IT22986: TLS V1.0 INCORRECTLY REQUIRED TO FUNCTION IN A VMWARE ENVIRONMENT.

Download Information: Version 7.1.8.x Data Protection for VMware

APAR status

• Closed as program error.

Error description

• Spectrum Protect for VE data mover schedule backups that are
  using VMware tags (client option VMTAGDATAMOVER=YES) will fail
  or similar dsmc command line that is using VMware tags such as
  executing the 'show vm mgmt all' command via the IBM Spectrum
  Protect BA command line client, fails with the following errors:
  
  Executing the 'show vm mgmt all' command via the IBM Spectrum
  Protect BA command line client, fails with the following errors:
  
  ANS2374E The VMware vCloud Suite plug-in library failed to
           connect to the vCenter Management Server.
  ANS9278E Failure processing vmList option. RC=7203
  
  traces.log
  ------------
  .\common\vcloudsuite.cpp( 508): ENTER =====>
    VcloudSuite::vcloudSuiteConnect
  .\common\vcloudsuite.cpp( 524): VcloudSuite::vcloudSuiteConnect:
    the following parameters will be used to connect to vcloud
    suite: szPSC(vCenter60), szMgmtServerInst(vCenter60),
    szUserName(Administrator@vsphere.local)
  .\common\vcloudSuiteJNIClass.cpp( 162): =========> Entering
    vcloudSuiteJNIClass::GetInstance()
  .\common\vcloudSuiteJNIClass.cpp( 169):
    vcloudSuiteJNIClass::GetInstance(): The vCloud Suite JNI class
    '0x000000864838A190'.
  .\common\vcloudSuiteJNIClass.cpp( 171): <========= Exit
    vcloudSuiteJNIClass::GetInstance()
  .\common\vcloudSuiteJNIClass.cpp( 301): ENTER =====>
    vcloudSuiteJNIClass::GetEnv
  .\common\vcloudSuiteJNIClass.cpp( 301): EXIT  <=====
    vcloudSuiteJNIClass::GetEnv
  .\common\vcloudsuite.cpp( 140): ENTER =====> GetString wchar
  .\common\vcloudsuite.cpp( 140): EXIT  <===== GetString wchar
  .\common\vcloudsuite.cpp( 140): ENTER =====> GetString wchar
  .\common\vcloudsuite.cpp( 140): EXIT  <===== GetString wchar
  .\common\vcloudsuite.cpp( 140): ENTER =====> GetString wchar
  .\common\vcloudsuite.cpp( 140): EXIT  <===== GetString wchar
  .\common\vcloudsuite.cpp( 140): ENTER =====> GetString wchar
  .\common\vcloudsuite.cpp( 140): EXIT  <===== GetString wchar
  .\common\vcloudsuite.cpp( 585): VcloudSuite::vcloudSuiteConnect:
    calling the method getVCloudSuiteConnectionObject() of the
    class (VCloudSuiteConnection)
  .\common\vcloudSuiteReturnValue.cpp(  65): ENTER =====>
    vcloudSuiteReturnValue::HandleReturnValue
  .\common\vcloudSuiteReturnValue.cpp(  97):
    vcloudSuiteReturnValue::HandleReturnValue: rc is equal (7203)
  .\common\vcloudSuiteReturnValue.cpp( 108):
    vcloudSuiteReturnValue::HandleReturnValue: exception
    description:
      connect(): connect(): Failed to connect to the vCenter
      Management Server [vCenter60],
      javax.net.ssl.SSLPeerUnverifiedException:
      peer not authenticated
  .\common\vcloudSuiteReturnValue.cpp(  65): EXIT  <=====
    vcloudSuiteReturnValue::HandleReturnValue
  .\common\vcloudsuite.cpp( 597):
    VcloudSuite::vcloudSuiteConnect:the call
    getVCloudSuiteConnectionObject() was finished unsuccessfully.
  .\common\vcloudsuite.cpp( 508): EXIT  <=====
    VcloudSuite::vcloudSuiteConnect
  .\..\common\vm\vcsPlugin.cpp( 385):
    CVCSPlugin::ConnectVCloudSuitePlugin(): vcloudSuiteConnect
    return; rc=7203
  .\..\common\vm\vcsPlugin.cpp( 337): EXIT  <=====
    CVCSPlugin::ConnectVCloudSuitePlugin, rc = 7203
  .\..\common\vm\vcsPlugin.cpp( 136): EXIT  <=====
    CVCSPlugin::CreateVCloudSuitePlugin, rc = 7203
  .\..\common\vm\vcsFuncs.cpp( 189): EXIT  <=====
    vCloudSuiteInit, rc = 7203
  .\..\common\vm\vcsTags.cpp(1047): EXIT  <=====
    vcsFillMoRefToTagMap(), rc = 7203
  .\..\common\vm\vmbackvcb.cpp( 786): <========= Exiting
    TagAssocMaps::fillTagAssocMaps
  .\..\common\vm\vmbackvcb.cpp( 768): EXIT  <=====
    TagAssocMaps::fillTagAssocMaps, rc = 7203
  .\..\common\vm\vmbackvcb.cpp(2180): <========= Exiting
    vmVcbGetVMList()
  
  vcsplugin.log
  -------------
  ERROR [ReturnValue] [rc = 7203] connect():
  connect(): Failed to connect to the vCenter Management Server
            [vCenter60], javax.net.ssl.SSLPeerUnverifiedException:
            peer not authenticated
  XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
  Also, the Spectrum Protect VE GUI vSphere web client plugin will
  fail when viewing the Schedules 'IBM Spectrum Protect Plugin' >
  'Monitor or Configure' > 'Schedules'. You may see the following
  error:
  
  GVM5110E: Data Protection Settings are not available because
  an error occurred connecting to the 'ITSCHAVCPSC07.up.its.upc'
  Platforn Services Controller. Ensure that the Platform Services
  Controller is running as expected.
  
  In messages.log (on Liberty Web Server):
  ----------------------------------------
  Lookup Host: itschavc07.up.its.upc
  . . .
  passwordSet: host_name
  Lookup Service URL: https://host_name/lookupservice/sdk
  Exception getting vCloud Connection:
            javax.net.ssl.SSLPeerUnverifiedException:
            peer not authenticated
  com.tivoli.tsm.unifrecov.exception.PscConnectException
    at com.tivoli.tsm.vmware.vim.ServiceInstance
          .getPscConnection(ServiceInstance.java:480)
    at com.tivoli.tsm.vmware.vim.ServiceInstance
          .getPscConnection(ServiceInstance.java:499)
    at com.tivoli.tsm.unifrecov.jaxrs.RestBase
          .getVMwareAPIsConnection(RestBase.java:697)
    at com.tivoli.tsm.unifrecov.jaxrs.SchedulesResource
          .processGetSchedules(SchedulesResource.java:77)
    at com.tivoli.tsm.unifrecov.jaxrs.SchedulesResource$1
          .process(SchedulesResource.java:56)
    at com.tivoli.tsm.unifrecov.jaxrs.RestBase
          .handleRequest(RestBase.java:765)
    at com.tivoli.tsm.unifrecov.jaxrs.SchedulesResource
          .getSchedules(SchedulesResource.java:59)
    at sun.reflect.NativeMethodAccessorImpl
          .invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl
          .invoke(NativeMethodAccessorImpl.java:90)
    at sun.reflect.DelegatingMethodAccessorImpl
          .invoke(DelegatingMethodAccessorImpl.java:55)
    at java.lang.reflect.Method.invoke(Method.java:508)
  
  Tivoli Storage Manager Versions Affected:
  All
  
  Initial Impact: Low
  
  Additional Keywords:
  TSM
  Tivoli Storage Manager
  IBM Spectrum Protect
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect for Virtual Environments: Data          *
  * Protection for VMware versions 7.1.8 and 8.1.2 running on    *
  * all Windows and Linux x86 platforms.                         *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available. This problem is currently *
  * projected to be fixed in levels  7.1.8.1 and 8.1.4.  Note    *
  * that until these levels are available, this information is   *
  * subject to change at the discretion of IBM.                  *
  ****************************************************************
  *
  

Problem conclusion

• The code has been changed to work properly in case when TLS1.0
  protocol is disabled in the VMware environment.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• dsmc
  

Fix information

• Fixed component name

  TSM FOR VE DP V

• Fixed component ID

  5725TVEVM

Applicable component levels

• R81L PSY

     UP

• R81W PSY

     UP