Error with GSKit

[dcz01]

Hello togehter,

i have an big problem after upgrading my TSM client from 7.1.6.2 to 7.1.8.4.
Both TSM servers where already upgraded from 7.1.5.200 to 7.1.7.400 because of the GSKit version.
But now i got another greater problem with the servers, so that no database backup is possible and i don't know why...
Can anyone help me please?

Here is some log information:

dsmerror.log

02/14/2019 11:12:14 ANS1579E GSKit function GSKKM_CreateNewKeyDbEx failed with 32: GSKKM_ERR_CRYPTO
02/14/2019 11:12:14 ANS1835E PASSWORDACCESS is GENERATE, but password needed for server 'TSMMIRROR'.
Either the password is not stored locally, or it was changed at the server.
02/14/2019 11:12:14 ANS1835E PASSWORDACCESS is GENERATE, but password needed for server 'TSMMIRROR'.
Either the password is not stored locally, or it was changed at the server.
02/14/2019 11:12:14 ANS1025E Session rejected: Authentication failure
02/14/2019 11:12:14 ANS1570E Registering this instance of the client acceptor with the server failed. The client acceptor process continues.
02/14/2019 11:13:33 ANS1579E GSKit function GSKKM_CreateNewKeyDbEx failed with 32: GSKKM_ERR_CRYPTO
02/14/2019 11:13:34 ANS2050E TSM needs to prompt for the password but cannot prompt  because the process is running in the background.
02/14/2019 11:13:34 ANS2050E TSM needs to prompt for the password but cannot prompt  because the process is running in the background.
02/14/2019 11:13:34 ANS1029E Communication with the  TSM server is lost.
02/14/2019 11:13:34 ANS1977E Dsmcad schedule invocation was unsuccessful. This command will be tried again in 10 minutes.

TSM client start

C:\Program Files\TSM\baclient>dsmadmc -id=dczadek
IBM Tivoli Storage Manager
Command Line Administrative Interface - Version 7, Release 1, Level 8.4
(c) Copyright by IBM Corporation and other(s) 1990, 2018. All Rights Reserved.

ANS1463E Unexpected error in cryptography library.
ANS8023E Unable to establish session with server.

ANS8002I Highest return code was 5801.

Activity Log at the server

17.02.2019 17:01:12     ANR2980E   Database backup terminated TCPIP failure - DB2 sqlcode -2033 sqlerrmc 5801      . (SESSION: 3281, PROCESS: 43)
17.02.2019 17:01:12     ANR1893E   Process 43 for Database Backup completed with a completion state of FAILURE. (SESSION: 3281, PROCESS: 43)

 

[moon-buddy]

If your TSM server is at 7.1.7.4, update the node from the TSM server by issuing the command:

update node <node_name> sslrequired=no

Then open a CLI on the node and issue dsmc (BUT make sure no DSMC process is running. KILL or TERMINATE any running process) to regenerate the password.

 

[dcz01]

@moon-buddy Thank you for your answer.
But these things i already tried before...
I reinstalled in command line the client scheduler and cad, but it doesn't start automatically the service and contacts the server.
When i issue your solution, i get the following error:

C:\Program Files\TSM\baclient>dsmc
IBM Tivoli Storage Manager
Command Line Backup-Archive Client Interface
  Client Version 7, Release 1, Level 8.4
  Client date/time: 02/19/2019 10:54:19
(c) Copyright by IBM Corporation and other(s) 1990, 2018. All Rights Reserved.

Node Name: S1800EDE
Please enter your user id <S1800EDE>:

Please enter password for user id "S1800EDE": ********

ANS1463E Unexpected error in cryptography library.

 

[dcz01]

What i forget... the sslrequired=no parameter i set already before.

 

[moon-buddy]

One way to solve this is to update your TSM server to 7.1.8.4 or later so that the GSKit versions are at par.

If you don't want to do this, open a ticket with IBM and they can supply you with new SSL keys that will allow the higher Client version to talk with the lower TSM Server version.

 

[dcz01]

@moon-buddy Well, i opened at the same time a ticket at IBM and we solved the problem after 5 days.
The problem was the client and the fastest solution was to reinstall the client completly.
Now all is solved and i think the GSKit version is corrected now.