# Percona xtrabackup libgcrypt error: integrity check failed: checksum error **URL:** \ **Category:** Uncategorized\ **Created:** [June 18, 2026, 11:47am UTC](https://forums.percona.com/t/percona-xtrabackup-libgcrypt-error-integrity-check-failed-checksum-error/40930 "2026-06-18T11:47:13Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![pkm2112](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/pkm2112/32/21433_2.png) [@pkm2112](https://forums.percona.com/u/pkm2112)\ **Post date:** [June 18, 2026, 11:47am UTC](https://forums.percona.com/t/percona-xtrabackup-libgcrypt-error-integrity-check-failed-checksum-error/40930/1 "2026-06-18T11:47:13Z")
Dear Experts When xtradb cluster(8.4.6) instance starts up , which is part of systemd auto startup I see following errors Jun 18 19:19:22 vm2rhel96 xtrabackup[3121]: Libgcrypt error: integrity check failed: Checksum error Jun 18 19:19:22 vm2rhel96 xtrabackup[3121]: Libgcrypt notice: state transition Self-Test =\> Error Jun 18 19:19:22 vm2rhel96 xtrabackup[3476]: Libgcrypt error: integrity check failed: Checksum error Jun 18 19:19:22 vm2rhel96 xtrabackup[3476]: Libgcrypt notice: state transition Self-Test =\> Error Jun 18 19:19:22 vm2rhel96 xtrabackup[3478]: Libgcrypt error: integrity check failed: Checksum error Jun 18 19:19:22 vm2rhel96 xtrabackup[3478]: Libgcrypt notice: state transition Self-Test =\> Error Jun 18 19:19:22 vm2rhel96 xtrabackup[3481]: Libgcrypt error: integrity check failed: Checksum error Jun 18 19:19:22 vm2rhel96 xtrabackup[3481]: Libgcrypt notice: state transition Self-Test =\> Error Jun 18 19:19:22 vm2rhel96 xbstream[3500]: Libgcrypt error: integrity check failed: Checksum error Jun 18 19:19:22 vm2rhel96 xbstream[3500]: Libgcrypt notice: state transition Self-Test =\> Error However replication is ok. I was digging: rpm -qa|grep -i Libgcrypt libgcrypt-1.10.0-11.el9.x86\_64 [mysqldba@vm1rhel96 ~]$ xtrabackup --version libgcrypt selftest: binary (0): Checksum error xtrabackup version 8.4.0-4 based on MySQL server 8.4.0 Linux (x86\_64) (revision id: c584cb20) [mysqldba@vm1rhel96 ~]$ mysql --version mysql Ver 8.4.6-6.1 for Linux on x86\_64 (Percona XtraDB Cluster binary (GPL) 8.4.6, Revision 9ca703c, WSREP version 26.1.4.3) [mysqldba@vm1rhel96 ~]$ ldd -v /appsSW/PerconaMYSQL/percona-xtrabackup-8.4.0-4-Linux-x86\_64.glibc2.34/bin/xtrabackup |grep -i libgcr libgcrypt.so =\> /appsSW/PerconaMYSQL/percona-xtrabackup-8.4.0-4-Linux-x86\_64.glibc2.34/bin/../lib/private/libgcrypt.so (0x00007f85056f9000) libgcrypt.so.20 =\> /lib64/libgcrypt.so.20 (0x00007f8504aa9000) libgcrypt.so (GCRYPT\_1.6) =\> /appsSW/PerconaMYSQL/percona-xtrabackup-8.4.0-4-Linux-x86\_64.glibc2.34/bin/../lib/private/libgcrypt.so /appsSW/PerconaMYSQL/percona-xtrabackup-8.4.0-4-Linux-x86\_64.glibc2.34/bin/../lib/private/libgcrypt.so: libgcrypt.so.20 (GCRYPT\_1.6) =\> /lib64/libgcrypt.so.20 /lib64/libgcrypt.so.20: [mysqldba@vm2rhel96 ~]$ ls -ld /lib64/libgcrypt.so.20 lrwxrwxrwx. 1 root root 19 Aug 1 2024 /lib64/libgcrypt.so.20 → libgcrypt.so.20.4.0 [mysqldba@vm2rhel96 ~]$ [mysqldba@vm2rhel96 ~]$ ls -ld /appsSW/PerconaMYSQL/percona-xtrabackup-8.4.0-4-Linux-x86\_64.glibc2.34/lib/private/libgcr\* lrwxrwxrwx. 1 mysql mysql 19 Aug 10 2025 /appsSW/PerconaMYSQL/percona-xtrabackup-8.4.0-4-Linux-x86\_64.glibc2.34/lib/private/libgcrypt.so → libgcrypt.so.20.4.0 -rwxr-xr-x. 1 mysql mysql 1320312 Aug 10 2025 /appsSW/PerconaMYSQL/percona-xtrabackup-8.4.0-4-Linux-x86\_64.glibc2.34/lib/private/libgcrypt.so.20.4.0 [mysqldba@vm2rhel96 ~]$ [mysqldba@vm2rhel96 ~]$ cksum /appsSW/PerconaMYSQL/percona-xtrabackup-8.4.0-4-Linux-x86\_64.glibc2.34/lib/private/libgcrypt.so.20.4.0 4160936112 1320312 /appsSW/PerconaMYSQL/percona-xtrabackup-8.4.0-4-Linux-x86\_64.glibc2.34/lib/private/libgcrypt.so.20.4.0 [mysqldba@vm2rhel96 ~]$ [mysqldba@vm2rhel96 ~]$ cksum /lib64/libgcrypt.so.20 2887115410 1304856 /lib64/libgcrypt.so.20 [mysqldba@vm2rhel96 ~]$ My OS version is rhel9.6 with fips enabled. However I’ve disabled it inside config file Thanx in advance ---
**Author:** ![Abhinav\_Gupta](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/abhinav_gupta/32/6262_2.png) [@Abhinav\_Gupta](https://forums.percona.com/u/Abhinav_Gupta)\ **Post date:** [June 18, 2026, 3:47pm UTC](https://forums.percona.com/t/percona-xtrabackup-libgcrypt-error-integrity-check-failed-checksum-error/40930/2 "2026-06-18T15:47:11Z")
> [@pkm2112](#): > > My OS version is rhel9.6 with fips enabled. However I’ve disabled it inside config file It looks like you still have the FIPS enabled. Could you please provide the output below? ```auto cat /proc/sys/crypto/fips_enabled ls -lrth /etc/gcrypt/fips_enabled ls -lrth /lib64/.libgcrypt.so.20.hmac /usr/lib64/fipscheck/.libgcrypt.so.20.hmac fips-mode-setup --check ``` ---
**Author:** ![pkm2112](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/pkm2112/32/21433_2.png) [@pkm2112](https://forums.percona.com/u/pkm2112)\ **Post date:** [June 19, 2026, 2:18am UTC](https://forums.percona.com/t/percona-xtrabackup-libgcrypt-error-integrity-check-failed-checksum-error/40930/3 "2026-06-19T02:18:53Z")
You’re right, fips mode is enabled. Needed due to compliance. In mysql config file, I had disabled it mysql\> show variables like ‘%fips%’; ±-------------------±-------+ | Variable\_name | Value | ±-------------------±-------+ | ssl\_fips\_mode | OFF | ±-------------------±-------+ 1 row in set (0.02 sec) mysql\> In mysql config file , I’ve set wsrep\_sst\_method=‘xtrabackup-v2’ [mysqldba@vm1rhel96 ~]$ cat /proc/sys/crypto/fips\_enabled 1 [mysqldba@vm1rhel96 ~]$ ls -lrth /etc/gcrypt/fips\_enabled ls: cannot access ‘/etc/gcrypt/fips\_enabled’: No such file or directory [mysqldba@vm1rhel96 ~]$ ls -lrth /lib64/.libgcrypt.so.20.hmac /usr/lib64/fipscheck/.libgcrypt.so.20.hmac ls: cannot access ‘/lib64/.libgcrypt.so.20.hmac’: No such file or directory ls: cannot access ‘/usr/lib64/fipscheck/.libgcrypt.so.20.hmac’: No such file or directory [mysqldba@vm1rhel96 ~]$ [mysqldba@vm1rhel96 ~]$ fips-mode-setup --check FIPS mode is enabled. [mysqldba@vm1rhel96 ~]$ ---
**Author:** ![Abhinav\_Gupta](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/abhinav_gupta/32/6262_2.png) [@Abhinav\_Gupta](https://forums.percona.com/u/Abhinav_Gupta)\ **Post date:** [June 25, 2026, 9:45am UTC](https://forums.percona.com/t/percona-xtrabackup-libgcrypt-error-integrity-check-failed-checksum-error/40930/4 "2026-06-25T09:45:24Z")
> [@pkm2112](#): > > FIPS mode is enabled. For a FIPS enabled OS, you should use the PXC 8.4.7-7 because from this version, FIPS enabled OS can continue to use the PXC which was earlier a part of the Pro build feature but it is now available as a community release since PXC 8.4.7-7 version. You may try this version. > **[Back to Our Open Source Roots: Winding Down Percona ProBuilds](https://www.percona.com/blog/back-to-our-open-source-roots-winding-down-percona-probuilds/)** > > An important update about Percona ProBuilds, why we created them, and why we decided to wind them down. > | Percona XtraDB Cluster (PXC) | FIPS 140-3 Validated Encryption Module, Amazon Linux 2023 packages | 8.4.7-7, 8.0.44-35 | > | --- | --- | --- |