更换主板后、板载keymanager sync失败

最后更新
另存为PDF

Views:: 13

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: core<a>2009580475</a>

Last Updated:

适用场景

下面列出的ONTAP版本未修复错误ID 1573150
- 9.8P19和 9.8P20
- 9.9.1P16和 9.9.1P17
- 9.10.1P13和9.10.1P14
- 9.11.1P8至9.11.1P11
- 9.12.1P2至9.12.1P6.
- 9.13.1和9.13.1P1
TPM 5.63
板载密钥管理器(OKM)

问题描述

已更换主板(PCM)
[1] 如何从ONTAP 启动菜单还原板载密钥管理器服务器配置已成功遵循并完成还原板载密钥管理加密密钥或如何从ONTAP启动菜单还原板载密钥管理器服务器配置中的操作步骤、但会生成以下警告：

WARNING! TPM is not initialized but OKM's key hierarchy is already protected with TPM

其他可能的错误包括：

Feb 28 14:45:52 [cluster1:crypto.ssal.failed:ALERT]: SSAL operation failed: SSAL Unseal operation failed

Feb 28 14:45:52 [cluster1:crypto.okmrecovery.failed:ALERT]: ERROR: Import of the onboard key hierarchy failed: failed to import key hierarchy. Additional information: error: ssal unseal failed

::> event log show -message-name gb.sfo.veto.kmgr.keysmissing
<date><time> <node-name> ERROR gb.sfo.veto.kmgr.keysmissing: Giveback of aggregate <aggr-name> failed due to unavailability of volume encryption keys for the encrypted volumes of the aggregate on the partner node <node-name>.

在恢复后、OKM同步将失败、并显示以下内容：

::> security key-manager onboard sync

Error: command failed: The Onboard Key Manager has failed to sync on the local node "cluster1-02", error: "Internal error". Failed to setup the Onboard Key Manager on node "cluster1-02"