CONTAP-424958: ONTAP with Onboard Key Manager configured allows upgrade to unsupported ONTAP release
Issue
- OKM (Onboard Key Manager) requires a TPM (Trusted Platform Module)
- TPM is available only on DARE (Data At Rest Encryption) images
- When upgrading from a DARE image with OKM enabled to a NODAR (NO Data At Rest encryption), OKM will not be able to unlock the OKM hierarchy due to the absence of a TPM
- Upon reboot with the NODAR image, NVE volumes and NAE aggregates will remain offline and NSE disks will remain locked.
