IT12687: "ANR2097E Unable to retrieve the master encryption key" when issuing dsmserv with runfile option

7.1.5.000-TIV-TSMSRV-AIX
7.1.5.000-TIV-TSMSRV-HP-UX
7.1.5.000-TIV-TSMSRV-Linuxppc64
7.1.5.000-TIV-TSMSRV-Linuxs390x
7.1.5.000-TIV-TSMSRV-Linuxx86_64
7.1.5.000-TIV-TSMSRV-SolarisSPARC
7.1.5.000-TIV-TSMSRV-WIN
IBM Spectrum Protect Server V7.1 Fix Pack 5 (7.1.5.000) Downloads

APAR status

• Closed as program error.

Error description

• With server version 7.1.3.x and using encrypted cloud-container
  storage pools,
  running "dsmserv -u user_name -i instance_dir runfile=file_name"
  
  will generate following errors related to 'dsmserv.pwd':
  
  ANR2100I Activity log process has started.
  ANR2097E Unable to retrieve the master encryption key from the
  server password
  file, dsmserv.pwd.
  ANR8578E The IBM Tivoli Storage Manager database does not have a
  password for
  the SSL key-ring file.
  ANR4536E File IBM_ProcessorValueUnitTable.xml could not be found
  or opened for
  read access.
  ANR4726I The NAS-NDMP support module has been loaded.
  ANR1794W TSM SAN discovery is disabled by options.
  ANR2251S The ACCESS setting for storage pool
  CLOUD__CONTAINER_ENCRYPTION_POOL was changed
  from READWRITE to UNAVAILABLE.  The pool is enabled for
  encryption, but the
  master encryption key for the server is not available.
  ANR2560I Schedule manager started.
  
  Most operations will succeed from the runfile file_name command
  set, but anything that needs to
  deal with an encrypted cloud-container storage pool will
  potentially have problems due to the fact that  server
  will have marked them as unavailable.
  
  Afterwards, dsmserv can be restarted normally.
  This only affects the 'runfile' option of dsmserv.
  
  Tivoli Storage Manager Server Versions Affected:  7.1.3.x on all
  supported platforms
  
  Initial Impact: Medium
  
  Additional Keywords:  spectrum protect TSM encryption master
  runfile
  

Local fix

• On restart, update any cloud-container storage pools to
  access=readwrite.
  This will not prevent the ANR2097E error sequence when using
  'runfile' option, but make the storage pools
  available again for use.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All Tivoli Storage Manager server users.                     *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See error description.                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available. This problem is currently *
  * projected to be fixed in level 7.1.5. Note that this is      *
  * subject to change at the discretion of IBM.                  *
  ****************************************************************
  

Problem conclusion

• This problem was fixed.
  Affected platforms:  AIX, HP-UX, Solaris, Linux, and Windows.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  TSM SERVER

• Fixed component ID

  5698ISMSV

Applicable component levels