Encryption for OpenVMS 8.3 - -STR-F-FATINTERR, fatal internal error

[Mike Zinni]

Hi,

I am working with encrypting savesets on OpenVMS 8.3. I am able to create an AES key. If I include the value in quotes in my backup command or if I just leave the /ENCRYPT qualifier and then enter the value of the key manually it works fine. When I use the /encrypt=name=name_of_my_key I get this error:

%BACKUP-F-ENCINIERR, an error was encountered initializing an encryption stream
-STR-F-FATINTERR, fatal internal error

Has anyone seen this?

Thank you.

[Karl Rohwedder]

I can reproduce it here on an Alpha running 8.3, the help/message for FATINTERR calls for a service request.

regards Kalle

[Mike Zinni]

Thank you for responding to my post, Kalle, but what does it mean that its a "system request"? I did a HELP/MESSAGE earlier but the response wasn't much help for me.

ENCINIERR, an error was encountered initializing an encryption
stream

Facility: BACKUP, BACKUP/ENCRYPT Command

Explanation: An error has occurred while initializing the encryption
operation.

User Action: See the accompanying message for more information about the
error.

Mike

[Karl Rohwedder]

The 'accompanying message' is the second message 'FATINTERR'. Do a HELP/MESSAGE FATINTERR and help suggest a service call to HP.

regards Kalle

[Mike Zinni]

Excellent. Thank you very much.

[Tom O'Toole]

Yes, is it possible this is your issue (from the 8.3 new features manual)?:

Note For an encrypt operation, if the /DATA_ALGORITHM=AES is specified without the /KEY_ALGORITHM, an error occurs. The default algorithm DESCBC is used to encrypt the random key record that contains the random key and file information. However, Encrypt expects that the user's key matches the KEY algorithm; if not, an error occurs. That is, if the key-name is an AES key name and value, when the key is fetched from the logical name table and then is decrypted with the DES master key, the key decrypts garbage, and the operation fails with:


%STR-F-FATINTERR, fatal internal error

[Karl Rohwedder · Accepted solution]

Tom,

that hits the point, you must use the command:

$ BACKUP/ENCRYPT=(NAME=MYKEY,ALG=AES) ...

to use an AES key, it defaults to DES.

regards Kalle

[Mike Zinni]

That was it. Adding the "ALG=AES" qualifier worked. I had read that in the 8.3 manual but it seemed more geared toward encrypting a file rather than a backup.

Thank you all for your help.

[Jan van den Ende]

Mike,

>>>
Thank you all for your help.
<<<

For the way to express your thanks, follow up on:

http://forums1.itrc.hp.com/service/forums/helptips.do?#33

Proost.

Have one on me.

jpe