使用 EKM 还原密钥失败，未找到加密对象

最后更新
另存为PDF

Views:: 35

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: core

Last Updated:

适用于

ONTAP 9
集群外部密钥管理器（EKM）
NetApp 卷加密（NVE）
NetApp 聚合加密（NAE）

问题

主密钥服务器失败后，由于密钥管理器而否决回馈。
接管失败并显示"Failed: Operations was vetoed by keymanager. Check the event log."，密钥还原失败并显示以下错误。
无法还原外部密钥，出现错误：

::*> security key-manager external restore -node <node>
 
 Warning: Unable to list entries on node <node>. KMIP "Get" command failed
          on external key server "x.x.x.x:5696". Cryptsoft error:
         "Response status: OPERATION_FAILED. Reason: ITEM_NOT_FOUND. Message:
          No Cryptographic Object found with given Unique Identifier".
 Error: show failed: KMIP "Get" command failed on external key server
       "x.x.x.x:5696". Cryptsoft error: "Response status:
        OPERATION_FAILED. Reason: ITEM_NOT_FOUND. Message: No Cryptographic
        Object found with given Unique Identifier".