Data ONTAP Discussions

NVE with unreachable KMIP server

Hi all,

 

Would an NVE encrypted volume continue serving data while the key management server is unreachable? Documentation is talking about this issue during the boot process, but not during normal operations. Therefore I assume keys are cached while the storage system is up and the server would not be needed, but I am not sure. Is this correct? Thank you.

 

Regards

Federico

2 REPLIES

Re: NVE with unreachable KMIP server

Hi there, I haven't been able to find any information one way or the other on this. I did find the document you are referring to, and I must assume you're a partner - if so, your technical partner manager, or our partner solutions center for your region would be able to connect you with the appropriate people in product management/technical marketing to directly ask this question.

 

That said - our best practice revolves around a highly available KMIP solution with multiple KMIPs and HA inside the KMIPs, so this shouldn't come up

 

Re: NVE with unreachable KMIP server

Hi,

 

Thank you very much for your reply. I understand the KMIP server will have to be highly available, so the scenario I asked about is highly unlikely and possibly not important to think about. However, following your advice, I will liase with our NetApp  support contacts to get further information. Thanks.

 

Regards

Federico

Forums