Turning on Encryption - getting Error 49 - client did not start

[Bruce_Clegg]

backups have been working on this server fine - but I need to start encrypting them (for just this client).

So I went to the client properties and made sure encryption was allowed and enabled - with the appropriate cypher.

Then I went to the policy and turned on encryption - and started a manual backup.  I got the error:

1: (49) client did not start

Detailed Status:

Jun 3, 2019 9:38:27 AM - Info nbjm (pid=55798) starting backup job (jobid=77444) for client u1sptora02v, policy Tier1_Weekly_Encrypted_2, schedule Daily_Cumul
Jun 3, 2019 9:38:27 AM - Info bpbrm (pid=1032) starting bptm
Jun 3, 2019 9:38:27 AM - Info bpbrm (pid=1032) Started media manager using bpcd successfully
Jun 3, 2019 9:38:27 AM - Info nbjm (pid=55798) requesting STANDARD_RESOURCE resources from RB for backup job (jobid=77444, request id:{A16BEF68-8615-11E9-8507-A012D970D082})
Jun 3, 2019 9:38:27 AM - requesting resource u1mannbu01p-hcart-robot-tld-0
Jun 3, 2019 9:38:27 AM - requesting resource u1mannbu01p.NBU_CLIENT.MAXJOBS.u1sptora02v
Jun 3, 2019 9:38:27 AM - requesting resource u1mannbu01p.NBU_POLICY.MAXJOBS.Tier1_Weekly_Encrypted_2
Jun 3, 2019 9:38:27 AM - granted resource u1mannbu01p.NBU_CLIENT.MAXJOBS.u1sptora02v
Jun 3, 2019 9:38:27 AM - granted resource u1mannbu01p.NBU_POLICY.MAXJOBS.Tier1_Weekly_Encrypted_2
Jun 3, 2019 9:38:27 AM - granted resource 000300
Jun 3, 2019 9:38:27 AM - granted resource IBM.ULTRIUM-HH7.000
Jun 3, 2019 9:38:27 AM - granted resource u1mannbu01p-hcart-robot-tld-0
Jun 3, 2019 9:38:27 AM - estimated 954051 kbytes needed
Jun 3, 2019 9:38:27 AM - Info nbjm (pid=55798) started backup (backupid=u1sptora02v_1559576307) job for client u1sptora02v, policy Tier1_Weekly_Encrypted_2, schedule Daily_Cumul on storage unit u1mannbu01p-hcart-robot-tld-0
Jun 3, 2019 9:38:27 AM - started process bpbrm (pid=1032)
Jun 3, 2019 9:38:27 AM - Info bpbrm (pid=1032) u1sptora02v is the host to backup data from
Jun 3, 2019 9:38:28 AM - Info bpbrm (pid=1032) telling media manager to start backup on client
Jun 3, 2019 9:38:28 AM - Info bptm (pid=1034) using 65536 data buffer size
Jun 3, 2019 9:38:28 AM - Info bptm (pid=1034) using 12 data buffers
Jun 3, 2019 9:38:28 AM - Info bptm (pid=1034) start backup
Jun 3, 2019 9:38:28 AM - Info bptm (pid=1034) Waiting for mount of media id 000300 (copy 1) on server u1mannbu01p.
Jun 3, 2019 9:38:28 AM - Info bpbrm (pid=1032) spawning a brm child process
Jun 3, 2019 9:38:28 AM - Info bpbrm (pid=1032) child pid: 1040
Jun 3, 2019 9:38:28 AM - Info bpbrm (pid=1032) sending bpsched msg: CONNECTING TO CLIENT FOR u1sptora02v_1559576307
Jun 3, 2019 9:38:28 AM - Info bpbrm (pid=1032) start bpbkar on client
Jun 3, 2019 9:38:28 AM - Error bpbrm (pid=1040) from client u1sptora02v: EXIT STATUS 11: system call failed
Jun 3, 2019 9:38:28 AM - Error bpbrm (pid=1040) client u1sptora02v aborted
Jun 3, 2019 9:38:28 AM - Info bpbrm (pid=1032) sending message to media manager: STOP BACKUP u1sptora02v_1559576307
Jun 3, 2019 9:38:28 AM - connecting
Jun 3, 2019 9:38:28 AM - mounting 000300
Jun 3, 2019 9:38:28 AM - connected; connect time: 0:00:00
Jun 3, 2019 9:38:29 AM - Info bpbrm (pid=1032) media manager for backup id u1sptora02v_1559576307 exited with status 150: termination requested by administrator
Jun 3, 2019 9:38:29 AM - end writing
client did not start (49)

I had turned on logs on both the media server and the client - I believe I set up logs on the client for both bpcd and bpbkar - but nothing showed in either of those logs.

I'll make another entry with the media server logs.

Again - all was working fine backing up this server until I attempted to turn on encryption.  This server does host an oracle database.

[Bruce_Clegg]

bpbkar is in place on the client.

[Michal_Mikulik1]

You must define encryption keys on the client. See bpkeyutil command.
Regards
Michal

[Bruce_Clegg]

I have some older servers where encryption is set up and was working.  Can you tell me where I can find the key to use with bpkeyutil ?  I understand I need to use the same key.

Instructions for either the GUI or CLI

[Amol_Nair · Accepted solution]

This article should help you out
https://www.veritas.com/support/en_US/article.100021401

It’s pretty old so the initial point about installing a package on the master server is no longer required..

[Michal_Mikulik1]

Hello,

you can have different key (passphrase) on each encrypted client, because it is set on a client level, not Master/Media Server level.

regards

Michal

[Bruce_Clegg]

I tried the bpkeyutil - But I ran it on the client first.  (d'oh!)

so when I re-read the instructions I tried on the master and got:

[bclegg@u1mannbu01p ~]$ cd /usr/openv/netbackup/bin
[bclegg@u1mannbu01p bin]$ sudo ./bpkeyutil -client u1sptora01v
[sudo] password for bclegg:
Enter new NetBackup pass phrase: *********
Re-enter new NetBackup pass phrase: *********
The key is already present in the key file.
../bpkeyutil.c.372: main: Function call RemoteCopy(u1sptora01v) failed. Errno = 0

Can I just delete a file on the client and re-run bpkeyutil on the master?  which file?  keyfile.dat ?

[Bruce_Clegg]

I was able to answer my own question.  I verified that the bpkeyutil program worked and I was able to start encrypting backups to the new oracle servers.

On the client server I mistakenly ran bpkeyutil on, I mv'd keyfile.dat and re-ran bpkeyutil (from the master) - and this time it completed.

Test backups were successful - thanks for your help y'all.