IBM Support

Troubleshooting TM1 data encryption with the TM1Crypt tool

Troubleshooting


Problem

Data encryption is an optional feature in TM1 that can help protect data. Using encryption, even if the data files themselves are taken, they cannot be read without the proper encryption key. This process can be done by following the configuration instructions here:
It is recommended to test all of the following processes before implementing this in a production environment:
- Encrypting the data
- Backing up the encrypted data
- Restoring backups of the encrypted data
- Decrypting the data
It is important that it is understood how to successfully complete the above processes before moving forward with this configuration on your data, or else you might inadvertently lock out your own data. Backups can typically be done by simply copying the entire data folder and storing it in a compressed archive. However, you might find that trying to restore from this backup receives an error such as "Error determining model encryption" in the tm1server.log file. In that case, the instance will not start. Common causes for this problem are:
- Compressing the data was done by using an unsupported method, causing the data files to be altered in some way which renders them unrecognizable to the encryption program.
- The key folder was not backed up properly and is unavailable to unlock the data encryption.
In the first case, there might be no recovering from the corrupted backup. A new backup would need to be taken by using a standard compression method such as a 7zip or .zip file. It is also important to note that this process is incompatible with the tm1xfer tool, so these tools should not be used in tandem. Otherwise, for backing up the key file, the encryption setup documentation details how to store this properly. It is important this file is always retained with up-to-date keys, and should be stored where it can be retrieved in a situation where restoring a backup is necessary.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSD29G","label":"IBM Planning Analytics"},"ARM Category":[{"code":"a8m3p000000LQtUAAW","label":"Planning Analytics"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
07 June 2022

UID

ibm16593045