Enabling Secure Mode - HP StorageWorks MSA 2/8 - SAN Switch User Manual

Enabling Secure Mode

Secure Mode is enabled and disabled on a fabric-wide basis. You can enable and
disable Secure Mode as often as desired; however, all Secure Fabric OS policies,
including the FCS policy, are deleted each time Secure Mode is disabled, and
must be re-created the next time it is enabled. You can back up the Secure Fabric
OS database using the configupload command. For more information about
this command, refer to the HP StorageWorks Fabric OS Version 3.1.x/4.1.x
Reference Guide.
You can enable Secure Mode using the secmodeenable command. This
command must be entered through a sectelnet, SSH, or serial connection to the
switch that you want to designate as the Primary FCS switch. The command fails
if any switch in the fabric is not capable of enforcing Secure Fabric OS policies. If
the Primary FCS switch fails to participate in the fabric, the Primary FCS role
moves to the next available switch listed in the FCS policy.
Note:
it must be enabled on the other logical switch if they are in the same fabric, and is
strongly recommended if they are in separate fabrics.
Placing the logical switches on the same Core Switch 2/64 in separate fabrics is not
recommended.
Enabling Secure Mode accomplishes the following:
Secure Fabric OS Version 1.0 User Guide
If Secure Mode is enabled on one of the logical switches in a Core Switch 2/64,
Creates the FCS policy. The secmodeenable command prompts for the
FCS policy members. No other Secure Fabric OS policies exist until you
create them, and no other Secure Fabric OS-related changes occur to the
fabric other than the implementation of the FCS policy.
Distributes the policy set (initially consisting only of the FCS policy) to all
switches in the fabric.
Requires specification of the passwords specific to Secure Mode.
Fastboots all switches to bring the fabric up in Secure Mode.
Once the fastboots are complete, Secure Mode enables you to create other
Secure Fabric OS policies.
Creating Secure Fabric OS Policies
49