Onboard key manager keys don't match between clusters in a MetroCluster
Applies to
- ONTAP 9
- MetroCluster
- Onboard Key Manager
- NVE - Volume Encryption
Issue
- After the MetroCluster ONTAP update, MetroCluster health reports as degraded.
::> system health subsystem show
Subsystem Health
----------------- ------------------
SAS-connect ok
Environment ok
Memory ok
Service-Processor ok
Switch-Health ok
CIFS-NDO ok
Motherboard ok
IO ok
MetroCluster degraded
MetroCluster_Node ok
FHM-Switch ok
FHM-Bridge ok
SAS-connect_Cluster ok
13 entries were displayed.
::>metrocluster operation show
Operation: switchover-simulate
State: failed
Errors: Failed to validate the node and cluster components before the switchover operation.
node1 (overridable veto): Internal Error. The "clus_salt" value in the Onboard Key Manager database was not properly updated
- Verify the keys on each cluster in a MetroCluster configuration to confirm if the same number of keys are reported.