添加KMIP服务器时出现证书错误
适用场景
- ONTAP 9
- 外部密钥管理(EKM)
- 密钥管理互操作性协议(KMIP)
- 证书
问题描述
- 新 添加的KMIP服务器处于
unknown
状态、并且状态详细信息显示""SSL_PEER_VALIDATION
Cluster::> security key-manager external show-status
Node Vserver Primary Key Server Status
---- ------- ------------------------------------------------- ------------
Node-01
Vserver-1
10.XX.XX.11:6001 unknown
Status Details: SSL_PEER_VALIDATION
Node-02
Vserver-1
10.XX.XX.11:6001 unknown
Status Details: SSL_PEER_VALIDATION
- 尝试重新添加KMIP服务器时收到以下错误:
Error: command failed: The following issues were found: Unable to establish secure connection to KMIP server "10.35.17.11". Verify correct server-ca certificate has been installed for the specified KMIP server.