• Please help support our sponsors by considering their products and services.
    Our sponsors enable us to serve you with this high-speed Internet connection and fast webservers you are currently using at ADSM.ORG.
    They support this free flow of information and knowledge exchange service at no cost to you.

    Please welcome our latest sponsor Tectrade . We can show our appreciation by learning more about Tectrade Solutions
  • Community Tip: Please Give Thanks to Those Sharing Their Knowledge.

    If you receive helpful answer on this forum, please show thanks to the poster by clicking "LIKE" link for the answer that you found helpful.

  • Community Tip: Forum Rules (PLEASE CLICK HERE TO READ BEFORE POSTING)

    Click the link above to access ADSM.ORG Acceptable Use Policy and forum rules which should be observed when using this website. Violators may be banned from this website. This notice will disappear after you have made at least 3 posts.

??? Dsmserv Restore DB Password ???

inthesun

ADSM.ORG Member
#1
There are a few security enhancements that everyone needs to be aware of at V7.1.8, 8.1.2, and 8.1.3 levels.

Please review the following material and test in a test environment (including a dsmserv restore DB) before upgrading your production systems to V7.1.8, 8.1.2, and 8.1.3 levels to make sure that you are ready for the SSL/TLS changes. If you have already upgraded to these levels, then please keep reading the following information.

Please review the product documentation, including the following topics:

Protect your storage environment with an improved security protocol
https://www.ibm.com/support/knowledgecenter/SSEQVQ_8.1.2/srv.common/r_techchg_srv_sec_812.html

Optimize security with the automatically generated master encryption key
https://www.ibm.com/support/knowledgecenter/SSEQVQ_8.1.2/srv.common/r_techchg_srv_ekey_812.html

For the latest information about security updates, see:
http://www.ibm.com/support/docview.wss?uid=swg22004844

Per the above "master encryption key" documentation, you need to set a password to protect the master encryption key during DB backup.

Following an upgrade, BACKUP DB will fail until a password has been specified on either the SET DBRECOVERY command or the BACKUP DB command itself.

Do not forget the password -- the master encryption key cannot be restored without it!

Per the following document link, the default password is the password of the SET DBRECOVERY setting: https://www.ibm.com/support/knowledgecenter/SSGSG7_7.1.8/srv.reference/r_cmd_db_backup.html

So, if you don't remember what you set, then do a new SET DBRECOVERY to set a new password.

Keep this password in a safe location, so that you can always recover your master key.

If your Q DB F=D output shows "Protect Master Encryption Key = No.", then the master key is not being backed up by the Backup DB process. With this set to NO, the Backup DB is not protecting the Master Key in case there is a disaster and you must do a Restore DB. In this case, the DB will be restored, but without the Master Key.

Please follow the above steps and keep your password in a offsite secure location that can be accessed by your team during a recovery of the database.
 

Advertise at ADSM.ORG

If you are reading this, so are your potential customer. Advertise at ADSM.ORG right now.

UpCloud high performance VPS at $5/month

Get started with $25 in credits on Cloud Servers. You must use link below to receive the credit. Use the promo to get upto 5 month of FREE Linux VPS.

The Spectrum Protect TLA (Three-Letter Acronym): ISP or something else?

  • Every product needs a TLA, Let's call it ISP (IBM Spectrum Protect).

    Votes: 9 16.7%
  • Keep using TSM for Spectrum Protect.

    Votes: 31 57.4%
  • Let's be formal and just say Spectrum Protect

    Votes: 9 16.7%
  • Other (please comement)

    Votes: 5 9.3%

Forum statistics

Threads
31,149
Messages
132,620
Members
21,321
Latest member
denisnetland
Top