更换主板后、板载keymanager sync失败

最后更新
另存为PDF

Views:: 17

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: core

Last Updated:

适用场景

下面列出的ONTAP版本未修复错误ID 1573150
- 9.8P19和 9.8P20
- 9.9.1P16和 9.9.1P17
- 9.10.1P13和9.10.1P14
- 9.11.1P8 9.11.1P11
- 9.12.1P2 9.12.1P6
- 9.13.1. 9.13.1P1
TPM 5.63
板载密钥管理器(OKM)

问题描述

已更换主板(PCM)
已成功遵循并完成还原板载密钥管理加密密钥或如何从ONTAP启动菜单还原板载密钥管理器服务器配置中的操作步骤、但会生成以下警告：

WARNING! TPM is not initialized but OKM's key hierarchy is already protected with TPM

其他可能的错误包括：

Feb 28 14:45:52 [cluster1:crypto.ssal.failed:ALERT]: SSAL operation failed: SSAL Unseal operation failed

Feb 28 14:45:52 [cluster1:crypto.okmrecovery.failed:ALERT]: ERROR: Import of the onboard key hierarchy failed: failed to import key hierarchy. Additional information: error: ssal unseal failed

::> event log show -message-name gb.sfo.veto.kmgr.keysmissing
<date><time> <node-name> ERROR gb.sfo.veto.kmgr.keysmissing: Giveback of aggregate <aggr-name> failed due to unavailability of volume encryption keys for the encrypted volumes of the aggregate on the partner node <node-name>.

在恢复后、OKM同步将失败、并显示以下内容：

::> security key-manager onboard sync

Error: command failed: The Onboard Key Manager has failed to sync on the local node "cluster1-02", error: "Internal error". Failed to setup the Onboard Key Manager on node "cluster1-02"