-8.1.6, refer to APAR IT26574 Initial Impact: Low Additional Keywords: Spectrum Protect; TSM; ANS1579E; GSKit; GSKKM_ImportKeys; GSKKM_OpenKeyDb; GSKKM_ERR_DATABASE_INVALID_FILE_TYPE; GSKKM_ERR_DATABASE_READ
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: * * IBM Spectrum Protect for Virtual Environments: Data * * Protection for VMware version 7.1 and 8.1 on Microsoft * * Windows x64 and Linux x86_64 platforms. * **************************************************************** * PROBLEM DESCRIPTION: * * see ERROR Description * **************************************************************** * RECOMMENDATION: * * This issue is projected to be fixed in the Data Protection * * for VMware version 8.1.6.1 and 8.1.7 on Microsoft Windows * * x64 and Linux x86_64 platforms. * * Note 1: This is subject to change at the discretion of IBM. * ****************************************************************
Problem conclusion
After the fix IBM Spectrum Protect backup-archive client and products which are using IBM Spectrum Protect API don't fail if multiple instances run at the same time.
Temporary fix
Comments
APAR Information
APAR number
IT26568
Reported component name
TSM FOR VE DP V
Reported component ID
5725TVEVM
Reported release
81L
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2018-10-17
Closed date
2018-10-17
Last modified date
2018-10-17
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Modules/Macros
dsm dsmc dsmadmc
Fix information
Fixed component name
TSM FOR VE DP V
Fixed component ID
5725TVEVM
Applicable component levels
R81L PSY
UP
R81W PSY
UP
[{"Line of Business":{"code":"LOB26","label":"Storage"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SS8TDQ","label":"Tivoli Storage Manager for Virtual Environments"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"81L"}]
Document Information
Modified date:
09 September 2021