ANS1512E Scheduled event failed with Return code = 12.

[toneysamuel002]

I am getting schedule failed with rc=12 msg, i cant see any failed fie in dsmsched.log file but can see the below error in dsmerror.log

ANS1579E GSKit function GSKKM_ValidateCert failed with 47: GSKKM_ERR_VALIDATION_KEY_VALIDITY
ANS1512E Scheduled event 'RMAN_DB_BKP' failed. Return code = 12.

 

[marclant]

RC=12 just means the backup fails. It doesn't mean it failed to backup a specific file. It could have failed to start the backup altogether, which appears to be the case with this error:

ANS1579E GSKit function GSKKM_ValidateCert failed with 47: GSKKM_ERR_VALIDATION_KEY_VALIDITY

There's plenty of Google hits for ANS1579E, but none for ANS1579E GSKit function GSKKM_ValidateCert.

Is this a new setup that never work or an existing setup that started failing all of a sudden?
.

 

[toneysamuel002]

it was working properly almost after a month it started giving this error.
the problem is only in one server other systems are working properly

 

[marclant]

By the wording, sounds like it's not able to validate the certificate. You may want to try re-adding the certificate.

This technote is for a bad date in the certificate, but the resolving section at the bottom will re-add the certificate:
https://www.ibm.com/support/pages/connection-fails-gskerrorbaddate-401

 

[toneysamuel002]

By the wording, sounds like it's not able to validate the certificate. You may want to try re-adding the certificate.

This technote is for a bad date in the certificate, but the resolving section at the bottom will re-add the certificate:
https://www.ibm.com/support/pages/connection-fails-gskerrorbaddate-401

i have done re-adding the certificate but getting the same error

 

[YASSINE]

ANS1579E GSKit function GSKKM_ValidateCert failed with 47: GSKKM_ERR_VALIDATION_KEY_VALIDITY

On windows :

1. Go to >
C:\ProgramData\Tivoli\TSM\baclient\Nodes\"NODENAME"

2. Delete all this files >

spclicert.crl
spclicert.kdb
spclicert.rdb
spclicert.sth

3. Restart TSM services

You must do that for all the nodes on your server.

Work fine for me.

 

[LED888]

Taking Yassine solution a step further.

On the Spectrum Protect Server side change to transitional :
UPDATE NODE <node_name> SESSIONSEC=TRANSITIONAL

To re-create the SSL certificates , we recommend performing the below steps:
1. Obtain the IBM Spectrum Protect server self-signed certificate (cert256.arm). The certificate file is stored on the server workstation in the server instance directory, for example, /opt/tivoli/tsm/server/bin/cert256.arm.

2. Copy this certificate into the Spectrum Protect client installation directory

3. Stop any IBM Spectrum Protect administrator and backup-archive clients that are running on the affected system.

4. From the Spectrum Protect client installation directory, remove the following files, if they exist:
dsmcert.crl
dsmcert.idx
dsmcert.kdb
dsmcert.rdb
dsmcert.sth

5. From the Spectrum Protect client installation directory , run the dsmcert command again to import the cert256.arm file with the correct server name. For example:
dsmcert -add -server SERVER1 -file cert256.arm (in this example SERVER1 is the name of the Spectrum Protect Server)
The dsmcert command writes new dsmcert.* files.

6. Run the dsmc q session command to check connectivity.

The above is from the following techdoc 6238326
Backup fails with "ANS1579E GSKit function gsk_secure_soc_init failed with 406: GSK_ERROR_IO"


Good Luck,
Sias