Configuring A Tape Lun - Brocade Communications Systems Brocade 8/12c Administrator's Manual

3
Crypto LUN configuration

Configuring a tape LUN

This example shows how to configure a tape storage device. The basic setup procedure is the same
as for disk devices. Only a subset of configuration options and policy settings are available for tape
LUNs. Refer to
1. Create a zone that includes the initiator (host) and the target port. Refer to the section
2. Create a CryptoTarget container of type tape. Refer to the section
3. Configure the Crypto tape LUN. Refer to the section
158
Table 6 on page 156 for tape LUN configuration options.
"Creating an initiator - target zone"
container" on page 149 for instructions.
a. Create the container, allowing the encryption format to default to Native.
FabricAdmin:switch>cryptocfg --create -container tape my_tape_tgt \
10:00:00:05:1e:41:9a:7e 20:0c:00:06:2b:0f:72:6d 20:00:00:06:2b:0f:72:6d
Operation Succeeded
b. Add an initiator to the CryptoTarget container "my_tape_tgt".
FabricAdmin:switch>cryptocfg --add -initiator my_tape_tgt \
10:00:00:00:c9:2b:c9:3a 20:00:00:00:c9:2b:c9:3a
Operation Succeeded
c. Commit the transaction.
FabricAdmin:switch>cryptocfg --commit
Operation Succeeded
for instructions.
a. Discover the LUN.
FabricAdmin:switch>cryptocfg --discoverLUN my_tape_tgt
Container name:
Number of LUN(s):
Host:
LUN number:
LUN serial number:
Key ID state:
b. Add the LUN to the tape CryptoTarget container. The following example enables the LUN
for encryption. There is a maximum of eight tape LUNs per Initiator in a container.
FabricAdmin:switch>cryptocfg --add -LUN my_tape_tgt 0x0 \
10:00:00:00:c9:2b:c9:3a 20:00:00:00:c9:2b:c9:3a -encrypt
Operation Succeeded
NOTE
When changing the tape LUN policy from encrypt to cleartext or from cleartext to encrypt,
or the encryption format from Brocade native to DF-compatible while data is being written
to or read from a tape backup device, the policy change is not enforced until the current
process completes and the tape is unmounted, rewound, or overwritten. Refer to the
section "Impact of tape LUN configuration changes"
on page 145 for instructions.
"Configuring a Crypto LUN"
my_tape_tgt
1
10:00:00:00:c9:2b:c9:3a
0x0
Key ID not Applicable
"Creating a CryptoTarget
on page 154
on page 161 for more information.
Fabric OS Encryption Administrator's Guide
53-1002159-03