ONTAP upgrade paused with "Failed to lookup cpkek from cryptomod."

Last updated
Save as PDF
Share
1. Share
2. Tweet
3. Share

Views:: 140

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: core

Last Updated:

Applies to

ONTAP upgrade
Onboard Key Manager enabled

Issue

ONTAP upgrade in paused-on-error status
The upgrade-revert show command displays output similar to the following:

::> set advanced

::*> system node upgrade-revert show -node node_name

Vers Phase Status Upgrade Phase Status Message

---- ---------- -------- ------------------------------------------------------

1200 pre-root applied No upgrade is required for this phase.

1200 pre-apps applied Upgrade successful.

1200 post-apps aborted Internal error. Failed to lookup cpkek from cryptomod. Key manager returned: ERROR_KEY_GEN_CRYPTO_FAILED. Crypto return code: . Run the "security key-manager onboard sync" command with the cluster passphrase to synchronize the onboard key hierarchy on all nodes and then retry upgrade.

3 entries were displayed.