The Node Encryption page includes these three sections:
◦
Encryption Status shows whether node encryption is enabled or disabled for the appliance.
◦
Key Management Server Details shows information about the KMS being used to encrypt the
appliance. You can expand the server and client certificate sections to view certificate details and
status.
▪
To address issues with the certificates themselves, such as renewing expired certificates, see the
information about KMS in the instructions for administering StorageGRID.
▪
If there are unexpected problems connecting to KMS hosts, verify that the domain name system
(DNS) servers are correct and that appliance networking is correctly configured.
Check DNS server configuration
▪
If you are unable to resolve your certificate issues, contact technical support.
◦
Clear KMS Key disables node encryption for the appliance, removes the association between the
appliance and the key management server that was configured for the StorageGRID site, and deletes
166
