Cisco Mds 9000 Storage Media Encryption (Sme) - HP Cisco MDS 8/12c Release Note

switch# config terminal
switch(config)# no fcdomain fcid persistent vsan <1-4094>
switch(config)# fcinterop fcid-allocation flat
switch(config)# vsan database
switch(config-vsan-db)# vsan <1-4094> suspend
switch(config-vsan-db)# no vsan <1-4094> suspend
switch(config-vsan-db)# exit
switch(config)# fcdomain fcid persistent vsan <1-4094>
switch(config)# exit
switch# copy running-config startup-config
switch#

CISCO MDS 9000 STORAGE MEDIA ENCRYPTION (SME)

Overview
The SME solution is a comprehensive network-integrated encryption service with enterprise-class
key management that works transparently with existing and new SANs. The innovative network-
integrated solution has numerous advantages over competitive solutions available today:

SME installation and provisioning are both simple and non-disruptive. Unlike other
solutions, SME does not require rewiring or SAN reconfiguration.

Encryption engines are integrated on the MDS 9000 18/4-port Multiservice Module
(MSM-18/4) and the MDS 9222i Multiservice Fabric Switch, eliminating the need to
purchase and manage extra switch ports, cables, and applications.

Traffic from any virtual SAN (VSAN) can be encrypted using SME, enabling flexible,
automated load balancing through network traffic management across multiple SANs.

No additional software is required for provisioning, key, and user role management; SME
is integrated into Cisco Data Center Network Manager, therefore reducing operating
expenses.
Features
SME is a standards-based encryption solution for heterogeneous tape libraries and virtual tape
libraries. SME is managed with Cisco Data Center Network Manager Web Client and a
command-line interface (CLI) for unified SAN management and security provisioning. SME
includes the following comprehensive built-in key management features:

Transparent Fabric Service

Encryption

SME Roles

Key Management

Clustering

FC Redirect

Server Based Discovery for Provisioning Tapes
Hardware Requirements
SME requires at least one MDS 9222i switch or MSM-18/4 module in each cluster. The SME
engines on the required modules provide the transparent encryption and compression services to
the hosts and storage devices. To take full advantage of the standard and advanced security levels,
a smart card reader is required.
For additional information on how to install SME refer to the Cisco MDS 9000 Family Storage
Media Encryption Configuration Guide.
21 MDS 9000 Series Multilayer Director & Multilayer Fabric Switches Release Notes