• Please help support our sponsors by considering their products and services.
    Our sponsors enable us to serve you with this high-speed Internet connection and fast webservers you are currently using at ADSM.ORG.
    They support this free flow of information and knowledge exchange service at no cost to you.

    Please welcome our latest sponsor Tectrade . We can show our appreciation by learning more about Tectrade Solutions
  • Community Tip: Please Give Thanks to Those Sharing Their Knowledge.

    If you receive helpful answer on this forum, please show thanks to the poster by clicking "LIKE" link for the answer that you found helpful.

  • Community Tip: Forum Rules (PLEASE CLICK HERE TO READ BEFORE POSTING)

    Click the link above to access ADSM.ORG Acceptable Use Policy and forum rules which should be observed when using this website. Violators may be banned from this website. This notice will disappear after you have made at least 3 posts.

Error with GSKit

dcz01

ADSM.ORG Member
#1
Hello togehter,

i have an big problem after upgrading my TSM client from 7.1.6.2 to 7.1.8.4.
Both TSM servers where already upgraded from 7.1.5.200 to 7.1.7.400 because of the GSKit version.
But now i got another greater problem with the servers, so that no database backup is possible and i don't know why...
Can anyone help me please?

Here is some log information:

dsmerror.log
Code:
02/14/2019 11:12:14 ANS1579E GSKit function GSKKM_CreateNewKeyDbEx failed with 32: GSKKM_ERR_CRYPTO
02/14/2019 11:12:14 ANS1835E PASSWORDACCESS is GENERATE, but password needed for server 'TSMMIRROR'.
Either the password is not stored locally, or it was changed at the server.
02/14/2019 11:12:14 ANS1835E PASSWORDACCESS is GENERATE, but password needed for server 'TSMMIRROR'.
Either the password is not stored locally, or it was changed at the server.
02/14/2019 11:12:14 ANS1025E Session rejected: Authentication failure
02/14/2019 11:12:14 ANS1570E Registering this instance of the client acceptor with the server failed. The client acceptor process continues.
02/14/2019 11:13:33 ANS1579E GSKit function GSKKM_CreateNewKeyDbEx failed with 32: GSKKM_ERR_CRYPTO
02/14/2019 11:13:34 ANS2050E TSM needs to prompt for the password but cannot prompt  because the process is running in the background.
02/14/2019 11:13:34 ANS2050E TSM needs to prompt for the password but cannot prompt  because the process is running in the background.
02/14/2019 11:13:34 ANS1029E Communication with the  TSM server is lost.
02/14/2019 11:13:34 ANS1977E Dsmcad schedule invocation was unsuccessful. This command will be tried again in 10 minutes.
TSM client start
Code:
C:\Program Files\TSM\baclient>dsmadmc -id=dczadek
IBM Tivoli Storage Manager
Command Line Administrative Interface - Version 7, Release 1, Level 8.4
(c) Copyright by IBM Corporation and other(s) 1990, 2018. All Rights Reserved.

ANS1463E Unexpected error in cryptography library.
ANS8023E Unable to establish session with server.

ANS8002I Highest return code was 5801.
Activity Log at the server
Code:
17.02.2019 17:01:12     ANR2980E   Database backup terminated TCPIP failure - DB2 sqlcode -2033 sqlerrmc 5801      . (SESSION: 3281, PROCESS: 43)
17.02.2019 17:01:12     ANR1893E   Process 43 for Database Backup completed with a completion state of FAILURE. (SESSION: 3281, PROCESS: 43)
 

moon-buddy

ADSM.ORG Moderator
#2
If your TSM server is at 7.1.7.4, update the node from the TSM server by issuing the command:
Code:
update node <node_name> sslrequired=no
Then open a CLI on the node and issue dsmc (BUT make sure no DSMC process is running. KILL or TERMINATE any running process) to regenerate the password.
 
Last edited:

dcz01

ADSM.ORG Member
#3
@moon-buddy Thank you for your answer.
But these things i already tried before...
I reinstalled in command line the client scheduler and cad, but it doesn't start automatically the service and contacts the server.
When i issue your solution, i get the following error:
Code:
C:\Program Files\TSM\baclient>dsmc
IBM Tivoli Storage Manager
Command Line Backup-Archive Client Interface
  Client Version 7, Release 1, Level 8.4
  Client date/time: 02/19/2019 10:54:19
(c) Copyright by IBM Corporation and other(s) 1990, 2018. All Rights Reserved.

Node Name: S1800EDE
Please enter your user id <S1800EDE>:

Please enter password for user id "S1800EDE": ********

ANS1463E Unexpected error in cryptography library.
 

moon-buddy

ADSM.ORG Moderator
#5
One way to solve this is to update your TSM server to 7.1.8.4 or later so that the GSKit versions are at par.

If you don't want to do this, open a ticket with IBM and they can supply you with new SSL keys that will allow the higher Client version to talk with the lower TSM Server version.
 

dcz01

ADSM.ORG Member
#6
@moon-buddy Well, i opened at the same time a ticket at IBM and we solved the problem after 5 days.
The problem was the client and the fastest solution was to reinstall the client completly.
Now all is solved and i think the GSKit version is corrected now.
 

Advertise at ADSM.ORG

If you are reading this, so are your potential customer. Advertise at ADSM.ORG right now.

UpCloud high performance VPS at $5/month

Get started with $25 in credits on Cloud Servers. You must use link below to receive the credit. Use the promo to get upto 5 month of FREE Linux VPS.

The Spectrum Protect TLA (Three-Letter Acronym): ISP or something else?

  • Every product needs a TLA, Let's call it ISP (IBM Spectrum Protect).

    Votes: 12 15.8%
  • Keep using TSM for Spectrum Protect.

    Votes: 48 63.2%
  • Let's be formal and just say Spectrum Protect

    Votes: 9 11.8%
  • Other (please comement)

    Votes: 7 9.2%

Forum statistics

Threads
31,350
Messages
133,529
Members
21,475
Latest member
sag
Top