Disable in-band authentication over NVMe
Suggest changes
-
PDF of this doc site
- Cluster administration
-
Volume administration
- Logical storage management with the CLI
-
NAS storage management
- Configure NFS with the CLI
- Manage NFS with the CLI
-
Manage SMB with the CLI
- Manage file access using SMB
- Security and data encryption
- Data protection and disaster recovery
Collection of separate PDF docs
Creating your file...
This may take a few minutes. Thanks for your patience.
Your file is ready
If you have configured in-band authentication over NVMe using DH-HMAC-CHAP, you can choose to disable it at any time.
If you are reverting from ONTAP 9.12.1 or later to ONTAP 9.12.0 or earlier, you must disable in-band authentication before you revert. If in-band authentication using DH-HMAC-CHAP is not disabled, revert will fail.
Steps
-
Remove the host from the subsystem to disable DH-HMAC-CHAP authentication:
vserver nvme subsystem host remove -vserver <svm_name> -subsystem <subsystem> -host-nqn <host_nqn>
-
Verify that the DH-HMAC-CHAP authentication protocol is removed from the host:
vserver nvme subsystem host show
-
Add the host back to the subsystem without authentication:
vserver nvme subsystem host add vserver <svm_name> -subsystem <subsystem> -host-nqn <host_nqn>