Pre-Shutdown Checks For Onboard Encryption Keys - Lenovo ThinkSystem DM5100F Hardware Installation And Maintenance Manual

Table of Contents

Advertisement

• You must replace the failed component with a replacement FRU component you received from your
provider.
• It is important that you apply the commands in these steps on the correct node:
– The impaired node is the node on which you are performing maintenance.
– The healthy node is the HA partner of the impaired node.

Pre-shutdown checks for onboard encryption keys

Prior to shutting down the impaired node and checking the status of the onboard encryption keys, you must
check the status of the impaired node, disable automatic giveback, and check what version of ONTAP the
system is running.
B B e e f f o o r r e e y y o o u u b b e e g g i i n n
• If you have a cluster with more than two nodes, it must be in quorum. If the cluster is not in quorum or a
healthy node shows false for eligibility and health, you must correct the issue before shutting down the
impaired node.
ONTAP 9 System Administration Reference
P P r r o o c c e e d d u u r r e e
Step 1.
Check the status of the impaired node:
• If the impaired node is at the login prompt, log in as admin.
• If the impaired node is at the LOADER prompt and is part of HA configuration, log in as admin on
the healthy node.
• If the impaired node is in a standalone configuration and at LOADER prompt, contact Lenovo
Support.
https://datacentersupport.lenovo.com/
Step 2.
If AutoSupport is enabled, suppress automatic log creation by invoking an AutoSupport message:
system node autosupport invoke -node * -type all -message MAINT=number_of_hours_downh
E E x x a a m m p p l l e e
The following AutoSupport message suppresses automatic log creation for two hours:
cluster1:*> system node autosupport invoke -node * -type all -message MAINT=2h
Step 3.
If the impaired node is part of an HA configuration, disable automatic giveback from the healthy
node:
storage failover modify -node local -auto-giveback false
storage failover modify -node local -auto-giveback-after-panic false
Step 4.
Check the version of ONTAP the system is running using the version -v command:
• If <lno-DARE> is displayed, the system does not support Lenovo Volume Encryption (LVE), go to
"Shutting down the impaired controller" on page 53.
• If <l0> is displayed and the system is running ONTAP 9.6 or later, go to "Checking LVE or LSE on
systems running ONTAP 9.6 and later" on page 50.
Checking LVE or LSE on systems running ONTAP 9.6 and later
Before shutting down the impaired node, you need to check whether the system has either Lenovo Volume
Encryption (LVE) or Lenovo Storage Encryption (LSE) enabled. If so, you need to verify the configuration.
P P r r o o c c e e d d u u r r e e
Step 1.
Check whether LVE is configured for any volumes in the cluster:
volume show -is-encrypted true
If any volumes are listed in the output, LVE is configured and you need to verify the LVE
configuration. If no volumes are listed, check whether LSE is configured.
ThinkSystem DM5100F Hardware Installation and Maintenance Guide
50

Advertisement

Table of Contents
loading

Table of Contents