Encryption rekey warning? | NetApp | Page 1

fallen sage Jun 25, 2026, 11:04 AM

#

I'm pretty sure I have enabled drive encryption (not FIPS)... but why does System Manager still complain? Rekeying does not "fix" the warning... This is ONTAP 9.17.1P5 (MCCIP)

bright pawn Jun 25, 2026, 11:42 AM

#

On the command line, what does

storage encryption disk show

Look like? (At both sites)

fallen sage Jun 25, 2026, 12:07 PM

#

NA-TOR::> storage encryption disk show
Disk Mode Data Key ID

1.0.0 data 00000000000000000200000000000100EE7E506DAF640A931AAE7636A01A0336
1.0.1 data 00000000000000000200000000000100EE7E506DAF640A931AAE7636A01A0336
1.0.2 data 00000000000000000200000000000100EE7E506DAF640A931AAE7636A01A0336
1.0.3 data 00000000000000000200000000000100EE7E506DAF640A931AAE7636A01A0336
1.0.4 data 00000000000000000200000000000100EE7E506DAF640A931AAE7636A01A0336
1.0.5 data 00000000000000000200000000000100EE7E506DAF640A931AAE7636A01A0336
1.0.6 data 00000000000000000200000000000100EE7E506DAF640A931AAE7636A01A0336
1.0.7 data 00000000000000000200000000000100EE7E506DAF640A931AAE7636A01A0336

#

same key on both sites...

#

not sure if it could be the root partitions?

#

not sure if it makes a difference, but I had to run the rekey from the commandline on one of the clusters.. where the other one it managed to do it via SystemManager... but they both look the same now...

#

....and failover/switchover works 😉

bright pawn Jun 25, 2026, 12:27 PM

#

Those are just SEDs. FIPS drives will have a second encryption string field

So then after the rekey, output better?

fallen sage Jun 25, 2026, 12:34 PM

#

bright pawn Those are just SEDs. FIPS drives will have a second encryption string field So ...

Nope not inside SystemManager it still has the warning... same on both clusters...

bright pawn Jun 25, 2026, 12:35 PM

#

Any messages that seem to correlate? Curious what system manager is referring to?

fallen sage Jun 25, 2026, 12:51 PM

#

Nope, that's just it... I can only do a "rekey" again, and again but doesn't make any difference it stays like this... 🙂 and as you can see tha aggregate has barely any volumes on it and now workloads...

#

On one of the clusters where I had to configure it via command line I get this:

#

`NA-TOR::*> storage encryption disk show-status
FIPS Latest Start Execution Disks Disks Disks
Node Support Request Timestamp Time (sec) Begun Done Successful

NA-TOR-02
false unknown - - - - -
NA-TOR-01
false unknown - - - - -
2 entries were displayed.`

#

....guess this is normal and because the nodes has been rebooted...

#

nothing in the event logs at all... as I try to run the rekey from system manager...

raven cedar Jun 30, 2026, 8:41 PM

#

I have the same issue on 9.16.1, seems like a bug?

fallen sage Jul 1, 2026, 8:29 AM

#

raven cedar I have the same issue on 9.16.1, seems like a bug?

If it's a bug it isn't fix in 9.17.1P9 yet 😉 I have a support case open right now... hopefully they find a solution