Skip to main content
Install and maintain

Give back the controller - AFX 1K

Contributors netapp-driley netapp-jsnyder
PDFs

Return control of storage resources to the replacement controller so your AFX 1K storage system can resume normal operation. The give back procedure varies based on the encryption type used by your system: no encryption, or Onboard Key Manager (OKM) encryption.

No encryption

Return the impaired controller to normal operation by giving back its storage.

Steps

  1. From the LOADER prompt, enter

    boot_ontap

  2. Press <enter> when console messages stop.

    • If you see the login prompt, go to the next step at the end of this section.

    • If you do not see login prompt, press the <enter> key, if still no prompt, log into the partner node.

  3. Give back only the root with override-destination-checks option:

    storage failover giveback -ofnode impaired-node -only-root true -override -destination-checks true

    Note The following command is only available in the Diagnostic mode privilege level. For more information on privilege levels, see Understand the privilege levels for ONTAP CLI commands.

    If you encounter errors, contact NetApp Support.

  4. Wait 5 minutes after the giveback report completes, then check failover and giveback status:

    storage failover show and storage failover show-giveback

    Note The following command is only available in the Diagnostic mode privilege level.

  5. If the HA internconnect links were taken down, bring them back up:

    system ha interconnect link on -node healthy-node -link 0

    system ha interconnect link on -node healthy-node -link 1

  6. Return the impaired controller to normal operation by giving back its storage:

    storage failover giveback -ofnode impaired_node_name

  7. If automatic giveback was disabled, reenable it:

    storage failover modify -node local -auto-giveback-of true

  8. If AutoSupport is enabled, restore/unsuppress automatic case creation:

    system node autosupport invoke -node * -type all -message MAINT=END

OKM encryption

Reset onboard encryption and return the controller to normal operation.

Steps

  1. From the LOADER prompt, enter:

    boot_ontap maint

  2. Boot to the ONTAP menu from the LOADER prompt boot_ontap menu and select option 10.

  3. Enter the OKM passphrase. You can get this passphrase from the customer, or contact NetApp Support.

    Note You will be prompted twice for the passphrase.

  4. Enter the backup key data when prompted.

  5. At the boot menu, enter option 1 for normal boot.

  6. Move the console cable to the partner node and enter the following login:

    admin

  7. Give back only the root with override-destination-checks option:

    storage failover giveback -ofnode impaired-node -only-root true -override-destination-checks true

    Note The following command is only available in the Diagnostic mode privilege level. For more information on privilege levels, see Understand the privilege levels for ONTAP CLI commands.

    If you encounter errors, contact NetApp Support.

  8. Wait 5 minutes after the giveback report completes, then check failover and giveback status:

    storage failover show and storage failover show-giveback

    Note The following command is only available in the Diagnostic mode privilege level.

  9. Move the console cable to the replacement node and enter the following:

    security key-manager onboard sync

    Note You will be prompted for the cluster-wide passphrase of OKM for the cluster.

  10. Check status of the keys with the following command:

    security key-manager key query -key-type svm-KEK

    If the Restored column shows anything but true, contact NetApp Support.

  11. Return the impaired controller to normal operation by giving back its storage:

    storage failover giveback -ofnode impaired_node_name

    1. If the HA interconnect links were taken down, bring them back up to resume automatic giveback:

      system ha interconnect link on -node healthy-node -link 0

      system ha interconnect link on -node healthy-node -link 1

  12. If automatic giveback was disabled, reenable it:

    storage failover modify -node local -auto-giveback-of true

  13. If AutoSupport is enabled, restore/unsuppress automatic case creation:

    system node autosupport invoke -node * -type all -message MAINT=END

What's next?

After transferring storage resource ownership to the replacement controller, finish replacing the controller.