topic Re: Security key-manager passphrase in ONTAP Discussions

Security key-manager passphrase

chi — Wed, 04 Jun 2025 14:49:38 GMT

Hi,

I need help!

I lost the passphrase after the security key-manager setup because I did not save the passphase. how can I recover or update the passphrase?

Thanks,

It is OnTap 9.1P3

Chi

Re: Security key-manager passphrase

Sahana — Thu, 20 Jul 2017 08:09:46 GMT

Hi,

Try using security key-manager key show. Refer KB https://kb.netapp.com/support/s/article/ka21A0000000jyiQAA/OKM-Onboad-Key-Manager-authentication-key-creation-and-application-to-NSE-drives

http://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.dot-cm-cmpr-920%2Fsecurity__key-manager__update-passphrase.html Update passphrase needs you to enter existing passphrase.

Re: Security key-manager passphrase

hariprak — Thu, 20 Jul 2017 09:19:26 GMT

Hi,

You can refer this doc, http://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.dot-cm-cmpr-910%2Fsecurity__key-manager__setup.html

Thanks

Re: Security key-manager passphrase

chi — Thu, 20 Jul 2017 14:25:55 GMT

Hi,

The problem is I don't have the current passphrase, so I can not use "security key-manager update-passphrase".

Chi

Re: Security key-manager passphrase

Kathrynj — Fri, 30 Mar 2018 01:21:34 GMT

There is a key-manager delete-key-database which will clear the configuration and allow you to run the setup again with a new passphrase.

I would move the data to new volumes to decrypt first.

Re: Security key-manager passphrase

vCosonok — Mon, 09 Sep 2019 09:51:50 GMT

The documentation suggests that command needs the passphrase which we don't know. Anyone had any success resetting the passphrase?

http://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.dot-cm-cmpr-910%2Fsecurity__key-manager__delete-key-database.html

cluster1::*>security key-manager delete-key-database

Warning: This command will permanently delete all keys from onboard key management.
Do you want to continue? {y|n}: y

Enter the passphrase::

cluster1::*>