ONTAP 9 回馈操作被密钥管理器否决

• ONTAP 9
• 板载密钥管理器（OKM）
• NetApp 卷加密（NVE）
• NetApp 聚合加密（NAE）
• 回交操作
• NDU 暂停操作

• 存储交还操作被否决。
• 如果运行 ONTAP NDU，暂停错误可能会显示 SFO 聚合交还问题：

Error: Giveback of SFO aggregate is vetoed., Action: Use the "storage failover show-giveback" command to view the detailed veto status information. Correct the vetoed subsystem. Use the "storage failover giveback -ofnode <node>" command to complete the giveback.

•   Storage failover show-giveback 表示交还被 keymanager 否决：

::*> storage failover show-giveback
               Partner
Node           Aggregate         Giveback Status
-------------- ----------------- ---------------------------------------------
<node1>
               CFO Aggregates    Done
               aggr1
                                 Failed: Operation was vetoed by keymanager.
                                 Check the event log

• 事件日志显示可能存在 gb.sfo.veto.kmgr.keymissing 错误：

::*> event log show -node * -event gb*
Time                Node             Severity      Event
------------------- ---------------- ------------- ---------------------------
<Time>        <node>         ERROR         gb.sfo.veto.kmgr.keysmissing: Giveback of aggregate aggr1 failed due to unavailability of volume encryption keys for the encrypted volumes of the aggregate on the partner node

ALERT  crypto.import.failed: ERROR: Import of key with key ID <key> failed. Additional information: wrapping key not found.
ALERT  sfo.sendhome.subsystemAbort: The giveback operation of '<aggr>' was aborted by 'keymanager'