跳转到主内容

接管尝试被密钥管理器否决

Views:
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
core<a>2009617924</a>
Last Updated:

适用场景

  • ONTAP 9
  • FAS

问题描述

  • 接管操作已中止、并出现以下错误:

::> storage failover show

                              Takeover
Node           Partner        Possible      State Description
-------------- -------------- -------- -------------------------------------
node-01       node30n        true      Connected to node-02. Previous
                                       takeover attempt by node-02 was
                                       aborted because operation was vetoed.
node-02        node30m       true      Connected to node-01. Previous
                                       takeover attempt was aborted because
                                       operation was vetoed.

  • storage failover show-takeover 命令的输出显示此操作已被密钥管理器否决:
cluster::> storage failover show-takeover
Node       Node Status           Aggregate      Takeover Status
---------- --------------------- -------------- -------------------------------
node-01   Optimized takeover
           by partner aborted.
                                 node-01_aggr1
                                                Failed: Operation was vetoed
                                                by keymanager. Check the event
                                                log.
                                             CFO aggregates Not attempted yet.
node-02   Optimized takeover
           of partner aborted.
                                         Run the command
                                         "storage failover
                                         show-takeover -node
                                         node-01" to
                                         display the
                                         relocation status of
                                         the partner.
                                 -              -
  • 所有加密密钥都会在节点上还原:

Cluster::*> security key-manager query

      Node: Node-01
  Key Manager: 10.216.XX.XXX
 Server Status: Available

Key Tag                 Key Type  Restored
------------------------------------  --------  --------
                    NSE-AK   yes
   Key ID: 00000000000000000200000000000100983cd5df1ff4663fa85d3bfb9ecbc6990000000000000000
fas2520-rtp-2a             NSE-AK   yes
   Key ID: 00000000000000000200000000000100ca6d2fea44c952726e602e17416257700000000000000000
fas2520-rtp-2a             NSE-AK   yes
   Key ID: 00000000000000000200000000000100d7b8fef5668a7e7383876f323eab6bf00000000000000000

      Node: Node-02
  Key Manager: 10.216.XX.XXX
 Server Status: Available

Key Tag                 Key Type  Restored
------------------------------------  --------  --------
fas2520-rtp-2a             NSE-AK   yes
   Key ID: 00000000000000000200000000000100983cd5df1ff4663fa85d3bfb9ecbc6990000000000000000
fas2520-rtp-2a             NSE-AK   yes
   Key ID: 00000000000000000200000000000100ca6d2fea44c952726e602e17416257700000000000000000
fas2520-rtp-2a             NSE-AK   yes
   Key ID: 00000000000000000200000000000100d7b8fef5668a7e7383876f323eab6bf00000000000000000
6 entries were displayed.

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.