It looks like there is something wrong with the SSL communication.

[Bharanij]

hi guys,

i have raise case with ibm and they have sent below link i dont understant what to do next some pls explain it pls

Make sure you have it set :
https://www.ibm.com/support/knowledgecenter/en/SSEQVQ_8.1.4/client/t_cfg_ssl.html

Also :
https://www.ibm.com/support/knowledgecenter/SSEQVQ_8.1.4/client/t_cfg_ssl_symb_lnk_gskit.html


Rdgsd,
Mr.JBD

 

[marclant]

I'd recommend you ask the person that forwarded you those documents. We don't have any context and don't know why these recommendations were made.

 

[Bharanij]

it was ibm support team shared the link i have issue in ssl with client and server

 

[marclant]

it was ibm support team

I know, and that's who you should ask your questions to as they have the full context, we don't.

 

[blankgap]

So what's the issue? Please post the activity log and/or tsm_error.log

 

[Bharanij]

06/14/18 12:43:10 ANS1592E Failed to initialize SSL protocol.
06/14/18 12:43:30 ANS1579E GSKit function gsk_attribute_set_enum GSK_SSL_EXTN_EXTENDEDMASTERSECRET_CLIENT_ENABLE true failed with 701: GSK_ATTRIBUTE_INVALID_ID
06/14/18 12:43:30 ANS9020E A session could not be established with a IBM Spectrum Protect server or client agent. The return code is -362.
06/14/18 12:43:31 ANS1579E GSKit function gsk_attribute_set_enum GSK_SSL_EXTN_EXTENDEDMASTERSECRET_CLIENT_ENABLE true failed with 701: GSK_ATTRIBUTE_INVALID_ID
06/14/18 12:43:31 ANS9020E A session could not be established with a IBM Spectrum Protect server or client agent. The return code is -362.
06/14/18 12:43:31 ANS1579E GSKit function gsk_attribute_set_enum GSK_SSL_EXTN_EXTENDEDMASTERSECRET_CLIENT_ENABLE true failed with 701: GSK_ATTRIBUTE_INVALID_ID
06/14/18 12:43:31 ANS9020E A session could not be established with a IBM Spectrum Protect server or client agent. The return code is -362.
06/14/18 12:43:31 ANS1579E GSKit function gsk_attribute_set_enum GSK_SSL_EXTN_EXTENDEDMASTERSECRET_CLIENT_ENABLE true failed with 701: GSK_ATTRIBUTE_INVALID_ID
06/14/18 12:43:31 ANS9020E A session could not be established with a IBM Spectrum Protect server or client agent. The return code is -362.
06/14/18 12:43:31 ANS1592E Failed to initialize SSL protocol.
06/14/18

 

[Mita201]

Yes, this is the problem with SSL, but we still need the context. Something like "I have ISP/TSM server, version XXX, and then, I have installed/upgraded client of type (BA, TDP, API)
It used to vork, but now it doesn't"

and so on. Can you do it?

 

[Bharanij]

server :- 8.1.4.0
client :- ba 8.1.4.0
api 8.1.4.0
tdp 8.1.40

all new setup no upgrade

 

[Mita201]

I believe that you have described problem when you attempt to start the BA client.
Is this correct?
Have you registered node on the server?
Have you configured the client properly?
What OS is client installed on?
What exact operation you are trying to execute when the problem appears?

 

[Bharanij]

yes every thing is ok but iam getting issue after read many site i tried some changes now i need to wait to see it is working or not

 

[Jackal]

Are you using self signed certificates or one that is signed by a certificate authority?

 

[Bharanij]

sorry i dont understand and i think i have done nothing like that

 

[ILCattivo]

In certain environments that I support I have had the exact same server & client versions talking to each other via SSL and have not experienced the issues highlighted.

So long as the methods for SSL communications between 8.1.4 Servers and 8.1.4 clients are followed then there shouldn't be any problems..

- SSL TCPPort defined on the ISP Server (dsmserv.opt) & open on any network/local firewalls between server and clients
- Certificate copied from ISP Server and imported onto client (cert256.arm)
- Same SSL TCPPort defined on the client. (dsm.opt)