cancel
Showing results for 
Search instead for 
Did you mean: 

LTO-6 Drives on Backup Exec 2010 R3 lost their encryption capabilities

MPieper
Level 4

Hi,

 

Recently, one of our Drives in uor Qualstar XLS Libraries died.Since the Library had one unused Partition with two drives, i reconfigured the library, to make those two drives available for the main partition, to replace the one failed drive.

That, at first, seemed to have worked just as intended, i could use the drives a i needed... until the first encrypted job should have started. That job immediately failed, stating that it did not find a compatible drive. After a moment of confusion I checked the drive's info and found "Encryption: No". All ten drives show the same.

I am not absolutely sure that this was "Yes" before, but the Jobs with forced hardware encryption ran fine the week before the library modification.

The drives in question are IBM ULTRIUM-TD6, which, according to the HCL, should support Hardware Encryption. The Library is a Qualstar XLS-820500. Library Encryption is not, and was never, configured. Dives and library are connected via Fibrechannel to a DELL R620 with Windows Server 2008 R2.

By now, the defective drive was replaced. I ran tapeinst.exe to get rid of the old replaced drive's entry, but that did not re-enabled the encryption.

 

Other things i tried that did not work:

- ran LiveUpdate to update to Service Pack 4 and Hotfix 212812 (previously, only SP3 was installed)

- A reboot of the server and a powercyling of the library

- Using tapeinst.exe to uninstall and reinstall the drivers (with a reboot in between)

 

At the moment i am out of ideas on how to fix this. For now i have enabled software encryption, which works ok for our non-ndmp jobs.

7 REPLIES 7

pkh
Moderator
Moderator
   VIP    Certified
Did you right-click on the tape drive and check the Enable Hardware Encryption option?

MPieper
Level 4

Hmm, now this might be a stupid question, but where exactly should this option be? I do not see the option to enable encryption anywhere in the drive properties.

VJware
Level 6
Employee Accredited Certified

afaik, there isn't an option to enable encryption from the drive properties. One can just view if encryption is set to yes or no. (Right-click the drive and choose Properties and then click on General to view Encryption field)

If its set to no, it means the drive isn't capable of encryption. You may consider running vendor diagnostics against this drive to verify.

Larry_Fine
Moderator
Moderator
   VIP   

The drives in question are IBM ULTRIUM-TD6, which, according to the HCL, should support Hardware Encryption. The Library is a Qualstar XLS-820500. Library Encryption is not, and was never, configured. Dives and library are connected via Fibrechannel to a DELL R620 with Windows Server 2008 R2.

I know you said that LME (Library Mode Encryption) was never enabled, but that is exactly how it seems the library is acting.  Might you be able to turn on LME momentarily, then turn it back off again to get the library back into the proper state?  Otherwise I think you will need guidance from Qualstar.

Please check your adamm.log (or post it here).  check for the "EN" at the end of the "device features" list to see if it is reporting that it supports encryption.

0003:0000:0002:0000  Device Name             "\\.\Tape0"
                     Secondary Name          "\\?\scsi#sequential&ven_ibm&prod_ult3580-hh6#5&210844b1&0&000200#{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}"
                     Primary Inquiry         "IBM     ULT3580-HH6     C9T5"
                     Serial Number           "IBM     ULT3580-HH6     1x6x0x0x2x"
                     Device Flags            UMD, SCSI, SN(TYPE 0)
                     Device State            3, Online

                     Device IDs              1009, {8BCFA199-774C-4164-B3FF-A514B3FDF065}
                     Device Name             "IBM FC 05 LTO6"
                     Device Type             134283265, "LTO 64K (64K,10,0,E,HU)"
                     Device Features         0x005BFA7F: PB,SFB,SRB,WFM,SFF,SRM,PEOD,EL,LU,E,SBS,DC,SDC,TA,HU,RR,W,EN

 

MPieper
Level 4

adamm.log confirms my suspicion that the encryption was enabled before the library change.

Myself, i see two things there: One, that indeed the encryption flag is gone:

 

Device Name             "\\.\Tape2"
Secondary Name          "\\?\scsi#sequential&ven_ibm&prod_ultrium-td6#5&3aada0a&0&000c00#{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}"
Primary Inquiry         "IBM     ULTRIUM-TD6     D2D2"
Serial Number           "IBM     ULTRIUM-TD6     1068006457"
Device Flags            KMD, SCSI, SN(TYPE 1)
Device State            3, Online

Device IDs              1058, {0DDBE101-AB98-4949-BD43-AA4BBF61151E}
Device Name             "IBM 0018"
Device Type             134283265, "LTO 64K (64K,10,0,E,HU)"
Device Features         0x001BFA7F: PB,SFB,SRB,WFM,SFF,SRM,PEOD,EL,LU,E,SBS,DC,SDC,TA,HU,RR,W
Device Element          1091, 8
Device Block Limits     512 min, 65536 max
Device Hard Errors      0 write, 0 read
Device Soft Errors      27 write, 1 read

The other thing is "CERT=N" in the List of devices:

0000:0000:0003:0000  DeviceIo[01]: "QUALSTARXLS-8000        13063540", Cert=N, "\\.\MediumChanger2"
0000:0000:0014:0000  DeviceIo[02]: "IBM     ULTRIUM-TD6     1068002431", Cert=N, "\\.\Tape9"
0000:0000:0011:0000  DeviceIo[03]: "IBM     ULTRIUM-TD6     1068005765", Cert=N, "\\.\Tape1"
0000:0000:0013:0000  DeviceIo[04]: "IBM     ULTRIUM-TD6     1068005749", Cert=N, "\\.\Tape3"
0002:0000:0005:0000  DeviceIo[05]: "IBM     ULTRIUM-TD6     1068006402", Cert=N, "\\.\Tape4"
0002:0000:0006:0000  DeviceIo[06]: "IBM     ULTRIUM-TD6     1068006409", Cert=N, "\\.\Tape5"
0002:0000:0012:0000  DeviceIo[07]: "IBM     ULTRIUM-TD6     1068006412", Cert=N, "\\.\Tape8"
0002:0000:0011:0000  DeviceIo[08]: "IBM     ULTRIUM-TD6     1068005604", Cert=N, "\\.\Tape7"
0002:0000:0007:0000  DeviceIo[09]: "IBM     ULTRIUM-TD6     1068006452", Cert=N, "\\.\Tape6"
0000:0000:0012:0000  DeviceIo[10]: "IBM     ULTRIUM-TD6     1068006457", Cert=N, "\\.\Tape2"
0000:0000:0005:0000  DeviceIo[11]: "IBM     ULTRIUM-TD6     1068005651", Cert=N, "\\.\Tape0"
0002:0000:0001:0000  DeviceIo[12]: "QUALSTARXLS-8000        13063541", Cert=N, "\\.\MediumChanger3"

In the older entries of the log, it lists EN as well, and "CERT=Y"

 

Enabling and disabling of the library encryption did not help. I have ITDT installed, and glanced over a drive dump, but don't know where to look regarding the encryption.

VJware
Level 6
Employee Accredited Certified

Probably a good time to involve drive vendor support as well.

MPieper
Level 4

Yes, i will do so.

The funny thing is, i just now recreated tle library configuration, as it originally was: The library has two partitions again, one with 8 drives, the other one with 2. And now the encryption capablilities are back!

 

The thing is, we do not really need the second partition anymore, so i still would like to know how to resolve this. Could this be an issue with an "Empty" library, without any drives?