6/8/2018 IBM Error -482 occurs when importing the IBM Spectrum Protect server certificate - United States

Error -482 occurs when importing the IBM Spectrum Protect server certificate

Technote (troubleshooting)

Problem(Abstract)
An IBM Spectrum Protect server is upgraded to Version 8.1.2. On the IBM Spectrum Protect administrator client computer, the
dsmcert utility is used to import the IBM Spectrum Protect server certificate. The command fails with error -482.

Symptom
The following messages are logged when the dsmcert command is issued on the client computer:

C:\Program Files\Tivoli\TSM\baclient>dsmcert -add -server <servername> -file cert256.arm

IBM Spectrum Protect
dsmcert utility
dsmcert Version 8, Release 1, Level 2.0
dsmcert date/time: 09/06/2017 15:30:49
(c) Copyright by IBM Corporation and other(s) 1990, 2017. All Rights Reserved.

Error -482 storing certificate

Result : Failed

Cause
An attempt was made to import the same certificate from two servers.

Diagnosing the problem

To determine whether the issue is occurring in your system environment, consider the following example. If you see similar
symptoms, your system environment is likely affected by the issue.

Assume that two IBM Spectrum Protect servers are named SERVER1 and SERVER2. If the cert256.arm file is obtained from
the SERVER1 server, the client would run the following dsmcert command:

C:\Program Files\Tivoli\TSM\baclient>dsmcert -add -server SERVER1 -file cert256.arm

IBM Spectrum Protect
dsmcert utility
dsmcert Version 8, Release 1, Level 2.0
dsmcert date/time: 09/06/2017 13:49:30
(c) Copyright by IBM Corporation and other(s) 1990, 2017.
All Rights Reserved.

Result : Success

http://www-01.ibm.com/support/docview.wss?uid=swg22008157 1/3
6/8/2018 IBM Error -482 occurs when importing the IBM Spectrum Protect server certificate - United States

However, if the same cert256.arm file is used to also import a certificate for the SERVER2 server, the dsmcert command
fails:

C:\Program Files\Tivoli\TSM\baclient>dsmcert -add -server SERVER2 -file cert256.arm

IBM Spectrum Protect
dsmcert utility
dsmcert Version 8, Release 1, Level 2.0
dsmcert date/time: 09/06/2017 13:56:19
(c) Copyright by IBM Corporation and other(s) 1990, 2017.
All Rights Reserved.

Error -482 storing certificate

Result : Failed

This error is expected because a separate cert256.arm file cannot be obtained from the second server (SERVER2).

Resolving the problem

To resolve the issue, complete the following steps:

1. Obtain the cert256.arm file from the IBM Spectrum Protect server which fails to configure with the dsmcert command.

2. Stop any IBM Spectrum Protect administrator and backup-archive clients that are running on the affected system.

3. From the client installation directory (default=C:\Program Files\Tivoli\TSM\baclient), run the dsmcert
command again to import the cert256.arm file with the corresponding name of the IBM Spectrum Protect server which
failed to configure with the dsmcert command. For example:

dsmcert -add -server SERVER2 -file cert256.arm

4. Run the dsmadmc command and verify connectivity to the appropriate server.

If necessary, you can reconfigure the client for Secure Sockets Layer (SSL) communication by removing previously imported
certificates. Complete the following steps:
1. Stop any IBM Spectrum Protect administrator and backup-archive clients that are running on the affected system.

2. From the client installation directory (default=C:\Program Files\Tivoli\TSM\baclient), remove the following
files:

dsmcert.crl
dsmcert.idx
dsmcert.kdb
dsmcert.rdb
dsmcert.sth

3. From the client installation directory (default=C:\Program Files\Tivoli\TSM\baclient), run the dsmcert
command again to import the cert256.arm file with the correct server name. For example:

dsmcert -add -server SERVER1 -file cert256.arm

http://www-01.ibm.com/support/docview.wss?uid=swg22008157 2/3
6/8/2018 IBM Error -482 occurs when importing the IBM Spectrum Protect server certificate - United States

In this example, the certarm.256 file was obtained from the SERVER1 server and was stored in the same directory as
the dsmcert.exe command. The dsmcert command writes new dsmcert.* files.

4. Run the dsmadmc command and verify connectivity.

Document information
More support for: IBM Spectrum Protect
Client

Software version: 8.1.2

Operating system(s): Windows

Reference #: 2008157

Modified date: 12 September 2017

http://www-01.ibm.com/support/docview.wss?uid=swg22008157 3/3