Search

How to enable HSTS on the AltaVault web GUI
https://kb.netapp.com/Legacy/AltaVault/How_to_enable_HSTS_on_the_AltaVault_web_GUI
Applies to AltaVault AVA400 AVA800 AVA-v AVA-c Description HTTP Strict Transport Security (HSTS) is a web security policy mechanism that helps to protect websites against man-in-the-middle attacks suc...Applies to AltaVault AVA400 AVA800 AVA-v AVA-c Description HTTP Strict Transport Security (HSTS) is a web security policy mechanism that helps to protect websites against man-in-the-middle attacks such as protocol downgrade attacks and cookie hijacking. By default, HSTS is not enabled in the AltaVault web GUI.
HTTPs AutoSupport delivery fails with a PROXY
https://kb.netapp.com/on-prem/ontap/Ontap_OS/OS-KBs/HTTPs_AutoSupport_delivery_fails_with_a_PROXY
AutoSupport configured with a Proxy Failed to connect to support.netapp.com port 443: Connection refused AutoSupports for one or more nodes fail to reach NetApp due to network timeout. Error: Timeout ...AutoSupport configured with a Proxy Failed to connect to support.netapp.com port 443: Connection refused AutoSupports for one or more nodes fail to reach NetApp due to network timeout. Error: Timeout was reached when connecting to the server Timeout messages in the notifyd logs to the proxy URL ... (message: connect to proxyurl_IP port 8080 failed: Operation timed out) ... (message: Failed to connect to proxyurl port 8080: Operation timed out)
ASUPs delivery failure - Unknown SSL protocol error in connection to support.netapp.com:443
https://kb.netapp.com/on-prem/ontap/Ontap_OS/OS-KBs/ASUPs_delivery_failure_Unknown_SSL_protocol_error_in_connection_to_support_netapp_com_443
00000031.000df063 05faccce Tue Feb 04 2020 00:00:14 +01:00 [kern_notifyd:info:1589] (category: 1589:3778:deliver) (emittime: 2/4/2020 00:00:13) (message: Unknown SSL protocol error in connection to su...00000031.000df063 05faccce Tue Feb 04 2020 00:00:14 +01:00 [kern_notifyd:info:1589] (category: 1589:3778:deliver) (emittime: 2/4/2020 00:00:13) (message: Unknown SSL protocol error in connection to support.netapp.com:443) 0000001a.00cdd0b8 0719f934 Thu Mar 27 2025 00:06:55 +00:00 [kern_notifyd:info:2258] (category: 2258:3095:deliver) (emittime: 3/27/2025 00:06:54) (message: OpenSSL SSL_connect: Connection reset by peer in connection to support.netapp.com:443 )
HTTPS connections to an ONTAP LIF are not possible, though HTTP works
https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/HTTPS_connections_to_an_ONTAP_LIF_are_not_possible_though_HTTP_works
Applies to ONTAP 9 HTTPS services not reachable Issue HTTP (TCP port 80) access to an ONTAP LIF works, but HTTPS (TCP port 443) is not listening / rejects a connection attempt with a TCP reset
The 7-Mode option rc4.enable is not persistent across reboots
https://kb.netapp.com/Legacy/ONTAP/7Mode/The_7-Mode_option_rc4.enable_is_not_persistent_across_reboots
Applies to Data ONTAP 7-Mode Issue RC4 ciphers are re-enabled after reboots of 7-Mode controllers
Cloud Volumes ONTAP - Working Enviroment in failed status and unavailable via SSH or HTTPS
https://kb.netapp.com/Cloud/Cloud_Volumes_ONTAP/CVO_100_CPU_and_unavailable_via_SSH_HTTPs
Applies to Cloud Volumes ONTAP (CVO) - 9.7P7 or earlier versions Issue Working environment in failed status CVO cannot be accessed via SSH or HTTP(S)
Failed to connect SVM LIF to SolarWinds external FPolicy server
https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/Failed_to_connect_SVM_LIF_to_Solarwinds_external__FPolicy_server
SVM LIF can't connect to a Solarwinds external FPolicy server Node: node_name Vserver: vserver_name Policy: Policy_name Server: IP_address Server Status: disconnected Server Type: primary Time FPolicy...SVM LIF can't connect to a Solarwinds external FPolicy server Node: node_name Vserver: vserver_name Policy: Policy_name Server: IP_address Server Status: disconnected Server Type: primary Time FPolicy Server was Connected: - Time FPolicy Server was Disconnected: 9/21/2021 11:06:48 Reason for FPolicy Server Disconnection: TCP Connection to FPolicy server failed. ID for FPolicy Server Disconnection: 9307 Session ID: -
What is the IP address to program your firewall rules for HTTPS AutoSupport?
https://kb.netapp.com/on-prem/ontap/Ontap_OS/OS-KBs/What_is_the_IP_address_to_program_your_firewall_rules_for_HTTPS_AutoSupport
Applies to NetApp DNS domain name: support.netapp.com HTTPS AutoSupport transport URL - https://support.netapp.com/put/AsupPut HTTP AutoSupport transport URL - http://support.netapp.com/put/AsupPut - ...Applies to NetApp DNS domain name: support.netapp.com HTTPS AutoSupport transport URL - https://support.netapp.com/put/AsupPut HTTP AutoSupport transport URL - http://support.netapp.com/put/AsupPut - no longer supported per SU484 AutoSupport on Demand (AOD) URL - https://support.netapp.com/aods/asupmessage Answer IPv4: 216.240.21.18 IPv6: 2620:10a:4005:c000::a78:2d11 CNAME: support-hio.netapp.com Additional Information How would a HOST entry be added in ONTAP 9 for support.netapp.com?
How would a HOST entry be added in ONTAP for support.netapp.com?
https://kb.netapp.com/on-prem/ontap/Ontap_OS/OS-KBs/How_would_a_HOST_entry_be_added_in_ONTAP_for_support.netapp.com
Applies to ONTAP 9 Description This article is for anyone without working external or Internet resolving DNS to enable HTTPS transport to support.netapp.com. This may be needed for firewall rules for ...Applies to ONTAP 9 Description This article is for anyone without working external or Internet resolving DNS to enable HTTPS transport to support.netapp.com. This may be needed for firewall rules for AutoSupport communication with NetApp.
How to set up ONTAP S3 as object store for FabricPool on remote cluster using HTTPS
https://kb.netapp.com/on-prem/ontap/da/S3/S3-KBs/How_to_set_up_ONTAP_S3_as_object_store_for_FabricPool_on_remote_cluster_using_HTTPS
Applies to ONTAP S3 FabricPool HTTPS SSL certificate verification enabled ONTAP 9.8 and later Description Procedure to set up ONTAP S3 as object store for FabricPool on remote cluster using HTTPs with...Applies to ONTAP S3 FabricPool HTTPS SSL certificate verification enabled ONTAP 9.8 and later Description Procedure to set up ONTAP S3 as object store for FabricPool on remote cluster using HTTPs with SSL certificate verification enabled.
TLS connection to Storage Account fails preventing CVO to boot
https://kb.netapp.com/Cloud/Cloud_Volumes_ONTAP/TLS_connection_to_Storage_Account_fails_preventing_CVO_to_boot
CVO instance is suddenly going into a boot loop. Following errors show up in the VMs serial console: [cluster01-01:ktls.failed:notice]: "The TLS connections have failed several times with remote host ...CVO instance is suddenly going into a boot loop. Following errors show up in the VMs serial console: [cluster01-01:ktls.failed:notice]: "The TLS connections have failed several times with remote host 'xx.xx.xxx.xxx' in IPspace '4294967289', for which the latest reason given is: OpenSSL: error:14090086:SSL routines:ssl3_get_server_certifiUptime: 2m24scate:certificate verify failed." In the serial logs (Boot Diagnostics tab in AZ portal), you may also see a similar panic message: