Saving A Master Key To A Smart Card Set - HP Brocade BladeSystem 4/12 User Manual

14
Master keys

Saving a master key to a smart card set

A card reader must be attached to the SAN Management application PC to complete this
procedure. Recovery cards can only be written once to back up a single master key. Each master
key backup operation requires a new set of previously unused smart cards.
NOTE
Windows operating systems do not require smart card drivers to be installed separately; the driver
is bundled with the operating system. You must install a smart card driver for Linux and Solaris
operating systems, however. For instructions, see the Data Center Fabric Manager Administrator's
Guide.
The key is divided between the cards in the card set. When the master key is backed up to a set of
three cards, a minimum of two cards can be used together to restore the master key. When the
master key is backed up to a set of five cards, a minimum of three cards can be used together to
restore the master key. Backing up the master key to multiple recovery cards is the recommended
and most secure option.
NOTE
When you write the key to the card set, be sure you write the full set without canceling. If you cancel,
all the previously written cards become unusable, and you will need to discard them and create a
new set.
1. Select Configure > Encryption from the menu bar.
2. Select an encryption group from the tree, and click Properties.
3. Select the Security tab.
4. Select Backup Master Key as the Master Key Action.
414
The Encryption Center dialog box displays.
The Backup Master Key for Encryption Group dialog box displays.
DCFM Professional User Manual
53-1001773-01