无法在ONTAP中删除即将过期的KMIP客户端证书以安装新证书
适用场景
- ONTAP 9.5
- ONTAP 9.6
问题描述
- 用户希望删除即将到期的KMIP客户端证书并安装新证书。
- 删除当前KMIP客户端证书失败、并显示以下错误:
::*>security certificate delete -vserver vs1 -common-name prod1 -ca "cert1" -type client -serial xxxxxxxxxxxxxxxxxxxxx
Error: command failed on vserver "vs1" common-name "prod1" ca "cert1" type "client" subtype "kmip-cert": The certificate could not be removed due to the following conflicts:
Cannot remove certificate with subtype "kmip-cert" while external keymanager is configured.