A fix is available
APAR status
Closed as documentation error.
Error description
When configuring 'Catalog File Metadata' in the Backup view of IBM Spectrum Protect Plus and specify a non-default local administrator as 'Guest OS Username', the file catalog will fail. A non-default local administrator is any user that has been created in the guest OS and has been given the administrators role. This is caused by the registry key 'LocalAccountTokenFilterPolicy' in [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] not being set or set to 0. If LocalAccountTokenFilterPolicy is set to 0 or not set, then any local non-default administrator will not be usable with WinRM, which is the protocol IBM Spectrum Protect Plus uses in order to install the Windows agent for file catalog, send commands to this agent, and get results from it. Note: this only applies to Windows guest VMs. The Documentation needs to be enhanced to document the requirement to have this registry key correctly set. IBM Spectrum Protect Versions Affected: IBM Spectrum Protect Plus 10.1.x Customer/L2 Diagnostics: When backup is run and a non-default administrator user is used to catalog file metadata, following is seen in the job log: ERROR,...,2,Failed to connect to the remote host 10.0.20.46. e=java.lang.Exception: WinRMAuthorizationError ERROR,...,2,File catalog Discovery failed for Vm igstsm20046 - w2k16Discovery of files within the server igstsm20046 - w2k16 failed reason : Failed to connect to the remote host 10.0.20.46. e=java.lang.Exception: WinRMAuthorizationError .Confirm that hypervisor guest tools are installed and network configuration has been completed. ... ERROR,...,Catalog file discovery results failed. e=...xsb.commons.XSBException: Server igstsm20046 - w2k16s file discovery result unavailable for cataloging. Initial Impact: Low Additional Keywords: SPP, SPplus, TS001277205
Local fix
Set the LocalAccountTokenFilterPolicy Registry key in the Windows guest that is being backed up with 'Catalog File Metadata' to 1 If this key does not exist, navigate to [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Po licies\System] and add a DWord Registry key with name LocalAccountTokenFilterPolicy and value 1.
Problem summary
**************************************************************** * USERS AFFECTED: * * IBM Spectrum Protect Plus levels 10.1.1.* * **************************************************************** * PROBLEM DESCRIPTION: * * See ERROR DESCRIPTION * **************************************************************** * RECOMMENDATION: * * Apply fixing level when available. This problem is currently * * projected to be fixed in level 10.1.2 * * Note that this is subject to change at the discretion of * * IBM * ****************************************************************
Problem conclusion
The documentation now includes this known item with Windows 2016. As stated above, users, when seeing File Catalog failures as described, should review the registry setting LocalAccountTokenFilterPolicy and set it to 1.
Temporary fix
Comments
APAR Information
APAR number
IT26213
Reported component name
SP PLUS
Reported component ID
5737SPLUS
Reported release
A11
Status
CLOSED DOC
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2018-09-12
Closed date
2018-09-18
Last modified date
2018-09-18
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Applicable component levels
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSNQFQ","label":"IBM Spectrum Protect Plus"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"A11","Line of Business":{"code":"LOB26","label":"Storage"}}]
Document Information
Modified date:
30 January 2024