Splitting An Encryption Group Into Two Encryption Groups - Brocade Communications Systems StoreFabric SN6500B Administrator's Manual

Splitting an encryption group into two encryption groups

In this example, which is represented in
from which you want to remove two of the nodes and add them to a new encryption group.
TABLE 16
Encryption group
Original EG
New EG1
New EG2
1. Enter the following command on FOS1 to reclaim the VI/VT WWN base for FOS3:
2. Enter the following command on FOS1 to propagate the change to all nodes in the EG:
3. Enter the following command in FOS1 to eject node FOS3 from the EG:
4. Enter the following command on FOS1 to deregister the ejected node from the encryption
5. Enter the following command on FOS3 to clean up the encryption configuration on the
6. Repeat steps 1–5 for FOS4.
7.
Fabric OS Encryption Administrator's Guide (SKM/ESKM)
53-1002721-01
Splitting an encryption group
Nodes
FOS1 (Group Leader)
FOS2
FOS3
FOS4
FOS1 (Group Leader)
FOS2
FOS3 (Group Leader)
FOS4
Admin:switch> cryptocfg --reclaimWWN -membernode <FOS3-WWN>
When prompted, enter yes.
Admin:switch> cryptocfg --commit
Admin:switch> cryptocfg --eject -membernode <FOS3-WWN>
group:
Admin:switch> cryptocfg --dereg -membernode <FOS3-WWN>
deregistered node:
Admin:switch> cryptocfg –-reclaimWWN –cleanup
When prompted, enter yes to each prompt.
Create a new EG on FOS3:
a. Create the group:
Admin:switch> cryptocfg --create -encgroup FOS3
b. Set the key vault type. (The same key vault type is used for both SKM and ESKM.)
Admin:switch> cryptocfg --set -keyvault SKM
When prompted, enter yes to each prompt.

Splitting an encryption group into two encryption groups

Table 16, you have one encryption group with four nodes
6
347