TSM Systemstate backup - ANS1463E Cryptography Library

[kslztc]

Hi,

We have a few TSM servers, where the TSM baclient is failing to perform a systemstate backup.
The servers are all running Windows Server 2016 with TSM Server 8.1.1.0 installed. The baclient versions installed on the TSM servers, is a mix of 8.1.0.0 and 8.1.0.2.

The exact error code:
ANS1228E Sending of object '\\?\volume{d8776c16-0000-0000-0000-100000000000}\Boot\bg-BG\bootmgr.exe.mui' failed.
ANS1463E Unexpected error in cryptography library.

ANS1228E Sending of object '\\?\volume{d8776c16-0000-0000-0000-100000000000}\Boot\BOOTSTAT.DAT' failed.
ANS1463E Unexpected error in cryptography library.

ANS1228E Sending of object '\\?\volume{d8776c16-0000-0000-0000-100000000000}\Boot\bootvhd.dll' failed.
ANS1463E Unexpected error in cryptography library.

ANS1228E Sending of object '\\?\volume{d8776c16-0000-0000-0000-100000000000}\Boot\cs-CZ\bootmgr.exe.mui' failed.
ANS1463E Unexpected error in cryptography library.

There are a long list of files, but the error code is the same for them all...

Ive done the following, trying to resolve the issue:

1.
Reinstalled the C++ prerequisites

2.
Added TESTFLAG NOAES to dsm.opt - even that we dont use encryption for the clients...

3.
Reinstalled the agent several times...


Also performed a backup with Windows Server backup, and verified that the files listed in dsmerror.log, have the correct NTFS security settings (compared with another WS2016 server, where TSM is working).