Running a backup thru IoP - I am getting this:

Clicking 'OK' in the otherwise blank popup, I get this:

After clicking 'OK' to this error - the backup terminates. I am not sure if the backup is complete - or if it terminated early due to the error.

Here are my versions:

Any idea?

Michael.

Backups are definitely incomplete and corrupted. I get a 1kb file that won't unzip because the format is unrecognized. Hopefully, a backup of this nature is not needed for the zwave migration from Zooz to zmatter.

Backups are definitely incomplete and corrupted. I get a 1kb file that won't unzip because the format is unrecognized. Hopefully, a backup of this nature is not needed for the zwave migration from Zooz to zmatter.

The size exceeds the capabiliy of zip program's size capabilities.

The backup file is double zipped so you have to do it twice. Don't know why somebody would do that, because the second compression doesn't lose one byte.

Use zip7 for larger files. However ISY was always capable.

Sent from my SM-G781W using Tapatalk

WinRAR reports this:


7-Zip reports this:


Fairly sure the backup is failing.

I've verified isy.cert is present in the location where it 'couldn't be retrieved' from:


Trying a new backup - instead of the blank initial error I get:

Clicking 'OK' I see the underlying error - the same as before:


just in case the filesystem is full - there appears to be enough space:

Seeing the same on one of mine that I upgraded.

Sent from my Pixel 6 Pro using Tapatalk

I just completed several succesful backups in my IoP.

14 hours ago, asbril said:

I just completed several succesful backups in my IoP.

Do you have the TPM enabled? I wonder (since the file is a cert) if there is an issue when the private key is TPM protected.

2 minutes ago, MWareman said:

Do you have the TPM enabled? I wonder (since the file is a cert) if there is an issue when the private key is TPM protected.

What is TPM ?

24 minutes ago, asbril said:

What is TPM ?

Does this say 'Disable' (it's enabled) - or 'Enable' (it's disabled)?

If you enabled it (it's not enabled by default) you would have set a password. TPM is a security chip and it generates and stores the secrets used to encrypt certain sensitive data - and a certificate key is certainly sensitive. 

By storing the encryption key in the TPM it cannot be retrieved - meaning encrypted data on Policy (and in the database) cannot be read even if the Policy get's compromised. 

An initial guess is that if the certificate is encrypted that may be causing the backup to fail - but my guess is wrong if you have TPM enabled.

40 minutes ago, MWareman said:

Does this say 'Disable' (it's enabled) - or 'Enable' (it's disabled)?

Enabled

20 minutes ago, asbril said:

Enabled

Seems my theory is incorrect....   oh well. Will have to wait and see what the UDI team determines after the holiday.

@MWareman,

We are migrating all certs out of Polyglot and into udx. In 5.4.4 there was an issue with one of these certs which didn't let backup to proceed. In 5.4.5, this should be fixed. This said, the latest udx upgrade takes a long time because we are installing some python packages for Z-Wave migration. So, perhaps when you tried the backup, udx was not yet started. 

With kind regards,
Michel

I have this error on 5.4.5 a few hours after restart - with udx running. 

Just tried again now - 2 days later - and still getting exactly the same errors.  udx is most definitely running. 

Just confirming - udx definitely running:

I also just noticed - after the backup fails - control returns to the admin console. However, the .zip file is still locked open for write access. I cannot delete the invalid backup file until after I exit the admin console. 

Michael.

I have successful backups (like @asbril), but don't have TPM enabled. 

I've been running 5.4.5 several weeks. (soon after others reported it updated...whenever that was). 

 

 

3 minutes ago, Geddy said:

I have successful backups (like @asbril), but don't have TPM enabled. 

I've been running 5.4.5 several weeks. (soon after others reported it updated...whenever that was). 

 

 

I still don't know what TPM stands for  

10 minutes ago, asbril said:

I still don't know what TPM stands for

This Polisy (is) Mine!

I love that definition - but in this context it's "Trusted Platform Module" - https://en.wikipedia.org/wiki/Trusted_Platform_Module

@asbril actually @MWareman alluded to it above. It's a chip for security on code on a device. I believe Win11 started using this too in order to verify updates.

From some Microsoft documentation:

Quote

Trusted Platform Module (TPM) technology is designed to provide hardware-based, security-related functions. A TPM chip is a secure crypto-processor that is designed to carry out cryptographic operations. The chip includes multiple physical security mechanisms to make it tamper-resistant, and malicious software is unable to tamper with the security functions of the TPM.

 

I had mine bug-out on my Dell laptop. It was a PITA for a few months and I always had to use workarounds. Support documents always told me to go into the BIOS and enable it but the BIOS had no recollection of it.

In the end, I think the only thing that could be done was to open up the laptop, disconnect the battery, and short out the BIOS backup battery terminals. Suddenly the BIOS woke and knew about the chip/function again and all was right in the world again. I used that opportunity to replace the laptop battery as well.

Edited November 28, 20222 yr by larryllix

@MWareman,

If you are still having this issue, please do submit a ticket and we'll get to the root cause.

With kind regards,
Michel

On 11/29/2022 at 1:24 PM, Michel Kohanim said:

@MWareman,

If you are still having this issue, please do submit a ticket and we'll get to the root cause.

With kind regards,
Michel

Ticket opened.

Thank you!