Two-phase commit
•The solution is for each DBMS to first move to a special situation, where the txn is “prepared”
•A crash won’t abort a prepared txn, it will leave it in prepared state
–So all changes made by prepared txn must be recovered during restart (including any locks held before the crash!)
NB unrelated to “two-phase locking”