Adding A Switch To An Encryption Group - Brocade Communications Systems StoreFabric SN6500B Administrator's Manual

2

Adding a switch to an encryption group

5. Create a new master key. (Opaque key vaults only). BNA checks for a new master key. New
6. Save the switch's public key certificate to a file. BNA saves the KAC certificate in the specified
7.

Adding a switch to an encryption group

The setup wizard allows you to either create a new encryption group, or add an encryption switch to
an existing encryption group. Use the following procedure to add a switch to an encryption group:
1. Select Configure > Encryption from the menu task bar to display the Encryption Center
2. Select a switch to add from the Encryption Center Devices table, then select Switch >
FIGURE 25
50
master keys are generated from the Security tab located in the Encryption Group Properties
dialog box.
NOTE
A master key is not generated if the key vault type is LKM. LKM manages DEK exchanges
through a trusted link, and the LKM appliance uses its own master key to encrypt DEKs.
file.
Back up the master key to a file. (Opaque key vaults only). BNA saves the master key in the
specified file.
dialog box (Refer to Figure 1
Create/Add to Group from the menu task bar.
NOTE
The switch must not already be in an encryption group.
The Configure Switch Encryption wizard welcome screen displays
Configure Switch Encryption wizard - welcome screen
on page 14).
Fabric OS Encryption Administrator's Guide (SKM/ESKM)
(Figure 25).
53-1002721-01