Permission denied failure of key rewrap

If you experience a Permission denied failure of a key rewrap, follow these diagnostic steps.

When mmapplypolicy is invoked to perform a key rewrap, the command may issue messages like the following:
[E] Error on gpfs_enc_file_rewrap_key(/fs1m/sls/test4,KEY-d7bd45d8-9d8d-4b85-a803-e9b794ec0af2:hs21n56_new,KEY-40a0b68b-c86d-4519-9e48-3714d3b71e20:js21n92)
 Permission denied(13)
If you receive a message similar to this, follow these steps:
  1. Check for syntax errors in the migration policy syntax.
  2. Ensure that the new key is not already being used for the file.
  3. Ensure that both the original and the new keys are retrievable.
  4. Examine the error messages in /var/adm/ras/mmfs.log.latest for additional details.