IC73806: TAPE ENCRYPTION WITH DRIVEENCRYPT=ALLOW CAN DISABLE ENCRYPTION

IBM Tivoli Storage Manager V5.5 Fix Pack 6 (5.5.6) Server Downloads

APAR status

• Closed as program error.

Error description

• IBM OEM tape encryption solutions by NEC, SpectraLogic, and
  Fujitsu use Application Method Encryption (AME).  These
  solutions used with the device class setting DRIVEENCRYPT=ALLOW
  will result in encryption being disabled by the server.
  However, there is no indication on the server to warn users of
  this situation.
  
  This APAR will add a warning message when this situation is
  detected:
  1. The drive is configured for AME
  2. The drive has encryption enabled
  3. The device class is set to DRIVEENCRYPT=ALLOW
  
  In the above situation, the server will currently disable
  encryption, while this behavior is as designed, it should
  also provide a warning message of this action.  This APAR
  will add a warning message for this situation.
  

Local fix

• IBM OEM tape encryption solutions (by NEC, SpectraLogic, and
  Fujitsu) that require drives to be configured with AME (not LME
  or SME), need to use the server device class setting of
  DRIVEENCRYPT=EXTERNAL and should NOT use DRIVEENCRYPT=ALLOW.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All Tivoli Storage Manager servers managing  *
  *                 tape encryption with OEM IBM hardware        *
  ****************************************************************
  * PROBLEM DESCRIPTION: See ERROR DESCRIPTION.                  *
  ****************************************************************
  * RECOMMENDATION: Apply fixing level when available.  This     *
  *                 problem is currently projected to be fixed   *
  *                 in levels 5.4.7, 5.5.6, 6.1.5, and 6.2.3.    *
  *                 Note that this is subject to change at the   *
  *                 discretion of IBM.                           *
  ****************************************************************
  *
  

Problem conclusion

• This problem was fixed, and the new warning message ANR8998W:
  
  ANR8998W Encryption has been disabled for drive <drive name>
           in library <library name>.
  
  The message was created to warn of the situation described in
  the ERROR DESCRIPTION and in technote #1459734.
  
  Affected platforms:  AIX, HP-UX, Sun Solaris, Linux, and
  Windows.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TSM SERVER

• Fixed component ID

  5698ISMSV

Applicable component levels

• R55A PSY

     UP

• R55H PSY

     UP

• R55L PSY

     UP

• R55S PSY

     UP

• R55W PSY

     UP

• R61A PSY

     UP

• R61H PSY

     UP

• R61L PSY

     UP

• R61S PSY

     UP

• R61W PSY

     UP

• R62A PSY

     UP

• R62H PSY

     UP

• R62L PSY

     UP

• R62S PSY

     UP

• R62W PSY

     UP