使用 SP API 服务的命令失败，并且证书颁发机构（ CA ）签名的证书配置不正确

最后更新
另存为PDF

Views:: 4

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: core<a>FSE</a>

Last Updated:

适用场景

ONTAP 9

问题描述

在使用 SP API服务的命令中可能会出现以下一个或多个错误。此错误消息会根据命令和AF/FAS型号进行处理。

cluster1::> system node power show Node Status ---------------- ----------- Error: The Service Processor on node "cluster1-01" is not reachable. Check the network configuration, verify that the node is running, verify that the SP is online, verify that api-service is enabled on the SP, and try the command again.

cluster1::> system node power show Error: unknown state (SSL_error_code = 1) exception occurred in spcc_system_power_status code

cluster1::*> system node coredump trigger -node cluster1-01 Error: command failed: Secure connection failed with the Service Processor on node "cluster1-01". Contact support.

cluster1::> system node environment sensors show Warning: Unable to list entries on node cluster1-01. SSL_connect: unknown state (SSL_error_code = 1) exception occurred in spcc_sp_get_sensor_info code cluster1-01

Error: SSL_connect: unknown state (SSL_error_code = 1) exception occurred in DsmdbServer code

cluster1::> system node environment sensors show
Node Sensor State Value/Units Crit-Low Warn-Low Warn-Hi Crit-Hi ---- --------------------- ------ ----------- -------- -------- ------- ------- node-1a PSU2 FRU normal GOOD PSU1 FRU normal GOOD SP Status normal IPMI_HB_OK mSATA Status normal OK mSATA Pres normal PRESENT Warning: Unable to list entries on node node-1a. The Service Processor on node "node-1a" is not reachable. Verify that the SP or BMC is online, verify that api-service is enabled on the SP or BMC, verify that the partner node is running, check if pings from SP or BMC to partner node work, check if hw-assist keep-alives are normal, check that network ports are configured correctly and are functional (up). Then, try the command again. node-1b PSU2 FRU normal GOOD Warning: Unable to list entries on node node-1b. Timeout: Operation "environment_sensors_iterator::next_imp()" took longer than 50 seconds to complete [from mgwd on node "node-1a" (VSID: -1) to mgwd at 192.168.205.7] Error: show failed: Timeout: Operation "environment_sensors_iterator::next_imp()" took longer than 50 seconds to complete [from mgwd on node "node-1a" (VSID: -1) to mgwd at <Node-1a_intracluster_IP>]

helves and Sensors check 验证ONTAP 升级期间出现S错误消息：

::> cluster image show-update-progress Estimated Elapsed Update Phase Status Duration Duration -------------------- ----------------- --------------- --------------- Pre-update checks failed 00:10:00 00:04:21 Details: Pre-update Check Status Error-Action -------------------- ----------------- -------------------------------------- Shelves and Sensors Error Error: Validation check failed to check execute properly. Action: If the problem persists after retrying, delete the package and download again

在ONTAP 9.9.1及更高版本中、 system service-processor API-service check 命令报告一个或多个IP地址失败

cluster1::*> system service-processor api-service check -node cluster1-01

Date: Mon Mar 27 16:10:06 2023 Node: sselab-01 Port: 50000 Local Private IPv4: failed(192.0.2.80) Local Public IPv4: failed (10.10.10.10) Local Public IPv6: (Unable to get IP address)

Target Node: cluster1-02 IPv4: failed (10.10.10.11) IPv6: (Unable to get IP address)

Ping操作适用于服务处理器IP地址。
安全证书已过期。示例：

::> security certificate show -fields vserver,common-name,serial,ca,type,expiration -type server vserver common-name serial ca type subtype cert-name expiration ------- ----------- ---------------- -------- ------ ------- --------- ------------------------ ... svm svm_name 12AB3CDE45F6G789 svm_ca server - svm_cert Fri Jun 30 14:35:51 2022