NetApp AFF A900 Manual page 5

b. Enter the command to display the key management information:
onboard show-backup
c. Copy the contents of the backup information to a separate file or your log file. You'll need it in
disaster scenarios where you might need to manually recover OKM.
d. Return to admin mode:
e. Shut down the impaired controller.
2. If the
Key Manager
yes:
a. Restore the external key management authentication keys to all nodes in the cluster:
key-manager external restore
If the command fails, contact NetApp Support.
mysupport.netapp.com
b. Verify that the
manager key-query
c. Shut down the impaired controller.
3. If the
Key Manager
yes:
a. Enter the onboard security key-manager sync command:
sync
b. Verify the
Restored
key-query
c. Verify that the
information.
d. Go to advanced privilege mode and enter
e. Enter the command to display the key management backup information:
manager onboard show-backup
f. Copy the contents of the backup information to a separate file or your log file. You'll need it in
disaster scenarios where you might need to manually recover OKM.
g. Return to admin mode:
h. You can safely shut down the controller.
Verify NSE configuration
1. Display the key IDs of the authentication keys that are stored on the key management servers:
key-manager key-query -key-type NSE-AK
set -priv admin
type displays
external
column equals
Restored
type displays
onboard
Enter the customer's onboard key management passphrase at the prompt. If the
passphrase cannot be provided, contact NetApp Support.
column shows
type shows onboard, and then manually back up the OKM
Key Manager
set -priv admin
and the
Restored
for all authentication keys:
yes
and the
Restored
security key-manager onboard
for all authentication keys:
yes
when prompted to continue:
y
security key-manager
column displays anything other than
security key-
column displays anything other than
mysupport.netapp.com
security key-manager
set -priv advanced
security key-
security
security
3