ONTAP 升级失败 - 启用 SSL FIPS 模式时不支持 "aes128-gcm" 和 "aes256-gcm"
适用于
- 启用 FIPS 的 ONTAP 升级
问题
- 检查更新进度
Cluster::> set diag
Cluster::*> cluster image show-update-progress
Estimated Elapsed
Update Phase Status Duration Duration
-------------------- ----------------- --------------- ---------------
Pre-update checks completed 00:10:00 00:00:04
Data ONTAP updates paused-on-error 01:17:00 21:17:45
- 查看升级期间失败的任务
Cluster::> set advanced
Cluster::*>system node upgrade-revert show -node Clustern1
Node: Clustern1 Status: aborted
Status Message: The upgrade aborted. Contact support personnel for the upgrade repair procedure.
Vers Phase Status Upgrade Phase Status Message
---- ---------- -------- ------------------------------------------------------
700 pre-root applied No upgrade is required for this phase.
700 pre-apps applied Upgrade successful.
700 post-apps aborted Cipher(s) "aes128-gcm" and "aes256-gcm" are not supported when SSL FIPS mode is enabled.
3 entries were displayed.
Cluster::*>system node upgrade-revert show -instance
Node Vers Phase ID Proc Status Description
------------ ---- --------- --- ------ ---------- -----------------------------
Clustern1 600 post-apps 637 mgwd aborted sshd config Maxauthtries Upgrade Revert Task