NetApp AFF A150 - Page 796

7.
Once the giveback completes, check the failover and giveback status with the
storage failover
show
and storage failover show-giveback commands.
Only the CFO aggregates (root aggregate and CFO style data aggregates) will be shown.
8. Run the security key-manager onboard sync:
a.
Run the
security key-manager onboard sync command and then enter the passphrase
when prompted.
b.
Enter the
security key-manager key-query command to see a detailed view of all keys
stored in the onboard key manager and verify that the
Restored column = yes/true for all
authentication keys.
If the Restored column = anything other than yes/true, contact Customer
Support.
c. Wait 10 minutes for the key to synchronize across the cluster.
9. Move the console cable to the partner controller.
10.
Give back the target controller using the
storage failover giveback -fromnode local
command.
11.
Check the giveback status, three minutes after it reports complete, using the
storage failover
show
command.
If giveback is not complete after 20 minutes, contact Customer Support.
12. At the clustershell prompt, enter the net int show -is-home false command to list the logical interfaces
that are not on their home controller and port.
If any interfaces are listed as
false, revert those interfaces back to their home port using the net int
revert command.
13.
Move the console cable to the target controller and run the
version -v command to check the
ONTAP versions.
14.
Restore automatic giveback if you disabled it by using the
storage failover modify -node
local -auto-giveback true
command.
15. Reset the MSID if it was previously set and was captured at the beginning of this procedure:
a.
Assign a data authentication key to a FIPS drive or SED using the
storage encryption disk
modify -disk disk_ID -data-key-id key_ID
command.
You can use the security key-manager key query -key-type NSE-AK
command to view key IDs.
b.
Verify that the authentication keys have been assigned using the
storage encryption disk
show
command.
Option 2: Using External Manager
1. Boot the controller to the boot menu.
2.
Select option 11,
Configure node for external key management.
794