Deleting An Encryption Group; Removing An Ha Cluster Member - Brocade Communications Systems StoreFabric SN6500B Administrator's Manual

Deleting an encryption group

You can delete an encryption group after removing all member nodes following the procedures
described in the previous section. The encryption group is deleted on the group leader after you
have removed all member nodes.
Before deleting the encryption group, it is highly recommended that you remove the group leader
from the HA cluster and clear all CryptoTarget and tape pool configurations for the group.
The following example deletes the encryption group "brocade".
1. Log in to the group leader as Admin or SecurityAdmin
2. Enter the cryptocfg

Removing an HA cluster member

Removing an encryption engine from an HA cluster "breaks" the HA cluster by removing the
failover/failback capability for the removed encryption engines, However, the removal of an
encryption engine does not affect the relationship between configured containers and the
encryption engine that is removed from the HA cluster. The containers still belong to this encryption
engine and encryption operations continue.
The remove command should not be used if an encryption engine which failed over exists in the HA
Cluster. Refer to the section
replacing a failed encryption engine in an HA cluster.
1. Log in to the group leader as Admin or SecurityAdmin.
2. Enter the cryptocfg
3. Enter cryptocfg
Fabric OS Encryption Administrator's Guide (SKM/ESKM)
53-1002721-01
delete
--
SecurityAdmin:switch> cryptocfg --delete -encgroup CRYPTO_LSWAT
This will permanently delete the encryption group configuration
ARE YOU SURE (yes, y, no, n): [no] y
Encryption group delete status: Operation Succeeded.
"Replacing an HA cluster member" on page 307
remove
--
the node WWN to be removed. Provide a slot number if the encryption engine is a blade. The
following example removes HA cluster member 10:00:00:05:1e:53:74:87 from the HA cluster
HAC2.
SecurityAdmin:switch>cryptocfg --remove -haclustermember HAC2 \
10:00:00:05:1e:53:74:87
Remove HA cluster member status: Operation Succeeded.
commit to commit the transaction.
--
Encryption group and HA cluster maintenance
encgroup command followed by the encryption group name.
-
haclustermember command. Specify the HA cluster name and
-
6
for instructions on
305