What is the difference between primary and secondary external key servers?
Applies to
- ONTAP 9.11.1
- External Key Manager (EKM)
Answer
- Primary and Secondary key servers were introduced in ONTAP 9.11 to avoid duplicate keys in clustered key servers.
- Keys are only registered to the Primary, Secondaries will only receive keys from the Primary key server when the EKM cluster syncs.
- If the Primary is inactive, the keys will write to the Secondary key server.
Additional Information