Skip to main content
NetApp Knowledge Base

svm-kek keys missint on one side of mcc

  1. Last updated
  2. Save as PDF
Views:
13
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
core
Last Updated:

Applies to

  • ONTAP 9
  • OKM
  • MCC

Issue

  • Switchback simulate fails with Onboard Key Manager key mismatch:

cluster2::*> metrocluster switchback -simulate 
[Job 783] Aborting the switchback operation...
[Job 783] Job failed: Failed to validate the node and cluster components before the switchback operation. Use the "metrocluster operation show" command to view detailed error information. Resolve the errors, then try the command again.                                                                       

cluster2::*> metrocluster operation show
       Operation: switchback-simulate
           State: failed
      Start Time: 6/24/2025 14:01:01
        End Time: 6/24/2025 14:01:31
          Errors: Failed to validate the node and cluster components before the switchback operation.
                  cluster2 (overridable veto): Internal Error. Onboard Key Manager hierarchy key mismatch between peer clusters. The local and partner clusters do not have the same list of NSE-AK keys, SVM-KEK keys and CP-KEK keys.

  • SVM encryption key missing from one side of the Metrocluster:
  • Side 1: 
cluster2::*> key query -key-type *SVM* -fields node,key-tag,key-type,key-id -key-tag svm4*

  (security key-manager key query)
node        vserver  key-server key-id                                                                           key-tag key-type 
----------- -------- ---------- -------------------------------------------------------------------------------- ------- -------- 
cluster2-01 cluster2 -          00000000000000000200000000000a006358e8a9949bdcc5062d5310cd99317f0000000000000000 svm4    SVM-KEK  
cluster2-02 cluster2 -          00000000000000000200000000000a006358e8a9949bdcc5062d5310cd99317f0000000000000000 svm4    SVM-KEK  

  • Side 2: 

cluster1::*> key query -key-type *SVM* -fields node,key-tag,key-type,key-id -key-tag svm4*
  (security key-manager key query)
There are no entries matching your query.

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.