Gemalto SafeNet KeySecure k250 appliance not-responding

Last updated
Save as PDF
Share
1. Share
2. Tweet
3. Share

Views:: 332

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: core

Last Updated:

Applies to

ONTAP 9
External Key Management (EKM)
Gemalto SafeNet KeySecure k250 appliance

Issue

EKM reports not-responding state when looking at server status

Cluster::*> key-manager show -status
  (security key-manager show)

Node                    Port    Registered Key Manager       Status
----------------------  ------  ---------------------------  ---------------
Cluster-01            5696    172.x.x.2                 not-responding
Cluster-01            5696    172.x.x.4                available
Cluster-02            5696    172.x.x.2                 not-responding
Cluster-02            5696    172.x.x.4                available
4 entries were displayed.

Errors in kmip2_client log:

Mon Dec 21 2020 21:05:08 -05:00 [kern_kmip2_client:info:6381] [Dec 21 21:05:08]: 0x809409c00: 0: ERR: kmip2::tables::kmip_keyserver_status: [setKeyServerStatus]:60: Received an exception in setting up TLS connection: IO (10)

EMS Reports:

Mon Dec 21 18:49:34 -0500 [Cluster-01: mgwd: km.keyserver.notavailable:alert]: The external key management server "172.x.x.2" is not available for Vserver "Cluster", status: "not-responding".