Effective December 3, NetApp adopts Microsoft’s Business-to-Customer (B2C) identity management to simplify and provide secure access to NetApp resources.
For accounts that did not pre-register (prior to Dec 3), access to your NetApp data may take up to 1 hour as your legacy NSS ID is synchronized to the new B2C identity.
To learn more, read the FAQ and watch the video.
Need assistance? Complete this form and select “Registration Issue” as the Feedback Category.

ONTAP Discussions

Security key-manager passphrase

chi

Hi,

 

I need help!

 

I lost the passphrase after the security key-manager setup because I did not save the passphase.  how can I recover or update the passphrase?

 

Thanks,

 

It is OnTap 9.1P3 

 

 

Chi

 

5 REPLIES 5

Kathrynj

There is a key-manager delete-key-database which will clear the configuration and allow you to run the setup again with a new passphrase.

I would move the data to new volumes to decrypt first.

vCosonok

The documentation suggests that command needs the passphrase which we don't know. Anyone had any success resetting the passphrase?

 

http://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.dot-cm-cmpr-910%2Fsecurity__key-manager__delete-key-database.html

 

cluster1::*>security key-manager delete-key-database

Warning: This command will permanently delete all keys from onboard key management.
Do you want to continue? {y|n}: y

Enter the passphrase::

cluster1::*>

  

hariprak

Hi,

 

You can refer this doc, http://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.dot-cm-cmpr-910%2Fsecurity__key-manager__setup.html

 

 

Thanks

If this post resolved your issue, help others by selecting ACCEPT AS SOLUTION or adding a KUDO.

Sahana

Hi,

 

Try using  security key-manager key show. Refer KB https://kb.netapp.com/support/s/article/ka21A0000000jyiQAA/OKM-Onboad-Key-Manager-authentication-key-creation-and-application-to-NSE-drives 

http://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.dot-cm-cmpr-920%2Fsecurity__key-manager__update-passphrase.html Update passphrase needs you to enter existing passphrase.

If this post resolved your issue, help others by selecting ACCEPT AS SOLUTION or adding a KUDO.

chi

Hi,

 

The problem is I don't have the current passphrase, so I can not use "security key-manager update-passphrase".

 

 

 

Chi

Announcements
NetApp on Discord Image

We're on Discord, are you?

Live Chat, Watch Parties, and More!

Explore Banner

Meet Explore, NetApp’s digital sales platform

Engage digitally throughout the sales process, from product discovery to configuration, and handle all your post-purchase needs.

NetApp Insights to Action
I2A Banner
Public