When Onboard Key Manager (OKM) Common Criteria Mode is enabled a cluster-wide passphrase is required at system startup
Applies to
- ONTAP 9.4 and higher
- ONTAP Select
- Onboard Key Manager (OKM)
- Common Criteria (CC) mode enabled
Issue
While booting an ONTAP controller the system stops during the boot process and the following is presented at the console:
Successfully loaded SVM keys.
Enter the cluster-wide passphrase:
The system will not boot into ONTAP until the cluster-wide passphrase for the Onboard Key Manager (OKM) is entered at the prompt above and verified by re-entering:
Re-enter the cluster-wide passphrase:
Attempting to load onboard keys.
Successfully set the onboard keys.