ONTAP System Manager 9.11.1+ shows "ERR_SSL_KEY_USAGE_INCOMPATIBLE" due to unsupported cipher suite
Applies to
- ONTAP System Manager 9.11.1 or later
- Supported cipher suites
- Certificates created pre ONTAP 9.12.1
Issue
- ONTAP System Manager shows "
ERR_SSL_KEY_USAGE_INCOMPATIBLE
" in Chrome after upgrading to 9.11.1P5 or later - Error is seen while using a CA signed certificate
- Firefox allows ONTAP System Manager access but with a warning as
SEC_ERROR_UNKNOWN_ISSUER
- While checking the security info on Firefox, its seen that the cipher suite in use is
TLS_AES_128_GCM_SHA256