Encryption keys are restored false for -mc vserver when EKM configured on data vserver
Applies to
- ONTAP 9
- Metrocluster
- External Key Manager
- Encryption
Issue
- The primary site shows key restored as true and the destination shows key restored false
ClusterA::*> security key-manager key query
Node: ClusterA-01
Vserver: CIFS1
Key Manager: 10.216.XX.XXX:XXXXX
Key Manager Type: KMIP
Key Manager Policy: -
Key Tag Key Type Encryption Restored
------------------------------------ -------- ------------ --------
ebee02be-4636-11f0-b2db-00a098cbca9e VEK XTS-AES-256 true
Key ID: 00000000000000000200000000000500ecf14091214957387ab7446623XXXXXX0000000000000000
Node: ClusterA-02
Vserver: CIFS1
Key Manager: 10.216.XX.XXX:XXXXX
Key Manager Type: KMIP
Key Manager Policy: -
Key Tag Key Type Encryption Restored
------------------------------------ -------- ------------ --------
ebee02be-4636-11f0-b2db-00a098cbca9e VEK XTS-AES-256 true
Key ID: 00000000000000000200000000000500ecf14091214957387ab7446623XXXXXX0000000000000000
2 entries were displayed.
ClusterB::*> security key-manager key query
Node: ClusterB-01
Vserver: CIFS1-mc
Key Manager: 10.216.XX.XXX:XXXXX
Key Manager Type: KMIP
Key Manager Policy: -
Key Tag Key Type Encryption Restored
------------------------------------ -------- ------------ --------
ebee02be-4636-11f0-b2db-00a098cbca9e VEK XTS-AES-256 false
Key ID: 00000000000000000200000000000500ecf14091214957387ab7446623XXXXXX0000000000000000
Node: ClusterB-02
Vserver: CIFS1-mc
Key Manager: 10.216.XX.XXX:XXXXX
Key Manager Type: KMIP
Key Manager Policy: -
Key Tag Key Type Encryption Restored
------------------------------------ -------- ------------ --------
ebee02be-4636-11f0-b2db-00a098cbca9e VEK XTS-AES-256 false
Key ID: 00000000000000000200000000000500ecf14091214957387ab7446623XXXXXX0000000000000000
2 entries were displayed.