IT43399: VMWARE HOSTED FILE SYSTEM BACKUP FAILS WHEN APPLIED HTTPS SIGNED CERTIFICATE HAS WILDCARD AS HOSTNAME AND MISSING IP ADDRESS OF

APAR status

• Closed as program error.

Error description

• File system backups of VMware hosted VMs can fail with if an
  HTTPS signed certificate, that has wildcard set as hostname, and
  is missing the IP address of
  the Spectrum Protect Plus Server, is used in the environment.
  
  The Job Log for the failing job will contain messages like this:
  
  ERROR,#############,DDD # MMM YYYY HH:MM:SS
  EST,#,,agent_fspa.internal error: incomplete or invalid system
  credentials
  
  IBM Spectrum Protect Plus Versions Affected:
  10.1.13.x
  

Local fix

• Do the following on each Windows server doing file system
  backups:
  1.Login to the system.
  2.Open a cmd.exe command window using the 'Run as Administrator'
  option.
  3.Navigate to the IBM Spectrum Protect Plus install location:
   cd C:\ProgramData\SPP\
  4.Issue this command:
   type nul > DisableCertValidation
  5.Issue this command to confirm a 0 byte file was created:
   dir
  6.Close the command window and log off the system.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect Plus 10.1.13 and 10.1.14                *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available. This problem is currently *
  * projected to be fixed in IBM Spectrum Protect Plus 10.1.14.1 *
  * and 10.1.15. Note that this is subject to change at the      *
  * discretion of IBM                                            *
  ****************************************************************
  

Problem conclusion

• This problem has been fixed so that File system backups can be
  completed, when an HTTPS signed certificate of the Spectrum
  Protect Plus Server has wildcard set as hostname, and is missing
  the IP address of the Spectrum Protect Plus Server.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SP PLUS

• Fixed component ID

  5737SPLUS

Applicable component levels