SAP Knowledge Base Article - Preview

3365924 - DB6: Avoid long wait time for backup when KMIP key returns error

Symptom

With Db2 native encryption enabled, you store your master key or keys in a centralized keystore using KMIP.

You notices the backup seems to hang if there is an issue to get the key from KMIP server.

In the database log (db2diag.log), following error messages repeat.

2023-08-08-10.11.12.538130+480 I7700A801            LEVEL: Error
PID     : 20316618             TID : 40688          PROC : db2sysc 0
INSTANCE: db2abc               NODE : 000           DB   : abc
APPHDL  : 0-78                 APPID: *LOCAL.db2abc.230808083823
AUTHID  : DB2abc               HOSTNAME: abc123
EDUID   : 40688                EDUNAME: db2bm.39839.0 (abc) 0
FUNCTION: DB2 UDB, bsu security, sqlexGetMasterKeyFromLabelKMIP, probe:1499
MESSAGE : ZRC=0x00000036=54

DATA #1 : String, 59 bytes
Call failed at master/clone; will try the same master/clone
DATA #2 : String, 49 bytes
clone, total clones, retry count, max retry count
DATA #3 : signed integer, 4 bytes
0
DATA #4 : signed integer, 4 bytes
1
DATA #5 : unsigned integer, 4 bytes
1
DATA #6 : unsigned integer, 4 bytes
50

<snipped>

2023-08-08-10.12.38.645827+480 I48510A802           LEVEL: Error
PID     : 20316618             TID : 40688          PROC : db2sysc 0
INSTANCE: db2abc               NODE : 000           DB   : abc
APPHDL  : 0-78                 APPID: *LOCAL.db2abc.230808083823
AUTHID  : DB2abc               HOSTNAME: abc123
EDUID   : 40688                EDUNAME: db2bm.39839.0 (abc) 0
FUNCTION: DB2 UDB, bsu security, sqlexGetMasterKeyFromLabelKMIP, probe:1499
MESSAGE : ZRC=0x00000036=54
  
DATA #1 : String, 48 bytes
Call failed at master/clone; will try next clone
DATA #2 : String, 49 bytes
clone, total clones, retry count, max retry count
DATA #3 : signed integer, 4 bytes
-1
DATA #4 : signed integer, 4 bytes
1
DATA #5 : unsigned integer, 4 bytes
2
DATA #6 : unsigned integer, 4 bytes
50


Read more...

Environment

  • SAP on IBM Db2 for Linux, UNIX, and Windows
  • Database version 11.1 or higher with Db2 native encryption enabled.

Keywords

backup, sqlexGetMasterKeyFromLabelKMIP, sqlcctcpconnr, Call failed , KBA , BC-DB-DB6-DBA , Database Administration , BC-DB-DB6 , DB2 Universal Database for Unix / NT , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.