Giveback vetoed due to Keymanager with keys restored
Applies to
- Thales external key manager
- NetApp Volume Encryption (NVE)
- ONTAP 9
Issue
- ANDU started for ONTAP upgrade
- Giveback of data aggregates vetoed due to key manager
Cluster::*> sto fa show-giveback
(storage failover show-giveback)
Partner
Node Aggregate Giveback Status
-------------- -------------------- --------------------------------------------
Node1 CFO Aggregates Done
aggr_data
Failed: Operation was vetoed by keymanager.
Check the event log Node2
No aggregates to give back
3 entries were displayed.
Cluster::*> event log show -severity AlERT
Time Node Severity Event
------------------- ---------------- ------------- ---------------------------
6/17/2023 21:37:04 Node1 ALERT sfo.giveback.failed: Giveback of aggregate aggr_data failed due to Giveback was vetoed..
6/17/2023 21:37:04 Node1 ALERT sfo.sendhome.subsystemAbort: The giveback operation of 'aggr_data' was aborted by 'keymanager'.
- Volume encryption keys show restored in ONTAP key cache
Cluster::*> security key-manager external show-status -key-server-status !available
There are no entries matching your query.
Cluster::*> security key-manager key query -node * -restored false
There are no entries matching your query.