由于Azure CVO和Azure密钥存储之间的连接问题描述、卷无法访问

最后更新
另存为PDF

Views:: 23

Visibility:: Public

Votes:: 0

Category:: cloud-volumes-ontap-cvo

Specialty:: cloud

Last Updated:

适用场景

Cloud Volumes ONTAP (CVO)
Microsoft Azure
Azure密钥存储(KV)

问题描述

1.EMS日志中与"APV"相关的关键访问错误如下所示：

MonJan 22 03:53:09 +1000 [node-01: mgwd: ekmip.akv.volOffline:alert]:The Vserver has been blocked and any encrypted volumes belonging to Vserver "vservername" have been taken offline due to keyaccess errors associated with the key-id https://kv-storage-avs-4.vault.azure.net/keys/cvoname-vserver-nve owned by Azure Key Vault https://kv-storage-avs-4.vault.azure.net/

2.由于密钥不可访问、卷已脱机：

Mon Jan 22 03:53:01 +1000 [node-01: vv_config_worker04: wafl.vvol.offline:info]: Volume 'vol01@vserver:b715xxxx-00xx-11xx-9xxx-00xx4892xxxx' has been set temporarily offline
 Mon Jan 22 03:53:01 +1000 [node-01: vv_config_worker20: wafl.vvol.offline:info]: Volume 'vol02(1)@vserver:b715xxxx-00xx-11xx-9xxx-00xx4892xxxx' has been set temporarily offline

3.验证是否在KMIP2-Client.GZ 文件中看到Error: IO 、如下所示：

00000022.000dd8b8 0x4xxx3d Wed Jan 31 2024 05:56:09 +10:00 [kern_kmip2_client:info:8183] [Jan 31 05:56:09]: 0x80axx5f00: 0: ERR: kmip2::kmipCmds::KmipConnection: [cryptsoftErrorCb]:93: Error: distro/kmip_ssl.c: 4557: error: 10: msg: kmip_ssl_conn_do_handshake:login.microsoftonline.com
 00000022.000dd8b9 0x4xxx3d Wed Jan 31 2024 05:56:09 +10:00 [kern_kmip2_client:info:8183] [Jan 31 05:56:09]: 0x80axx5f00: 0: ERR: kmip2::kmipCmds::KmipConnection: [cryptsoftErrorCb]:93: Error: distro/kmip_io.c: 229: error: 10: msg: KMIP_xmit:KMIP_send
 00000022.000dd8ba 0x4xxx3d Wed Jan 31 2024 05:56:09 +10:00 [kern_kmip2_client:info:8183] [Jan 31 05:56:09]: 0x80axx5f00: 0: ERR: kmip2::kmipCmds::KmipConnection: [cryptsoftErrorCb]:93: Error: src/kmip_cmd.c: 2648: error: 10: msg: KMIP_CMD_xmit:KMIP_xmit
 00000022.000dd8bb 0x4xxx3d Wed Jan 31 2024 05:56:09 +10:00 [kern_kmip2_client:info:8183] [Jan 31 05:56:09]: 0x80axx5f00: 0: ERR: kmip2::kmipCmds::KmipConnection: [cryptsoftErrorCb]:93: Error: src/AKV/kmip_akv_cmd.c: 839: error: 10: msg: akv_do_login
 00000022.000dd8bc 0x4xxx3d Wed Jan 31 2024 05:56:09 +10:00 [kern_kmip2_client:info:8183] [Jan 31 05:56:09]: 0x80axx5f00: 0: ERR: kmip2::kmipCmds::KmipConnection: [cryptsoftErrorCb]:93: Error: src/AKV/kmip_akv_cmd.c: 1408: error: 10: msg: cmd_akv_encrypt
 00000022.000dd8bd 0x4xxx3d Wed Jan 31 2024 05:56:09 +10:00 [kern_kmip2_client:info:8183] [Jan 31 05:56:09]: 0x80axx5f00: 0: ERR: kmip2::kmipCmds::KmipConnection: [cryptsoftErrorCb]:93: Error: src/tables/kmip_cloud_cmd.cc: 84: error: 11: msg: KMIP_get_data
 00000022.000dd8be 0x4xxx3d Wed Jan 31 2024 05:56:09 +10:00 [kern_kmip2_client:info:8183] [Jan 31 05:56:09]: 0x80axx5f00: 0: ERR: kmip2::tables::kmip_akv_cmd: [getSmdbError]:109: Error: IO

4.使用以下命令验证service_reachability 在问题描述期间失败：

::*> azure check