Veritas-bu

Re: [Veritas-bu] KMS encryption

2010-04-01 15:15:00
Subject: Re: [Veritas-bu] KMS encryption
From: "Sedeora, Surjit S Mr CTR USA USA" <surjit.sedeora AT us.army DOT mil>
To: "Adams, Dwayne" <AdamsDC AT medsch.ucsf DOT edu>
Date: Thu, 01 Apr 2010 15:14:49 -0400
Dwayne,
        This happens when RObot Device host is not the true EMM server.  you can determine the true EMM server by executing nbemmcmd -listhosts (the top host will be the true EMM server).
Thank you
Surjit Sedeora
Sr. Systems Engineer
NGIT

Adams, Dwayne wrote:

Scott,

 

1343 is a LTO4 tape.  I just made the change and tested.  I set one of my LTO4 drives to HCART, created a new HCART Storage Unit, changed the policy to use that storage unit, deleted the tapes and ran an inventory as HCART to the Scratch Pool.  Same outcome.

 

4/1/2010 10:11:01 AM - estimated 0 kbytes needed

4/1/2010 10:11:05 AM - started process bpbrm (3608)

4/1/2010 10:11:17 AM - connecting

4/1/2010 10:11:18 AM - connected; connect time: 00:00:01

4/1/2010 10:11:19 AM - mounting 001343

4/1/2010 10:11:54 AM - Error bptm(pid=4024) FREEZING media id 001343, Encryption unavailable for an ENCR pool  

4/1/2010 10:11:55 AM - Warning bptm(pid=4024) media id 001343 load operation reported an error    

4/1/2010 10:11:55 AM - current media 001343 complete, requesting next resource Any

4/1/2010 10:12:32 AM - granted resource 001342

4/1/2010 10:12:32 AM - granted resource IBM.ULTRIUM-TD4.001

4/1/2010 10:12:32 AM - granted resource som012-hcart-robot-tld-1

4/1/2010 10:12:34 AM - mounting 001342

4/1/2010 10:13:17 AM - Error bptm(pid=4024) FREEZING media id 001342, Encryption unavailable for an ENCR pool  

4/1/2010 10:13:18 AM - Warning bptm(pid=4024) media id 001342 load operation reported an error    

4/1/2010 10:13:18 AM - current media 001342 complete, requesting next resource Any

4/1/2010 10:13:58 AM - end writing

unable to allocate new media for backup, storage unit has none available(96)

termination requested by administrator(150)

 

Dwayne

 


From: Chapman, Scott [mailto:Scott.Chapman AT icbc DOT com]
Sent: Thursday, April 01, 2010 10:06 AM
To: judy_hinchcliffe AT administaff DOT com; Adams, Dwayne; VERITAS-BU AT mailman.eng.auburn DOT edu
Subject: RE: [Veritas-bu] KMS encryption

 

I can confirm that this is not the case.

 

I think your problem is that both of your media types (LTO3 and LTO4) are set to HCART3… you need to have that separated out, and you need to have your drives configured the same.  If your LTO3 media is HCART3 and your LTO4 media are HCART, then you need your LTO3 drives to be HCART3 and your LTO4 drives to be HCART.

 

Is your 001343 media an LTO4 cartridge?  And was it mounted into an LTO4 drive when you tried to write the encrypted backup?

 

Scott Chapman

Senior Technical Specialist

Storage and Database Administration

ICBC - Victoria

Ph:  250.414.7650  Cell:  250.213.9295

 

I seem to remember reading in the book the type HAD to be HCART=lto4 (not sure if I read that somewhere or it just stuck in my head)

 

Try deleting one of your tapes, and get it added back in as an HCART – your lto4 tape drives should already be HCART ( if not you will have to change them as well)

Then give it a try – I really think that is the problem.

 

From: Adams, Dwayne [mailto:AdamsDC AT medsch.ucsf DOT edu]
Sent: Thursday, April 01, 2010 11:33 AM
To: Judy Hinchcliffe; VERITAS-BU AT mailman.eng.auburn DOT edu
Subject: RE: [Veritas-bu] KMS encryption

 

Judy,

 

I have a call in to Symantec now.  My environment already has LTO3 and LTO4 media set to HCART3 (not my doing).  I am going to change the tapes to HCART as part of this project.  I wonder if the fl1 0x00010049 is reported by the drive or Netbackup is providing that information to the drive?  I called Dell and they were not much help. Once I said the KMS, I got the “we only support our solution line”.  I am getting my “ducks in a row” so I can call Dell back if it is not a NBU config issue.  My libraries are both setup for application managed encryption.  Wish me luck.  J

 

Thanks

 

Dwayne Adams

 


From: judy_hinchcliffe AT administaff DOT com [mailto:judy_hinchcliffe AT administaff DOT com]
Sent: Thursday, April 01, 2010 9:22 AM
To: Adams, Dwayne; VERITAS-BU AT mailman.eng.auburn DOT edu
Subject: RE: [Veritas-bu] KMS encryption

 

I have not had that problem.

My thought is what media type is 001343  - it has to be hcart (so nb knows it is a lto4)

As you have both types in your library I would check that the media type/barcode say it is a lto4 as well has physically check that it is an lto4.

 

I have a master/media, a media, and 2 SAN Media all encrypting just fine.

 

 

 

From: veritas-bu-bounces AT mailman.eng.auburn DOT edu [mailto:veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of Adams, Dwayne
Sent: Thursday, April 01, 2010 11:16 AM
To: VERITAS-BU AT mailman.eng.auburn DOT edu
Subject: Re: [Veritas-bu] KMS encryption

 

Hello,

 

Has anyone run into this issue with KMS?  I have setup KMS on my Master Server and can encrypt data to the pools from my Master.  I get the following error and the tape is frozen when I try to run an encrypted job from my Media Server.  The bptm log says the tape is a LTO3 tape but the tape is definitely a LTO4 tape.  I have read the Technote on this but that is all I have found.

 

http://seer.entsupport.symantec.com/docs/321244.htm

 

 

Thanks

 

Dwayne Adams

 

Encryption unavailable for an ENCR pool

 

4/1/2010 8:41:25 AM - started process bpbrm (1216)

4/1/2010 8:41:36 AM - connecting

4/1/2010 8:41:36 AM - connected; connect time: 00:00:00

4/1/2010 8:41:37 AM - mounting 001343

4/1/2010 8:42:23 AM - Error bptm(pid=3972) FREEZING media id 001343, Encryption unavailable for an ENCR pool  

4/1/2010 8:42:24 AM - Warning bptm(pid=3972) media id 001343 load operation reported an error    

4/1/2010 8:42:24 AM - current media 001343 complete, requesting next resource Any

4/1/2010 8:42:54 AM - end writing

termination requested by administrator(150)

 

Netbackup 6.5.4

 

Library 1 Media Server

 

Dell ML6000 series

2 LTO4 drives and 4 LTO3 drives (Downed for testing encryption with LTO4 tapes)

 

manage_drive_attributes: report_attr, fl1 0x00010049, fl2 0x00000004

 

Library 2 Master\Media

Dell ML6000 series

6 LTO4 drives

 

manage_drive_attributes: report_attr, fl1 0x00030849, fl2 0x00000000

 

 


This email and any attachments are intended only for the named recipient and may contain confidential and/or privileged material. Any unauthorized copying, dissemination or other use by a person other than the named recipient of this communication is prohibited. If you received this in error or are not named as a recipient, please notify the sender and destroy all copies of this email immediately.

2010 Olympic and Paralympic Logo | ICBC Logo


_______________________________________________ Veritas-bu maillist - Veritas-bu AT mailman.eng.auburn DOT edu http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu


-- 

Surjit Sedeora
Ph: 703-704-0581
Mobile: 540-522-6768
_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
<Prev in Thread] Current Thread [Next in Thread>