Tape Lun And Df -Compatible Tape Pool Support; Lkm Key Vault Deregistration - Brocade Communications Systems Brocade BladeSystem 4/24 User Manual

Tape LUN and DF -compatible tape pool support

•
•
•

LKM Key Vault Deregistration

Deregistration of either Primary or Secondary LKM KV from an encryption switch or blade is
allowed independently.
•
•
DCFM Professional Plus User Manual
53-1001774-01
DEK Creation - The DEK is created and archived to the primary LKM only. Upon successful
archival of the DEK to the primary LKM, the DEK can be used for encryption of a Tape LUN or
DF-Compatible tape pool. The DEK is synchronized to a secondary LKM through LKM
clustering. If DEK archival to the primary LKM fails, DEK archival is retried to the clustered
secondary LKM. If DEK archival also fails to secondary LKM, an error is logged and the
operation is retried.
DEK retrieval - The DEK is retrieved from primary LKM if primary is online and reachable. If
primary LKM is not online or not reachable, the DEK is retrieved from the clustered secondary
LKM.
DEK update - DEK update behavior is same as DEK Creation.
Deregistration of Primary LKM - You can deregister the Primary LKM from an encryption switch
or blade without deregistering the backup or secondary LKM for maintenance or replacement
purposes. However, when the primary LKM is deregistered, key creation operations will fail
until either primary LKM is reregistered or the secondary LKM is deregistered and reregistered
as Primary LKM.
When the Primary LKM is replaced with a different LKM, you must first synchronize the DEKs
from secondary LKM before reregistering the primary LKM.
Deregistration of Secondary LKM - You can deregister the Secondary LKM independently.
Future key operations will use only the Primary LKM until the secondary LKM is reregistered on
the encryption switch or blade.
When the Secondary LKM is replaced with a different LKM, you must first synchronize the
DEKs from Primary LKM before reregistering the secondary LKM.
18
471