Single-Node Eg Replacement - Brocade Communications Systems StoreFabric SN6500B Administrator's Manual

6
Brocade Encryption Switch removal and replacement
31. If HA cluster membership for the old Brocade Encryption Switch was not in place, move
32. Check the EG state using the following command to ensure that the entire EG is in the

Single-node EG Replacement

1. Upload the configuration stored on the Brocade Encryption Switch you are replacing using the
2. Power off the Brocade Encryption Switch. Remove the Mgmt Link, I/O links, and FC cables from
3. Power on the new Brocade Encryption Switch. Note that the FC cables have not yet been
4. Set the IP address for the new Brocade Encryption Switch using the ipAddrSet command for
5. Initialize the new Brocade Encryption Switch node using following command:
6. Zeroize the new Brocade Encryption Switch.
7.
8. Initialize the new encryption engine using the following command.
9. Register the new encryption engine using the following command.
10. Enable the new encryption engine using the following command.
342
container movement to the new Brocade Encryption Switch using the following procedure.
a. Replace the old EE with the new EE using following command on the group leader.
Admin:switch> cryptocfg –replace
<WWN of new Brocade Encryption Switch>
b. Issue commit.
Admin:switch> cryptocfg --commit
converged and In Sync state.
Admin:switch> cryptocfg –-show –groupcfg
FOS configupload command.
the Brocade Encryption Switch, noting where each was attached so that the replacement
Brocade Encryption Switch can be cabled properly.
plugged in.
both Mgmt and I/O links. Check that the switch name and domain ID associated with the
replacement switch match that of the original.
Admin:switch> cryptocfg --initnode
Admin:switch> cryptocfg --zeroizeEE
If system card authentication was enabled, you must re-register the system card through the
BNA client for the new encryption engine.
Admin:switch> cryptocfg --initEE [slotnumber]
Admin:switch> cryptocfg --regEE [slotnumber]
Admin:switch> cryptocfg --enableEE [slotnumber]
<WWN of old Brocade Encryption Switch>
Fabric OS Encryption Administrator's Guide (SKM/ESKM)
53-1002721-01