由于缺少NSE-AK密钥、OTS上的KMIP密钥还原失败
适用场景
- ONTAP Select
- ONTAP 9
- KMIP
- 自动化无中断升级(ANDU)
问题描述
- OTS中的ANDU验证失败、并显示：
Error: One or more encryption keys are unavailable.- 未还原的密钥为NSE-AK：
::*> key-manager query -restored no
(security key-manager query)
Node: cluster1-01
Key Manager: 1.1.1.2
Server Status: available
Key Tag Key Type Restored
------------------------------------ -------- --------
cluster1-01 NSE-AK no
Key ID: 00000000000000000200000000000abcdef12345678900000000000000000
- 尝试使用
security key-manager external restore还原密钥时失败：
Warning: Unable to list entries on node <node>. KMIP "Get" command failed
on external key server "x.x.x.x:5696". Cryptsoft error:
"Response status: OPERATION_FAILED. Reason: ITEM_NOT_FOUND. Message:
No Cryptographic Object found with given Unique Identifier".
Error: show failed: KMIP "Get" command failed on external key server
"x.x.x.x:5696". Cryptsoft error: "Response status:
OPERATION_FAILED. Reason: ITEM_NOT_FOUND. Message: No Cryptographic
""".