crypto.import.failedエラーがONTAP Clusterを再初期化したあとに発生する
環境
- ONTAP 9
- FAS/AFF/ASA
問題
- キー管理ツールを再構成した後、以下のエラーがイベントログに大量に記録されます。
crypto.import.failed: ERROR: Import of key with key ID 00000000000000000200000000000500e02810449ff516ea93ef408a3bc123d1a0000000000000000 failed crypto.import.failed: ERROR: Import of key with key ID 00000000000000000200000000000500e02810449ff516ea93ef408a3bc17d12321a0000000000000000 failed crypto.import.failed: ERROR: Import of key with key ID 00000000000000000200000000000500e02810449ff516ea93ef408a3bc17d2323121a0000000000000000 failed crypto.import.failed: ERROR: Import of key with key ID 00000000000000000200000000000500e02810449ff516ea93ef408a3bc17d1232da23231a0000000000000000 failed crypto.import.failed: ERROR: Import of key with key ID 00000000000000000200000000000500e02810449ff516ea93ef408a3bc1745465467d1a0000000000000000 failed crypto.import.failed: ERROR: Import of key with key ID 00000000000000000200000000000500e02810449ff516232545343e5455ea93ef408a3bc17d1a0000000000000000 failed
- Vreportでエントリが表示されます。
node::*> debug vreport show aggregate Differences: Name Reason Attributes -------- ------- --------------------------------------------------- aggregate(6a2fc26e-1656a4-48f2-ac8b-64fd78e1bff78f) Present in WAFL Only Node Name: node Aggregate UUID: 6a2fc26e-162a4-48f12-ac845b-64fde16bff78f Aggregate State: online Aggregate Raid Status: mixed_raid_type, hybrid Aggregate HA Policy: sfo Is Aggregate Root: false Is Composite Aggregate: false volume Differences: Name Reason Attributes -------- ------- --------------------------------------------------- "unknown(,00d5667f2a89-35e7-11e9-8f95-00a09845f5312321105):vol_root" Present in WAFL Only Node Name:aggregate Volume DSID:1243 MSID:2162907041 UUID: 9a1d32d0d-f7150-11e2e-b0e6-00a098f225292d Aggregate Name: aggregate Aggregate UUID: 6a2fc226e-16a24-48f22-ac8b-64fs2de21bff78f Vserver UUID: 00d2f2a89-3527-11e29-8f95-00a098f5322105 AccessType: READ_WRITE StorageType: REGULAR Constituent Role: none
- システムをワイプする前に古いautosupportsを使用して上記のメッセージのキーをマッピングしたところ、キーがVreportエントリのオブジェクトと一致することを確認できます。