Skip to main content
NetApp Knowledge Base

External key-manager status shows unavailable for one node

Views:
539
Visibility:
Public
Votes:
1
Category:
ontap-9
Specialty:
core
Last Updated:

Applies to

KMIP server
External Key-manager

Issue

Connection to KMIP server for encryption seems to drop and reconnect in a span of a second, according to EMS logs, for some but not all the nodes in the cluster.
 
Example of what is seen on EMS:

Sat Sep 19 07:29:53 UTC [node-n1: mgwd: km.keyserver.notavailable:alert]: The external key management server "10.1.2.3:5696" is not available for Vserver "vserv001", status: "unknown".
 
Output of 'security key-manager external show-status' indicates kmip server is not accessible by node-n2:
cluster::> security key-manager external show-status

 

Node      Vserver      Key Server                                                             Status
-------   ----------   ---------------------------------------------------------------        ---------
node-n1
           vserv001
                        10.1.2.3:5696                                                         available
                        10.1.2.4:5659                                                         available


node-n2
           vserv001
                       10.1.2.3:5696                                                         unknown
                       10.1.2.4:5659                                                         unknown

node-n3
           vserv001
                       10.1.2.3:5696                                                         available
                       10.1.2.4:5659                                                         available
node-n4
           vserv001
                       10.1.2.3:5696                                                         available
                       10.1.2.4:5659                                                         available

 

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.