Is anyone know how to mount the USB drive for OKM?
#How to mount USB drive to AFF A300?
limber sky
whole cobalt
https://kb.netapp.com/onprem/ontap/os/Prepare_USB_drive_to_use_in_ONTAP_boot_recovery_procedure
Does this help?
hybrid drum
I don't think you can use the USB for OKM?
limber sky
https://kb.netapp.com/onprem/ontap/os/Prepare_USB_drive_to_use_in_ONTAP_boot_rec...
I tried it, but it keep saying my usb drive is not mounted
whole cobalt
What are you trying to do? What is your objective?
Can you share the output, commands, etc?
rare bolt
As long as the USB stick is 4GB or more and formatted FAT32 or exFAT (a.k.a. vFAT), it should work just fine.
quaint ingot
I don't think you can use the USB for OKM?
with PVR you can..
limber sky
with PVR you can..
So I need a PVR before I use the usb for okm?
limber sky
What are you trying to do? What is your objective?
Can you share the output, com...
I tried to use the usb as a key to unlock the volume. However it doesn't work
quaint ingot
Yes, according to what I'm seeing, using a USB Key for storing OKM keys is supported by FPVR only. Otherwise, the keys are stored onboard (as the name suggests..) or using an externa key manager like the ones from Thales or Gemalto
please speak to your account team for more information on how to get one
(which will include instructions on how to do it)
limber sky
this is the output
quaint ingot
what does "system node usb-ports show" show?
system node usb-ports show -node local -instance I think
what version of ONTAP is this?
limber sky
what version of ONTAP is this?
9.13P1
quaint ingot
if you run "security key-manager onboard enable" what questions does it ask?
limber sky
please wait
limber sky
what does "system node usb-ports show" show?
It said Error: "usb-ports" is not a recognized command.
limber sky
if you run "security key-manager onboard enable" what questions does it ask?
Enter the cluster-wide passphrase for the Onboard Key Manager:
quaint ingot
Right. Everything I’ve read still says it needs an FPVR, so all I can guess is a BURT of some sort still exposing part of it
hybrid drum
if it needs an FPVR, it'S totally possible that you also need a bootarg to be set to use that functionality
quaint ingot
Correct. It should only show that message when they are set.
My take - usb keys are flakey and unreliable in general. I did some reading and it was tested with USB keys from systems integrators, not random office stores, but there wouldn’t be anything to stop people using them in the field, which could lead to data loss without additional key protection