IT12684: INSTALLATION ERROR : "UNEXPECTED ERROR WITH VCENTER VALIDATION"

Download Information: Version 6.4.3.x Data Protection for VMware
Download Information: Version 7.1.6 IBM Spectrum Protectâ„¢ for Virtual Environments

APAR status

• Closed as program error.

Error description

• The installation or upgrade of the Tivoli Storage Manager for
  Virtual Environments - Data Protection for VMware might stop at
  the vCenter credential validation step with the message :
  "unexpected error with vCenter validation"
  This can happen if the vCenter SSL certificate uses a key
  bigger than 2048 bits.
  This is also the minimum required key length starting with the
  vCenter Version 6.0.
  
  Tivoli Storage Manager Versions Affected:
  All supported versions of Tivoli Storage Manager for Virtual
  Environments - Data Protection for VMware on Windows and Linux
  
  Customer/L2 Diagnostics (If Applicable)
  Without canceling the installation process and while the error
  is displayed, get and save the regtool.log file located in the
  temporary installation files then cancel the installation.
  
  In the TDPVMwareInstallation.log, the following example
  messages are seen :
  
  1: eWAS_port_check: running
  ["C:\install\TSM4VE_71\ISP_FOR_VE_713_DP_VMW_WIN_ML_CN6M0ML\tsm4
  ve\X64\..\extra\jre\jre\bin\javaw.exe" -jar
  AvailablePortVerificator.jar -port 9080] Working
  Dir[C:\Users\u104017\AppData\Local\Temp\3\{E34A074D-DD5C-4FA1-AB
  54-9DEB04255412}]
  1: eWAS_port_check: Default port is not available.
  
  In the regtool.log, the following will be seen :
  
  <timestamp> com.ibm.tivoli.tsm.vmware.RegisterPlugin perform
  INFO: -validate_any option chosen
  ...
  <timestamp>
  com.ibm.tivoli.tsm.vmware.RegisterPluginbase.openConnection
  SEVERE: FFDC
  com.sun.xml.internal.ws.client.ClientTransportException:
      HTTP transport error: javax.net.ssl.SSLKeyException: RSA
  premaster secret error
      at com.sun.xml.internal.ws.transport.
      at ...
  ...
  INFO: Wrong user name or password for vCenter Server
  
  Initial Impact: Medium
  
  Additional Keywords: spectrum protect login connection DCF
  1972226 1972802
  

Local fix

• Ensure the vCenter certificate has a key no bigger than 2048
  bits.
  If the security requirements need this key to be bigger,
  contact IBM support.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Tivoli Storage Manager for Virtual Environments component    *
  * Data Protection for VMware versions 6.4 and 7.1 running on   *
  * Microsoft Windows x64 and Linux x86 platforms                *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available.  This problem is          *
  * currently projected to be fixed in levels 7.1.6.  Note that  *
  * this information is subject to change at the discretion of   *
  * IBM                                                          *
  ****************************************************************
  

Problem conclusion

• During the vCenter credential validation step, the Data
  Protection for VMware installer will detect when the vCenter
  Server SSL connection fails due to an RSA key encryption length
  issue. The installer will provide a technote to resolve this
  issue so installation can complete. See technote:
  http://www-01.ibm.com/support/docview.wss?uid=swg21976853
  
  Following HW & SW requirements  web pages are updated:
  7.1: http://www.ibm.com/support/docview.wss?uid=swg21652843
  7.1.1:http://www.ibm.com/support/docview.wss?uid=swg21679293
  7.1.2: http://www.ibm.com/support/docview.wss?uid=swg21697958
  7.1.3: http://www.ibm.com/support/docview.wss?uid=swg21902367
  7.1.4: http://www.ibm.com/support/docview.wss?uid=swg21970882
  
  6.4: http://www.ibm.com/support/docview.wss?uid=swg21611903
  6.4.1: http://www.ibm.com/support/docview.wss?uid=swg21647461
  6.4.2: http://www.ibm.com/support/docview.wss?uid=swg21673667
  6.4.3: http://www.ibm.com/support/docview.wss?uid=swg21960722
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• install
  

Fix information

• Fixed component name

  TSM FOR VE DP V

• Fixed component ID

  5725TVEVM

Applicable component levels

• R64W PSY

     UP

• R64L PSY

     UP

• R71W PSY

     UP

• R71L PSY

     UP