Symptom
With Db2 native encryption enabled, you store your master key or keys in a centralized keystore using KMIP.
You notices the backup seems to hang if there is an issue to get the key from KMIP server.
In the database log (db2diag.log), following error messages repeat.
2023-08-08-10.11.12.538130+480 I7700A801 LEVEL: Error
PID : 20316618 TID : 40688 PROC : db2sysc 0
INSTANCE: db2abc NODE : 000 DB : abc
APPHDL : 0-78 APPID: *LOCAL.db2abc.230808083823
AUTHID : DB2abc HOSTNAME: abc123
EDUID : 40688 EDUNAME: db2bm.39839.0 (abc) 0
FUNCTION: DB2 UDB, bsu security, sqlexGetMasterKeyFromLabelKMIP, probe:1499
MESSAGE : ZRC=0x00000036=54
DATA #1 : String, 59 bytes
Call failed at master/clone; will try the same master/clone
DATA #2 : String, 49 bytes
clone, total clones, retry count, max retry count
DATA #3 : signed integer, 4 bytes
0
DATA #4 : signed integer, 4 bytes
1
DATA #5 : unsigned integer, 4 bytes
1
DATA #6 : unsigned integer, 4 bytes
50
<snipped>
2023-08-08-10.12.38.645827+480 I48510A802 LEVEL: Error
PID : 20316618 TID : 40688 PROC : db2sysc 0
INSTANCE: db2abc NODE : 000 DB : abc
APPHDL : 0-78 APPID: *LOCAL.db2abc.230808083823
AUTHID : DB2abc HOSTNAME: abc123
EDUID : 40688 EDUNAME: db2bm.39839.0 (abc) 0
FUNCTION: DB2 UDB, bsu security, sqlexGetMasterKeyFromLabelKMIP, probe:1499
MESSAGE : ZRC=0x00000036=54
DATA #1 : String, 48 bytes
Call failed at master/clone; will try next clone
DATA #2 : String, 49 bytes
clone, total clones, retry count, max retry count
DATA #3 : signed integer, 4 bytes
-1
DATA #4 : signed integer, 4 bytes
1
DATA #5 : unsigned integer, 4 bytes
2
DATA #6 : unsigned integer, 4 bytes
50
Read more...
Environment
- SAP on IBM Db2 for Linux, UNIX, and Windows
- Database version 11.1 or higher with Db2 native encryption enabled.
Keywords
backup, sqlexGetMasterKeyFromLabelKMIP, sqlcctcpconnr, Call failed , KBA , BC-DB-DB6-DBA , Database Administration , BC-DB-DB6 , DB2 Universal Database for Unix / NT , How To
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.