IT27313: ENCRYPTIONTYPE AES256 CAN BE REDUCED TO AES128 WITH A CLIENT OPTION SET

APAR status

• Closed as documentation error.

Error description

• ENCRYPTIONType AES256 can be reduced to AES128 with a client
  option set from the server,
  even if the option SRVOPTSETENCRYPTIONDISABLED  is set to yes
  which allows the client to ignore encryption options.
  Description of the option SRVOPTSETENCRYPTIONDISABLED should be
  updated in the IBM Spectrum Protect Client documentation and
  should include information about ignoring ENCRYPTIONType in a
  client options set from the server if
  SRVOPTSETENCRYPTIONDISABLED is equal to yes.
  
  IBM Spectrum Protect Versions Affected:
  IBM Spectrum Protect Backup-Archive Clients 7.1, 8.1 and higher
  on all platforms
  
  Initial Impact: Medium
  
  Additional Keywords: encryptiontype aes128 aes256
  srvoptsetencryptiondisabled encryption security
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect Backup-Archive Client versions 7.1 and  *
  * 8.1 on all platforms.                                        *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION.                                       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available. This issue is projected   *
  * to be fixed in the 8.1.7 update to the IBM Spectrum Protect  *
  * Backup-Archive Clients Installation and User's Guides.       *
  *                                                              *
  * Until this information is published, the associated          *
  * information updates are documented in the V8.1 Documentation *
  * Updates tech notes located here:                             *
  * http://www.ibm.com/support/docview.wss?uid=swg27048955       *
  * http://www.ibm.com/support/docview.wss?uid=swg27048956       *
  *                                                              *
  * You can locate the entry associated with this APAR by using  *
  * the APAR number as a keyword to search the document.         *
  *                                                              *
  * Note: This information is subject to change at the           *
  * discretion of IBM.                                           *
  ****************************************************************
  

Problem conclusion

• The corrected information will be published with the IBM
  Spectrum Protect Backup-Archive Clients 8.1.7 documentation and
  included in the V8.1 Documentation Updates tech notes. The
  updates will be reflected in the opening section detailing the
  options of the topic titled as: Srvoptsetencryptiondisabled and
  in the message ANS2227W.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels