Fabric Os Encryption Guide Supporting Rkm; In This Chapter; Documentation Updates For Rkm; Chapter 2, Encryption Configuration Using The Management - Brocade Communications Systems SN3000B Documentation Update

Fabric OS Encryption Guide Supporting RKM

In this chapter

The updates in this chapter are for the Fabric OS Encryption Administrator's Guide Supporting RSA
Key Manager (RKM) Environments, publication number 53-1002158-02, published June 2011.

Documentation updates for RKM

Chapter 2, Encryption configuration using the Management application

Disk device decommissioning

Under the heading of "Displaying and deleting decommissioned key IDs" on page 87, additional
steps in the procedure have been added that must be performed from the RKM key vault server.
FIGURE 1
When disk LUNs are decommissioned, the process includes the disabling of the key record in the
key vault and indication that the key has been decommissioned. These decommissioned key IDs
are still stored on the switch. You can display, copy, and delete them as an additional security
measure.
For RKM key vaults, you need to know the Universal ID (UUID) associated with the decommissioned
LUN key IDs to delete keys from the key vault. To delete decommissioned key IDs, you must first
display the vendor-specific UUIDs of decommissioned key IDs for RKM key vaults from the
Management application. You must then remove key attributes directly from the RKM key vault
server.
1. Select Configure > Encryption from the menu task bar.
Fabric OS Documentation Updates
53-1002165-05
Decommissioned Key IDs dialog box
The Encryption Center dialog box displays.
Chapter
6
15