Gemalto SafeNet KeySecure K250 アプライアンスが応答しない
環境
- ONTAP 9
- 外部キー管理( EKM )
- Gemalto SafeNet KeySecure K250 アプライアンスが必要です
問題
EKM は
not-responding
、サーバーのステータスを確認するときに状態を報告しますCluster::*> key-manager show -status (security key-manager show) Node Port Registered Key Manager Status ---------------------- ------ --------------------------- --------------- Cluster-01 5696 172.x.x.2 not-responding Cluster-01 5696 172.x.x.4 available Cluster-02 5696 172.x.x.2 not-responding Cluster-02 5696 172.x.x.4 available 4 entries were displayed.
kmip2_client ログのエラー:
Mon Dec 21 2020 21:05:08 -05:00 [kern_kmip2_client:info:6381] [Dec 21 21:05:08]: 0x809409c00: 0: ERR: kmip2::tables::kmip_keyserver_status: [setKeyServerStatus]:60: Received an exception in setting up TLS connection: IO (10)
EMS レポート:
Mon Dec 21 18:49:34 -0500 [Cluster-01: mgwd: km.keyserver.notavailable:alert]: The external key management server "172.x.x.2" is not available for Vserver "Cluster", status: "not-responding".