Solved

BackupExec 12 won't work with Hardware Encryption

Posted on 2009-05-07
10
1,213 Views
Last Modified: 2013-12-01
I am using Symantec BackupExec 12.0 SP3 running on a Windows Server 2003 Standard SP2 machine.  The tape drive I am using is an HP Ultrium 1840 LTO4 drive with Imation Ultrium LTO4 tapes.  We specifically bought these tapes and drive in order to use Hardware Encryption.

I can run a full network backup without any encryption just fine, however when I try to add hardware encryption, I get the following error:

The driver detected a controller error on \Device\Scsi\cpqcissm1.

Then the backup promptly fails.  We must then restart the server before we can do any tape operations through BackupExec, we must also relabel the tape before it can be used again.

I have tried this with NO compression and WITH compression, both software and hardware in all possible combination thereof.  I have the most up-to-date symantec drivers for the tape drive and the most up to date firmware for the SCSI controller via HP.

Like I said, I can do full backups WITHOUT encryption, however I want to be able to do it WITH encryption.

Any thoughts?  Thanks!

0
Comment
Question by:NetRuiz
  • 5
  • 4
10 Comments
 
LVL 42

Expert Comment

by:paulsolov
ID: 24330644
Have you tried using software encryption within Backup Exec?  Make sure you're not using both software and hw encryption.  I don't remember if this feature started with 12 or 12.5
0
 

Author Comment

by:NetRuiz
ID: 24330684
Yes, we have tried and we have the same error.  We really want to use the Hardware Encryption because there is more overhead associated with Software Encryption.
0
 
LVL 21

Expert Comment

by:SelfGovern
ID: 24341995
I know this works with HP media.  I wonder if there's something about the leader/format of the Imation tapes that says, "I don't do encryption"?  
You are right that HW encryption requires both an LTO-4 tape drive with the encryption ASIC (all of HP's LTO-4 tape drives have it), *and* LTO-4 media... but maybe it takes the right media?

Oh -- you can also download HP's free Library and Tape Tools (see the product link at www.hp.com/go/tape ) and there are a number of tests you can run, including encryption tests.  Make sure you're running the latest LTO-4 firmware (L&TT will download and install it for you) and then play around with the encryption tests.  If you can't figure out what's going on, run a support ticket in L&TT and post it here or call HP.
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 

Author Comment

by:NetRuiz
ID: 24342153
Thank you SelfGovern,  when I get in on Monday I will try the Tape Tools tests you spoke of and see if it is the Imation tapes...that would suck if that is the case, but at least that would be A solution, huh?

I will post back on Monday.  Thanks again.
0
 

Author Comment

by:NetRuiz
ID: 24397982
Well, I tested the Imation tapes and sure enough they failed the LTO4 encryption tests.  So, I bought an HP Ultrium LTO4 tape and tested it....it FAILED too!!!!

So, then I performed the LTO Drive Assessment Test.  It came back saying the "the drive is no longer recommended for use."

Very very strange.  Still, the unencrypted backups work fine.  Any thoughts?  Do I need special cables at all?

Thanks!

0
 
LVL 21

Expert Comment

by:SelfGovern
ID: 24399464
These drives work off standard SCSI/SAS/FC cables (as indicated by the connection).. should be no problem there.

Can you use L&TT to generate a support ticket and post it here?  Maybe there's something wrong with the encryption ASIC -- this would be weird, but I guess not impossible.

I know it's frustrating to have a problem like this go on for a while, but I'm glad we've eliminated some things.

Just to be sure -- you're not trying to use two key managers with this drive by any chance, are you?  A key manager could be backup software, the MSL Encryption Kit, the Secure Key Manager, an encrypting switch, etc... if you have two "owners" both trying to use the drive for HW encryption it will fail, because only one process can issue an encryption key per session.
0
 
LVL 21

Expert Comment

by:SelfGovern
ID: 24399521
Oh, I should have asked a while back, probably -- which HBA are you using?   Which firmware level on the HBA?    Is the tape drive a standalone drive, or in an autoloader/library?
0
 

Author Comment

by:NetRuiz
ID: 24414475
Self Govern:

We are using a HP Smart Array 6i Rev. B, v.2.84.  The backup device is a standalone drive, no library associated with it.

To your earlier question, we do not have any other key manager associated with our system.

I have attached a screenshot of the Library and Tape Tools support ticket creation....it says the data was not acquired correctly.  Any ideas on what that means?  

L-TT.png
0
 
LVL 21

Assisted Solution

by:SelfGovern
SelfGovern earned 500 total points
ID: 24444858
NetRuiz, I'm working with some internal contacts at HP to try to get you an answer... I haven't forgotten this!
0
 

Accepted Solution

by:
NetRuiz earned 0 total points
ID: 24445091
SelfGovern,

We just installed a HP Single Channel Ultra320 SCSI Host Bus Adapter to use instead of the SmartArray 6i.  That has cleared up the issue.  Backups are now running correctly with the Hardware Encryption.

Thank you for your assistance on this issue.
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Repairing a physically broken flash drive 4 57
Storage Options for VHD File in Disk2VHD 2 30
Exchange 2007 to 2016 Storage Sizing. 5 51
EMC vplex question 1 14
This article is an update and follow-up of my previous article:   Storage 101: common concepts in the IT enterprise storage This time, I expand on more frequently used storage concepts.
Create your own, high-performance VM backup appliance by installing NAKIVO Backup & Replication directly onto a Synology NAS!
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question