Brocade Communications Systems Brocade 8/12c Command Reference Manual page 208

22
cryptoCfg
To recover the master key from the key vault to the current location:
To display the saved key IDs associated with a repeatedly exported master key
To display the encryption group configuration:
174
SecurityAdmin:switch> cryptocfg --recovermasterkey currentMK -keyID
bd:ae:2d:0b:b9:1a:ad:18:0d:eb:fe:c9:67:ed:29:b0
Enter the passphrase: passphrase
Recover master key status: Operation succeeded.
SecurityAdmin:switch> cryptocfg --show \
-mkexported_keyids e3:ae:aa:89:ec:12:0c:04:29:61:9c:99:44:a3:9b:92
e3:ae:aa:89:ec:12:0c:04:29:61:9c:99:44:a3:9b:92
e3:ae:aa:89:ec:12:0c:04:29:61:9c:99:44:a3:9b:93
e3:ae:aa:89:ec:12:0c:04:29:61:9c:99:44:a3:9b:94
e3:ae:aa:89:ec:12:0c:04:29:61:9c:99:44:a3:9b:95
e3:ae:aa:89:ec:12:0c:04:29:61:9c:99:44:a3:9b:96
e3:ae:aa:89:ec:12:0c:04:29:61:9c:99:44:a3:9b:97
e3:ae:aa:89:ec:12:0c:04:29:61:9c:99:44:a3:9b:98
e3:ae:aa:89:ec:12:0c:04:29:61:9c:99:44:a3:9b:99
Operation Succeeded.
SecurityAdmin:switch> cryptocfg --show -groupcfg
Encryption Group Name:
Failback mode:
Replication mode:
Heartbeat misses:
Heartbeat timeout:
Key Vault Type:
System Card:
Primary Key Vault:
IP address:
Certificate ID:
Certificate label:
State:
Type:
Secondary Key Vault:
IP address:
Certificate ID:
Certificate label:
State:
Type:
Additional Primary Key Vault Information::
Key Vault/CA Certificate Validity:
Port for Key Vault Connection:
Time of Day on Key Server:
Server SDK Version:
Additional Secondary Key Vault Information:
Key Vault/CA Certificate Validity:
Port for Key Vault Connection:
Time of Day on Key Server:
Server SDK Version:
Encryption Node (Key Vault Client) Information:
Node KAC Certificate Validity:
system_test
Auto
Disabled
3
2
LKM
Disabled
10.32.49.200
3D2-LKM3-B05-200
LKM200
Connected
LKM
10.32.49.201
3D2-LKM4-B05-201
LKM201
Connected
LKM
Yes
32579
N/A
N/A
Yes
32579
N/A
N/A
Yes
\
Fabric OS Command Reference
53-1001764-01