CONTAP-750077: OKM Passphrase Validation Updated in Common Criteria Mode
Issue
When Onboard Key Manager (OKM) is configured in Common Criteria mode, ONTAP validates the passphrase for certain key-manager commands by checking whether it can unwrap a protected key. This validation applies to
After five consecutive incorrect passphrase attempts, these commands cannot complete until 24 hours have elapsed or the system is rebooted.
security key-manager onboard sync, security key-manager onboard update-passphrase, and security key-manager onboard validate-backup.After five consecutive incorrect passphrase attempts, these commands cannot complete until 24 hours have elapsed or the system is rebooted.
