Brocade Communications Systems Brocade 8/12c Administrator's Manual page 90

2
Adding target tape LUNs for encryption
FIGURE 58
5. Select a host from the Host list.
6. Choose a LUN to be added to an encryption target container using one of the two following
7.
8. Click OK. The selected tape LUNs are added to the encryption target container.
70
Add Encryption Target Tape LUNs dialog box
Before you encrypt a LUN, you must select a host, then either discover LUNs that are visible to
the virtual initiator representing the selected host, or enter a range of LUN numbers to be
configured for the selected host.
methods:
•
Discover. Click to identify the exposed logical unit number for a specified initiator. If you
already know the exposed LUNs for the various initiators accessing the LUN, you can enter
the range of LUNs using the alternative method.
•
Enter a LUN number range. Click Show LUNs to add a range of LUNs to be configured for
the selected host. The LUN needed for configuring a Crypto LUN is the LUN that is exposed
to a particular initiator.
Select the desired encryption mode. Options are: Native Encryption, DF-Compatible
Encryption, and Cleartext.
•
If you change a LUN policy from Native Encryption or DF-Compatible Encryption to Clear
Text, you disable encryption.
•
The LUNs of the target that are not enabled for encryption must still be added to the
CryptoTarget container with the Clear Text encryption mode option.
NOTE
The Re-keying interval can only be changed for disk LUNs. For tape LUNs, expiration of the
re-keying interval simply triggers the generation of a new key to be used on future tape
volumes. Tapes that are already made are not re-keyed. To re-key a tape, you need to read the
tape contents using a host application that decrypts the tape contents using the old key, then
rewrite the tape, which re-encrypts the data with the new key.
Fabric OS Encryption Administrator's Guide
53-1002159-03