Force-Enabling A Decommissioned Disk Lun For Encryption - Brocade Communications Systems StoreFabric SN6500B Administrator's Manual

3

Force-enabling a decommissioned disk LUN for encryption

Force-enabling a decommissioned disk LUN for encryption

When trying to re-use primary or secondary replicated LUNs, you must first decommission the
LUNs. When trying to re-use a decommissioned LUN, you must:
1. Delete the keys from the key vault.
2. Log in as Admin or FabricAdmin.
3. Delete the decommissioned LUN IDs from the Brocade Encryption Switch.
4. Display the decommissioned key IDs.
5. Delete the respective key from the Brocade Encryption Switch. Enter the following command.
6. Add the LUN back into the container as cleartext.
7.
8. Modify the LUN to encrypted.
186
a. Decommission the primary LUN.
FabricAdmin:switch> cryptocfg --decommission -container <container name>
-initiator <initiator
b. Display the decommissioned key IDs.
FabricAdmin:switch> cryptocfg --show –decommissionedkeyids
c. Delete the respective key from the key vault. On the Brocade Encryption Switch, enter the
following command.
FabricAdmin:switch> cryptocfg --delete –decommissionedkeyids
d. Decommission the secondary LUN.
FabricAdmin:switch> cryptocfg --decommission -container <container name>
-initiator <initiator
FabricAdmin:switch> cryptocfg --show –decommissionedkeyids
FabricAdmin:switch> cryptocfg --delete –decommissionedkeyids
FabricAdmin:switch> cryptocfg --add –LUN <crypto target container name> <LUN
Num | LUN Num Range> <Initiator PWWN> <Initiator NWWN> -lunstate cleartext
Enable the LUN.
FabricAdmin:switch> cryptocfg --enable -LUN <crypto target container name>
<LUN Num> <Initiator PWWN>
FabricAdmin:switch> cryptocfg --modify -LUN <crypto target container name>
<LUN Num> <Initiator PWWN> 0 -lunstate encrypted -encryption_format native
-encrypt
PWWN> -LUN <lun number>
PWWN> -LUN <lun number>
Fabric OS Encryption Administrator's Guide (SKM/ESKM)
53-1002721-01