NetApp ASA C Series Install page 227

to shut down the impaired controller.
◦ If the
Key Manager
to complete some additional steps.
◦ If the
Key Manager
than yes, you need to complete some additional steps.
◦ If the
Key Manager
than yes, you need to complete some additional steps.
2. If the
Key Manager
up the OKM information:
a. Go to advanced privilege mode and enter
b. Enter the command to display the key management information:
onboard show-backup
c. Copy the contents of the backup information to a separate file or your log file. You'll need it in
disaster scenarios where you might need to manually recover OKM.
d. Return to admin mode:
e. Shut down the impaired controller.
3. If the
Key Manager
than yes:
a. Restore the external key management authentication keys to all nodes in the cluster:
key-manager external restore
If the command fails, contact NetApp Support.
mysupport.netapp.com
b. Verify that the
Restored
manager key query
c. Shut down the impaired controller.
4. If the
Key Manager
yes:
a. Enter the onboard security key-manager sync command:
sync
Enter the customer's 32 character, alphanumeric onboard key management
passphrase at the prompt. If the passphrase cannot be provided, contact NetApp
Support.
b. Verify the
Restored
key query
c. Verify that the
Key Manager
information.
d. Go to advanced privilege mode and enter
e. Enter the command to display the key management backup information:
manager onboard show-backup
type displays
onboard
type displays
external
type displays
onboard
type displays
onboard
set -priv admin
type displays
external
column equals
type displays
onboard
mysupport.netapp.com
column shows
yes
type shows onboard, and then manually back up the OKM
and the
Restored
and the
Restored
and the
Restored
and the column displays yes, manually back
Restored
when prompted to continue:
y
and the column displays anything other
Restored
for all authentication keys:
yes
and the column displays anything other than
Restored
security key-manager onboard
for all authentication keys:
when prompted to continue:
y
column displays yes, you need
column displays anything other
column displays anything other
set -priv advanced
security key-manager
security
security key-
security key-manager
set -priv advanced
security key-
225