由于SED、节点退出失败
适用场景
- ONTAP 9
- NetApp存储加密(NSE)
问题描述
- 无法将节点从集群中取消加入、出现以下错误：
cluster1::*> cluster unjoin -node cluster-n02
Error: command failed: Cannot remove node "cluster-n02" because its self-encrypting drives use authentication keys (AKs) that will not be available to the node after it leaves the cluster. Use the "storage encryption disk show" and "storage encryption disk modify" commands to set the FIPS and data AKs of devices owned by the node and the failover partner to the default manufacture secure ID (MSID), keyID 0x0.
- 在这种情况下、当尝试将
0x0节点的密钥设置为默认值时、cluster-n01cluster-n02只有节点所属的驱动器cluster-n01修改为0x0
cluster1::*> storage encryption disk modify -disk 1.* -data-key-id 0x0
12 entries were acted on.
cluster1::*> storage encryption disk show-status
FIPS Latest Start Execution Disks Disks Disks
Node Support Request Timestamp Time (sec) Begun Done Successful
------- ------- -------- ------------------ ---------- ------ ------ ----------
cluster1-n01 true modify 8/15/2023 19:44:30 2 6 6 6
cluster1-n02 true modify 8/15/2023 19:44:30 5 6 6 0
cluster-n03 true unknown - - - - -
cluster-n04 true unknown - - - - -
4 entries were displayed.
cluster1::*> storage encryption disk show
Disk Mode Data Key ID
-------- ---- ----------------------------------------------------------------
1.0.0 data 00000000000000000xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
1.0.1 open 0x0
1.0.2 data 00000000000000000xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
1.0.3 open 0x0
1.0.4 data 00000000000000000xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
1.0.5 open 0x0
1.0.6 data 00000000000000000xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
1.0.7 open 0x0
1.0.8 data 00000000000000000xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
1.0.9 open 0x0
1.0.10 data 00000000000000000xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
1.0.11 open 0x0