使用 ifgrp 和时,外部密钥服务器在启动时不可用 名称中有多个数字作为 KMIP 接口
适用于
- ONTAP 9.7P11
- 外部 KMIP 服务器
- 接口组 (IFGRP)
问题描述
ONTAP 升级到 9.7P11 后,外部密钥服务器在启动期间无法连接。
启动时可能会出现以下错误:
distro/kmip_ssl.c:4290:KCHECK:10:IO:kmip_ssl_conn_do_handshake
distro/kmip_io.c:243:KCHECK:10:IO:KMIP_xmit:KMIP_send
distro/kmip_cmd.c:2432:KCHECK:10:IO:KMIP_CMD_xmit:KMIP_xmit
distro/kmip_umsg.c:3525:KCHECK:10:IO:cmd_discover_versions
src/kmip_discover.c:95:KCHECK:10:IO:KMIP_CMD_discover_versions
WARNING: kmip_init: kmip_discover: Key server 151.156.177.99:5696 not responding, still trying
WARNING: kmip_init: All hosts unreachable for 1 minute, 4 seconds
********************************************************
* A T T E N T I O N *
* *
* Key server not responding. Is the key server online? *
* *
********************************************************
ERROR: kmip_init: Maximum wait time 1 minute exceeded.
********************************************************
* A T T E N T I O N *
* *
* System cannot connect to key managers. *
* *
********************************************************
kmip2_client: Importing keys from external key servers.[Mar 23 15:19:10]: 0x808604200: 0: ERR: kmip2::kmipCmds::KmipConnection: [cryptsoftErrorCb]:120: Error: distro/kmip_ssl.c: 4290: error: 10: msg: kmip_ssl_conn_do_handshake
[Mar 23 15:19:10]: 0x808604200: 0: ERR: kmip2::kmipCmds::KmipConnection: [cryptsoftErrorCb]:120: Error: distro/kmip_io.c: 243: error: 10: msg: KMIP_xmit:KMIP_send
[Mar 23 15:19:10]: 0x808604200: 0: ERR: kmip2::kmipCmds::KmipConnection: [cryptsoftErrorCb]:120: Error: distro/kmip_cmd.c: 2432: error: 10: msg: KMIP_CMD_xmit:KMIP_xmit
[Mar 23 15:19:10]: 0x808604200: 0: ERR: kmip2::kmipCmds::KmipConnection: [cryptsoftErrorCb]:120: Error: distro/kmip_umsg.c: 433: error: 10: msg: cmd_locate
[Mar 23 15:19:10]: 0x808604200: 0: ERR: kmip2::kmipCmds::KmipConnection: [cryptsoftErrorCb]:120: Error: src/kmipCmds/KmipLocateCmd.cc: 103: error: 10: msg: KMIP_CMD_locate
[Mar 23 15:19:10]: 0x808604200: 0: ERR: kmip2::import_keys: [getAks]:197: Caught KmipException while importing keys; KmipLocateException: IO (10)