ONTAP升级映像验证失败、并显示加密密钥迁移状态错误

最后更新
另存为PDF

Views:: 131

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: core

Last Updated:

适用场景

ONTAP 9
自动化无中断升级(ANDU)
外部密钥管理器

问题描述

ONTAP映像验证失败、并显示错误：

Encryption key migration status: Error

Error: The following data Vservers with external key management enabled have encryption keys managed by the admin Vserver: svm1.

Action: For each data Vserver listed above, migrate the encryption keys from the admin Vserver to the data Vserver using the (privilege: advanced) 'security key-manager key migrate' command.

尝试按照上述操作计划迁移密钥失败：

Category: ekmip_server

Status: FAILED

Details: eKMIP Server:

kmip_server:5696, hosted

node: cluster-01, status: unknown,

status-detail: Response status: OPERATION_FAILED.

Reason: AUTHENTICATION_NOT_SUCCESSFUL. Message:

CERT_AUTH_FAILED.

根据security certificates show输出、此SVM上存在已过期的SSL证书：

SVM1 123456789ABCDEF keyvault.vault.azure.net client

Certificate Authority: keyvault.vault.azure.net

Expiration Date: Fri Nov 15 12:18:57 2024