topic NVE with unreachable KMIP server in ONTAP Discussions

NVE with unreachable KMIP server

fede_melaccio — Wed, 14 Feb 2018 14:08:15 GMT

Hi all,

Would an NVE encrypted volume continue serving data while the key management server is unreachable? Documentation is talking about this issue during the boot process, but not during normal operations. Therefore I assume keys are cached while the storage system is up and the server would not be needed, but I am not sure. Is this correct? Thank you.

Regards

Federico

Re: NVE with unreachable KMIP server

AlexDawson — Wed, 28 Feb 2018 05:33:35 GMT

Hi there, I haven't been able to find any information one way or the other on this. I did find the document you are referring to, and I must assume you're a partner - if so, your technical partner manager, or our partner solutions center for your region would be able to connect you with the appropriate people in product management/technical marketing to directly ask this question.

That said - our best practice revolves around a highly available KMIP solution with multiple KMIPs and HA inside the KMIPs, so this shouldn't come up

Re: NVE with unreachable KMIP server

fede_melaccio — Wed, 28 Feb 2018 12:34:03 GMT

Hi,

Thank you very much for your reply. I understand the KMIP server will have to be highly available, so the scenario I asked about is highly unlikely and possibly not important to think about. However, following your advice, I will liase with our NetApp support contacts to get further information. Thanks.

Regards

Federico

Re: NVE with unreachable KMIP server

JFM — Wed, 19 Jan 2022 20:36:52 GMT

My understanding is that once the system has booted and protocols are up, data will continue to be served if the KMIP access is interrupted. I wouldn't say for a long period of time (like days), though.