ONTAP upgrade paused with "Failed to lookup cpkek from cryptomod."
Applies to
- ONTAP upgrade
- Onboard Key Manager enabled
Issue
- ONTAP upgrade in
paused-on-error
status - The
upgrade-revert show
command displays output similar to the following:
::> set advanced
::*> system node upgrade-revert show -node node_name
Vers Phase Status Upgrade Phase Status Message
---- ---------- -------- ------------------------------------------------------
1200 pre-root applied No upgrade is required for this phase.
1200 pre-apps applied Upgrade successful.
1200 post-apps aborted Internal error. Failed to lookup cpkek from cryptomod. Key manager returned: ERROR_KEY_GEN_CRYPTO_FAILED. Crypto return code: . Run the "security key-manager onboard sync" command with the cluster passphrase to synchronize the onboard key hierarchy on all nodes and then retry upgrade.
3 entries were displayed.