跳转到主内容

无法在 SVM 上启用外部密钥管理器

i
Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

适用场景

  • ONTAP 9.7
  • 外部密钥管理器( KMIP )
  • IBM Security Key Lifecycle Manager ( SKLM ) 4.1
  • Thales CipherTrust v2.6

问题描述

  • 使用为 SVM 配置密钥管理器连接时:

security key-manager external enable -vserver SVM -key-servers host_name|IP_address:port,... -client-cert client_certificate -server-ca-cert server_CA_certificates

  • 生成以下错误:

000004e3.067a3b88 076892c8 Tue Jun 22 2021 17:06:50 +02:00 [kern_kmip2_client:info:6303] 

0x809609200: 8003e80001d2d41a: WARNING: kmip2::tables::kmip_query_protocol_version: [create_imp]:60: [79] Failed to determine supported KMIP version, err: Unable to establish secure connection to KMIP server "XXX.XX.XX.XX". Cryptsoft error: "I/O Error"