Skip to main content
NetApp Knowledge Base

Search

  • Filter results by:
    • View attachments
    Searching in
    About 5 results
    • Key-manager restore operation returns incorrect output when there are no keys to restore
      https://kb.netapp.com/on-prem/ontap/Ontap_OS/OS-KBs/Key-manager_restore_operation_returns_incorrect_output_when_there_are_no_keys_to_restore
      While performing a restore operation when no keys need to be restored, incorrect output is displayed: Key Tag Key Type Restored Key ID: 00000000000000000200000000000100983cd5df1ff4663fa85d3bfb9ecbc699...While performing a restore operation when no keys need to be restored, incorrect output is displayed: Key Tag Key Type Restored Key ID: 00000000000000000200000000000100983cd5df1ff4663fa85d3bfb9ecbc6990000000000000000 Key ID: 00000000000000000200000000000100ca6d2fea44c952726e602e17416257700000000000000000 Key ID: 00000000000000000200000000000100d7b8fef5668a7e7383876f323eab6bf00000000000000000 fas2520-2n-rtp-2::*> key-manager restore (security key-manager restore) Key Manager: 10.216.33.200
    • How to see the key-type for encrypted volumes
      https://kb.netapp.com/on-prem/ontap/DM/Encryption/Encryption-KBs/How_to_see_the_key-type_for_encrypted_volumes
      Applies to ONTAP 9 Encryption Description Although they encryption key type is stated in our documents, some customers are required to prove the key type via a screen shot or CLI output.
    • Client certificates for KMIP must have Client Authorization for enhanced key usage
      https://kb.netapp.com/on-prem/ontap/DM/Encryption/Encryption-KBs/Client_certificates_for_KMIP_must_have_Client_Authorization_for_enhanced_key_usage
      Applies to ONTAP 9 External Key Management (EKM) Issue Unable to connect to Thales Cipher Trust Manager (CTM) due to CryptSoft IO error during setup. Warning: Unable to establish secure connection to ...Applies to ONTAP 9 External Key Management (EKM) Issue Unable to connect to Thales Cipher Trust Manager (CTM) due to CryptSoft IO error during setup. Warning: Unable to establish secure connection to KMIP server "xxx.xxx.com". Cryptsoft error: "I/O Error".
    • NVE: cannot replace SSL certificates for KMIP servers
      https://kb.netapp.com/on-prem/ontap/DM/Encryption/Encryption-KBs/NVE__cannot_replace_SSL_certificates_for_KMIP_servers
      NetApp Volume Encryption (NVE) External Key Management (EKM) Key Management Interoperability Protocol (KMIP) Following the steps to replace SSL certificates, when trying to disable the connection to t...NetApp Volume Encryption (NVE) External Key Management (EKM) Key Management Interoperability Protocol (KMIP) Following the steps to replace SSL certificates, when trying to disable the connection to the kmip servers the bellow error is displayed: Error: command failed: The key server at "km.XXX.XXX.com" contains volume encryption keys that are currently in use and not available from any other configured key server.
    • Volume creation fails with error: Cannot create the volume encryption metafile
      https://kb.netapp.com/on-prem/ontap/DM/Encryption/Encryption-KBs/Volume_creation_fails_with_error__Cannot_create_the_volume_encryption_metafile
      When creating either a Flex Volume or FlexGroup, the following error is displayed: Error: command failed: [Job 424] Job failed: Failed to create the volume on node "wnkntap10b". Reason: Internal error...When creating either a Flex Volume or FlexGroup, the following error is displayed: Error: command failed: [Job 424] Job failed: Failed to create the volume on node "wnkntap10b". Reason: Internal error. Error: command failed: [Job 415] Job failed: Failed to create the volume on node "wnkntap10b". Reason:Internal error. Cannot create the volume encryptionmetafile. Delete the FlexGroup, resolve the issue, and thentry the creation again.