ONTAP 升级导致 TPM 禁用和密码短语失败

最后更新
另存为PDF

Views:

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: CORE

Last Updated:

适用于

AFF/FAS/ASA
ONTAP 9.16.X
带自加密驱动器 (SED/NSE) 的板载密钥管理器 (OKM)

问题描述

将 ONTAP 从 9.16.1P1 DAR 升级到 9.16.1P8 NODAR 图像后，观察到以下紧急警报：

[ec2-lon-napp2:statd:callhome.nse.ak.check.failed:EMERGENCY]: Callhome for AuthenticationKeyCheckFailed, disk "0n.1".
[ec2-lon-napp1:statd:callhome.nse.ak.check.failed:EMERGENCY]: Callhome for AuthenticationKeyCheckFailed, disk "0n.10".

尝试使用可用密码短语同步板载密钥管理器 (OKM) 失败：

security key-manager onboard sync
Error: command failed: Cluster-wide passphrase is incorrect.

进一步的磁盘加密修改尝试（将 data-key-id 设置为 0x0）也因身份验证错误而失败：

ERROR disk.encryptCmdFailed: Encrypting disk 0n.0 failed disk encrypt modify command with error status Could not authenticate with disk. (0xe)