Delete existing external key management server connections before upgrading

Contributors Download PDF of this page

If you are using NetApp Storage Encryption (NSE) on ONTAP 9.2 or earlier and upgrading to ONTAP 9.3 or later, you must use the command line interface (CLI) to delete any existing external key management (KMIP) server connections before performing the upgrade.

  1. Verify that the NSE drives are unlocked, open, and set to the default manufacture secure ID 0x0:storage encryption disk show -disk*

  2. Enter the advanced privilege mode:

    set -privilege advanced

  3. Use the default manufacture secure ID 0x0 to assign the FIPS key to the self-encrypting disks (SEDs): storage encryption disk modify -fips-key-id 0x0 -disk *

  4. Verify that assigning the FIPS key to all disks is complete: storage encryption disk show-status

  5. Verify that the mode for all disks is set to data: storage encryption disk show

  6. View the configured KMIP servers: security key-manager show

  7. Delete the configured KMIP servers: security key-manager delete -address kmip_ip_address

  8. Delete the external key manager configuration:security key-manager delete-kmip-config

    Note This step does not remove the NSE certificates.

After the upgrade is complete, you must reconfigure the KMIP server connections.

Related information