Brocade Communications Systems Brocade 8/12c Administrator's Manual page 12

xii
Encryption group merge and split use cases . . . . . . . . . . . . . . . . .213
Encryption group database manual operations . . . . . . . . . . . . . . .223
Key vault diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .223
General encryption troubleshooting . . . . . . . . . . . . . . . . . . . . . . . .226
Troubleshooting examples using the CLI . . . . . . . . . . . . . . . . . . . . .229
Management application encryption wizard troubleshooting . . . .231
LUN policy troubleshooting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .234
Loss of encryption group leader after power outage . . . . . . . . . . .235
MPIO and internal LUN states . . . . . . . . . . . . . . . . . . . . . . . . . . . . .236
FS8-18 blade removal and replacement. . . . . . . . . . . . . . . . . . . . .237
BES removal and replacement. . . . . . . . . . . . . . . . . . . . . . . . . . . . .238
Reclaiming the WWN base of a failed Brocade Encryption
Switch. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .244
Splitting an encryption group into two encryption groups . . . . . . .244
Moving a blade from one EG to another EG in the same fabric. . .245
Moving a BES from one EG to another EG in the same fabric . . . .246
Removing stale rekey information for a LUN . . . . . . . . . . . . . . . . . . 247
Appendix A State and Status Information
In this appendix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .249
Encryption engine security processor (SP) states. . . . . . . . . . . . . .249
A member node failed and is replaced . . . . . . . . . . . . . . . . . .213
A member node reboots and comes back up . . . . . . . . . . . . .214
A member node lost connection to the group leader . . . . . . .215
A member node lost connection to all other nodes in the
encryption group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .215
Several member nodes split off from an encryption group . .216
Adjusting heartbeat signaling values . . . . . . . . . . . . . . . . . . . . 217
EG split possibilities requiring manual recovery . . . . . . . . . . . 217
Configuration impact of encryption group split or node
isolation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .222
Manually synchronizing the encryption group database. . . . .223
Manually synchronizing the security database . . . . . . . . . . . .223
Aborting a pending database transaction . . . . . . . . . . . . . . . .223
Encryption Enabled Crypto Target LUN. . . . . . . . . . . . . . . . . . .229
Encryption Disabled Crypto Target LUN . . . . . . . . . . . . . . . . . .230
Errors related to adding a switch to an existing group . . . . . .231
Errors related to adding a switch to a new group . . . . . . . . . .232
General errors related to the Configure Switch Encryption
wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .233
Suspension and resumption of re-keying operations . . . . . . .236
Multi Node EG Case. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .238
Single Node EG Replacement . . . . . . . . . . . . . . . . . . . . . . . . . .242
Fabric OS Encryption Administrator's Guide
53-1002159-03