12-16-2014 06:09 AM
Hi,
Recently, one of our Drives in uor Qualstar XLS Libraries died.Since the Library had one unused Partition with two drives, i reconfigured the library, to make those two drives available for the main partition, to replace the one failed drive.
That, at first, seemed to have worked just as intended, i could use the drives a i needed... until the first encrypted job should have started. That job immediately failed, stating that it did not find a compatible drive. After a moment of confusion I checked the drive's info and found "Encryption: No". All ten drives show the same.
I am not absolutely sure that this was "Yes" before, but the Jobs with forced hardware encryption ran fine the week before the library modification.
The drives in question are IBM ULTRIUM-TD6, which, according to the HCL, should support Hardware Encryption. The Library is a Qualstar XLS-820500. Library Encryption is not, and was never, configured. Dives and library are connected via Fibrechannel to a DELL R620 with Windows Server 2008 R2.
By now, the defective drive was replaced. I ran tapeinst.exe to get rid of the old replaced drive's entry, but that did not re-enabled the encryption.
Other things i tried that did not work:
- ran LiveUpdate to update to Service Pack 4 and Hotfix 212812 (previously, only SP3 was installed)
- A reboot of the server and a powercyling of the library
- Using tapeinst.exe to uninstall and reinstall the drivers (with a reboot in between)
At the moment i am out of ideas on how to fix this. For now i have enabled software encryption, which works ok for our non-ndmp jobs.
12-16-2014 07:54 AM
12-16-2014 11:59 PM
Hmm, now this might be a stupid question, but where exactly should this option be? I do not see the option to enable encryption anywhere in the drive properties.
12-17-2014 12:15 AM
afaik, there isn't an option to enable encryption from the drive properties. One can just view if encryption is set to yes or no. (Right-click the drive and choose Properties and then click on General to view Encryption field)
If its set to no, it means the drive isn't capable of encryption. You may consider running vendor diagnostics against this drive to verify.
12-17-2014 02:03 PM
The drives in question are IBM ULTRIUM-TD6, which, according to the HCL, should support Hardware Encryption. The Library is a Qualstar XLS-820500. Library Encryption is not, and was never, configured. Dives and library are connected via Fibrechannel to a DELL R620 with Windows Server 2008 R2.
I know you said that LME (Library Mode Encryption) was never enabled, but that is exactly how it seems the library is acting. Might you be able to turn on LME momentarily, then turn it back off again to get the library back into the proper state? Otherwise I think you will need guidance from Qualstar.
Please check your adamm.log (or post it here). check for the "EN" at the end of the "device features" list to see if it is reporting that it supports encryption.
0003:0000:0002:0000 Device Name "\\.\Tape0"
Secondary Name "\\?\scsi#sequential&ven_ibm&prod_ult3580-hh6#5&210844b1&0&000200#{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}"
Primary Inquiry "IBM ULT3580-HH6 C9T5"
Serial Number "IBM ULT3580-HH6 1x6x0x0x2x"
Device Flags UMD, SCSI, SN(TYPE 0)
Device State 3, OnlineDevice IDs 1009, {8BCFA199-774C-4164-B3FF-A514B3FDF065}
Device Name "IBM FC 05 LTO6"
Device Type 134283265, "LTO 64K (64K,10,0,E,HU)"
Device Features 0x005BFA7F: PB,SFB,SRB,WFM,SFF,SRM,PEOD,EL,LU,E,SBS,DC,SDC,TA,HU,RR,W,EN
12-18-2014 01:51 AM
adamm.log confirms my suspicion that the encryption was enabled before the library change.
Myself, i see two things there: One, that indeed the encryption flag is gone:
Device Name "\\.\Tape2"
Secondary Name "\\?\scsi#sequential&ven_ibm&prod_ultrium-td6#5&3aada0a&0&000c00#{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}"
Primary Inquiry "IBM ULTRIUM-TD6 D2D2"
Serial Number "IBM ULTRIUM-TD6 1068006457"
Device Flags KMD, SCSI, SN(TYPE 1)
Device State 3, Online
Device IDs 1058, {0DDBE101-AB98-4949-BD43-AA4BBF61151E}
Device Name "IBM 0018"
Device Type 134283265, "LTO 64K (64K,10,0,E,HU)"
Device Features 0x001BFA7F: PB,SFB,SRB,WFM,SFF,SRM,PEOD,EL,LU,E,SBS,DC,SDC,TA,HU,RR,W
Device Element 1091, 8
Device Block Limits 512 min, 65536 max
Device Hard Errors 0 write, 0 read
Device Soft Errors 27 write, 1 read
The other thing is "CERT=N" in the List of devices:
0000:0000:0003:0000 DeviceIo[01]: "QUALSTARXLS-8000 13063540", Cert=N, "\\.\MediumChanger2"
0000:0000:0014:0000 DeviceIo[02]: "IBM ULTRIUM-TD6 1068002431", Cert=N, "\\.\Tape9"
0000:0000:0011:0000 DeviceIo[03]: "IBM ULTRIUM-TD6 1068005765", Cert=N, "\\.\Tape1"
0000:0000:0013:0000 DeviceIo[04]: "IBM ULTRIUM-TD6 1068005749", Cert=N, "\\.\Tape3"
0002:0000:0005:0000 DeviceIo[05]: "IBM ULTRIUM-TD6 1068006402", Cert=N, "\\.\Tape4"
0002:0000:0006:0000 DeviceIo[06]: "IBM ULTRIUM-TD6 1068006409", Cert=N, "\\.\Tape5"
0002:0000:0012:0000 DeviceIo[07]: "IBM ULTRIUM-TD6 1068006412", Cert=N, "\\.\Tape8"
0002:0000:0011:0000 DeviceIo[08]: "IBM ULTRIUM-TD6 1068005604", Cert=N, "\\.\Tape7"
0002:0000:0007:0000 DeviceIo[09]: "IBM ULTRIUM-TD6 1068006452", Cert=N, "\\.\Tape6"
0000:0000:0012:0000 DeviceIo[10]: "IBM ULTRIUM-TD6 1068006457", Cert=N, "\\.\Tape2"
0000:0000:0005:0000 DeviceIo[11]: "IBM ULTRIUM-TD6 1068005651", Cert=N, "\\.\Tape0"
0002:0000:0001:0000 DeviceIo[12]: "QUALSTARXLS-8000 13063541", Cert=N, "\\.\MediumChanger3"
In the older entries of the log, it lists EN as well, and "CERT=Y"
Enabling and disabling of the library encryption did not help. I have ITDT installed, and glanced over a drive dump, but don't know where to look regarding the encryption.
12-18-2014 02:07 AM
Probably a good time to involve drive vendor support as well.
12-18-2014 04:39 AM
Yes, i will do so.
The funny thing is, i just now recreated tle library configuration, as it originally was: The library has two partitions again, one with 8 drives, the other one with 2. And now the encryption capablilities are back!
The thing is, we do not really need the second partition anymore, so i still would like to know how to resolve this. Could this be an issue with an "Empty" library, without any drives?