1. Log in as Admin or FabricAdmin.
2. Split the copy pairs.
3. Make the secondary LUN write-enabled.
4. Execute the rekey command on the secondary LUN.
5. Decommission the primary LUN.
6. Display the decommissioned key IDs.
7.
NOTE
Failure to rekey the secondary LUN might result in loss of data on the secondary LUN after the
primary LUN is decommissioned.
Decommissioning secondary LUNs only
To decommission the secondary LUN, complete the following steps:
1. Log in as Admin or FabricAdmin.
2. Split the copy pairs.
3. Make the secondary LUN write-enabled.
4. Decommission the secondary LUN.
NOTE
Do not delete the key from the key vault.
Decommissioning primary and secondary LUN pairs
To decommission both the primary and secondary LUNs, complete the following steps:
1. Log in as Admin or FabricAdmin.
2. Split the copy pairs.
3. Independently decommission the primary and secondary LUNs.
Fabric OS Encryption Administrator's Guide (SKM/ESKM)
53-1002721-01
FabricAdmin:switch> cryptocfg --manual_rekey <crypto target container name>
<LUN Num> <Initiator PWWN>
FabricAdmin:switch> cryptocfg --decommission -container <container name>
-initiator <initiator
FabricAdmin:switch> cryptocfg --show –decommissionedkeyids
Delete the respective key from the key vault. On the Brocade Encryption Switch, enter the
following command.
FabricAdmin:switch>cryptocfg --delete –decommissionedkeyids
FabricAdmin:switch> cryptocfg --decommission -container <container name>
-initiator <initiator
Decommissioning replicated LUNs
PWWN> -LUN <lun number>
PWWN> -LUN <lun number>
3
185