What is the "cmddirname" for ONTAPI "fpolicy-server-connect" in-order to create security login role? ****::*> security login role create -role myrole -cmddirname "vserver fpolicy server" -access all Error: command failed: failed to set field "cmddirname" to "vserver fpolicy server" We are using "fpolicy-server-connect" in our code and hence want to create a user with minimum privilege's to run this ONTAPI i.e. "fpolicy-server-connect". Please help us to find minimum privilege user role to run this ONTAPI. ... View more

For Cluster Mode NetApp FPolicy server-auth mode failing when using third party CA signed certificates.   Fpolicy server is getting "tlsv1 alert unknown ca" error while doing SSL handshaking with FPolicy client.   We have installed  public certificate of certificate authority (CA) that is used to sign the FPolicy server certificate on SVM using following command: > security certificate install -type client-ca -vserver <vserver name> Configured external-engine in FPolicy to enable server-auth mode: > vserver fpolicy policy external-engine show -vserver <vserver name> -engine-name <engine name> Vserver: <vserver name> Engine: <engine name> Primary FPolicy Servers: <server ip> Port Number of FPolicy Service: <server port number> Secondary FPolicy Servers: - External Engine Type: asynchronous SSL Option for External Communication: server-auth FQDN or Custom Common Name: - Serial Number of Certificate: - Certificate Authority: - Is Resiliency Feature Enabled: false Maximum Notification Retention Duration: 3m Directory for Notification Storage: - In FPolicy server we are using certificate file to initialize SSL server in following format:                    The certificates must be in PEM format and must be sorted starting with the subject's certificate (actual server certificate), followed by intermediate CA certificates if applicable, and ending at the highest level (root) CA. We are also using certificate's key file for initialize SSL server. Now when we got FPolicy client connection in FPolicy server we are trying to do SSL handshaking and getting following error and SSL handshake failed: " error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca". Note: we are using OpenSSL library API for SSL handshaking.   Also, same issue produces when we use OpenSSL server tool as FPolicy Server. Our Fpolicy Server can handshake and have the cert chain validated with the OpenSSL client tool. NetApp SVM doesn't work with an OpenSSL server tool using the same certs. Does anybody let us know where we are going wrong, what are the correct steps for FPolicy SSL communication using third party CA signed certificate. How to resolve this error/issue? ... View more

We have a FPolicy Policy Event that reports all Actions to a third party system. Another System is scanning through all the files on the NetApp Share.   I have seen it is possible to exclude open/read operations from FPolicy Events.   -file-operations   <File Operation>   Is it possible to exclude open/read operations for a specific user from FPolicy Events?  ... View more

Hello I have a question about the Snaplock API. Currently, we are using API services by linking 7-Mode snaplock volumes with xtorm. Are C-dot Snaplock volumes compatible with the existing 7-Mode API? If compatibility is possible, provide the settings required for compatibility. If it's not compatible, where can I get a file like the one pictured below? thanks       ... View more

Hi all,   I'm looking to automate the download and update for Disk Firmware updates. Is there an api available to grab firmware revisions and download links from?   Thanks, Scott ... View more