Important Update: Cohesity Products Knowledge Base Articles


All Cohesity Knowledge Base Articles are now managed via the Cohesity Support Portal: https://support.cohesity.com/s/searchunify. The Knowledge Base articles available here will not reflect the latest information or may no longer be accessible.

Backup Exec Device and Media Service cannot start because the database recovery has failed

Article: 100026608
Last Published: 2020-09-04
Ratings: 0 0
Product(s): Backup Exec

Problem

Backup Exec Device and Media Service cannot start because the database recovery has failed .

Error Message

Event Id: 58068    
Source: Backup Exec
"The Backup Exec Device and Media Service could not start because the database recovery has failed. Refer to the database recovery log for details."

UDL connectivity test with the Backup Exec Database also fails with "Cannot generate SSPI context"

How to perform a UDL test / a quick test connection to the Backup Exec SQL instance

UMI Code: V-379-58068

Solution

Follow these steps:

  1. Click Start, click Run, type Adsiedit.msc, and then click OK.
  2. In the ADSI Edit snap-in, expand Domain [DomainName], expand DC= RootDomainName, expand CN=Users, right-click CN= AccountName, and then click Properties.

Note :
 
DomainName is a placeholder for the name of the domain.
RootDomainName is a placeholder for the name of the root domain.
AccountName is a placeholder for the account that you specify to start the SQL Server service.
If you specify the Local System account to start the SQL Server service, AccountName is a placeholder for the account that you use to log on to Microsoft Windows.
If you specify a domain user account to start the SQL Server service, AccountName is a placeholder for the domain user account.

  1. In the CN= AccountName Properties dialog box, click the Security tab. On the Security tab, click Advanced.
  2. In the Advanced Security Settings dialog box, make sure that SELF is listed under Permission entries. If SELF is not listed, click Add, and then add SELF.
  3. Under Permission entries, click SELF, and then click Edit.
  4. In the Permission Entry dialog box, click the Properties tab.
  5. On the Properties tab, click This object only in the Apply onto list, and then make sure that the check boxes for the following permissions are selected under Permissions:

Read servicePrincipalName
Write servicePrincipalName
Click OK three times, and then exit the ADSI Edit snap-in.

Run gpudate /force

Start the device and media server .

Reference : How to troubleshoot the "Cannot generate SSPI context" error message

Warning : If you use the Active Directory Service Interfaces (ADSI) Edit snap-in, the LDP utility, or any other LDAP version 3 clients and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require that you reinstall Microsoft Windows Server and / or Microsoft Exchange Server. We cannot guarantee that problems caused by incorrectly modifying the attributes of Active Directory objects can be resolved. Modify these attributes at your own risk.

Note :To grant the appropriate permissions and user rights to the SQL Server startup account, you must be logged on as a domain administrator, or you must ask your domain administrator to do this task. 

To configure the SQL Server service to create SPNs dynamically

 

Was this content helpful?