ONTAP 升级失败—启用 SSL FIPS 模式时不支持“ AES 128-GCM ”和“ AES 256 – GCM ”

最后更新
另存为PDF

Views:: 36

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: core

Last Updated:

适用于

ONTAP 在启用 FIPS 的情况下从 9.1 升级到 9.3

问题

检查更新进度

Cluster::> set diag Cluster::*> cluster image show-update-progress Estimated Elapsed Update Phase Status Duration Duration -------------------- ----------------- --------------- --------------- Pre-update checks completed 00:10:00 00:00:04 Data ONTAP updates paused-on-error 01:17:00 21:17:45

查看升级期间哪个任务失败

Cluster::> set advanced Cluster::*>system node upgrade-revert show -node Clustern1 Node: Clustern1 Status: aborted Status Message: The upgrade aborted. Contact support personnel for the upgrade repair procedure. Vers Phase Status Upgrade Phase Status Message ---- ---------- -------- ------------------------------------------------------ 700 pre-root applied No upgrade is required for this phase. 700 pre-apps applied Upgrade successful. 700 post-apps aborted Cipher(s) "aes128-gcm" and "aes256-gcm" are not supported when SSL FIPS mode is enabled. 3 entries were displayed.

Cluster::*>system node upgrade-revert show -instance

Node Vers Phase ID Proc Status Description ------------ ---- --------- --- ------ ---------- -----------------------------

Clustern1 600 post-apps 637 mgwd aborted sshd config Maxauthtries Upgrade Revert Task