Brocade Communications Systems StoreFabric SN6500B Administrator's Manual page 288

6
Brocade Encryption Switch removal and replacement
8. Power on the new Brocade Encryption Switch. Note that the FC cables have not yet been
9. Set the IP address for the new Brocade Encryption Switch using the ipAddrSet command for
10. Zeroize the new Brocade Encryption Switch using the following command.
11. If the encryption group (EG) has a system card authentication enabled, you need to reregister
12. Initialize the new Brocade Encryption Switch node using following command.
13. Initialize the new EE using the following command.
14. Register the new EE using the following command.
15. Enable the new EE using the following command.
16. Invoke the following command to clean up the WWN base on the new Brocade Encryption
17. From the new Brocade Encryption Switch node, invoke the following command to export the CP
18. From the group leader node, invoke the following command to import the new Brocade
19. From the group leader node, run the following command to register the new Brocade
20. Export the KAC CSR from new node and sign the CSR from the HP SKM/ESKM Local CA.
21. Import the signed CSR/Cert onto the new node.
340
plugged in.
the Mgmt and I/O links. Check that the switch name and domain ID associated with the
replacement switch match that of the original.
Admin:switch> cryptocfg –-zeroizeEE
the system card through the BNA client for the new EE. Refer to Chapter 2, Configuring
Encryption Using the Management Application."
Admin:switch> cryptocfg –-initnode
Admin:switch> cryptocfg –-initEE
Admin:switch> cryptocfg –-regEE
Admin:switch> cryptocfg –-enableEE
Switch if it was used earlier.
Admin:switch> cryptocfg –reclaim --cleanup
certificate of the new Brocade Encryption Switch.
Admin:switch> cryptocfg --export -scp -CPcert <host IP> <host user> <host file
path>
Encryption Switch node certificate on the group leader node.
Admin:switch> cryptocfg --import -scp <Certificate file name> <host IP> <host
user> <host file path>
Encryption Switch node as a member node on the group leader.
Admin:switch> cryptocfg --reg -membernode <New BES WWN>
IP address>
<Cert file Name> <Old
Fabric OS Encryption Administrator's Guide (SKM/ESKM)
53-1002721-01