IT29273: ENCRLIB DB CFG PARAMETER CAN BE RESET TO THE DEFAULT VALUE AFTERAN INCREMENTAL RESTORE OPERATION.

APAR status

• Closed as program error.

Error description

• After an incremental restore is issued, ENCRLIB db cfg parameter
  can be reset to the default value. When ENCRLIB is set to
  libdb2comp_encr.so before the restore, it may be changed to
  libdb2encr.so.
  
  Here is an example:
  
  $ db2 create db test encrypt
  $ db2 connect to test
  $ db2 update db cfg for test using ENCRLIB
  ~/sqllib/lib/libdb2compr_encr.so trackmod yes logarchmeth1
  disk:$PWD/arclogs
  $ db2 get db cfg for test | grep ENCRLIB
   Encryption Library for Backup         (ENCRLIB) =
  /opt/ibm/db2/V11.1/lib64/libdb2compr_encr.so.1
  $ db2 backup db test to /dev/null
  $ db2 backup db test
  $ db2 backup db test incremental
  $ ls TEST.*001
  TEST.0.v111fp4.DBPART000.20190523005431.001
  TEST.0.v111fp4.DBPART000.20190523005443.001
  $ db2 drop db test
   db2 restore db test incremental automatic taken at
  20190523005443 encrypt cipher aes key length 256 master key
  label my_manual_master_key
  $ db2 get db cfg for test | grep ENCRLIB
   Encryption Library for Backup         (ENCRLIB) = libdb2encr.so
  

Local fix

• Change ENCRLIB parameter to the original value after the
  incremental restore.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users using encrypted database backup/restore                *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See Error Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to Db2 Version 11.1 Fix Pack 6.                      *
  ****************************************************************
  

Problem conclusion

• First fixed in Db2 Version 11.1 Fix Pack 6.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DB2 FOR LUW

• Fixed component ID

  DB2FORLUW

Applicable component levels