DLm: ENCRYPTED Certificates Cannot Be Loaded When Using DLMDR

Summary: A certificate failure pccurs when a user starts DLMDR with installed ENCRYPTED certificates on Dell DLm.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

If an ENCRYPTED certificate was installed and SSL was enabled on the DLm Console DR tab, the next configuration load shows the following WARNING in the apply log:

Start configuration operation at Thu Apr 16 10:49:01 2020
Install common settings at Thu Apr 16 10:49:03 2020
WARNING skip DLm DR service configuration update, SSL settings are not valid
REASON: private key file /opt/dlm_drd/certs/dlmaut-privkey.pem does not exist

The following message is found in the /var/log/dlmtools/dlmdrlog:

2020-04-16T10:52:05.338241-04:00 vte1 /opt/dlm_drd/dlm_drd_con.pl[85355]: DLmDRDTools:I: Info : Successfully read configuration file /opt/dlm_drd/config/config.cfg
2020-04-16T10:52:05.338801-04:00 vte1 /opt/dlm_drd/dlm_drd_con.pl[85355]: DLmDRDTools:I: Info : DLm PMAX-1 is found as a registered system in DLm property file
2020-04-16T10:52:05.338881-04:00 vte1 /opt/dlm_drd/dlm_drd_con.pl[85355]: DLmDRDTools:I: Info : DLm PMAX-2 is not found as a registered system in DLm property file
2020-04-16T10:52:05.338952-04:00 vte1 /opt/dlm_drd/dlm_drd_con.pl[85355]: DLmDRDTools:I: Info : Launching DLm TCP Server...
2020-04-16T10:52:05.339363-04:00 vte1 /opt/dlm_drd/dlm_drd_con.pl[85355]: DLmDRDTools:I: Info : NON-SSL Server initialized!
2020-04-16T10:52:05.339438-04:00 vte1 /opt/dlm_drd/dlm_drd_con.pl[85355]: DLmDRDTools:I: Info : SERVER waiting for client connection on port 9050

 

Cause

DLm does NOT permit ENCRYPTED certificates.

 

Resolution

Run the following command to view the private key certificate. If the starting and ending lines show the private key as ENCRYPTED, the certificate must be converted:

cat dlm8500.privkey.pem

-----BEGIN ENCRYPTED PRIVATE KEY-----
-----END ENCRYPTED PRIVATE KEY-----

To remove the encryption and password challenge, run the following command:

openssl rsa -in dlm8500.privkey.pem -out dlm8500.deckey.pem

The resulting private key file should contain the following starting and ending lines:

cat dlm8500.deckey.pem

-----BEGIN RSA PRIVATE KEY-----
-----END RSA PRIVATE KEY-----

Proceed with the SSL Key installation using the decrypted private key as described in the documentation.

The current documentation does not include instructions for handling ENCRYPTED certificates when using DLMDR.

Both of the following documents will be updated in later releases with this information.

  • Installation Guide for DLm8500 with PowerMax in Chapter 17: Installing DLMDR SSL Certificates
  • DLMDRD Software for DLm8500 with PowerMax Service Guide 302-005-782 in Chapter 6: DLMDRD SSL Certificates Installation

 

Affected Products

Disk Library for mainframe DLm8500

Products

Disk Library for mainframe, Disk Library for mainframe DLm8500
Article Properties
Article Number: 000081911
Article Type: Solution
Last Modified: 21 Aug 2026
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.