Master Key Actions; Saving The Master Key To A File - Brocade Communications Systems StoreFabric SN6500B Administrator's Manual

2
Master keys

Master key actions

NOTE
Master keys belong to the group and are managed from Group Properties.
Master key actions are as follows:
•
•
•

Saving the master key to a file

Use the following procedure to save the master key to a file.
1. Select Configure > Encryption from the menu task bar to display the Encryption Center
2. Select a group from the Encryption Center Devices table, then select Group > Security from the
88
Backup master key: Enabled any time a master key exists. Selecting this option launches the
Backup Master Key for Encryption Group dialog box.
You can back up the master key to a file, to a key vault, or to a smart card. You can back up the
master key multiple times to any of these media in case you forget the passphrase you
originally used to back up the master key, or if multiple administrators each needs a
passphrase for recovery. Refer to the following procedures for more information:
-
"Saving the master key to a file"
-
"Saving a master key to a key vault"
-
"Saving a master key to a smart card set"
You must back up the master key when the status is Created but not backed up.
Restore master key: Enabled when no master key exists or the previous master key has been
backed up. This option is also enabled when using a DPM key vault.
When this option is selected, the Restore Master Key for Encryption Group dialog box displays,
from which you can restore a master key from a file, key vault, or smart card set. Refer to the
following procedures for more information:
-
"Restoring a master key from a file"
-
"Restoring a master key from a key vault"
-
"Restoring a master key from a smart card set"
Create new master key: Enabled when no master key exists, or the previous master key has
been backed up. Refer to
You must create a new master key when the status is Required but not created.
NOTE
If a master key was not created, Not Used is displayed as the status and the Master Key
Actions list is grayed out. In this case, you must create a new master key. Additional master key
statuses are: Backed up but not propagated and Created and backed up.
dialog box (Refer to Figure 1
menu task bar.
The Encryption Group Properties dialog box displays with the Security tab selected.
on page 88
on page 89
on page 90
on page 92
on page 93
"Creating a new master key"
on page 14).
Fabric OS Encryption Administrator's Guide (SKM/ESKM)
on page 94
on page 95.
53-1002721-01