Security Processor Kek Status - Brocade Communications Systems StoreFabric SN6500B Administrator's Manual

A

Security processor KEK status

Security processor KEK status
Table 20
TABLE 20
KEK type
Primary KEK (current MK or
primary KV link key)
Secondary KEK (alternate
MK or secondary KV link key)
Group KEK
1.
Encrypted LUN states
Table 21
TABLE 21
LUN state
UNKNOWN
LUN_STATE_UNAVAILABLE
LUN_STATE_INIT
LUN_DISC_START
LUN_DISC_COMPLETE
LUN_SETUP_START
LUN_CLEAR_TEXT
LUN_ENCRYPT
LUN_READONLY_1
LUN_READONLY_2
LUN_READONLY_3
LUN_WR_META_IN_PROG
302
lists security processor KEK status information.
Security processor KEK status
KEK status
None
Mismatch
Match/Valid
None
Mismatch
Match/Valid
None
Mismatch
Match/Valid
Only valid in the "encryption engine awaiting encryption group" state and the "encryption engine online" state.
lists encrypted LUN states.
Encrypted LUN states
1
Table 22 lists LUN states that are specific to tape LUNs.
String displayed
Unknown
LUN state unavailable.
Initialize
LUN discovery in progress.
LUN discovery complete.
LUN setup
cleartext encryption enabled.
Encryption enabled.
Read only (found native metadata while LUN is in DF mode).
Read only (found DF metadata while LUN is in native mode).
Read only (metadata key is in read-only state).
Write metadata is in progress.
Fabric OS Encryption Administrator's Guide (SKM/ESKM)
Description
Primary KEK is not configured.
Primary KEK mismatch between the CP
and the SP.
Primary KEK at CP matches the one in the
SP and is valid.
Secondary KEK is not configured.
Secondary KEK mismatch between the CP
and the SP.
Secondary KEK at CP matches the one in
the SP and is valid.
Group KEK is not configured.
Group KEK mismatch between the CP and
the SP.
Group KEK at the CP matches the one in
the SP and is valid.
53-1002721-01