Brocade Communications Systems Brocade 8/12c User Manual page 18

xviii
Replacing an encryption engine in an encryption group . . . . . . . .509
Creating high availability (HA) clusters . . . . . . . . . . . . . . . . . . . . . . 510
Removing engines from an HA cluster . . . . . . . . . . . . . . . . . . .511
Swapping engines in an HA cluster . . . . . . . . . . . . . . . . . . . . .512
Failback option. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .512
Invoking failback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .512
Adding encryption targets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .513
Configuring hosts for encryption targets . . . . . . . . . . . . . . . . . . . . .520
Adding target disk LUNs for encryption . . . . . . . . . . . . . . . . . . . . . .522
Configuring Storage Arrays . . . . . . . . . . . . . . . . . . . . . . . . . . . .525
Remote replication LUNs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .525
SRDF pairs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .526
Metadata requirements and remote replication . . . . . . . . . . .527
Adding target tape LUNs for encryption. . . . . . . . . . . . . . . . . . . . . .529
Configuring encrypted tape storage in a multi-path environment .532
Tape LUN write early and read ahead . . . . . . . . . . . . . . . . . . . . . . .533
Enabling and disabling tape LUN write early and read ahead533
Tape LUN statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .535
Viewing and clearing tape container statistics . . . . . . . . . . . .535
Viewing and clearing tape LUN statistics for specific tape LUNs536
Viewing and clearing statistics for tape LUNs in a container .537
Re-balancing the encryption engine . . . . . . . . . . . . . . . . . . . . . . . .539
Master keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .540
Active master key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .540
Alternate master key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .540
Master key actions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .541
Reasons master keys can be disabled . . . . . . . . . . . . . . . . . . .541
Saving the master key to a file . . . . . . . . . . . . . . . . . . . . . . . . .541
Saving a master key to a key vault . . . . . . . . . . . . . . . . . . . . . .542
Saving a master key to a smart card set . . . . . . . . . . . . . . . . .543
Restoring a master key from a file . . . . . . . . . . . . . . . . . . . . . .545
Restoring a master key from a key vault . . . . . . . . . . . . . . . . .546
Restoring a master key from a smart card set. . . . . . . . . . . . .547
Creating a new master key . . . . . . . . . . . . . . . . . . . . . . . . . . . .548
Viewing Master Key IDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .549
Zeroizing an encryption engine . . . . . . . . . . . . . . . . . . . . . . . . . . . .550
Using the Encryption Targets dialog box . . . . . . . . . . . . . . . . . . . . .552
Redirection zones . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .552
Disk device decommissioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . .554
Decommissioning LUNs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .554
Displaying and deleting decommissioned key IDs. . . . . . . . . .555
Re-keying all disk LUNs manually. . . . . . . . . . . . . . . . . . . . . . . . . . .557
Viewing the progress of manual re-key operations . . . . . . . . .559
Viewing time left for auto re-key. . . . . . . . . . . . . . . . . . . . . . . . . . . .560
Brocade Network Advisor SAN User Manual
53-1002167-01