Solution for restores that do not decrypt
If the encrypted tape restores are not decrypting, consider the following solutions:
Verify that the original backup image was encrypted to begin with by viewing the encryption key tag field in the image record.
Verify that the key record with the same encryption key tag field is in a record state that supports restores. Those states include active or inactive states.
If the key record is not in the correct state change the key back to the inactive state.
Other non-KMS configuration solution options to consider:
Verify that the drive and media support encryption.
Is the encrypted media being read in an encryption-capable tape drive?