Give back the controller - ASA A1K
Verify the storage and network connections, and then give back the controller.
Give back the controller
Reset encryption if enabled and return the controller to normal operation.
-
From the LOADER prompt, enter
boot_ontap
. -
Press <enter> when console messages stop.
-
If you see the login prompt, go to the next step at the end of this section.
-
If you see Waiting for giveback, press the <enter> key, log into the partner node, and then go to the next step at the end of this section.
-
-
Return the impaired controller to normal operation by giving back its storage:
storage failover giveback -ofnode impaired_node_name
. -
If automatic giveback was disabled, reenable it:
storage failover modify -node local -auto-giveback true
. -
If AutoSupport is enabled, restore/unsuppress automatic case creation:
system node autosupport invoke -node * -type all -message MAINT=END
.
-
From the LOADER prompt, enter
boot_ontap maint
. -
Boot to the ONTAP menu from the LOADER prompt
boot_ontap menu
and select option 10. -
Enter the OKM passphrase. You can get this passphrase from the customer, or contact NetApp Support.
You will be prompted twice for the passphrase. -
Enter the backup key data when prompted.
-
At the boot menu, enter option
1
for normal boot. -
Press <enter> when Waiting for giveback is displayed.
-
Move the console cable to the partner node and login as
admin
. -
Ensure any core dumps on the repaired node are saved by going to advanced mode"
set -privilege advanced
and thenrun local partner savecore
. -
Return to admin lever:
set privilege admin
. -
Give back only the CFO aggregates (the root aggregate):
storage failover giveback -fromnode local -only-cfo-aggregates true
-
If you encounter errors, contact NetApp Support.
-
-
Wait 5 minutes after the giveback report completes, and check failover status and giveback status:
storage failover show
andstorage failover show-giveback
. -
Move the console cable to the replacement node and enter
security key-manager onboard sync
You will be prompted for the cluster-wide passphrase of OKM for the cluster. -
Check status of the keys with the following command:
security key-manager key query -key-type svm-KEK
.If the Restored column shows anything but true, contact NetApp Support.
-
Return the impaired controller to normal operation by giving back its storage:
storage failover giveback -ofnode impaired_node_name
. -
If automatic giveback was disabled, reenable it:
storage failover modify -node local -auto-giveback true
. -
If AutoSupport is enabled, restore/unsuppress automatic case creation:
system node autosupport invoke -node * -type all -message MAINT=END
.
-
If the root volume is encrypted with External Key Manager and the console cable is connected to the replacement node, enter
boot_ontap menu
and select option11
. -
Answer
y
orn
to the following questions:Do you have a copy of the /cfcard/kmip/certs/client.crt file? {y/n}
Do you have a copy of the /cfcard/kmip/certs/client.key file? {y/n}
Do you have a copy of the /cfcard/kmip/certs/CA.pem file? {y/n}
OR
Do you have a copy of the /cfcard/kmip/servers.cfg file? {y/n}
Do you know the KMIP server address? {y/n}
Do you know the KMIP port? {y/n}
Contact NetApp Support if you have issues. -
Supply the information for:
-
The client certificate (client.crt) file contents.
-
The client key (client.key) file contents.
-
The KMIP server CA(s) (CA.pem) file contents.
-
The IP address for the KMIP server.
-
The port for the KMIP server.
-
-
Once the system processes, you will see the Boot Menu. Select '1' for normal boot.
-
Check the takeover status:
storage failover show
. -
Ensure any core dumps on the repaired node are saved by going to advanced mode"
set -privilege advanced
and thenrun local partner savecore
. -
Return the impaired controller to normal operation by giving back its storage:
storage failover giveback -ofnode impaired_node_name
. -
If automatic giveback was disabled, reenable it:
storage failover modify -node local -auto-giveback true
. -
If AutoSupport is enabled, restore/unsuppress automatic case creation:
system node autosupport invoke -node * -type all -message MAINT=END
.