Cannot unjoin NSE node from cluster, gives "Error: command failed: Cannot unjoin node"
Applies to
- ONTAP 9
- NetApp Storage Encryption (NSE)
- Onboard Key Manager (OKM)
- External Key Manager (KMIP)
Issue
Unable to unjoin node from NSE cluster after the NSE drives were rekeyed to 0x0.
Error:
::*> cluster unjoin -node <node>
Error: command failed: Cannot unjoin node "<node>" because its Storage
Encryption devices use authentication keys (AKs) that will not be
available to the node after it leaves the cluster. Use the "storage
encryption disk show" and "storage encryption disk modify" commands to
set the FIPS and data AKs of devices owned by the node and the failover
partner to the default Manufacture Secure ID (MSID), keyID 0x0.