Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Restore error

Created: 01 Feb 2013 | 4 comments

I am getting lots of restore errors with a status code of 2826:

01/02/2013 10:13:51 - Info bpbrm(pid=3760) got ERROR 85 from media manager      
01/02/2013 10:13:51 - Info bpbrm(pid=3760) terminating bpbrm child 4672 jobid=150113       
01/02/2013 10:13:51 - restored image ukyfp1_1359245620 - (media read error(85)); restore time 00:01:41
01/02/2013 10:13:51 - end Restore; elapsed time: 00:02:22
invalid error number(2826)
01/02/2013 10:13:51 - Info tar32(pid=7788) done. status: 0         
01/02/2013 10:13:52 - Info tar32(pid=7788) done. status: 0 - the requested operation was successfully completed  

When looking through the bptm logs I find the following:

09:09:46.331 [3052.2992] <2> establish_decryption_key: next block encryption status: LON 0x000000000120f52b, algorithm index 1, encryption status 0x1

09:09:48.235 [3052.2992] <2> read_data: ReadFile returned FALSE, The media is write protected. (19);bytes = 0
09:09:48.235 [3052.2992] <2> is_possible_recoverable_error: not attempting error recovery, errno = 19

Backups are encrypted using KMS

Netbackup version is 7.1.0.4 running on Windows 2008 R2

Any help would be much appreciated

Comments 4 CommentsJump to latest comment

RamNagalla's picture

hi ,

Recreate Key Management Service Option (KMS) encryption key needed for restore of this tape.

please check the below tech note

http://www.symantec.com/business/support/index?pag...

see the below tech note for encryption key creation

http://www.symantec.com/business/support/index?pag...

j083418's picture

Is there a way to check what key the restore is trying to use to decrypt the tape?

RamNagalla's picture

hi,

below is what i find from encritption guide

Recover a key
To recover a key, use the NetBackup Key Management Service (KMS) utility
command (the nbkmsutil command) with the included arguments.
# nbkmsutil -help -recoverkey
nbkmsutil -recoverkey -keyname <key_name>
-kgname <key_group_name>
-tag <key_tag>
[ -desc <description> ]
__________
Note: The key state would be set to inactive.
_________-
The restore could fail if a key that is used in encrypting the backup data is lost
(and no copy of it is available). These keys can be recovered (re-created) with the
knowledge of the original key's attributes (tag and passphrase)
-keyname     Specifies the name of the key to be recovered (re-created).
-kgname       Specifies the name of the key group to which this key should belong.
-tag       Specifies the tag that identifies the original key (we need to use the
same tag).
 
_________
Note: The user is prompted to enter the correct passphrase to get the right key
(the system does not verify the validity of entered passphrases).
_______
j083418's picture

I have changed all of the keys and re-run all the backups. When restoring I am still seeing the 2826 error. It looks like the restore is usiung the incorrect key to restore the data. Is there a way to check to see which key is being used for the restore?