Clustered KMIP servers cause excessive EMS messages
Applies to
ONTAP 9
Cluster External KMIP Server configurations
Issue
While upgrading this cluster from ONTAP 9.8 to ONTAP 9.11.1, the reboot of each node took nearly an hour while scrolling tens of
thousands of lines of "debug" output regarding encryption keys managed by an external key manager via KMIP:
[May 6 19:03:14]: 0x808a09000: 0: DEBUG: kmip2::main: [initOpenssl]:460: Performing initialization of OpenSSL
kmip2_client: Importing keys from external key server: 10.195.222.55:56961
[May 6 19:03:14]: 0x808a09000: 0: DEBUG: kmip2::kmipCmds::KmipLocateCmd: [doCmdImp]:100: Calling KMIP Locate for the following attributes : [<x-NETAPP-ClusterId, e7a6ec47-7c70-11ed-90a5-d039ea9d3533>, <x-NETAPP-KeyUsage, NSE>, <x-NETAPP-Product, Data ONTAP>]
[May 6 19:03:14]: 0x808a09000: 0: DEBUG: kmip2::kmipCmds::KmipLocateCmd: [doCmdImp]:123: KMIP Locate executed successfully!
.[May 6 19:03:14]: 0x808a09000: 0: DEBUG: kmip2::kmipCmds::KmipLocateCmd: [doCmdImp]:100: Calling KMIP Locate for the following attributes : [<x-NETAPP-ClusterId, e7a6ec47-7c70-11ed-90a5-d039ea9d3533>, <x-NETAPP-KeyType, AES>, <x-NETAPP-Product, Data ONTAP>]
[May 6 19:03:15]: 0x808a09000: 0: DEBUG: kmip2::kmipCmds::KmipLocateCmd: [doCmdImp]:118: UUID returned : deb3fb44a31544e6aac6967c0059bb0088ba38330e064e9f976c229bc82963e2