HP StorageWorks MSA 2/8 HP StorageWorks Fabric OS 3.X Document Addendum (AA-RW - Page 120

Sec-secdbfail, Sec-secdlfail

Page 120 highlights

Diagnostic and system error messages reference guide SEC-SECDBFAIL Message WARNING SEC-SECDBFAIL, 3, Probable Cause The receiving switch failed to validate the security database sent from the primary FCS switch. This message usually indicates that the data package is corrupted, the timestamp on the package is out of range as a result of replay attack or out-of-sync time service, or the signature verification failed. Signature verification failure indicates either an internal error (such as losing the primary public key) or an invalid database. Recommended Action Issue the secfabricshow command to verify that the fabric is still consistent. All the switches should be in the READY state. If a switch is in the ERROR state, the database might not be correctly updated for that specific switch. The error might also be a result of an internal corruption or a hacker attack to the secure fabric. Severity WARNING SEC-SECDLFAIL Message WARNING SEC-SECDLFAIL, 3, Fail to download security data to domain after retries Probable Cause The specified domain number failed to download security data after the specified number of attempts. The primary switch segments the failed switch after 30 tries. The failed switch might have had some internal error and failed to accept the database download. Recommended Action This might be an internal resource issue; rejoin the switch to the fabric and the security data download retries. If the command fails consistently, copy the message, collect switch information using the supportshow command, and contact your switch service provider. Severity WARNING 120 Fabric OS 3.x Document Addendum

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250

Diagnostic and system error messages reference guide
120
Fabric OS 3.x Document Addendum
SEC-SECDBFAIL
Message
Probable Cause
The receiving switch failed to validate the security database sent from the primary FCS switch.
This message usually indicates that the data package is corrupted, the timestamp on the
package is out of range as a result of replay attack or out-of-sync time service, or the signature
verification failed. Signature verification failure indicates either an internal error (such as
losing the primary public key) or an invalid database.
Recommended Action
Issue the
secfabricshow
command to verify that the fabric is still consistent. All the
switches should be in the READY state. If a switch is in the ERROR state, the database might
not be correctly updated for that specific switch. The error might also be a result of an internal
corruption or a hacker attack to the secure fabric.
Severity
WARNING
SEC-SECDLFAIL
Message
Probable Cause
The specified domain number failed to download security data after the specified number of
attempts. The primary switch segments the failed switch after 30 tries. The failed switch might
have had some internal error and failed to accept the database download.
Recommended Action
This might be an internal resource issue; rejoin the switch to the fabric and the security data
download retries.
If the command fails consistently, copy the message, collect switch information using the
supportshow
command, and contact your switch service provider.
Severity
WARNING
<timestamp>
WARNING SEC-SECDBFAIL, 3, <text message>
<timestamp>
WARNING SEC-SECDLFAIL, 3, Fail to download security data to domain <domain
number> after <number of retries> retries