跳转到主内容

ONTAP 升级失败—启用 SSL FIPS 模式时不支持“ AES 128-GCM ”和“ AES 256 – GCM ”

Views:
34
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
core
Last Updated:

适用于

ONTAP 在启用 FIPS 的情况下从 9.1 升级到 9.3

问题

检查更新进度

Cluster::> set diag
Cluster::*> cluster image show-update-progress
Estimated         Elapsed
Update Phase         Status                   Duration        Duration
-------------------- ----------------- --------------- ---------------
Pre-update checks    completed                00:10:00        00:00:04
Data ONTAP updates   paused-on-error          01:17:00        21:17:45

查看升级期间哪个任务失败

 Cluster::> set advanced
Cluster::*>system node upgrade-revert show -node Clustern1
 
Node: Clustern1                                    Status: aborted
Status Message: The upgrade aborted. Contact support personnel for the upgrade repair procedure.
 
 
Vers Phase      Status   Upgrade Phase Status Message
---- ---------- -------- ------------------------------------------------------
700  pre-root   applied  No upgrade is required for this phase.
700  pre-apps   applied  Upgrade successful.
700  post-apps  aborted  Cipher(s) "aes128-gcm" and "aes256-gcm" are not supported when SSL FIPS mode is enabled.
3 entries were displayed.

Cluster::*>system node upgrade-revert show -instance

Node         Vers Phase     ID  Proc   Status     Description
------------ ---- --------- --- ------ ---------- ----------------------------- 

Clustern1  600 post-apps 637 mgwd   aborted    sshd config Maxauthtries Upgrade Revert Task

 

 

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

Scan to view the article on your device