Launching soon: The world's first vendor agnostic bug scrubLearn more & join waitlist
OPERATIONAL DEFECT DATABASE
...
...
Document Version Release Date Details 2 03/21/2017 Revised the Resolution section. 1 09/13/2016 Original document release. An issue has been identified where HPE StoreOnce systems using the Enterprise Secure Key Management appliance (ESKM) or SafeNet appliance will not allow you to renew an expired certificate for external key management (EKM). Following is an example of the issue when attempting to re-enroll using the StoreOnce CLI command, keymanager mode external, on HPE StoreOnce systems running software version 3.14.0: Following is an example of the issue when attempting to re-enroll using the StoreOnce CLI command, keymanager mode external, on HPE StoreOnce systems running software version 3.15.0 or 3.15.1: IMPORTANT : An expired certificate prevents access to the EKM device including access to the data encryption keys and all data protected by those keys. There is no data loss on these encrypted stores. If you experience this issue, contact HPE support for assistance to manually re-enroll your HPE StoreOnce system with the SafeNet or ESKM appliance.
This issue affects the following HPE StoreOnce systems: BB919A HPE StoreOnce 6600 120TB for Initial Rack BB918A HPE StoreOnce 6600 120TB for existing Rack BB920A HPE StoreOnce 6600 120TB for extra Racks BB896A HP StoreOnce 6500 120TB Couplet for initial rack BB897A HP StoreOnce 6500 120TB Couplet for existing rack BB900A HP StoreOnce 6500 120TB Couplet for additional rack BB913A HPE StoreOnce 3100 8TB System BB922A HPE StoreOnce 3520 12TB System BB914A HPE StoreOnce 3540 24TB System BB915A HPE StoreOnce 5100 48TB Base System BB917A HPE StoreOnce 5500 60TB BB877A HP StoreOnce 2700 8TB Backup BB878A HP StoreOnce 4500 24TB Backup BB879A HP StoreOnce 4700 24TB Backup BB903A HP StoreOnce 4900 60TB Backup Base System BB910A HP StoreOnce 2900 12TB Backup BB915B HPE StoreOnce 5100 HIT 48TB System BB918B HPE StoreOnce 6600 HIT 120TB 1st Couplet BB919B HPE StoreOnce 6600 HIT 120TB 2/4 Couplet BB920B HPE StoreOnce 6600 HIT 120TB 3rd Couplet
This issue has been resolved by a new StoreOnce CLI command, keymanager certificate renew , delivered in software version 3.15.4 and later, which is currently available at the HPE website. This command will renew an expired ESKM or SafeNet certificate. Workaround Contact HPE Support for assistance in manually renewing the ESKM or SafeNet certificate. RECEIVE PROACTIVE UPDATES : Receive support alerts (such as Customer Advisories), as well as updates on drivers, software, firmware, and customer replaceable components, proactively in your e-mail through HPE Subscriber's Choice. Sign up for Subscriber's Choice at the following URL: Proactive Updates Subscription Form.