Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1224
  • Last Modified:

BackupExec 12 won't work with Hardware Encryption

I am using Symantec BackupExec 12.0 SP3 running on a Windows Server 2003 Standard SP2 machine.  The tape drive I am using is an HP Ultrium 1840 LTO4 drive with Imation Ultrium LTO4 tapes.  We specifically bought these tapes and drive in order to use Hardware Encryption.

I can run a full network backup without any encryption just fine, however when I try to add hardware encryption, I get the following error:

The driver detected a controller error on \Device\Scsi\cpqcissm1.

Then the backup promptly fails.  We must then restart the server before we can do any tape operations through BackupExec, we must also relabel the tape before it can be used again.

I have tried this with NO compression and WITH compression, both software and hardware in all possible combination thereof.  I have the most up-to-date symantec drivers for the tape drive and the most up to date firmware for the SCSI controller via HP.

Like I said, I can do full backups WITHOUT encryption, however I want to be able to do it WITH encryption.

Any thoughts?  Thanks!

0
NetRuiz
Asked:
NetRuiz
  • 5
  • 4
2 Solutions
 
Paul SolovyovskySenior IT AdvisorCommented:
Have you tried using software encryption within Backup Exec?  Make sure you're not using both software and hw encryption.  I don't remember if this feature started with 12 or 12.5
0
 
NetRuizAuthor Commented:
Yes, we have tried and we have the same error.  We really want to use the Hardware Encryption because there is more overhead associated with Software Encryption.
0
 
SelfGovernCommented:
I know this works with HP media.  I wonder if there's something about the leader/format of the Imation tapes that says, "I don't do encryption"?  
You are right that HW encryption requires both an LTO-4 tape drive with the encryption ASIC (all of HP's LTO-4 tape drives have it), *and* LTO-4 media... but maybe it takes the right media?

Oh -- you can also download HP's free Library and Tape Tools (see the product link at www.hp.com/go/tape ) and there are a number of tests you can run, including encryption tests.  Make sure you're running the latest LTO-4 firmware (L&TT will download and install it for you) and then play around with the encryption tests.  If you can't figure out what's going on, run a support ticket in L&TT and post it here or call HP.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
NetRuizAuthor Commented:
Thank you SelfGovern,  when I get in on Monday I will try the Tape Tools tests you spoke of and see if it is the Imation tapes...that would suck if that is the case, but at least that would be A solution, huh?

I will post back on Monday.  Thanks again.
0
 
NetRuizAuthor Commented:
Well, I tested the Imation tapes and sure enough they failed the LTO4 encryption tests.  So, I bought an HP Ultrium LTO4 tape and tested it....it FAILED too!!!!

So, then I performed the LTO Drive Assessment Test.  It came back saying the "the drive is no longer recommended for use."

Very very strange.  Still, the unencrypted backups work fine.  Any thoughts?  Do I need special cables at all?

Thanks!

0
 
SelfGovernCommented:
These drives work off standard SCSI/SAS/FC cables (as indicated by the connection).. should be no problem there.

Can you use L&TT to generate a support ticket and post it here?  Maybe there's something wrong with the encryption ASIC -- this would be weird, but I guess not impossible.

I know it's frustrating to have a problem like this go on for a while, but I'm glad we've eliminated some things.

Just to be sure -- you're not trying to use two key managers with this drive by any chance, are you?  A key manager could be backup software, the MSL Encryption Kit, the Secure Key Manager, an encrypting switch, etc... if you have two "owners" both trying to use the drive for HW encryption it will fail, because only one process can issue an encryption key per session.
0
 
SelfGovernCommented:
Oh, I should have asked a while back, probably -- which HBA are you using?   Which firmware level on the HBA?    Is the tape drive a standalone drive, or in an autoloader/library?
0
 
NetRuizAuthor Commented:
Self Govern:

We are using a HP Smart Array 6i Rev. B, v.2.84.  The backup device is a standalone drive, no library associated with it.

To your earlier question, we do not have any other key manager associated with our system.

I have attached a screenshot of the Library and Tape Tools support ticket creation....it says the data was not acquired correctly.  Any ideas on what that means?  

L-TT.png
0
 
SelfGovernCommented:
NetRuiz, I'm working with some internal contacts at HP to try to get you an answer... I haven't forgotten this!
0
 
NetRuizAuthor Commented:
SelfGovern,

We just installed a HP Single Channel Ultra320 SCSI Host Bus Adapter to use instead of the SmartArray 6i.  That has cleared up the issue.  Backups are now running correctly with the Hardware Encryption.

Thank you for your assistance on this issue.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now