Brocade Communications Systems StoreFabric SN6500B Administrator's Manual page 266

6
Encryption group merge and split use cases
4. Go to every other encryption group island to delete the encryption group.
318
Display the encryption group state again.
Node182:admin-> cryptocfg --show -groupcfg
Node182 should now show up with an Encryption Group state of
CLUSTER_STATE_CONVERGED.
In this two node example, there is only one other node in the encryption group, and therefore
the is only one node to deregister. When you have a 3:1 split or a 2:2 split, issue the following
command from the group leader node you are keeping.
Switch:admin-> cryptocfg --show -groupmember -all
The output of this command will show you every node that was ever a part of this encryption
group. Look at State: for all nodes to determine which ones to deregister. Only the nodes with a
state of DEF_NODE_STATE_DISCOVERING must be deregistered from the group leader node
you are keeping. The example below shows that the node with WWN 10:00:00:05:1e:c1:9a:86
needs to be deregistered.
Switch:admin-> cryptocfg --show -groupmember -all
NODE LIST
Total Number of defined nodes:
Group Leader Node Name:
Encryption Group state:
.... Output truncated...
Node Name:
State:
...Output truncated...
NOTE
If you have four encryption nodes that have split into a pair of two node encryption groups,
refer to "The 2:2 EG split exception"
before deleting the encryption group.
In this example, the encryption group island consists only of Node181. From Node181, enter
the following command:
Node181:admin-> cryptocfg --delete -encgroup <ENTER EG GROUP NAME HERE>
This will permanently delete the encryption group configuration
ARE YOU SURE (yes, y, no, n): [no] yes
WARNING: Tape, HA cluster or Container is configured in this node.
Do you want to do EG deletion and retain Tape, HA cluster or Container
configuration
ARE YOU SURE (yes, y, no, n): [no] yes
Encryption group delete status: Operation Succeeded.
If you now perform a cryptocfg
Node181 is defined:
Node181:admin-> cryptocfg --show -groupcfg
4
10:00:00:05:1e:54:22:44
CLUSTER_STATE_DEGRADED
10:00:00:05:1e:c1:9a:86
DEF_NODE_STATE_DISCOVERING
on page 319 for a description of an additional step to take
show groupcfg, you will see that no encryption group on
-- -
Fabric OS Encryption Administrator's Guide (SKM/ESKM)
53-1002721-01