BackupExec 12 won't work with Hardware Encryption

I am using Symantec BackupExec 12.0 SP3 running on a Windows Server 2003 Standard SP2 machine.  The tape drive I am using is an HP Ultrium 1840 LTO4 drive with Imation Ultrium LTO4 tapes.  We specifically bought these tapes and drive in order to use Hardware Encryption.

I can run a full network backup without any encryption just fine, however when I try to add hardware encryption, I get the following error:

The driver detected a controller error on \Device\Scsi\cpqcissm1.

Then the backup promptly fails.  We must then restart the server before we can do any tape operations through BackupExec, we must also relabel the tape before it can be used again.

I have tried this with NO compression and WITH compression, both software and hardware in all possible combination thereof.  I have the most up-to-date symantec drivers for the tape drive and the most up to date firmware for the SCSI controller via HP.

Like I said, I can do full backups WITHOUT encryption, however I want to be able to do it WITH encryption.

Any thoughts?  Thanks!

NetRuizAsked:
Who is Participating?
 
NetRuizAuthor Commented:
SelfGovern,

We just installed a HP Single Channel Ultra320 SCSI Host Bus Adapter to use instead of the SmartArray 6i.  That has cleared up the issue.  Backups are now running correctly with the Hardware Encryption.

Thank you for your assistance on this issue.
0
 
Paul SolovyovskySenior IT AdvisorCommented:
Have you tried using software encryption within Backup Exec?  Make sure you're not using both software and hw encryption.  I don't remember if this feature started with 12 or 12.5
0
 
NetRuizAuthor Commented:
Yes, we have tried and we have the same error.  We really want to use the Hardware Encryption because there is more overhead associated with Software Encryption.
0
Cloud Class® Course: MCSA MCSE Windows Server 2012

This course teaches how to install and configure Windows Server 2012 R2.  It is the first step on your path to becoming a Microsoft Certified Solutions Expert (MCSE).

 
Thomas RushCommented:
I know this works with HP media.  I wonder if there's something about the leader/format of the Imation tapes that says, "I don't do encryption"?  
You are right that HW encryption requires both an LTO-4 tape drive with the encryption ASIC (all of HP's LTO-4 tape drives have it), *and* LTO-4 media... but maybe it takes the right media?

Oh -- you can also download HP's free Library and Tape Tools (see the product link at www.hp.com/go/tape ) and there are a number of tests you can run, including encryption tests.  Make sure you're running the latest LTO-4 firmware (L&TT will download and install it for you) and then play around with the encryption tests.  If you can't figure out what's going on, run a support ticket in L&TT and post it here or call HP.
0
 
NetRuizAuthor Commented:
Thank you SelfGovern,  when I get in on Monday I will try the Tape Tools tests you spoke of and see if it is the Imation tapes...that would suck if that is the case, but at least that would be A solution, huh?

I will post back on Monday.  Thanks again.
0
 
NetRuizAuthor Commented:
Well, I tested the Imation tapes and sure enough they failed the LTO4 encryption tests.  So, I bought an HP Ultrium LTO4 tape and tested it....it FAILED too!!!!

So, then I performed the LTO Drive Assessment Test.  It came back saying the "the drive is no longer recommended for use."

Very very strange.  Still, the unencrypted backups work fine.  Any thoughts?  Do I need special cables at all?

Thanks!

0
 
Thomas RushCommented:
These drives work off standard SCSI/SAS/FC cables (as indicated by the connection).. should be no problem there.

Can you use L&TT to generate a support ticket and post it here?  Maybe there's something wrong with the encryption ASIC -- this would be weird, but I guess not impossible.

I know it's frustrating to have a problem like this go on for a while, but I'm glad we've eliminated some things.

Just to be sure -- you're not trying to use two key managers with this drive by any chance, are you?  A key manager could be backup software, the MSL Encryption Kit, the Secure Key Manager, an encrypting switch, etc... if you have two "owners" both trying to use the drive for HW encryption it will fail, because only one process can issue an encryption key per session.
0
 
Thomas RushCommented:
Oh, I should have asked a while back, probably -- which HBA are you using?   Which firmware level on the HBA?    Is the tape drive a standalone drive, or in an autoloader/library?
0
 
NetRuizAuthor Commented:
Self Govern:

We are using a HP Smart Array 6i Rev. B, v.2.84.  The backup device is a standalone drive, no library associated with it.

To your earlier question, we do not have any other key manager associated with our system.

I have attached a screenshot of the Library and Tape Tools support ticket creation....it says the data was not acquired correctly.  Any ideas on what that means?  

L-TT.png
0
 
Thomas RushCommented:
NetRuiz, I'm working with some internal contacts at HP to try to get you an answer... I haven't forgotten this!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.