添加KMIP服务器时出现证书错误

最后更新
另存为PDF

Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

适用场景

ONTAP 9
外部密钥管理(EKM)
密钥管理互操作性协议(KMIP)
证书

问题描述

新添加的KMIP服务器处于 unknown 状态、并且状态详细信息显示""SSL_PEER_VALIDATION

Cluster::> security key-manager external show-status Node Vserver Primary Key Server Status ---- ------- ------------------------------------------------- ------------ Node-01 Vserver-1 10.XX.XX.11:6001 unknown Status Details: SSL_PEER_VALIDATION Node-02 Vserver-1 10.XX.XX.11:6001 unknown Status Details: SSL_PEER_VALIDATION

尝试重新添加KMIP服务器时收到以下错误：

Error: command failed: The following issues were found: Unable to establish secure connection to KMIP server "10.35.17.11". Verify correct server-ca certificate has been installed for the specified KMIP server.