ONTAP 9.14.1 commands

security key-manager update-passphrase

(DEPRECATED)-Update cluster-wide passphrase

Availability: This command is available to cluster administrators at the advanced privilege level.


This command is deprecated and might be removed in a future release. Use security key-manager onboard update-passphrase instead.

The security key-manager update-passphrase command provides a way to update the cluster-wide passphrase, created initially by running the security key-manager setup command, that is used for the Onboard Key Manager. This command prompts for the existing passphrase, and if that passphrase is correct then the command prompts for a new passphrase.

When the security key-manager update-passphrase command is executed in a MetroCluster configuration, then run the security key-manager setup command with the new passphrase on the partner site before proceeding with any key-manager operations. This allows the updated passphrase to be replicated to the partner site.


The following example updates the cluster-wide passphrase used for the Onboard Key Manager:

cluster-1::*> security key-manager update-passphrase

Warning: This command will reconfigure the cluster passphrase for the Onboard
         Key Manager.
Do you want to continue? {y|n}: y

Enter current passphrase:

Enter new passphrase:

Reenter the new passphrase:
Update passphrase has completed. Save the new encrypted configuration data in
a safe location so that you can use it if you need to perform a manual recovery
operation. To view the data, use the "security key-manager backup show" command.
Top of Page