Salesforce

Attempting to run proutil epolicy view area reports errors (15207) and (15211).

« Go Back

Information

 
TitleAttempting to run proutil epolicy view area reports errors (15207) and (15211).
URL NameAttempting-to-run-proutil-epolicy-view-area-reports-errors-15207-and-15211
Article Number000113191
EnvironmentProduct: OpenEdge
Version: 10.2B, 11.x
OS: All supported platforms
Other: Transparent Date Encryption
Question/Problem Description
The encryption policies view area report is failing to run.
Problem appears related to areas which are Encrypted.
Steps to Reproduceproutil <dbname> -C epolicy view area "area name here" -Passphrase
Clarifying Information
Type II areas with object level encryption are not reporting problems.
Data Administration tool (which reports on Type II area objects -- tables, indices, and lobs) is not experiencing a problem.
Error MessageupEncObjectViewGetAreaName / 4 : Internal error, unexpected error returned from dsmCursorFind ret: -1215 (15207)
upEncObjectViewOP / 4 : Failure to get AREA object information, ret: -1215 (15211)
upEncObjectView / 1 : Internal error, unexpected error returned from upEncObjectView ret: -1215 (15207)
Defect NumberOCTA-4106
Enhancement Number
Cause
TDE policies must be removed for the area before the area extents are removed. PROSTRCT REMOVE does not check for epolicy records before removing area extents with no database object records in it.

When encrypted Areas (which had been previously removed using PROSTRCT REMOVE) did not have the Encryption Policy information removed from the Encryption Policy Area, orphan encryption area policy records are left in Encryption Policy entries which point to an invalid area. This causes the epolicy view area report to fail when it can no longer find an area record for the area policy.

The database does not crash but the epolicy view area reports an error and ends.
 
Resolution
Fixed version(s): 11.7.4.0, 12.0.0.0, 11.6.4.012
Workaround
In OpenEdge 11.7.4, 12.0, and earlier versions, if Encrypted Area extents have already been removed, epolicy view reports that identify if a storage area is encrypted or not will be unreliable for audit reviews.

Revert to backup before TDE Areas were deleted then follow the Steps in Article  How to remove Encryption Policies defined on a Type I area before using prostrct to remove the area?   
Notes
In OpenEdge 11.7.4, 12.0, and later versions the PROSTRCT REMOVE utility will fail when epolicy records must be removed before the area extent can be removed:
ERROR: Area cannot be removed until area encryption policy has been deleted

 
Keyword Phrase
Last Modified Date11/29/2023 5:19 PM

Powered by