跳转到主内容

使用 ifgrp 和时,外部密钥服务器在启动时不可用 名称中有多个数字作为 KMIP 接口

Views:
5
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
CORE
Last Updated:

适用于

  • ONTAP 9.7P11
  • 外部 KMIP 服务器
  • 接口组 (IFGRP)

问题描述

ONTAP 升级到 9.7P11 后,外部密钥服务器在启动期间无法连接。
 
启动时可能会出现以下错误:
 
distro/kmip_ssl.c:4290:KCHECK:10:IO:kmip_ssl_conn_do_handshake
distro/kmip_io.c:243:KCHECK:10:IO:KMIP_xmit:KMIP_send
distro/kmip_cmd.c:2432:KCHECK:10:IO:KMIP_CMD_xmit:KMIP_xmit
distro/kmip_umsg.c:3525:KCHECK:10:IO:cmd_discover_versions
src/kmip_discover.c:95:KCHECK:10:IO:KMIP_CMD_discover_versions
WARNING: kmip_init: kmip_discover: Key server 151.156.177.99:5696 not responding, still trying
WARNING: kmip_init: All hosts unreachable for 1 minute, 4 seconds
********************************************************
*                 A T T E N T I O N                    *
*                                                      *
* Key server not responding. Is the key server online? *
*                                                      *
********************************************************
ERROR: kmip_init: Maximum wait time 1 minute exceeded.
********************************************************
*                 A T T E N T I O N                    *
*                                                      *
*       System cannot connect to key managers.         *
*                                                      *
********************************************************
kmip2_client: Importing keys from external key servers.[Mar 23 15:19:10]: 0x808604200: 0: ERR: kmip2::kmipCmds::KmipConnection: [cryptsoftErrorCb]:120: Error: distro/kmip_ssl.c: 4290: error: 10: msg: kmip_ssl_conn_do_handshake
[Mar 23 15:19:10]: 0x808604200: 0: ERR: kmip2::kmipCmds::KmipConnection: [cryptsoftErrorCb]:120: Error: distro/kmip_io.c: 243: error: 10: msg: KMIP_xmit:KMIP_send
[Mar 23 15:19:10]: 0x808604200: 0: ERR: kmip2::kmipCmds::KmipConnection: [cryptsoftErrorCb]:120: Error: distro/kmip_cmd.c: 2432: error: 10: msg: KMIP_CMD_xmit:KMIP_xmit
[Mar 23 15:19:10]: 0x808604200: 0: ERR: kmip2::kmipCmds::KmipConnection: [cryptsoftErrorCb]:120: Error: distro/kmip_umsg.c: 433: error: 10: msg: cmd_locate
[Mar 23 15:19:10]: 0x808604200: 0: ERR: kmip2::kmipCmds::KmipConnection: [cryptsoftErrorCb]:120: Error: src/kmipCmds/KmipLocateCmd.cc: 103: error: 10: msg: KMIP_CMD_locate
[Mar 23 15:19:10]: 0x808604200: 0: ERR: kmip2::import_keys: [getAks]:197: Caught KmipException while importing keys; KmipLocateException: IO (10)

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.