Skip to main content
NetApp Knowledge Base

Onboard keymanager sync fails after motherboard replacement

  1. Last updated
  2. Save as PDF
Views:
2,106
Visibility:
Public
Votes:
2
Category:
ontap-9
Specialty:
CORE
Last Updated:

Applies to

  • ONTAP Version Listed Below Without Fix for Bug ID 1573150
    • 9.8P19 and 9.8P20
    • 9.9.1P16 and 9.9.1P17
    • 9.10.1P13 and 9.10.1P14
    • 9.11.1P8 through 9.11.1P11
    • 9.12.1P2 through 9.12.1P6
    • 9.13.1 and 9.13.1P1
  • TPM 5.63
  • Onboard Key Manager (OKM)

Issue

WARNING!
TPM is not initialized but OKM's key hierarchy is already protected with TPM 

  • Other possible errors include:
Feb 28 14:45:52 [cluster1:crypto.ssal.failed:ALERT]: SSAL operation failed: SSAL Unseal operation failed
Feb 28 14:45:52 [cluster1:crypto.okmrecovery.failed:ALERT]: ERROR: Import of the onboard key hierarchy failed: failed to import key hierarchy. Additional information: error: ssal unseal failed
 

::> event log show  -message-name gb.sfo.veto.kmgr.keysmissing
<date> <time> <node-name> ERROR gb.sfo.veto.kmgr.keysmissing: Giveback of aggregate <aggr-name> failed due to unavailability of volume encryption keys for the encrypted volumes of the aggregate on the partner node <node-name>.

  • After giveback, the OKM sync fails with the following:
::> security key-manager onboard sync
 
Error: command failed: The Onboard Key Manager has failed to sync on the local node "cluster1-02", error: "Internal error". Failed to setup the Onboard Key Manager on node "cluster1-02"

 

 

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.