Brocade Communications Systems StoreFabric SN6500B Administrator's Manual page 95

6. Choose a LUN to be added to an encryption target container using one of the two following
7.
8. Select the desired encryption mode. Options are: Native Encryption, DF-Compatible
9. Set the Key Lifespan setting, then click OK.
Fabric OS Encryption Administrator's Guide (SKM/ESKM)
53-1002721-01
When you select a specific host, only the LUNs visible to that host are displayed. If you select
All Hosts, LUNs visible to all configured hosts are displayed. If a LUN is visible to multiple hosts,
it is listed once for each host.
methods:
•
Discover: Identifies the exposed logical unit number for a specified initiator. If you already
know the exposed LUNs for the various initiators accessing the LUN, you can enter the
range of LUNs using the alternative method.
•
Enter a LUN number range: Allows you to enter a From value and a To value to manually
enter the logical unit numbers for the selected host(s).
Click Show LUNs.
The LUN needed for configuring a Crypto LUN is the LUN that is exposed to a particular initiator.
The table displays the following information:
•
Host: The host on which the LUN is visible.
•
LUN #: The logical unit's number.
•
Vol. Label Prefix: Optional. The user-supplied tape volume label prefix to be included in
tape volume labels generated b the switch for encrypted tapes.
•
Enable Write Early Ack: When selected, enables tape write pipelining on this tape LUN. Use
this option to speed long serial writes to tape, especially for remote backup operations.
•
Enable Read Ahead: When selected, enables read pre-fetching on this tape LUN. Use this
option to speed long serial read operations from tape, especially for remote restore
operations.
NOTE
The Select/Deselect All button allows you to select or deselect all available LUNs.
Encryption, and Cleartext.
•
If you change a LUN policy from Native Encryption or DF-Compatible Encryption to Clear
Text, you disable encryption.
•
The LUNs of the target that are not enabled for encryption must still be added to the
CryptoTarget container with the Clear Text encryption mode option.
NOTE
The rekeying interval can only be changed for disk LUNs. For tape LUNs, expiration of the
rekeying interval simply triggers the generation of a new key to be used on future tape
volumes. Tapes that are already made are not rekeyed. To rekey a tape, you need to read the
tape contents using a host application that decrypts the tape contents using the old key, then
rewrite the tape, which re-encrypts the data with the new key.
The selected tape LUNs are added to the encryption target container.
Adding target tape LUNs for encryption
2
77