Tape Lun And Df -Compatible Tape Pool Support; Lkm Key Vault Deregistration - Brocade Communications Systems Brocade 8/12c User Manual

18
Steps for connecting to an LKM appliance

Tape LUN and DF -compatible tape pool support

•
•
•

LKM Key Vault Deregistration

Deregistration of either the primary or secondary LKM key vault from an encryption switch or blade
is allowed independently.
•
•
452
DEK creation - The DEK is created and archived to the primary LKM only. Upon successful
archival of the DEK to the primary LKM, the DEK can be used for encryption of a Tape LUN or
DF-Compatible tape pool. The DEK is synchronized to a secondary LKM through LKM
clustering.
If DEK archival to the primary LKM fails, DEK archival is retried to the clustered secondary
LKM. If DEK archival also fails to the secondary LKM, an error is logged and the operation is
retried.
DEK retrieval - The DEK is retrieved from the primary LKM if the primary LKM is online and
reachable. If the primary LKM is not online or reachable, the DEK is retrieved from the
clustered secondary LKM.
DEK update - DEK update behavior is the same as DEK creation.
Deregistration of Primary LKM - You can deregister the Primary LKM from an encryption switch
or blade without de-registering the backup or secondary LKM for maintenance or replacement
purposes. However, when the primary LKM is de-registered, key creation operations will fail
until either the primary LKM is re-registered, or the secondary LKM is de-registered and
re-registered as the primary LKM.
When the primary LKM is replaced with a different LKM, you must first synchronize the DEKs
from the secondary LKM before re-registering the primary LKM.
Deregistration of Secondary LKM - You can deregister the secondary LKM independently.
Future key operations will use only the primary LKM until the secondary LKM is re-registered
on the encryption switch or blade.
When the secondary LKM is replaced with a different LKM, you must first synchronize the
DEKs from the primary LKM before re-registering the secondary LKM.
Brocade Network Advisor SAN User Manual
53-1002167-01