Skip to main content
A newer release of this product is available.

security key-manager key migrate

Contributors
Suggest changes
PDFs

Migrate keys from the admin Vserver's onboard key manager to a data Vserver's external key manager and vice versa

Availability: This command is available to cluster and Vserver administrators at the advanced privilege level.

Description

This command provides a mechanism to migrate the existing keys of a data Vserver from the admin Vserver's key manager to their own key manager or vice versa. The keys stay the same and the data is not rekeyed, only the keys are migrated from one Vserver's key manager to another. After a successful migration to the new key manager, the data Vserver keys are deleted from the previous key manager.

Note This command currently only supports key migration from the Admin Vserver's onboard key manager to a Data Vserver's external key manager and vice versa.

Parameters

-from-vserver <vserver name> - Vserver Name (privilege: advanced)

Use this parameter to specify the name of the Vserver whose key manager the keys are migrated from.

-to-vserver <vserver name> - Vserver Name (privilege: advanced)

Use this parameter to specify the name of the Vserver whose key manager the keys are migrated to.

Examples

The following example migrates the keys of "datavs" data Vserver from "cluster-1" admin Vserver's key manager to "datavs" data Vserver's key manager:

cluster-1::> security key-manager key migrate -from-vserver cluster-1 -to-vserver datavs

The following example migrates the keys of "datavs" data Vserver from "datavs" data Vserver's key manager to "cluster-1" admin Vserver's key manager:

cluster-1::> security key-manager key migrate -from-vserver datavs -to-vserver cluster-1