Sync the Onboard Key Manager keys
Availability: This command is available to cluster administrators at the admin privilege level.
Description
This command synchronizes missing onboard keys on any node in the cluster.
For example, if you add a node to a cluster that has the Onboard Key Manager configured,
you should then run this command to synchronize the keys.
In a MetroCluster configuration, if the
security key-manager onboard enable
command is used to enable the Onboard Key Manager on one site, then run the
security
key-manager onboard sync command on the partner site.
In a MetroCluster configuration, if the
security key-manager onboard
update-passphrase command is used to update the passphrase on one site, then run
this command with the new passphrase on the partner site before proceeding with any
key management operations.
Examples
The following example synchronizes the Onboard Key Manager key database across all nodes in the cluster. In a MetroCluster configuration,
this command synchronizes nodes in the local site.
cluster-1::> security key-manager onboard sync