Skip to content

Latest commit

 

History

History
40 lines (33 loc) · 1.32 KB

disable-secure-authentication-nvme-task.adoc

File metadata and controls

40 lines (33 loc) · 1.32 KB
Raw
permalink sidebar keywords summary
nvme/disable-secure-authentication-nvme-task.html
sidebar
manage, nvme, secure, authentication, tcp, dh-hmac-hcap, chap, disable, in-band, in band
If you are running the NVMe protocol and you have established secure authentication using DH-HMAC-CHAP, you can choose to disable it at any time.

Disable in-band authentication over NVMe

If you have configured in-band authentication over NVMe using DH-HMAC-CHAP, you can choose to disable it at any time.

If you are reverting from ONTAP 9.12.1 or later to ONTAP 9.12.0 or earlier, you must disable in-band authentication before you revert. If in-band authentication using DH-HMAC-CHAP is not disabled, revert will fail.

Steps

  1. Remove the host from the subsystem to disable DH-HMAC-CHAP authentication:

    vserver nvme subsystem host remove –vserver <svm_name> -subsystem <subsystem> -host-nqn <host_nqn>

  2. Verify that the DH-HMAC-CHAP authentication protocol is removed from the host:

    vserver nvme subsystem host show

  3. Add the host back to the subsystem without authentication:

    vserver nvme subsystem host add vserver <svm_name> -subsystem <subsystem> -host-nqn <host_nqn>