Download Print this page

NetApp ASA C Series Install page 114

Advertisement

2. If the
Key Manager
up the OKM information:
a. Go to advanced privilege mode and enter
b. Enter the command to display the key management information:
onboard show-backup
c. Copy the contents of the backup information to a separate file or your log file. You'll need it in
disaster scenarios where you might need to manually recover OKM.
d. Return to admin mode:
e. Shut down the impaired controller.
3. If the
Key Manager
than yes:
a. Restore the external key management authentication keys to all nodes in the cluster:
key-manager external restore
If the command fails, contact NetApp Support.
mysupport.netapp.com
b. Verify that the
manager key query
c. Shut down the impaired controller.
4. If the
Key Manager
yes:
a. Enter the onboard security key-manager sync command:
sync
Enter the customer's 32 character, alphanumeric onboard key management
passphrase at the prompt. If the passphrase cannot be provided, contact NetApp
Support.
b. Verify the
Restored
key query
c. Verify that the
information.
d. Go to advanced privilege mode and enter
e. Enter the command to display the key management backup information:
manager onboard show-backup
f. Copy the contents of the backup information to a separate file or your log file. You'll need it in
disaster scenarios where you might need to manually recover OKM.
g. Return to admin mode:
h. You can safely shut down the controller.
== Verify NSE configuration
112
type displays
onboard
set -priv admin
type displays
external
column equals
Restored
type displays
onboard
mysupport.netapp.com
column shows
yes
type shows onboard, and then manually back up the OKM
Key Manager
set -priv admin
and the
Restored
column displays yes, manually back
when prompted to continue:
y
and the
Restored
column displays anything other
for all authentication keys:
yes
and the
column displays anything other than
Restored
security key-manager onboard
for all authentication keys:
y
when prompted to continue:
set -priv advanced
security key-manager
security
security key-
security key-manager
set -priv advanced
security key-

Advertisement

loading
Need help?

Need help?

Do you have a question about the ASA C Series and is the answer not in the manual?

Questions and answers