Brocade Communications Systems StoreFabric SN6500B Administrator's Manual page 11

Fabric OS Encryption Administrator's Guide (SKM/ESKM)
53-1002721-01
General encryption troubleshooting . . . . . . . . . . . . . . . . . . . . . . . .325
Troubleshooting examples using the CLI . . . . . . . . . . . . . . . . . . . . .328
Management application encryption wizard troubleshooting . . . .330
LUN policy troubleshooting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .333
Loss of encryption group leader after power outage . . . . . . . . . . .334
MPIO and internal LUN states . . . . . . . . . . . . . . . . . . . . . . . . . . . . .335
FS8-18 blade removal and replacement. . . . . . . . . . . . . . . . . . . . .336
Brocade Encryption Switch removal and replacement. . . . . . . . . .339
Reclaiming the WWN base of a failed Brocade Encryption
Switch. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .344
Removing stale rekey information for a LUN . . . . . . . . . . . . . . . . . .345
Downgrading firmware from Fabric OS 7.1.0. . . . . . . . . . . . . . . . . .345
Fabric OS and ESKM compatibility matrix . . . . . . . . . . . . . . . . . . . .346
Splitting an encryption group into two encryption groups . . . . . . .347
Moving an encryption blade from one EG to another in the
same fabric . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .348
Moving an encryption switch from one EG to another in the
same fabric . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .348
Appendix A State and Status Information
In this appendix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .351
Encryption engine security processor (SP) states. . . . . . . . . . . . . .301
Security processor KEK status . . . . . . . . . . . . . . . . . . . . . . . . . . . . .352
Encrypted LUN states . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .352
Encryption Enabled CryptoTarget LUN . . . . . . . . . . . . . . . . . . .328
Encryption Disabled CryptoTarget LUN. . . . . . . . . . . . . . . . . . .329
Errors related to adding a switch to an existing group . . . . . .330
Errors related to adding a switch to a new group . . . . . . . . . .331
General errors related to the Configure Switch Encryption
wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .332
Suspension and resumption of rekeying operations. . . . . . . .335
Multi-node EG replacement . . . . . . . . . . . . . . . . . . . . . . . . . . .336
Single-node EG replacement. . . . . . . . . . . . . . . . . . . . . . . . . . .338
Multi-node EG Case . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .339
Single-node EG Replacement . . . . . . . . . . . . . . . . . . . . . . . . . .342
xi