在ONTAP升级期间报告"SSAL uns密封 操作失败"警报
适用场景
- ONTAP升级到9.8或更高版本
- 板载密钥管理器(OKM)
- 可信平台模块(TPM)
问题描述
- 在ONTAP升级期间、节点会在事件日志中报告以下错误。
[NodeA: svc_queue_thread: crypto.ssal.failed:alert]: SSAL operation failed: SSAL Unseal operation failed.
[NodeA: splog_main: mgr.boot.reason_ok:notice]: System rebooted after a giveback.
- 此操作不会发生原因解决升级过程中的任何问题。
- 发生错误时的SKTRACE.GZ日志指示：
[0:0] SSAL_Error: tss_tpm_load:396 tss_malloc of 0 bytes failed for public buffer
[0:0] SSAL_Error: crypto_ssal_tpm_unseal:226 tss_tpm_load failed
[0:0] SSAL_Error: tss_log_error:232 crypto_ssal_tpm_unseal: failed, rc 000b0003
[0:0] SSAL_Error: tss_log_error:234 TSS_RC_MALLOC_SIZE - The malloc size is too large or zero
- 同时、MGWD.GZ日志 指示：
- TPM即将升级
- 写入在中成功发生
KeymanagerConfigFile
[kern_mgwd:info:2666] 0x820cfde00: 0: DEBUG: security_mgwd::upgrade::TPMUpgradeRevert: [upgradeCommit]:107: Entering TPM Upgrade Task
[kern_mgwd:info:2666] 0x820cfde00: 0: DEBUG: keymanager_shared::KeymanagerConfigFile: [write]:192: started writing file: /cfcard/kmip/km_onboard.wkeydb
[kern_mgwd:info:2666] 0x820cfde00: 0: DEBUG: keymanager_shared::KeymanagerConfigFile: [write]:225: finished writing file: /cfcard/kmip/km_onboard.wkeydb
[kern_mgwd:info:2666] 0x820cfde00: 0: DEBUG: security_mgwd::upgrade::TPMUpgradeRevert: [upgradeCommit]:121: Finishing TPM Upgrade Task: success