Onboard sync fails on newly added nodes
Applies to
- ONTAP 9.7
- NetApp Aggregate Encryption (NAE)
- Onboard Key Manager (OKM)
Issue
- The command
::> security key-manager onboard sync
returns error
Enter the cluster-wide passphrase for onboard key management:
All offline encrypted volumes will be brought online and the corresponding volume encryption keys (VEKs) will be
restored automatically within 10 minutes. If any offline encrypted volumes are not brought online automatically, they can be
brought online manually using the"volume online -vserver -volume" command.
Error: command failed: Onboard key management has successfully synced on the local node "node-01". The following nodes in the cluster are not reachable or failed to sync: node-03, node-04. Use the "cluster show" command to check a node's health status and then run the "security key-manager onboard sync" command again.
- A
cluster show
doesn't show any issue with the new nodes - Bootargs doesn't seem to configured correctly. correct value is
"true"
bootarg.keymanager.support="="
bootarg.onboard_expect_keys="="
bootarg.volume.softwareencryption.support="="