Skip to main content
NetApp Knowledge Base

Search

  • Filter results by:
    • View attachments
    Searching in
    About 22 results
    • How to disable SNMP traps set by Storage Replication Adapter and VASA Provider
      https://kb.netapp.com/data-mgmt/OTV/SRA_Kbs/How_to_disable_SNMP_traps_set_by_Storage_Replication_Adapter_and_VASA_Provider
      The FAS/V-Series Storage Replication Adapter (SRA) and VASA Provider (VP) service sets SNMP traps for the purpose of triggering storage discovery whenever a trap is fired for the following events: Thi...The FAS/V-Series Storage Replication Adapter (SRA) and VASA Provider (VP) service sets SNMP traps for the purpose of triggering storage discovery whenever a trap is fired for the following events: This allows the service to keep a constant and accurate inventory of storage objects in the ONTAP cluster. You may disable setting SNMP traps if you do not desire them, or if your environment does not support it. You will need to disable SNMP traps using the steps in this KB to resolve the issue.
    • Does enabling FIPS cause any issues with NFS/CIFS Protocols?
      https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/Does_enabling_FIPS_cause_any_issues_with_NFS_or_CIFS_Protocols
      Applies to ONTAP 9 Answer No, NFS and CIFS do not use SSL/TLS encryption Additional Information FIPS mode enforces security of SSL/TLS traffic Refer Configure network security using federal informatio...Applies to ONTAP 9 Answer No, NFS and CIFS do not use SSL/TLS encryption Additional Information FIPS mode enforces security of SSL/TLS traffic Refer Configure network security using federal information processing standards (FIPS) to know more about FIPS
    • Unable to import Brocade Certificate via FTP
      https://kb.netapp.com/on-prem/Switches/Brocade-KBs/Unable_to_import_Brocade_Certificate_via_FTP
      Applies to FOS 8.0 onwards Brocade Issue Unable to import Certificate Authority (CA) through FTP with FIPS enabled.
    • Tiebreaker fails to start with FIPS enabled
      https://kb.netapp.com/on-prem/ontap/mc/MC-KBs/Tiebreaker_fails_to_start_with_FIPS_enabled
      Applies to Redhat Enterprise Linux (RHEL) 7 Redhat Enterprise Linux (RHEL) 6 MetroCluster Tiebreaker 1.2x and earlier FIPS MariaDB Issue Tiebreaker fails to start with FIPS enabled. Messages include e...Applies to Redhat Enterprise Linux (RHEL) 7 Redhat Enterprise Linux (RHEL) 6 MetroCluster Tiebreaker 1.2x and earlier FIPS MariaDB Issue Tiebreaker fails to start with FIPS enabled. Messages include errors on start: bad decrypt 139962014652304:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:592:
    • Newly added FIPs disks report as 'nonencrypting drive or non-FIPS-certified drive'
      https://kb.netapp.com/on-prem/ontap/OHW/OHW-KBs/Newly_added_FIPs_disks_report_as_nonencrypting_drive_or_non-FIPS-certified_drive
      00.0 : NETAPP X358_SLBPE3T8ATE NA50 3662.5GB (781422768 520B/sect) (Failed) 00.1 : NETAPP X358_SLBPE3T8ATE NA50 3662.5GB (781422768 520B/sect) (Failed) 00.2 : NETAPP X358_SLBPE3T8ATE NA50 3662.5GB (78...00.0 : NETAPP X358_SLBPE3T8ATE NA50 3662.5GB (781422768 520B/sect) (Failed) 00.1 : NETAPP X358_SLBPE3T8ATE NA50 3662.5GB (781422768 520B/sect) (Failed) 00.2 : NETAPP X358_SLBPE3T8ATE NA50 3662.5GB (781422768 520B/sect) (Failed) 00.3 : NETAPP X358_SLBPE3T8ATE NA50 3662.5GB (781422768 520B/sect) (Failed) 00.4 : NETAPP X358_SLBPE3T8ATE NA50 3662.5GB (781422768 520B/sect) (Failed) 00.5 : NETAPP X358_SLBPE3T8ATE NA50 3662.5GB (781422768 520B/sect) (Failed)
    • What is the RSA key size supported by NetApp with open SSL FIPS?
      https://kb.netapp.com/on-prem/ontap/Ontap_OS/OS-KBs/What_is_the_RSA_key_size_supported_by_NetApp_with_open_SSL_FIPS
      When creating certificates with open SSL FIPS be sure to select a supported size of 2048 or 3072. -size <size of requested certificate in bits> - Size of Requested Certificate in Bits The larger the v...When creating certificates with open SSL FIPS be sure to select a supported size of 2048 or 3072. -size <size of requested certificate in bits> - Size of Requested Certificate in Bits The larger the value, the more secure is the key. Example: If the certificate was created on the KMIP server with a key size of 4096 and then Installed in ONTAP, the following will be Solution: remove the certificate and install a new certificate using a supported RSA key size
    • What does it mean if I see a FIPS compliance warning event?
      https://kb.netapp.com/on-prem/ontap/Ontap_OS/OS-KBs/What_does_it_mean_if_I_see_a_FIPS_compliance_warning_event
      The controller is using a version of the NetApp Cryptographic Security Module (NCSM) that is not FIPS 140-2 compliant. Organizations that store data at rest using a FIPS validated encrypted format or ...The controller is using a version of the NetApp Cryptographic Security Module (NCSM) that is not FIPS 140-2 compliant. Organizations that store data at rest using a FIPS validated encrypted format or FIPS validated onboard key management (OKM) are not able to meet FIPS 140-2 compliant when using this version of ONTAP. No compliance does not mean that your system is not secure. If this is not the case and your Organization is not a US governmental Organization, this message does not concern you.
    • SnapCenter Plug-In for Oracle install fails with no digest package
      https://kb.netapp.com/data-mgmt/SnapCenter/SC_KBs/SnapCenter_Plug-In_for_Oracle_install_fails_with_no_digest_package
      Applies to SnapCenter Plug-In for Oracle 4.6 Issue SnapCenter Plug-In for Oracle install fails when FIPS 140-2 is enabled with the errors netapp-snapcenter-plugin-loader-4.6-0.6965.x86_64 does not ver...Applies to SnapCenter Plug-In for Oracle 4.6 Issue SnapCenter Plug-In for Oracle install fails when FIPS 140-2 is enabled with the errors netapp-snapcenter-plugin-loader-4.6-0.6965.x86_64 does not verify: no digest package netapp-snapcenter-plugin-unix-4.6-0.6965.x86_64 does not verify: no signature package [ERROR] checkAndthrowError: Execution was failed. Final error code = 3 [ERROR] checkAndthrowError: Abort the installer.
    • Locked FDE/FIPS Drives not able to being unlocked after (multiple) controller outages or failures
      https://kb.netapp.com/on-prem/E-Series/SANtricity-OS-KBs/Locked_FDE_FIPS_Drives_not_able_to_being_unlocked_after_controller_outage_or_failures
      Applies to E-Series (all models) SANtricity FDE/FIPS drives Issue After a controller outage or replacement, all FDE/FIPS drives are in a locked state. Unable to import FDE/FIPS drives security key usi...Applies to E-Series (all models) SANtricity FDE/FIPS drives Issue After a controller outage or replacement, all FDE/FIPS drives are in a locked state. Unable to import FDE/FIPS drives security key using either SANtricity GUI, script editor, or command line.
    • Unable to import certificate on Brocade
      https://kb.netapp.com/on-prem/Switches/Brocade-KBs/Unable_to_import_certificate_on_Brocade
      Applies to FOS (Fabric Operating System) 8.0 onwards Brocade Issue Unable to import Certificate on Brocade
    • How to handle E-Series controller hardware upgrade using external key management
      https://kb.netapp.com/on-prem/E-Series/SANtricity-OS-KBs/How_to_handle_E-Series_controller_hardware_upgrade_using_external_key_management
      Applies to NetApp E-Series E4000 Platform Description This article provides the steps for handling E-Series controller upgrade (headswap) while using external key management service (KMS) to lock secu...Applies to NetApp E-Series E4000 Platform Description This article provides the steps for handling E-Series controller upgrade (headswap) while using external key management service (KMS) to lock secure drives.