NetApp ASA C Series Install page 114

2. If the
Key Manager
up the OKM information:
a. Go to advanced privilege mode and enter
b. Enter the command to display the key management information:
onboard show-backup
c. Copy the contents of the backup information to a separate file or your log file. You'll need it in
disaster scenarios where you might need to manually recover OKM.
d. Return to admin mode:
e. Shut down the impaired controller.
3. If the
Key Manager
than yes:
a. Restore the external key management authentication keys to all nodes in the cluster:
key-manager external restore
If the command fails, contact NetApp Support.
mysupport.netapp.com
b. Verify that the
manager key query
c. Shut down the impaired controller.
4. If the
Key Manager
yes:
a. Enter the onboard security key-manager sync command:
sync
Enter the customer's 32 character, alphanumeric onboard key management
passphrase at the prompt. If the passphrase cannot be provided, contact NetApp
Support.
b. Verify the
Restored
key query
c. Verify that the
information.
d. Go to advanced privilege mode and enter
e. Enter the command to display the key management backup information:
manager onboard show-backup
f. Copy the contents of the backup information to a separate file or your log file. You'll need it in
disaster scenarios where you might need to manually recover OKM.
g. Return to admin mode:
h. You can safely shut down the controller.
== Verify NSE configuration
112
type displays onboard
set -priv admin
type displays external
column equals
Restored
type displays
onboard
mysupport.netapp.com
column shows
yes
type shows onboard, and then manually back up the OKM
Key Manager
set -priv admin
and the Restored column displays yes, manually back
when prompted to continue:
y
and the Restored column displays anything other
for all authentication keys:
yes
and the column displays anything other than
Restored
security key-manager onboard
for all authentication keys:
y when prompted to continue:
set -priv advanced
security key-manager
security
security key-
security key-manager
set -priv advanced
security key-