Adding Target Tape Luns For Encryption - Brocade Communications Systems Brocade BladeSystem 4/24 User Manual

20

Adding Target Tape LUNs for encryption

•
•
•
Adding Target Tape LUNs for encryption
You configure a Crypto LUN by adding the LUN to the CryptoTarget container and enabling the
encryption property on the Crypto LUN. You must add LUNs manually. After you add the LUNs, you
must specify the encryption settings.
When configuring a LUN with multiple paths, the same LUN policies must be configured on all the
LUN's paths. If there are multiple paths to the same physical LUNs, then the LUNs are added to
multiple target containers (one target per storage device port). See
storage in a multi-path environment"
1. Select Configure > Encryption from the menu bar.
2. Select the encryption group, switch, or encryption engine containing the storage device to be
3. Click Encryption Targets.
4. Select a Target storage device from the list, and click LUNs.
5. Click Add.
6. Select a host from the Host list.
7.
556
The New LUN option is used only if an RKM key vault is configured for the encryption group.
The New LUN option can be used only if replication is enabled for the encryption group.
If the local LUN contains host data, configuring it with the New LUN option would cause the
data on the last 3 blocks of the LUN to be lost. Before using the New LUN option, you must
migrate the contents of the LUN to another LUN that is larger by at least 3 blocks. The new
larger LUN can then used when creating the SRDF pair. The remote LUN of the SRDF pair must
be of the same size. The original smaller LUN with user data can be decommissioned.
The Encryption Center dialog box displays.
configured.
The Encryption Targets dialog box displays.
The Encryption Target LUNs dialog box displays.
The Add Encryption Target Tape LUNs dialog box displays.
This dialog box includes a table of all LUNs in the storage device that are visible to hosts. LUNs
are identified by the Host world wide name, LUN number, and Volume Label Prefix number.
Before you encrypt a LUN you must select a host and then either discover LUNs that are visible
to the virtual initiator representing the selected host, or enter a range of LUN numbers to be
configured for the selected host.
Choose a LUN to be added to an encryption target container using one of the two following
methods:
•
Discover. Click to identify the exposed logical unit number for a specified initiator. If you
already know the exposed LUNs for the various initiators accessing the LUN, you can enter
the range of LUNs using the alternative method.
•
Enter a LUN number range. Click to add a range of LUNs to be configured for the selected
host. The LUN needed for configuring a Crypto LUN is the LUN that is exposed to a
particular initiator.
on page 557 for a multi-path configuration scenario.
"Configuring encrypted tape
DCFM Enterprise User Manual
53-1001775-01