CONTAP-211443：Cloud key-manager対応のSVMからkey-managerが設定されていないSVMにボリュームをリホストすると、暗号化されたボリュームにアクセスできなくなり、リカバリできなくなる可能性がある

最後の更新
PDFとして保存

Views:

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: CORE

Last Updated:

問題

In a situation where 'volume rehost' is attemptedfrom a Cloud key manager enabled vserver.to a vserver with no key manager.
no key-manager configured in the admin vserver.
Will result in the cloud keystore being in a mixed stateVserver encryption will be in a state where encrypted volumes cannot be created, deleted or moved.
In this state, the cloud key manager SHOULD NOT be disabled. Doing so would lead tothe SVM-KEK being deleted.all encrypted volumes associated with the vserver becoming inaccessible after a subsequent node reboot.