Skip to main content
ONTAP commands

security key-manager external show-status

Suggest changes
PDFs

Show the set of configured external key management servers

Availability: This command is available to cluster and Vserver administrators at the admin privilege level.

Description

This command displays connectivity information between ONTAP nodes and configured external key management servers.

Parameters

{ [-fields <fieldname>,…​]

If you specify the -fields <fieldname>, …​ parameter, the command output also includes the specified field or fields. You can use '-fields ?' to display the fields to specify.

| [-instance ] }

If you specify the -instance parameter, the command displays detailed information about all fields.

[-node {<nodename>|local}] - Node Name

If you specify this parameter, then the command displays the connectivity information for only the given node.

[-vserver <vserver name>] - Vserver Name

If you specify this parameter, then the command displays the key management servers for only the given Vserver.

[-key-server <Hostname and Port>] - Primary Key Server

If you specify this parameter, then the command displays the connectivity information for only the key management servers with the given primary key server host name or IP address listening on the given port.

[-key-server-status {available|not-responding|unknown}] - Overall Key Server Status

If you specify this parameter, then the command displays the connectivity information for only the key management servers with the given status.

[-status-details <text>] - Overall Key Server Status Details

If you specify this parameter, then the command displays the connectivity information for only the key management servers with the given status details.

[-operational-status {true|false}] - Overall Operational Status

If you specify this parameter, then the command displays the connectivity information for only the key management servers with the given operational status.

[-secondary-key-servers <text>,…​] - Secondary Key Servers

If you specify this parameter, then the command displays the connectivity information of only the primary key management servers that have the given secondary key management servers.

[-kmip-version <text>] - KMIP version

If you specify this parameter, then the command displays the connectivity information for only the key management servers with the given KMIP protocol version.

[-port <integer>] - Key Server Port

If you specify this parameter, then the command displays the connectivity information for only the key management servers listening on the given port.

[-key-servers <text>,…​] - Individual Key Servers

Use this parameter to show the host name or IP address of the key management server(s).

[-roles <text>,…​] - Individual Key Server Roles

Use this parameter to show the role of the key management server(s).

[-key-server-status-list {available|not-responding|unknown}] - Individual Key Server Statuses

Use this parameter to show the status of the key management server(s).

[-status-details-list <text>,…​] - Individual Key Server Status Details

Use this parameter to show the status details of the key management server(s).

Examples

The following example lists all configured key management servers for all Vservers:

cluster-2::*> security key-manager external show-status
Node: sti219-vsim-sr044e
             Vserver: C1_sti219-vsim-sr044e_1711266079
     Key Server Port: 12014
 KMIP is operational: true

Key Server           Role           Server Status     Reason
-------------------  ------------   ---------------   ------
10.234.2.30          primary        available         -
10.237.80.83         secondary      available         -
10.237.80.223        secondary      available         -
Node: sti219-vsim-sr044f
             Vserver: C1_sti219-vsim-sr044e_1711266079
     Key Server Port: 12014
 KMIP is operational: true

Key Server           Role           Server Status     Reason
-------------------  ------------   ---------------   ------
10.234.2.30          primary        available         -
10.237.80.83         secondary      available         -
10.237.80.223        secondary      available         -
2 entries were displayed.