IJ34001: MMKEYSERV CLIENT REGISTER/DEREGISTER MAY FAIL WHEN THERE ARE ADDITIONAL EXPIRED CERTIFICATES.

APAR status

• Closed as program error.

Error description

• mmkeyserv client register, deregister or rkm change command will
  fail if the new RKM.conf contains expired certificates.
  

Local fix

• Use the mmkeyserv client update
  to update the client certificates.
  Otherwise, shutdown GPFS and run retry the command.
  

Problem summary

• mmkeyserv client register, deregister or rkm change command will
  fail if the new RKM.conf contains expired certificates.
  

Problem conclusion

• This problem is fixed in 5.1.1  PTF 3
  To see all Spectrum Scale APARs and
  their respective fix solutions refer to page
  https://public.dhe.ibm.com/storage/spectrumscale/spectrum_scale_
  apars.html
  
  Benefits of the solution:
  Allow the mmkeyserv to work without shutting down GPFS.
  
  Work Around:
  Use the mmkeyserv client update
  to update the client certificates.
  Otherwise, shutdown GPFS and run retry the command.
  
  Problem trigger:
  This occurs when there is a client
  that is registered to multiple
  tenants and the certificate has
  expired or when there are multiple
  clients that are registered to at
  least one tenant and the their
  certificates have expired.
  
  Symptom:
  Error output/message
  Unexpected Results/Behavior
  
  Platforms affected:
    ALL Linux OS environments
    Windows/x86_64 only
  
  Functional Area affected:
          All Scale Users
          Admin Commands
          Encryption
  
  Customer Impact:
    High Importance
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SPEC SCALE STD

• Fixed component ID

  5737F33AP

Applicable component levels