Brocade Communications Systems Brocade 8/12c Command Reference Manual page 207

To register a NetApp LKM appliance as the primary key vault "LKM1":
To set the key vault type to LKM:
To add a member node to the encryption group:
To eject a member node from the encryption group:
To leave the encryption group:
To generate the master key (RKM) on the group leader:
To export the master key to the RKM key vault:
To export the master key to a file:
To export the master key file to an external host:
Fabric OS Command Reference
53-1001764-01
SecurityAdmin:switch> cryptocfg --reg -regkeyvault
LKM1 lkmcert.pem 10.33.54.231 primary decru-lkm-1
Register key vault status: Operation Succeeded.
SecurityAdmin:switch> cryptocfg --set -keyvault LKM
Set key vault status: Operation Succeeded.
SecurityAdmin:switch> cryptocfg --add -membernode
10:00:00:05:1e:39:14:00
Add node status: Operation Succeeded.
SecurityAdmin:switch> cryptocfg --eject -membernode
10:00:00:05:1e:53:b8:45
Eject node status: Operation Succeeded.
SecurityAdmin:switch> cryptocfg --leave_encryption_group
Leave node status: Operation Succeeded.
SecurityAdmin:switch> cryptocfg --genmasterkey
Master key generated. The master key should be
exported before further operations are performed.
SecurityAdmin:switch> cryptocfg --exportmasterkey
Enter the passphrase: **********
Confirm passphrase:**********
Master key exported.
Master Key ID: 4b:ed:4e:9a:7c:8b:c6:02:45:f8:c1:69:79:ab:b2:2f
Exported Key ID: 4b:ed:4e:9a:7c:8b:c6:02:45:f8:c1:69:79:ab:b2:30
Master key exported.
SecurityAdmin:switch> cryptocfg --exportmasterkey -file
Enter the passphrase: **********
Master key file generated.
SecurityAdmin:switch> cryptocfg --export -scp
-currentMK 192.168.38.245 mylogin GL_MK.mk
Password:*************
Operation succeeded.
cryptoCfg
\
\
\
\
22
173