IT37088: A NON ENCRYPTED DATABASE THAT IS RESTORED AS AN ENCRYPTED DATABASE IS NOT CONNECTABLE AFTER THE RESET DB CFG COMMAND.

Db2 Version 11.1 Mod 4 Fix Pack 7 for Linux, UNIX, and Windows

APAR status

• Closed as program error.

Error description

• Original unencrypted database that is restored as an encrypted
  database fails to connect after submitting a RESET DATABASE
  command.
  
  $ db2start;
  $ db2 create db testdb;
  $ export PATH=~/sqllib/gskit/bin:$PATH;
  $ . ~/sqllib/db2profile;
  $ ~/sqllib/gskit/bin/gsk8capicmd -keydb -create -db
  "$HOME/ne.p12" -pw "pass" -type pkcs12 -stash;
  
  $ db2 update dbm cfg using keystore_location $HOME/ne.p12
  keystore_type pkcs12;
  $ db2 backup database testdb;
  
  
  $ db2 get db cfg for testdb | grep -i "encr";
  
   Encryption Library for Backup                 (ENCRLIB) =
  
   Encryption Options for Backup                (ENCROPTS) =
  
   Encrypted database                                      = NO
  
  $ db2 drop database testdb;
  
  $ db2 restore database testdb encrypt;
  
  $ db2 get db cfg for testdb | grep -i "encr";
  
   Encryption Library for Backup        (ENCRLIB) = libdb2encr.so
  
   Encryption Options for Backup        (ENCROPTS) =
  CIPHER=AES:MODE=CBC:KEY LENGTH=256
  
   Encrypted database                   = YES
  
  $ db2 reset db cfg for testdb;
  
  DB20000I The RESET DATABASE CONFIGURATION command completed
  successfully.
  
  $ db2 get db cfg for testdb | grep -i "encr";
  
   Encryption Library for Backup        (ENCRLIB) = libdb2encr.so
  
   Encryption Options for Backup        (ENCROPTS) =
  CIPHER=AES:MODE=CBC:KEY LENGTH=256
  
   Encrypted database                   = NO
  
  $ db2 connect to testdb
  
  SQL1655C The operation could not be completed due to an error
  accessing data on disk. SQLSTATE=58030
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All                                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See Error Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Please, review description and install fix in 11.1 Fix Pack  *
  * 7                                                            *
  ****************************************************************
  

Problem conclusion

• Please, review description and install fix in 11.1 Fix Pack 7
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DB2 FOR LUW

• Fixed component ID

  DB2FORLUW

Applicable component levels

• RB10 PSY

     UP