跳转到主内容

由于密钥管理器的原因,在 andu 期间交还被否决

Views:
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
encryption
Last Updated:

适用场景

  • ONTAP 9.8
  • NetApp 卷加密 (NetApp Volume Encryption, NVE)
  • ONTAP 自动无中断升级
  • 外部密钥服务器

问题描述

  • 正在进行 ONTAP 自动无中断升级
  • 由于配对节点上缺少密钥,将数据聚合交还给节点失败

cf_giveback: gb.sfo.veto.kmgr.keysmissing:error]: Giveback of aggregate <aggregate> failed due to unavailability of volume  encryption keys for the encrypted volumes of the aggregate on the partner node <partner_node>.

  • 运行 security key-manager external restore -node <target_node> -key-server <key_server_IP> 失败并显示错误:

Warning: Unable to list entries on node <node>. KMIP "get" command failed on external key server "<key_server_IP>".         Cryptsoft error: "Response status: OPERATION _FAILED. Reason: PERMISSION_DENIED.

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.