"Encryption Key Not Found" appears when selecting a backup set on tape in the "Where do you want to restore the data from?" screen.

Article:TECH200810  |  Created: 2012-12-12  |  Updated: 2014-03-17  |  Article URL http://www.symantec.com/docs/TECH200810
Article Type
Technical Solution


Issue



An attempt to restore from a backup set originally taken to a Backup to Disk (B2D) location and duplicated to a tape drive using hardware encryption returns "Encryption Key Not Found" when selecting the backup set on tape.  A prompt appears asking the user to create a new encryption key, but a key has already been created, and used for the duplicate to tape.


Error



Encryption Key Not Found

Cannot find an encryption key on this Backup Exec server for the selected backup set.  To continue the operation, you must create an encryption key for this Backup Exec server, and it must use the same pass phrase as the original key.

Do you want to create a new encryption key for this Backup Exec server now?


Environment



This issue occurs when a backup set that was originally backed up to Backup to Disk folder using no encryption key is duplicated to a tape drive or library using hardware encryption.


Cause



Backup Exec catalogs do not return the correct encryption key hash.  This can be seen in a debug of the Backup Exec Management service using SGMon:

MANAGEME: [12/10/12 10:50:49] [0000]     ERROR: LocalizedException:
MANAGEME: [12/10/12 10:50:49] [0000]     ERROR:   Message: One or more of the
encryption keys required by this job could not be retrieved. Verify the job
settings to ensure that there is a valid encryption key for this job.
MANAGEME: [12/10/12 10:50:49] [0000]
MANAGEME: [12/10/12 10:50:49] [0000]     ERROR:   Reason: One or more of the
encryption keys required by this job could not be retrieved. Verify the job
settings to ensure that there is a valid encryption key for this job.
MANAGEME: [12/10/12 10:50:49] [0000]
MANAGEME: [12/10/12 10:50:49] [0000]     ERROR:   Stack:    at
BackupExec.Management.Components.Security.SecurityManager.GetByHash
(DataEncryptionKey& dek, UInt32 nHashMatchingCriteria, Byte[] Hash, UInt32
HashLen, UInt32 HashAlgo)
MANAGEME: [12/10/12 10:50:49] [0000]        at SyncInvokeGetByHash(Object ,
Object[] , Object[] )
MANAGEME: [12/10/12 10:50:49] [0000]        at
System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object
[] inputs, Object[]& outputs)
MANAGEME: [12/10/12 10:50:49] [0000]        at
System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc&
rpc)
MANAGEME: [12/10/12 10:50:49] [0000]        at
System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5
(MessageRpc& rpc)
MANAGEME: [12/10/12 10:50:49] [0000]        at
System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)

 


Solution



A hotfix is now available for this issue in the current version(s) of the product(s) mentioned in this article. Refer to the Hotfix link under Related Documents at the end of this article to obtain the hotfix needed to resolve the issue.

Backup Exec 2012 Rev 1798 Service Pack 2 (TECH203155)


Supplemental Materials

SourceETrack
Value3023405
Description

EXCH: "Encryption Key Not Found" during restore selection from of non-encrypted B2D set duplicated to tape with hardware encryption enabled.




Article URL http://www.symantec.com/docs/TECH200810


Terms of use for this information are found in Legal Notices