接管尝试被密钥管理器否决
适用场景
- ONTAP 9
- FAS
问题描述
- 接管操作已中止、并出现以下错误：
::> storage failover show
Takeover
Node Partner Possible State Description
-------------- -------------- -------- -------------------------------------
node-01 node30n true Connected to node-02. Previous
takeover attempt by node-02 was
aborted because operation was vetoed.
node-02 node30m true Connected to node-01. Previous
takeover attempt was aborted because
operation was vetoed.
storage failover show-takeover命令的输出显示此操作已被密钥管理器否决：
cluster::> storage failover show-takeover
Node Node Status Aggregate Takeover Status
---------- --------------------- -------------- -------------------------------
node-01 Optimized takeover
by partner aborted.
node-01_aggr1
Failed: Operation was vetoed
by keymanager. Check the event
log.
CFO aggregates Not attempted yet.
node-02 Optimized takeover
of partner aborted.
Run the command
"storage failover
show-takeover -node
node-01" to
display the
relocation status of
the partner.
- -- 所有加密密钥都会在节点上还原：
Cluster::*> security key-manager query
Node: Node-01
Key Manager: 10.216.XX.XXX
Server Status: Available
Key Tag Key Type Restored
------------------------------------ -------- --------
NSE-AK yes
Key ID: 00000000000000000200000000000100983cd5df1ff4663fa85d3bfb9ecbc6990000000000000000
fas2520-rtp-2a NSE-AK yes
Key ID: 00000000000000000200000000000100ca6d2fea44c952726e602e17416257700000000000000000
fas2520-rtp-2a NSE-AK yes
Key ID: 00000000000000000200000000000100d7b8fef5668a7e7383876f323eab6bf00000000000000000
Node: Node-02
Key Manager: 10.216.XX.XXX
Server Status: Available
Key Tag Key Type Restored
------------------------------------ -------- --------
fas2520-rtp-2a NSE-AK yes
Key ID: 00000000000000000200000000000100983cd5df1ff4663fa85d3bfb9ecbc6990000000000000000
fas2520-rtp-2a NSE-AK yes
Key ID: 00000000000000000200000000000100ca6d2fea44c952726e602e17416257700000000000000000
fas2520-rtp-2a NSE-AK yes
Key ID: 00000000000000000200000000000100d7b8fef5668a7e7383876f323eab6bf00000000000000000
6 entries were displayed.