ONTAP升级失败-启用SSL FIPS模式后、不支持aes128-gcm"和aes256-gcm"
适用场景
- 在启用FIPS的情况下进行ONTAP升级
问题描述
- 检查更新进度
Cluster::> set diag
Cluster::*> cluster image show-update-progress
Estimated Elapsed
Update Phase Status Duration Duration
-------------------- ----------------- --------------- ---------------
Pre-update checks completed 00:10:00 00:00:04
Data ONTAP updates paused-on-error 01:17:00 21:17:45
- 查看升级期间失败的任务
Cluster::> set advanced
Cluster::*>system node upgrade-revert show -node Clustern1
Node: Clustern1 Status: aborted
Status Message: The upgrade aborted. Contact support personnel for the upgrade repair procedure.
Vers Phase Status Upgrade Phase Status Message
---- ---------- -------- ------------------------------------------------------
700 pre-root applied No upgrade is required for this phase.
700 pre-apps applied Upgrade successful.
700 post-apps aborted Cipher(s) "aes128-gcm" and "aes256-gcm" are not supported when SSL FIPS mode is enabled.
3 entries were displayed.
Cluster::*>system node upgrade-revert show -instance
Node Vers Phase ID Proc Status Description
------------ ---- --------- --- ------ ---------- -----------------------------
Clustern1 600 post-apps 637 mgwd aborted sshd config Maxauthtries Upgrade Revert Task