外部密钥管理器处于未知状态、并出现SSL对等验证错误
适用场景
- ONTAP 9
- 外部密钥管理(EKM)
- 密钥管理互操作性协议(KMIP)
问题描述
- 外部密钥管理器报告"未知"状态并显示ssl_peer_validation错误：
::*> security key-manager external show-status
Node Vserver Key Server
Status
---- ------- ------------------------------------------- ---------------
cluster-1a
SVM1
x.x.x.x:5696 unknown
Status Details: SSL_PEER_VALIDATION
- 卷创建将失败、并显示以下错误：
cluster1::> volume create -vserver svm1 -size 1G -volume vol1 -state online -aggregate aggr1_cluster1b
Error: command failed: One or more key servers are unavailable for Vserver "cluster1". Use the "security key-manager external show-status -vserver cluster1" command to check the status of the key servers. Verify that the network configuration is correct.