OKM升级错误:无法验证映像签名
适用场景
- ONTAP 9.7及更高版本
- 软件映像下载
- 板载密钥管理器(OKM)已启用通用加密标准(Common Critieria、CC)模式、该模式要求用户在每次节点重新启动时输入密码短语
问题描述
如果集群中的OKM处于CC模式、则在该集群上下载ONTAP 映像可能会遇到以下错误:
CLI 错误消息:
Failed to verify the signatures of the image. The image may
have been corrupted. Replace the image, and then try the command
again., Action: Use the "cluster show" command to verify that all
nodes in the cluster are healthy. Use the "cluster image package
show-repository" command to verify that the downloaded image has
the correct version. If all nodes are healthy and the image has the
correct version, wait a few minutes, and then use the "cluste
image resume-update" command to resume the update.
示例:
system node image update -replace image2 -node netappnode0* -package http://Web_server/97P5_q_image.tgz -setdefault true
Warning: The recommended best-practice is to use the automated non-disruptive update procedure if you are attempting an upgrade or a minor version downgrade. Refer to the Clustered Data ONTAP Upgrade and Revert/Downgrade Guide for details.
Do you want to continue? {y|n}: y
Software update started on node netappnode01-dr. Updating image2 with package http://.../97P5_q_image.tgz.
Downloading package. This may take up to 20 minutes.
98% downloaded
Download complete.
Listing package contents.
Decompressing package contents.
Verifying package signature.
Install Failed.
Failed to verify the signatures of the image. The image may have been corrupted.
Replace the image, and then try the command again.
Error: command failed on node "netappnode01-dr": Install Failed. Failed to verify the signatures of the image. The image may have been corrupted. Replace the image, and then try the command again.