ONTAP 9.13.1 commands

This command enables the external key manager associated with the given Vserver. This command is not supported when a key manager for the given Vserver is already enabled. When enabling the external key manager associated with the admin Vserver, you must run the same command specifying the same set of key servers on the peer cluster. When enabling the external key manager for a data Vserver, you can run the security key-manager external enable command on the active cluster only, as the configuration will be replicated on the peer cluster. However, you must ensure that the key management servers specified in the security key-manager external enable command are reachable from both clusters. Only primary key servers can be added using this command.

The following example enables the external key manager for Vserver cluster-1. The command includes three key management servers. The first key server’s hostname is ks1.local and is listening on port 15696. The second key server’s IP address is 10.0.0.10 and is listening on the default port 5696. The third key server’s IPv6 address is fd20:8b1e:b255:814e:32bd:f35c:832c:5a09, and is listening on port 1234.