IBM Support

IT36098: RESTORING COMPRESSED FILES ENCRYPTED WITH DIFFERENT KEYS CAUSES A CRASH WHEN SELECTING A SKIP OPTION ON ENCRYPTKEY PROMPT

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • The problem happens if the following conditions exist:
    
     . Options ENCRYPTKEY SAVE, and COMPRESSION YES are used
     . Different encryption keys were used during backup
     . One or multiple encryption keys are lost, or a file needs to
        be skipped during restore
    
    When restoring a filesystem or a subtree where files were saved
    with different encryption keys, the IBM Spectrum Protect client
    will prompt for the encryption password.
    If one or more encryption keys are lost, it may become
    necessary to choose one of the "Skip" options proposed in the
    client prompt below:
    
      --- User Action is Required ---
      File: /test/filexx requires an encryption key.
    
     Select an appropriate action
     1. Prompt for encrypt key password
     2. Skip this object from decryption
     3. Skip all objects that are encrypted
     A. Abort this operation
     Action [1,2,3,A] :
    
    When chosing option 2 or 3 , the client crashes very quickly
    after that selection is done.
    
    Customer/Support Diagnostics:
      The dump analysis shows the following stack on Windows
      platform:
    
    
     dsmc!cmExpandData+0x32a
     dsmc!ExpUtilLzw::cmExpandData+0x72
     dsmc!rcWriteFile+0x7c7
     dsmc!RestoreFiles+0x786
     dsmc!nqrNoQryRestore+0x52c
     dsmc!DccRestoreConsumer::ProcessRequest+0xa88
     dsmc!DccRestoreConsumer::HandleQueue+0x7c7
     dsmc!DccRestoreConsumer::Run+0x156
     dsmc!DccRestoreConsumer::DoThread+0x1ed
     dsmc!startThread2+0xd1
     dsmc!startThread+0x117
     ucrtbase!thread_start<unsigned int (__cdecl*)
     kernel32!BaseThreadInitThunk+0x14
     ntdll!RtlUserThreadStart+0x21
    
    IBM Spectrum Protect Versions Affected: All V7.1 and V8.1 on
       all supported client platforms
    
    Initial Impact: Low
    
    Additional Keywords:    TS005037007 TSM core
    

Local fix

  • Restore separately only the files or subtree for which the
      encryption key is known.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * Backup-archive client versions 7.1 - 8.1 running on all      *
    * platforms.                                                   *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * See ERROR DESCRIPTION                                        *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * This issue is projected to be fixed in the backup-archive    *
    * client version 8.1.13 on all platforms.                      *
    * Note that this is subject to change at the discretion of     *
    * IBM.                                                         *
    ****************************************************************
    

Problem conclusion

  • The code has been fixed so the client correctly save the 32K
    buffer (used in the expanding engine)
    in the case of selecting '2. Skip this object from decryption'
    or '3. Skip all objects that are encrypted' actions.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT36098

  • Reported component name

    TSM CLIENT

  • Reported component ID

    5698ISMCL

  • Reported release

    81W

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2021-03-03

  • Closed date

    2021-04-26

  • Last modified date

    2021-04-26

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    TSM CLIENT

  • Fixed component ID

    5698ISMCL

Applicable component levels

[{"Line of Business":{"code":"LOB26","label":"Storage"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGSG7","label":"Tivoli Storage Manager"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"81W"}]

Document Information

Modified date:
27 April 2021