Fabric Os Encryption Guide Supporting Skm And Eskm; In This Chapter; Documentation Updates For Skm; Chapter 3, Configuring Brocade Encryption Using Cli - Brocade Communications Systems SN3000B Documentation Update

Fabric OS Encryption Guide Supporting SKM and ESKM

In this chapter

The updates in this chapter are for the Fabric OS Encryption Administrator's Guide Supporting
HP Secure Key Manager (SKM) Environments, and HP Enterprise Secure Key Manager (ESKM)
Environments publication number 53-1002159-03, published July 2011.

Documentation updates for SKM

Chapter 3, Configuring Brocade Encryption Using CLI

Failover/failback policy configuration

A correction has been made to heartbeat values for the following:
•
•

Chapter 5, Best Practices and Special Topics

Key Vault Best Practices

When encrypted disk LUNs are to be configured or moved to an Encryption Group that uses a
different key vault, make sure to decommission the encrypted LUNs from the old Encryption Group.

Chapter 6, Maintenance and Troubleshooting

Manually synchronizing the security database

This operation can resolve problems with master key propagation (and connectivity issues between
peer node encryption engines in an encryption group). The synchronization occurs every time this
command is executed regardless of whether or not the security database was synchronized across
all nodes in the encryption group.
Use the - -sync -securitydb command to distribute the security database from the group leader
node to all member nodes. This command is valid only on the group leader.
In scenarios where this master key propagation issue still persists, exporting the master key to a
file and recovering it resolves the issue. To do this, use the following commands:
Fabric OS Documentation Updates
53-1002165-05
Heartbeat misses—The range is 3-14 in integer increments only.
Heartbeat timeout—The range is 2-9 seconds in integer increments only.
Chapter
7
19