Brocade Fabric OS Encryption Administrator’s Guide Support Bedienungsanleitung

53-1002925-0126 July 2013®Fabric OS Encryption Administrator’s GuideSupporting NetApp Lifetime Key Manager (LKM) and KeySecure Storage Secure Key Mana

x Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encryption group merge and split use cases . . . . . . . . . . . . . . . . .219A

82 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Using the Encryption Targets dialog box21. Select Configure > Encryption from

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 8353-1002925-01Redirection zones2FIGURE 63 Encryption Targets dialog boxRedirection zonesIt is

84 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Disk device decommissioning2NOTEThe key IDs that were used for encrypting the da

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 8553-1002925-01Disk device decommissioning2FIGURE 64 Encryption Target Disk LUNs dialog box4. S

86 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Disk device decommissioning2FIGURE 65 Decommissioned Key IDs dialog boxThe dialo

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 8753-1002925-01Rekeying all disk LUNs manually2FIGURE 66 Universal IDs dialog box4. Click Close

88 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Rekeying all disk LUNs manually2FIGURE 67 Selecting the Re-Key All operationA wa

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 8953-1002925-01Rekeying all disk LUNs manually2Viewing disk LUN rekeying detailsYou can view de

90 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Rekeying all disk LUNs manually2• Re-key State: The state of a manual LUN rekeyi

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 9153-1002925-01Thin provisioned LUNs2• Re-Key State: Options are:- Re-Key Setup - LUN Prep- LUN

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) xi53-1002925-01Moving an encryption blade from one EG to another in the same fabric . . . . . .

92 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Thin provisioned LUNs2NOTE:• For thin provisioned LUNs that were previously full

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 9353-1002925-01Viewing time left for auto rekey2Viewing time left for auto rekeyYou can view th

94 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Viewing and editing switch encryption properties2NOTEYou can also select a group

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 9553-1002925-01Viewing and editing switch encryption properties2• Group Member• Leader-Member C

96 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Viewing and editing switch encryption properties2• Not Available (the engine is

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 9753-1002925-01Viewing and editing encryption group properties22. Enter or browse to the file c

98 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Viewing and editing encryption group properties2FIGURE 74 Encryption Group Prope

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 9953-1002925-01Viewing and editing encryption group properties2General tabThe General tab is vi

100 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Viewing and editing encryption group properties2When the first encryption engin

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 10153-1002925-01Viewing and editing encryption group properties2NOTEYou can also select a group

xii Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01

102 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Viewing and editing encryption group properties2Members tab Remove buttonYou ca

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 10353-1002925-01Viewing and editing encryption group properties2Table 2 explains the impact of

104 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Viewing and editing encryption group properties2FIGURE 77 Encryption Group Prop

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 10553-1002925-01Viewing and editing encryption group properties2HA Clusters tabThe HA Clusters

106 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Viewing and editing encryption group properties2• Right and left arrow buttons:

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 10753-1002925-01Viewing and editing encryption group properties2NOTEYou can also select a group

108 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Viewing and editing encryption group properties2Tape Pools tabTape pools are ma

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 10953-1002925-01Viewing and editing encryption group properties2All encryption engines in the e

110 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Viewing and editing encryption group properties24. Based on your selection, do

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 11153-1002925-01Encryption-related acronyms in log messages2FIGURE 83 Encryption Group Properti

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) xi53-1002925-01About This DocumentIn this chapter•How this document is organized . . . . . . .

112 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encryption-related acronyms in log messages2

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 11353-1002925-01Chapter3Configuring Encryption Using the CLIIn this chapter•Overview. . . . . .

114 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Overview3OverviewThis chapter explains how to use the command line interface (C

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 11553-1002925-01Command RBAC permissions and AD types34. PortMember: allows all control operati

116 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Command RBAC permissions and AD types3createhaclusterNOMN N N OMN NDisallowedcr

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 11753-1002925-01Cryptocfg Help command output3Cryptocfg Help command outputAll encryption opera

118 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Management LAN configuration3 Display the synopsis of hacluster paramete

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 11953-1002925-01Configuring cluster links31. Log in to the switch as Admin or FabricAdmin.2. Co

120 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Setting encryption node initialization3IP Address change of a node within an en

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 12153-1002925-01Steps for connecting to an LKM/SSKM appliance3From the standpoint of external S

xii Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Supported hardware and software. The following hardware platforms support data

122 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Steps for connecting to an LKM/SSKM appliance3To connect to an LKM/SSKM applian

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 12353-1002925-01Steps for connecting to an LKM/SSKM appliance34. Zeroize all critical security

124 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Steps for connecting to an LKM/SSKM appliance3using dumb terminal settings.Chec

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 12553-1002925-01Steps for connecting to an LKM/SSKM appliance3Registering LKM/SSKM on the encry

126 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Steps for connecting to an LKM/SSKM appliance3Encryption Node (Key Vault Client

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 12753-1002925-01Steps for connecting to an LKM/SSKM appliance3Establishing the trusted linkYou

128 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Steps for connecting to an LKM/SSKM appliance3Secondary Key Vault not configure

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 12953-1002925-01Steps for connecting to an LKM/SSKM appliance3LKM/SSKM Key Vault Deregistration

130 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Steps for connecting to an LKM/SSKM appliance3Adding a member node to an encryp

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 13153-1002925-01Steps for connecting to an LKM/SSKM appliance3NOTEIf the maximum number of cert

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) xiii53-1002925-01Notes, cautions, and warningsThe following notices and statements are used in

132 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01High availability cluster configuration3 State: DEF_NODE_ST

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 13353-1002925-01High availability cluster configuration3• Configuration changes must be committ

134 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01High availability cluster configuration3Adding an encryption engine to an HA cl

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 13553-1002925-01Enabling the encryption engine3Policy Configuration ExamplesThe following examp

136 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Zoning considerations3Setting default zoning to no accessInitially, default zon

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 13753-1002925-01Zoning considerations3Creating an initiator - target zoneNOTE:• NWWN based zoni

138 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01CryptoTarget container configuration3NL 0208d3; 3;20:0c:00:06:2b:0f:72:6d;20:

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 13953-1002925-01CryptoTarget container configuration3• Virtual targets: Any given physical targ

140 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01CryptoTarget container configuration3All nodes within an encryption group must

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 14153-1002925-01CryptoTarget container configuration3NOTEIt is recommended you complete the enc

xiv Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Key termsFor definitions specific to Brocade and Fibre Channel, see the technic

142 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01CryptoTarget container configuration3Target: 20:0c:00:06:2b:0f:72:6d 20:00:00:0

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 14353-1002925-01CryptoTarget container configuration3Operation Succeeded3. Commit the transacti

144 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Crypto LUN configuration3another path has direct access to the device from a ho

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 14553-1002925-01Crypto LUN configuration3CAUTIONWhen configuring a LUN with multiple paths (whi

146 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Crypto LUN configuration3Configuring a Crypto LUNYou configure a Crypto LUN by

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 14753-1002925-01Crypto LUN configuration3Operation Succeeded3. Commit the configuration.FabricA

148 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Crypto LUN configuration3The tape policies specified at the LUN configuration l

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 14953-1002925-01Crypto LUN configuration3Configuring a tape LUNThis example shows how to config

150 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Crypto LUN configuration3Operation Succeeded3. Configure the Crypto tape LUN. R

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 15153-1002925-01Crypto LUN configuration3NOTEThe “–key_lifespan” command option has no effect f

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) xv53-1002925-01For information about the Key Management Interoperability Protocol standard, vis

152 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Crypto LUN configuration3Modifying Crypto LUN parameters You can modify one or

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 15353-1002925-01Impact of tape LUN configuration changes3For tape LUNs, the -enable_encexisting

154 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Configuring a multi-path Crypto LUN3To avoid the risk of data corruption, you m

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 15553-1002925-01Configuring a multi-path Crypto LUN33. On the group leader encryption switch (s

156 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Configuring a multi-path Crypto LUN35. Configure the LUN for all CryptoTarget c

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 15753-1002925-01Decommissioning LUNs3Make sure the LUNs in previously committed LUN configurati

158 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Decommissioning LUNs3Upon a successful completion of a decommissioning operatio

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 15953-1002925-01Decommissioning replicated LUNs3Decommissioning replicated LUNs• “Decommissioni

160 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Force-enabling a decommissioned disk LUN for encryption3NOTEDo not delete the k

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 16153-1002925-01Force-enabling a disabled disk LUN for encryption37. En a bl e t h e LU N .Fabr

xvi Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01If you cannot use the licenseIdShow command because the switch is inoperable, y

162 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Tape pool configuration3• If a given tape volume belongs to a tape pool, tape p

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 16353-1002925-01Tape pool configuration33. Edit the dbo.CommCellStoragePolicyquery as follows:a

164 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Tape pool configuration3Creating a tape poolComplete the following steps to cre

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 16553-1002925-01Tape pool configuration3Deleting a tape poolThis command does not issue a warni

166 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01First-time encryption3First-time encryptionFirst-time encryption, also referred

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 16753-1002925-01Thin provisioned LUNs3Thin provisioned LUNsWith the introduction of Fabric OS 7

168 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Thin provisioned LUNs3Encryption mode: encryptEncryption format: na

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 16953-1002925-01Data rekeying3Space reclamationWhen a block that was provisioned is no longer n

170 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Data rekeying3Thin provisioned LUN limitations during rekey• The WRITE_SAME com

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 17153-1002925-01Data rekeying3NOTEFor a scheduled rekeying session to proceed, all encryption e

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 153-1002925-01Chapter1Encryption OverviewIn this chapter•Host and LUN considerations . . . . .

172 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Data rekeying35. Check the status of the rekeying session.FabricAdmin:switch>

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 17353-1002925-01Data rekeying31. Log in as Admin or FabricAdmin.2. Enter the cryptocfg --resume

174 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Data rekeying3

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 17553-1002925-01Chapter4Deployment ScenariosIn this chapter•Single encryption switch, two paths

176 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Single encryption switch, two paths from host to target4Single encryption switc

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 17753-1002925-01Single fabric deployment - HA cluster4Single fabric deployment - HA clusterFigu

178 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Single fabric deployment - DEK cluster4In Figure 87, the two encryption switche

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 17953-1002925-01Dual fabric deployment - HA and DEK cluster4In Figure 88, two encryption switch

180 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Multiple paths, one DEK cluster, and two HA clusters4failover for the encryptio

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 18153-1002925-01Multiple paths, DEK cluster, no HA cluster4The configuration details shown in F

Copyright © 2012 - 2013 Brocade Communications Systems, Inc. All Rights Reserved.ADX, AnyIO, Brocade, Brocade Assurance, the B-wing symbol, DCX, Fabri

2 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Terminology1TerminologyThe following are definitions of terms used extensively in

182 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Multiple paths, DEK cluster, no HA cluster4The configuration details are as fol

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 18353-1002925-01Deployment in Fibre Channel routed fabrics4Deployment in Fibre Channel routed f

184 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Deployment in Fibre Channel routed fabrics4The following is a summary of steps

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 18553-1002925-01Deployment as part of an edge fabric4Deployment as part of an edge fabricIn thi

186 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Deployment with FCIP extension switches4The following is a summary of steps for

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 18753-1002925-01VMware ESX server deployments4FIGURE 95 FCIP deploymentVMware ESX server deploy

188 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01VMware ESX server deployments4FIGURE 96 VMware ESX server, One HBA per guest OS

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 18953-1002925-01VMware ESX server deployments4Figure 97 shows a VMware ESX server with two gues

190 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01VMware ESX server deployments4

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 19153-1002925-01Chapter5Best Practices and Special TopicsIn this chapter•Firmware upgrade and d

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 353-1002925-01Terminology1Recovery cardsA set of smart cards that contain a backup master key.

192 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Firmware upgrade and downgrade considerations5•Key Vault Best Practices . . . .

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 19353-1002925-01Firmware upgrade and downgrade considerations5• Guidelines for firmware upgrade

194 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Configuration upload and download considerations55. Start firmware download (up

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 19553-1002925-01Configuration upload and download considerations5Information not included in a

196 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01HP-UX considerations5Configuration download at an encryption group member nodeS

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 19753-1002925-01AIX Considerations5For HP-UX multi-path configurations:• Add LUN 0 as a clearte

198 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Decommissioning in an EG containing mixed modes5Decommissioning in an EG contai

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 19953-1002925-01Tape data compression5Tape data compressionData is compressed by the encryption

200 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Tape block zero handling5Tape block zero handlingThe block zero of the tape med

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 20153-1002925-01Configuring CryptoTarget containers and LUNs5Configuring CryptoTarget container

4 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01The Brocade Encryption Switch1The Brocade Encryption SwitchThe Brocade Encryption

202 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Redirection zones5Redirection zonesRedirection zones should not be deleted. If

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 20353-1002925-01Turn off host-based encryption5Turn off host-based encryptionIf a host has an e

204 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Rekeying best practices and policies5Manual rekeyEnsure that the link to the ke

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 20553-1002925-01KAC certificate registration expiry5Recommendation for Host I/O traffic during

206 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Recommendations for Initiator Fan-Ins5Recommendations for Initiator Fan-InsFor

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 20753-1002925-01Best practices for host clusters in an encryption environment5Best practices fo

208 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Tape Device LUN Mapping5

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 20953-1002925-01Chapter6Maintenance and TroubleshootingIn this chapter•Encryption group and HA

210 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encryption group and HA cluster maintenance6Encryption group and HA cluster mai

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 21153-1002925-01Encryption group and HA cluster maintenance6FIGURE 99 Removing a node from an e

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 553-1002925-01The FS8-18 blade1The FS8-18 bladeThe FS8-18 blade provides the same features and

212 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encryption group and HA cluster maintenance6 IP Address: 10.

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 21353-1002925-01Encryption group and HA cluster maintenance6Deleting an encryption groupYou can

214 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encryption group and HA cluster maintenance6Displaying the HA cluster configura

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 21553-1002925-01Encryption group and HA cluster maintenance6Replacing an HA cluster member1. Lo

216 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encryption group and HA cluster maintenance6FIGURE 100 Replacing a failed encry

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 21753-1002925-01Encryption group and HA cluster maintenance6Case 2: Replacing a “live” encrypti

218 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encryption group and HA cluster maintenance6Performing a manual failback of an

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 21953-1002925-01Encryption group merge and split use cases6• After the failback completes, the

220 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encryption group merge and split use cases6NOTEWhen attempting to reclaim a fai

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 22153-1002925-01Encryption group merge and split use cases6RecoveryIf auto failback policy is s

6 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Recommendation for connectivity1Recommendation for connectivityIn order to achiev

222 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encryption group merge and split use cases6• The isolation of N3 from the group

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 22353-1002925-01Encryption group merge and split use cases6Recovery1. Restore the connection be

224 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encryption group merge and split use cases6NOTEThe collective time allowed (the

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 22553-1002925-01Encryption group merge and split use cases6NOTEIf one or more EG status display

226 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encryption group merge and split use cases6Display the encryption group state a

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 22753-1002925-01Encryption group merge and split use cases6If you now perform a cryptocfg --sho

228 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encryption group merge and split use cases66. Verify your encryption group is r

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 22953-1002925-01Encryption group database manual operations6Encryption group database manual op

230 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Key vault diagnostics6Use the --sync -securitydb command to distribute the secu

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 23153-1002925-01Key vault diagnostics6This feature reports the following types of configuration

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 753-1002925-01Brocade encryption solution overview1Brocade encryption solution overviewThe loss

232 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Measuring encryption performance6Measuring encryption performanceWith the intro

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 23353-1002925-01Measuring encryption performance6Number of host(s): 1Number of tape sessio

234 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Enabling encrypted LUNs in the disabled state following zeroization6FabricAdmin

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 23553-1002925-01Enabling encrypted LUNs in the disabled state following zeroization6Following t

236 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01General encryption troubleshooting6Encrypt existing data: enabledRekey: disable

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 23753-1002925-01General encryption troubleshooting6A backup fails because the LUN is always in

238 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01SSKM recommendations6SSKM recommendationsSafeNet’s KeySecure hosting NetApp’s L

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 23953-1002925-01Troubleshooting examples using the CLI6Troubleshooting examples using the CLIEn

240 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Troubleshooting examples using the CLI6Encryption Disabled CryptoTarget LUNIf t

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 24153-1002925-01Management application encryption wizard troubleshooting6Management application

8 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Brocade encryption solution overview1Data flow from server to storageThe Brocade

242 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Management application encryption wizard troubleshooting6Errors related to addi

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 24353-1002925-01Management application encryption wizard troubleshooting6General errors related

244 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01LUN policy troubleshooting6LUN policy troubleshootingTable 14 may be used as an

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 24553-1002925-01Loss of encryption group leader after power outage6Loss of encryption group lea

246 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01MPIO and internal LUN states65. Synchronize the crypto configurations across al

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 24753-1002925-01FS8-18 blade removal and replacement61. Enter the cryptocfg --resume_rekey comm

248 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01FS8-18 blade removal and replacement63. If the replaced FS8-18 blade is in memb

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 24953-1002925-01FS8-18 blade removal and replacement6d. Invoke the following command on the DCX

250 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01FS8-18 blade removal and replacement66. If the encryption group (EG) has a syst

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 25153-1002925-01Brocade Encryption Switch removal and replacement614. If “manual” failback was

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 953-1002925-01Data encryption key life cycle management1Data encryption key life cycle manageme

252 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Brocade Encryption Switch removal and replacement611. Initialize the new Brocad

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 25353-1002925-01Brocade Encryption Switch removal and replacement6Admin:switch> cryptocfg -–

254 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Brocade Encryption Switch removal and replacement6Single-node EG Replacement1.

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 25553-1002925-01Brocade Encryption Switch removal and replacement6b. Approve the TEP for this n

256 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Reclaiming the WWN base of a failed Brocade Encryption Switch625. Check the EG

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 25753-1002925-01Downgrading firmware from Fabric OS 7.1.06Downgrading firmware from Fabric OS 7

258 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Splitting an encryption group into two encryption groups6Splitting an encryptio

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 25953-1002925-01Moving an encryption blade from one EG to another in the same fabric6When promp

260 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Moving an encryption switch from one EG to another in the same fabric6Moving an

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 26153-1002925-01AppendixAState and Status InformationIn this appendix•Encryption engine securit

10 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Data encryption key life cycle management1FIGURE 5 DEK life cycle

262 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Security processor KEK statusASecurity processor KEK statusTable 19 lists secur

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 26353-1002925-01Encrypted LUN statesALUN_1ST_TIME_REKEY_IN_PROG First time rekey is in progress

264 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encrypted LUN statesALUN_DIS_WR_META_DONE_ERR Disabled (Write metadata done wit

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 26553-1002925-01Encrypted LUN statesATABLE 21 Tape LUN statesInternal Names Console String Expl

266 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encrypted LUN statesALUN_ENCRYPT Encryption enabled The tape medium is present,

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 26753-1002925-01AppendixBLUN PoliciesIn this appendixThe following topics are covered in this a

268 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01DF-compatibility support for disk LUNsBTABLE 23 Support matrix for disk LUNs fo

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 26953-1002925-01DF-compatibility support for disk LUNsBNative (Brocade)Cleartext Cleartext NA i

270 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01DF-compatibility support for disk LUNsBDF compatibleCleartext Encrypt Yes NA Ye

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 27153-1002925-01DF-compatibility support for tape LUNsBDF-compatibility support for tape LUNsTa

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 1153-1002925-01Support for virtual fabrics1Support for virtual fabricsThe Brocade Encryption Sw

272 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01DF-compatibility support for tape LUNsBDF-compatible Encrypt No (new tape) No e

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 27353-1002925-01IndexAacronymsin log messages, 111add commands--add -haclustermember, 134--add

274 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01IndexControl Processor, 114and RBAC, 114create commands--create -container, 141

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 27553-1002925-01Indexsingle encryption switch and two paths from host to target, 176single fabr

276 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Indexencryption groupadding a member node to using the CLI, 130adding a switch

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 27753-1002925-01IndexHHA clustersadding an encryption engine using the CLI, 134best practices,

278 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Index152, 153configuring for first-time encryption, 166configuring for multi-pa

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 27953-1002925-01Indexrekey and changing LUN configuration, 204rekey and deleting a container, 2

280 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01IndexTtape compression, 199tape devicesLUN mapping, 207tape library media chang

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 28153-1002925-01IndexZzeroizationsetting, 81zeroize command--zeroize, 123zeroizingeffects of us

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) iii53-1002925-01ContentsAbout This DocumentHow this document is organized . . . . . . . . . . .

12 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Cisco Fabric Connectivity support1

282 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Index

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 1353-1002925-01Chapter2Configuring Encryption Using the Management Application•Encryption Cente

14 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encryption Center features2Encryption Center featuresThe Encryption Center dialo

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 1553-1002925-01Encryption user privileges2Encryption user privilegesIn Brocade Network Advisor,

16 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Smart card usage2Smart card usageSmart Cards are credit card-sized cards that co

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 1753-1002925-01Smart card usage2• Establishing a trusted link with the NetApp LKM/SSKM key vaul

18 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Smart card usage23. Locate the Authentication Card Quorum Size and select the qu

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 1953-1002925-01Smart card usage2Registering authentication cards from the databaseSmart cards t

20 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Smart card usage2Deregistering an authentication cardAuthentication cards can be

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 2153-1002925-01Smart card usage2Using system cardsSystem cards are smart cards that can be used

iv Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Chapter 2 Configuring Encryption Using the Management ApplicationEncryption Cent

22 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Smart card usage2Enabling or disabling the system card requirementTo use a syste

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 2353-1002925-01Smart card usage2Deregistering system cardsSystem cards can be removed from the

24 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Smart card usage2FIGURE 12 Smart Card Asset Tracking dialog boxThe Smart Cards t

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 2553-1002925-01Smart card usage2NOTEYou can remove smart cards from the table to keep the Smart

26 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Smart card usage2Editing smart cardsSmart cards can be used for user authenticat

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 2753-1002925-01Network connections2Network connectionsBefore you use the encryption setup wizar

28 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encryption node initialization and certificate generation2Configuring blade proc

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 2953-1002925-01Steps for connecting to an LKM/SSKM appliance2Setting encryption node initializa

30 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Steps for connecting to an LKM/SSKM appliance2Establishing the trusted linkYou m

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 3153-1002925-01Steps for connecting to an LKM/SSKM appliance2Copyright (c) 2001-2009 NetApp, In

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) v53-1002925-01Configuring encryption storage targets . . . . . . . . . . . . . . . . . . . . .

32 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Steps for connecting to an LKM/SSKM appliance2FIGURE 15 Export switch certificat

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 3353-1002925-01Steps for connecting to an LKM/SSKM appliance2Disk keys and tape pool keys (Broc

34 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Encryption preparation2Encryption preparationBefore you use the encryption setup

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 3553-1002925-01Creating an encryption group22. Select a switch from the <NO GROUP DEFINED>

36 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Creating an encryption group24. From the Configure Switch Encryption welcome scr

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 3753-1002925-01Creating an encryption group2FIGURE 19 Create a New Encryption Group dialog boxT

38 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Creating an encryption group2FIGURE 20 Select Key Vault dialog boxUsing this dia

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 3953-1002925-01Creating an encryption group2FIGURE 21 Select Key Vault dialog box for LKM1. Ent

40 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Creating an encryption group2FIGURE 22 Specify Public Key Certificate (KAC) File

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 4153-1002925-01Creating an encryption group2FIGURE 23 Select Security Settings dialog box6. Set

vi Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Viewing and editing encryption group properties . . . . . . . . . . . . . . . 97

42 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Creating an encryption group2FIGURE 24 Confirm Configuration dialog boxThe Confi

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 4353-1002925-01Creating an encryption group2After configuration of the encryption group is comp

44 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Adding a switch to an encryption group25. Create a new master key. (Opaque key v

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 4553-1002925-01Adding a switch to an encryption group2FIGURE 28 Designate Switch Membership dia

46 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Adding a switch to an encryption group2FIGURE 29 Add Switch to Existing Encrypti

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 4753-1002925-01Adding a switch to an encryption group26. Enter the location where you want to s

48 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Adding a switch to an encryption group2All configuration items have green check

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 4953-1002925-01Replacing an encryption engine in an encryption group2Replacing an encryption en

50 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01High availability clusters2High availability clusters A high availability (HA) c

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 5153-1002925-01High availability clusters2Creating HA clusters For the initial encryption node,

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) vii53-1002925-01CryptoTarget container configuration . . . . . . . . . . . . . . . . . . . . .

52 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01High availability clusters23. Click the right arrow to add the encryption engine

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 5353-1002925-01Configuring encryption storage targets2Failback optionThe Failback option determ

54 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Configuring encryption storage targets25. Confirmation6. Configuration Status7.

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 5553-1002925-01Configuring encryption storage targets2FIGURE 37 Configure Storage Encryption we

56 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Configuring encryption storage targets2The dialog box contains the following inf

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 5753-1002925-01Configuring encryption storage targets26. Select a target from the list. (The Ta

58 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Configuring encryption storage targets2NOTEYou must enter the host node world wi

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 5953-1002925-01Configuring encryption storage targets2FIGURE 41 Name Container dialog box10. En

60 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Configuring encryption storage targets2The screen contains the following informa

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 6153-1002925-01Configuring encryption storage targets213. Review any post-configuration instruc

viii Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Chapter 4 Deployment ScenariosSingle encryption switch, two paths from host to

62 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Configuring hosts for encryption targets2Configuring hosts for encryption target

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 6353-1002925-01Configuring hosts for encryption targets2FIGURE 46 Encryption Target Hosts dialo

64 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Adding target disk LUNs for encryption2Adding target disk LUNs for encryptionYou

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 6553-1002925-01Adding target disk LUNs for encryption2• Encryption path table: Should be LUN/Pa

66 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Adding target disk LUNs for encryption24. Select the target port from the Target

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 6753-1002925-01Adding target disk LUNs for encryption2FIGURE 50 Select LUN dialog box The Selec

68 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Adding target disk LUNs for encryption2NOTEThe maximum number of uncommitted con

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 6953-1002925-01Adding target tape LUNs for encryption2Configuring storage arraysThe storage arr

70 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Adding target tape LUNs for encryption2FIGURE 52 Encryption Targets dialog box3.

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 7153-1002925-01Adding target tape LUNs for encryption2FIGURE 54 Add Encryption Target Tape LUNs

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) ix53-1002925-01Configuring CryptoTarget containers and LUNs . . . . . . . . . . . . . . .201Re

72 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Moving targets2• Enable Write Early Ack: When selected, enables tape write pipel

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 7353-1002925-01Tape LUN write early and read ahead2Tape LUN write early and read aheadThe tape

74 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Tape LUN statistics2FIGURE 56 Encryption Target Tape LUNs dialog box - Setting t

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 7553-1002925-01Tape LUN statistics2Viewing and clearing tape container statisticsYou can view L

76 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Tape LUN statistics2• Tape Session #: The number of the ongoing tape session.• U

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 7753-1002925-01Tape LUN statistics2FIGURE 59 Target Tape LUNs dialog box4. Select the LUN or LU

78 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Tape LUN statistics2• A Refresh button updates the statistics on the display sin

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 7953-1002925-01Encryption engine rebalancing2FIGURE 62 Tape LUN Statistics dialog boxThe Tape L

80 Fabric OS Encryption Administrator’s Guide (LKM/SSKM)53-1002925-01Security settings2During rebalancing operations, be aware of the following:• You

Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 8153-1002925-01Zeroizing an encryption engine2NOTEThe Select Security Settings dialog box only