Restoring A Master Key From A File - Brocade Communications Systems StoreFabric SN6500B User Manual

Saving a master key to a smart card set - Overview
A card reader must be attached to the SAN Management application PC to save a master key to a
recovery card. Recovery cards can only be written once to back up a single master key. Each master
key backup operation requires a new set of previously unused smart cards.
NOTE
Windows operating systems do not require smart card drivers to be installed separately; the driver
is bundled with the operating system. However, you must install a smart card driver for Unix
operating systems. For instructions, refer to the Installation Guide.
The key is divided among the cards in the card set, up to 10. The quorum of cards required to
restore the master key must be less than the total number of cards in the set, and no greater than
five. For example, when the master key is backed up to a set of three cards, a quorum of any two
cards can be used together to restore the master key. When the master key is backed up to a set of
10 cards, a quorum size of up to five cards can be configured for restoring the master key. Backing
up the master key to multiple recovery cards is the recommended and most secure option.
NOTE
When you write the key to the card set, be sure you write the full set without canceling. If you cancel,
all previously written cards become unusable; you will need to discard them and create a new set.

Restoring a master key from a file

Use the following procedure to restore the master key from a file.
1. Select Configure > Encryption from the menu task bar to display the Encryption Center
2. Select a group from the Encryption Center Devices table, then select Group > Security from the
3. Select Restore Master Key as the Master Key Action.
Brocade Network Advisor SAN User Manual
53-1002696-01
dialog box (Refer to Figure 185
menu task bar.
The Encryption Group Properties dialog box displays with the Security tab selected.
The Restore Master Key for Encryption Group dialog box displays
on page 526).
20
Master keys
(Figure 315).
675