Encrypted volume move fails with error "Internal error. Cannot generate encryption key"
Applies to
- ONTAP 9.6+
Issue
With Onboard Key Management (OKM) enabled, performing a volume move on an encrypted volume fails with error:
Detailed Status: Creating volume: Internal error. Cannot generate encryption key. Verify the network configuration and the key manager servers are reachable.
This is displayed via a "volume move show" command
cluster:> vol move show -vserver SVM1 -volume vol1
Vserver Name: SVM1
Volume Name: vol1
Actual Completion Time: Mon Sep 14 15:30:21 2020
Bytes Remaining: -
Destination Aggregate: aggr1_node1
Detailed Status: Creating volume: Internal error. Cannot generate encryption key. Verify the network configuration and the key manager servers are reachable.
Estimated Time of Completion: -
Managing Node: Node3
Percentage Complete: -
Move Phase: failed
Estimated Remaining Duration: -
Replication Throughput: -
Duration of Move: 00:15:01
Source Aggregate: aggr1_node3
c
Start Time of Move: Mon Sep 14 15:15:20 2020
Move State: failed
Is Source Volume Encrypted: true
Encryption Key ID of Source Volume: 00000000000000000200000000000500xxxxxxxxxxxxxxxxxxxxxxxxxxx0000000000000000
Is Destination Volume Encrypted: true
Encryption Key ID of Destination Volume: 00000000000000000200000000000500xxxxxxxxxxxxxxxxxxxxxxxxxxx0000000000000000
