MetroCluster 一侧缺少 svm-kek 密钥

最后更新
另存为PDF

Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

适用于

ONTAP 9
OKM
MCC

问题描述

切换回模拟失败，板载密钥管理器密钥不匹配：

cluster2::*> metrocluster switchback -simulate [Job 783] Aborting the switchback operation... [Job 783] Job failed: Failed to validate the node and cluster components before the switchback operation. Use the "metrocluster operation show" command to view detailed error information. Resolve the errors, then try the command again.

cluster2::*> metrocluster operation show Operation: switchback-simulate State: failed Start Time: 6/24/2025 14:01:01 End Time: 6/24/2025 14:01:31 Errors: Failed to validate the node and cluster components before the switchback operation. cluster2 (overridable veto): Internal Error. Onboard Key Manager hierarchy key mismatch between peer clusters. The local and partner clusters do not have the same list of NSE-AK keys, SVM-KEK keys and CP-KEK keys.

MetroCluster 的一侧缺少 SVM 加密密钥：

第1面：

cluster2::*> key query -key-type *SVM* -fields node,key-tag,key-type,key-id -key-tag svm4*

(security key-manager key query) node vserver key-server key-id key-tag key-type ----------- -------- ---------- -------------------------------------------------------------------------------- ------- -------- cluster2-01 cluster2 - 00000000000000000200000000000a006358e8a9949bdcc5062d5310cd99317f0000000000000000 svm4 SVM-KEK cluster2-02 cluster2 - 00000000000000000200000000000a006358e8a9949bdcc5062d5310cd99317f0000000000000000 svm4 SVM-KEK

第 2 面：

cluster1::*> key query -key-type *SVM* -fields node,key-tag,key-type,key-id -key-tag svm4* (security key-manager key query) There are no entries matching your query.