Troubleshooting for Encryption License Key

For troubleshooting information for the Virtual Storage Platform G1000, see the Virtual Storage Platform G1000 Hardware Guide.

For troubleshooting information for your VSP G series or VSP F series storage system, see the hardware guide for your storage system . For details about HCS error messages, see Command Suite Messages.

For troubleshooting information for Device Manager - Storage Navigator, see the System Administrator Guide for your storage system. For details about HDvM - SN error messages, see Device Manager - Storage Navigator Messages.

The following table provides general troubleshooting information for Encryption License Key. If you need technical assistance, see Contacting customer support.

Problem

Action

Cannot use the Encryption License Key feature to back up or restore a key.

Verify the following:

  • The Encryption License Key software license is valid and installed.

  • You have the Security Administrator (View & Modify) role.

  • If you backup and restore data encryption keys with a key management server, the connection to the key management server is available.

  • If you backup and restore data encryption keys with a key management server, the number of keys which you can back up on the key management server is not exceeded.

  • If you backup and restore data encryption keys with a key management server, a time-out has not occurred due to the increase in the number of keys on the key management server.

  • The latest key is restored (the key will not be updated after a secondary backup has been performed).

Cannot create or delete data encryption keys.

Make sure that:

  • The Encryption License Key software license is valid and installed.

  • You have the Security Administrator (View & Modify) role.

  • If you have backed up and restored data encryption keys with a key management server, that the connection to the key management server is available.

Cannot enable encryption for a parity group.

Make sure that:

  • The Encryption License Key software license is valid and installed.

  • All LDEVs in the parity group are in the blocked status.

Cannot disable encryption for a parity group.

Make sure that all LDEVs in the parity group are in the blocked status.

Server configuration test failed.

Check the following key management server connection settings:

  • Host name

  • Port number

  • Client certificate file

  • Root certificate file

If the communication failure is due to the length of time to connect to the server, try changing these settings:

  • Timeout

  • Retry interval

  • Number of retries

The Edit Encryption wizard operation failed, but the status of encryption (enable or disable) has changed.

The change of the status succeeds, but the format of the volume fails. Confirm the message, remove the error, and format volumes again.

The storage system failed to get encryption keys backed up on the key management server and all volumes are blocked when the storage system is turned on. The SIM code 661000 is returned.

Complete the following tasks:

  • Restore the connection to the key management server.

  • Retry key encryption key acquisition.

  • Contact customer support to restore the disk adapter and blocked drives or blocked volumes.

Editing encryption environmental settings has failed with the error (00002-058578).

If it is the first time you are configuring encryption environmental settings in the Edit Encryption Environmental Settings window and it fails (error message 00002-058578), complete the following tasks:

  1. Wait a few minutes, then click File > Refresh All to reread the configuration information.

  1. Initialize the encryption environmental settings.

  1. Configure the encryption environmental settings again.

If it is not the first time you are configuring encryption environmental settings in the Edit Encryption Environmental Settings window and it fails (error message 00002-058578), complete the following tasks:

  1. Wait a few minutes, then click File > Refresh All to reread the configuration information.

  1. Configure the encryption environmental settings again.

Server configuration test succeeded, but the following error was displayed:

10126-105022 The connected key management server does not support the required functions.

A required function for the setting of the key management server is not supported with the connected key management server. See Key management server requirements and update the software of the key management server to the latest version.