OKM - OKM 2.3 Reports 'Key Not Found' for Some Tapes from a Few Years Back

Asset ID:	1-72-2155346.1
Update Date:	2018-01-16
Keywords:

Solution Type Problem Resolution Sure

Solution 2155346.1 : OKM - OKM 2.3 Reports 'Key Not Found' for Some Tapes from a Few Years Back

Applies to:

Sun StorageTek Crypto Key Management System - Version Not Applicable and later
Information in this document applies to any platform.

Symptoms

The customer is getting in the OKM 2.3 system a 'Key not found' for some tapes from a few years back.

Cause

It appears that the KMA's are not fully replicated and that some KMA's have keys that other KMA's do not.

Due to a known issue with the OKM 2.3 replication (See bug 15729150 ) the OKM software should be upgraded.

Solution

With regard to the OKM Software upgrade procedure and guidelines provided in the KBDoc ID 1983471.1 and the OKM 2.5 Administration Guide page 334, the customer is asked to complete the following tasks
1) Run a OKM Backup on KMA2, then KMA3, KMA1, and KMA0 in this order, running the backups one at a time, waiting for a backup to complete in one KMA before running a backup on the next KMA.
2) Upload and apply the software upgrade file on each KMA one at a time (to help to spread out the network load), and then activate the software upgrade on each KMA one at a time (to minimize the number of KMAs that are offline concurrently).

e.g. Upgrade KMA2 to 2.5.3 as described below:
Download the software from MOS: (support.oracle.com):
Click on the "Patches and Updates" tab
  Under the patch search box click on "Product or Family (Advanced search)"
  In the "product is" drop down (first box) type in "Oracle Key Manager"
  The next drop down box says "Select up to 10" . Drop down this box to reveal another drop arrow for Oracle Key Manager. Drop this arrow down and click inside the square next to the version of software you desire.
  The next drop down box asks you to select your OS version. Select by clicking inside the square next to your version of OS.
  Click the search button, for results.
  Select the 2.5.3 version (20002165)

Also get the latest GUI version that corresponds to your platform you run the OKM GUI from and upgrade the GUI as well.

From the KMA2 GUI:
Local Configuration->Software Upgrade
Upload and Apply OKM 2.5.3 on KMA2
Then activate - activate can take 1-3 hours and to come up after the reboot, be patient and wait, do not power off KMA if it appears hung.

After KMA2 reboots, login in with GUI and check replication. Once replication is complete, verify KMA is unlocked.

Once all KMA's are upgraded switch replication version to replication 14

References

<BUG:15729150> - SUNBT7067912 KMA REPORTS LAG SIZE OF ZERO EVEN THOUGH REPLICATION IS NOT COMPLET

Attachments

This solution has no attachment