PowerStore: The upgrade cannot start while there are drives that have no encryption key

Summary: Pre-Upgrade Health Check fails with: Platform DARE drive no encryption key check failed. The upgrade cannot start while there are drives that have no encryption key. Please call Support. (dare_drive_no_key_failed_x) ...

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.

Symptoms

Pre-Upgrade Health Check (PUHC) fails with:
Platform DARE drive no encryption key check failed. The upgrade cannot start while there are drives that have no encryption key. Please call Support. (dare_drive_no_key_failed_x)


NOTE: Although the error message is the same, this is not the same issue as described in PowerStore: Health Check: Platform DARE Drive No Encryption Key Check Failed

Cause

On encryption-enabled appliances, the lockbox region is needed for Key Management System (KMS) to work.
Due to a software issue, the KMS may not be working properly, causing the lockbox to not be fully accessible.
When the PUHC dare_drive_no_key check fails to read the dare encryption audit log from the lockbox, the PUHC fails.

Resolution

This issue will be fixed in a future version of PowerStoreOS.

To resolve the issue, contact Dell EMC Technical Support or your Authorized Service Representative, and quote this Knowledgebase article ID.

Additional Information

Confirming the issue

You can see the key missing in below logs:
2021-11-25 xxxxx-A cyc_puhc[127149]: dare drive no key failed. There are drives that have no encryption key
2021-11-25 xxxxx-A cyc_puhc[127150]: Retrieving data
                                     Opening "/dev/ppds/PL_LB" threw exception [Errno 2] No such file or directory: '/dev/ppds/PL_LB'
                                     note that /dev/ppds/PL_LB is only accessible on the active node
                                     Note: For expediency of FHC PUHC issue, this only retrieves SNs for NVME_SSD drive type!
                                     Found 11 NVME_SSD by B_E_S that datapath is using
                                     Found 13 BES->SN mappings (any drive type) from diag
                                     Retrieved 0 audit log entries and 11 drives
                                     Audit log inventory is missing key for VXNA0N7xxxxx
                                     Audit log inventory is missing key for VXNA0N7xxxxx
                                     Audit log inventory is missing key for VXNA0N7xxxxx
                                     Audit log inventory is missing key for VXNA0N7xxxxx
                                     Audit log inventory is missing key for VXNA0N7xxxxx
                                     Audit log inventory is missing key for VXNA0N7xxxxx
                                     Audit log inventory is missing key for VXNA0N7xxxxx
                                     Audit log inventory is missing key for VXNA0N7xxxxx
                                     Audit log inventory is missing key for VXNA0N7xxxxx
                                     Audit log inventory is missing key for VXNA0N7xxxxx
                                     Audit log inventory is missing key for VXNA0N7xxxxx
                                     There were 0 anomalies and 11 missing keys detected

Affected Products

PowerStore, PowerStore 1000X, PowerStore 1000T, PowerStore 3000X, PowerStore 3000T, PowerStore 5000X, PowerStore 5000T, PowerStore 500T, PowerStore 7000X, PowerStore 7000T

Products

PowerStore 9000X, PowerStore 9000T
Article Properties
Article Number: 000194465
Article Type: Solution
Last Modified: 07 Jun 2023
Version:  2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.