Encryption User Privileges - Brocade Communications Systems StoreFabric SN6500B User Manual

•
•
•

Encryption user privileges

In the Management application, resource groups are assigned privileges, roles, and fabrics.
Privileges are not directly assigned to users; users get privileges because they belong to a role in a
resource group. A user can only belong to one resource group at a time.
The Management application provides three pre-configured roles:
•
•
•
Table 65
are enabled from the Encryption Center dialog box:
TABLE 65
Privilege
Storage Encryption
Configuration
Storage Encryption Key
Operations
Brocade Network Advisor SAN User Manual
53-1002696-01
"Blade processor links" on page 539 describes the steps for interconnecting encryption
switches or blades in an encryption group through a dedicated LAN. This must be done before
the encryption engines are enabled. Security parameters and certificates cannot be
exchanged if these links are not configured and active.
"Encryption node initialization and certificate generation"
parameters and certificates that are generated when an encryption node is initialized.
"Supported encryption key manager appliances"
appliances, and lists topics that provide additional detail.
Storage encryption configuration
Storage encryption key operations
Storage encryption security
lists the associated roles and their read/write access to specific operations. The functions
Encryption privileges
Read/Write
•
Launch the Encryption center dialog box.
•
View switch, group, or engine properties.
•
View the Encryption Group Properties Security tab.
•
View encryption targets, hosts, and LUNs.
•
View LUN centric view
•
View all rekey sessions
•
Add/remove paths and edit LUN configuration on LUN centric view
•
Rebalance encryption engines.
•
Clear tape LUN statistics
•
Create a new encryption group or add a switch to an existing encryption group.
•
Edit group engine properties (except for the Security tab)
•
Add targets.
•
Select encryption targets and LUNs to be encrypted or edit LUN encryption settings.
•
Edit encryption target hosts configuration.
•
Show tape LUN statistics.
•
Launch the Encryption center dialog box.
•
View switch, group, or engine properties,
•
View the Encryption Group Properties Security tab.
•
View encryption targets, hosts, and LUNs.
•
View LUN centric view.
•
View all rekey sessions.
•
Initiate manual rekeying of all disk LUNs.
•
Initiate refresh DEK.
•
Enable and disable an encryption engine.
•
Decommission LUNs.
•
Zeroize an encryption engine.
•
Restore a master key.
•
Edit key vault credentials.
•
Show tape LUN statistics.
Encryption user privileges
on page 540 lists the security
on page 542 lists the supported key manager
20
527