ONTAP unable to boot, due to authentication to KMIP
Applies to
- ONTAP 9
- NetApp Storage Encryption (NSE)
- NetApp Volume Encryption (NVE)
- Thales KeySecure External Key Server (KMIP)
Issue
- Planned/Unplanned power outage of controllers and shelves.
- Relocation of key servers.
- All nodes not able to boot due to communication issue with KeySecure.
- Following errors are seen on console during boot:
kmip2 client importing. key import complete.
Controller failure on drives hostname:nse.opp.failed:error} control failure on self encrypting drive. 1a.9.5;security provider: locking authority: band master1 during operations "ent_locked_unlock_data_band_sm"".
Disk encrypt access: unable to restore data access on encrypting disk 1c.9.x status security unknown key.
[disk.init.failure disk 1c.9.x failed initilizatin due to error 11.
ERROR: kmip_init: internal error: ifconfig - interface not found
WARNING: kmip_init: authentication keys might not be available.
********************************************************
* A T T E N T I O N *
* *
* System cannot connect to key managers. *
* *
********************************************************
ERROR: kmip_init: halting this NSE system...