ALERT

This message occurs when the KMIP2 client cannot import the MROOT-AK key from a Key Management Interoperability Protocol (KMIP) key server. A key was retrieved from a KMIP key server, but an error occurred when trying to add the key to ONTAP®. The node fails the boot up process when this happens.

Reboot the node. If the issue persists, contact NetApp technical support for assistance.

KMIP2 client fails to import MROOT-AK from KMIP key server. Error: %d.

err (INT): Error code from system call to sysctlbyname().

ALERT

This message occurs when the KMIP2 client cannot import an NSE key from a KMIP key server. A key was retrieved from a KMIP key server, but an error occurred when trying to add the key to an ONTAP® data structure.

Run the "security key-manager restore" command to restore keys from external key servers.

KMIP2 client failed to import NSE key from KMIP key server, error: %d

err (INT): Error code from system call to sysctlbyname().

ALERT

This message occurs when the KMIP2 client cannot import an NVE key from a KMIP key server. A key was retrieved from a KMIP key server, but an error occurred when trying to add the key to an ONTAP® data structure.

Run the "security key-manager restore" command to restore keys from external key servers.

KMIP2 client failed to import NVE key from KMIP key server, error: %d

err (INT): Error code from system call to sysctlbyname().

ALERT

This message occurs when the client certificate cannot be read. On a Cloud ONTAP® system, this message indicates one of the following: 1) A request to create an encrypted aggregate will not succeed because the key cannot be sent to the external KMIP server, or 2) The request to retrieve a key from the external KMIP server will fail. In this case, the encrypted aggregate will not be able to be mounted. On a NSE system, this message indicates one of the following: 1) A request to re-key a NSE drive will not succeed because the key cannot be sent to the external KMIP server, or 2) The ability to read/write data to/from a NSE drive might be impacted if power to the drive or to the disk shelf is lost.

Examine the KMIP client certificate and ensure that the certificate has been created properly.

KMIP Failed to read client certificate with error: %s

err (STRING): KMIP error code.

ALERT

This message occurs when the client private key certificate can't be read. On a Cloud ONTAP® system, this message indicates one of the following: 1) A request to create an encrypted aggregate will not succeed because the key cannot be sent to the external KMIP server, or 2) The request to retrieve a key from the external KMIP server will fail. In this case, the encrypted aggregate will not be able to be mounted. On a NSE system, this message indicates one of the following: 1) A request to re-key a NSE drive will not succeed because the key cannot be sent to the external KMIP server, or 2) The ability to read/write data to/from a NSE drive might be impacted if power to the drive or to the disk shelf is lost.

Examine the KMIP client private certificate and ensure that the certificate has been created properly.

KMIP Failed to read client private certificate with error: %s

err (STRING): KMIP error code.