search

NetAppDocs / ontap-systems-upgrade

https://docs.netapp.com/us-en/ontap-systems-upgrade/
0 stars 7 forks source link

Step 27 of this document is incorrect #68

Closed ericd-netapp closed 1 year ago

ericd-netapp commented 1 year ago

PS engineer was following this procedure and we got into a boot loop because he set the following value as per the documentation

setenv bootarg.storageencryption.support true

On step27 it states, "If NetApp Storage Encryption (NSE) is in use on this configuration, the setenv bootarg.storageencryption.support command must be set to true"

Actually, that is not completely correct. Yes, his system was using Encryption, but not NSE or SED disks.

As per this KB on Step 7: https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_repurpose_an_HA_Pair_with_ONTAP_9

The question is better stated as this:

"Is the HA pair using Self-encrypting FIPS-certified SAS or NVMe drives (FIPS drives)?"

Long story short, when you set this value wrong on a system without these drives it will cause it to boot loop.

I'm 99.9999 percent sure I'm correct here.

We should also consider having them run a "set-defaults" on the new nodes too. (to match the KB)

Page: Install and boot node3

netapp-pcarriga commented 1 year ago

@ericd-netapp Hi Eric, thanks for your feedback on this step in the documentation and apologies for the inconvenience. This step has been updated to address this very issue and the updates will be published shortly. I'll update you here when they publish. Thanks again.

netapp-pcarriga commented 1 year ago

@ericd-netapp Hi Eric, the updates are now published. They include information on how to determine if your system uses self-encrypting drives and on the types of self-encrypting drives supported by ONTAP. Instructions for setting the "bootarg.storageencryption.support" and "kmip.init.maxwait" variables in Step 27 have also been added for the types of self-encrypting that are in use. You can view these updates using the following links:

Prepare the nodes for upgrade > Step5 Install and boot node3 > Step 27 Install and boot node4 > Step 27

I think these updates address your feedback. If further updates are required, please reopen this issue to let me know. Thanks again for providing feedback and helping to improve the documentation,