Multi-Path Environment; Configuring Encrypted Tape Storage In A Multi-Path Environment - Brocade Communications Systems WFT-2D User Manual

Configuring encrypted tape storage in a multi-path environment

This example assumes one host is accessing one storage device using two paths:
•
•
Encryption Engines A and B are in switches that are already part of Encryption Group X.
The following procedure is used to configure this scenario using the Management application.
1. Configure Host Port A and Target Port A in the same zone by selecting Configure > Zoning from
2. Configure Host Port B and Target Port B in the same zone by selecting Configure > Zoning from
3. Select Configure > Encryption from the menu task bar to display the Encryption Center
4. Click View Groups to display the encryption groups if groups are not already displayed.
5. Select Encryption Group X, then click the Targets icon.
6. From the Encryption Targets dialog box, click Add to open the Configure Storage Encryption
7.
8. In the Encryption Targets dialog box, select Target Port A, click LUNs, then click Add. Select the
9. In the Encryption Targets dialog box, select Target Port B, click LUNs, then click Add. Select the
10. Click Commit to make the LUN configuration changes effective in both paths simultaneously.
The Management application does not automatically commit LUN configuration changes. You must
manually commit any LUN configuration changes, even in non-multi-path environments.
Committing LUN configuration changes manually allows the matching changes made in a
multi-path environment to be committed together, preventing cases where one path may be
encrypting and another path is not, thus causing corrupted data.
NOTE
There is a limit of 16 uncommitted tape LUN configuration changes. When adding more than 8 LUNs
in a multi-path environment, repeat step 8 and step 9 above, adding only 8 LUNs to each target
container at a time. Each commit operation will commit 16 LUNs, 8 in each path.
Brocade Network Advisor SAN User Manual
53-1003154-01
Configuring encrypted tape storage in a multi-path environment
The first path is from Host Port A to Target Port A, using Encryption Engine A for encryption.
The second path is from Host Port B to Target Port B, using Encryption Engine B for encryption.
the Management application main menu.
the Management application main menu.
dialog box (Refer to Figure 266
wizard. Use the wizard to create a target container for Encryption Engine A with Target Port A
and Host Port A.
Repeat Step 6 to create a target container for Encryption Engine B with Target Port B and
Host Port B.
Up to this point, the Management application has been automatically committing changes as
they are made. The targets and hosts are now fully configured; only the LUN configuration
remains.
LUNs to be encrypted and the encryption policies for the LUNs.
LUNs to be encrypted and the encryption policies for the LUNs, making sure that the
encryption policies match the policies specified in the other path.
on page 694).
20
833