Brocade Communications Systems Fabric OS 7.1.0 Manuals

Manuals and User Guides for Brocade Communications Systems Fabric OS 7.1.0. We have 1 Brocade Communications Systems Fabric OS 7.1.0 manual available for free PDF download: Administrator's Manual

Brocade Communications Systems Fabric OS 7.1.0 Administrator's Manual (304 pages)

Brocade Fabric OS Encryption Administrator's Guide v7.1.0 (53-1002721-01, March 2013)

Brand: Brocade Communications Systems | Category: Software | Size: 7.04 MB

Table of Contents
3
About this Document
13
- In this Chapter
  13
- How this Document Is Organized
  13
- Supported Hardware and Software
  14
- What's New in this Document
  14
- Document Conventions
  14
  - Text Formatting
    14
  - Command Syntax Conventions
    15
  - Notes, Cautions, and Warnings
    15
  - Key Terms
    15
- Notice to the Reader
  16
- Additional Information
  16
  - Brocade Resources
    16
  - Other Industry Resources
    17
- Getting Technical Help
  17
- Document Feedback
  18
Chapter 1 Encryption Overview

19
- In this Chapter
  19
- Host and LUN Considerations
  19
- Terminology
  20
- The Brocade Encryption Switch
  22
- The FS8-18 Blade
  23
- FIPS Mode
  23
- Performance Licensing
  23
  - Adding a License
    23
  - Licensing Best Practices
    23
- Recommendation for Connectivity
  24
- Usage Limitations
  24
- Brocade Encryption Solution Overview
  25
  - Data Flow from Server to Storage
    26
- Data Encryption Key Life Cycle Management
  27
- Master Key Management
  29
  - Master Key Generation
    29
  - Master Key Backup
    29
- Support for Virtual Fabrics
  29
- Cisco Fabric Connectivity Support
  30
Chapter 2 Configuring Encryption Using the Management Application

31
Chapter 3 Configuring Encryption Using the CLI

145
- In this Chapter
  145
- Overview
  146
- Command Validation Checks
  146
- Command RBAC Permissions and AD Types
  147
- Cryptocfg Help Command Output
  150
- Management LAN Configuration
  150
- Configuring Cluster Links
  151
  - Special Consideration for Blades
    151
  - IP Address Change of a Node Within an Encryption Group
    152
- Setting Encryption Node Initialization
  153
- Steps for Connecting to an SKM or ESKM Appliance
  154
- Generating and Backing up the Master Key
  170
- High Availability Cluster Configuration
  172
- Re-Exporting a Master Key
  175
  - Exporting an Additional Key ID
    176
  - Viewing the Master Key Ids
    177
- Enabling the Encryption Engine
  178
  - Checking Encryption Engine Status
    178
- Zoning Considerations
  179
- Cryptotarget Container Configuration
  182
- Crypto LUN Configuration
  188
  - Discovering a LUN
    189
  - Configuring a Crypto LUN
    190
  - Crypto LUN Parameters and Policies
    191
  - Configuring a Tape LUN
    193
  - Removing a LUN from a Cryptotarget Container
    195
  - Modifying Crypto LUN Parameters
    195
  - LUN Modification Considerations
    196
- Impact of Tape LUN Configuration Changes
  197
- Configuring a Multi-Path Crypto LUN
  197
  - Multi-Path LUN Configuration Example
    198
- Decommissioning Luns
  201
- Decommissioning Replicated Luns
  202
- Force-Enabling a Decommissioned Disk LUN for Encryption
  204
- Force-Enabling a Disabled Disk LUN for Encryption
  205
- Tape Pool Configuration
  206
  - Tape Pool Labeling
    206
  - Creating a Tape Pool
    208
  - Deleting a Tape Pool
    209
  - Modifying a Tape Pool
    209
  - Impact of Tape Pool Configuration Changes
    209
- First-Time Encryption
  210
  - Resource Allocation
    210
  - First-Time Encryption Modes
    210
  - Configuring a LUN for First-Time Encryption
    210
- Thin Provisioned Luns
  211
  - Space Reclamation
    212
- Data Rekeying
  213
  - Resource Allocation
    213
  - Rekeying Modes
    213
  - Configuring a LUN for Automatic Rekeying
    214
  - Initiating a Manual Rekey Session
    215
  - Suspension and Resumption of Rekeying Operations
    216
Chapter 4 Deployment Scenarios

217
Chapter 5 Best Practices and Special Topics

231
- Firmware Upgrade and Downgrade Considerations
  231
- Firmware Upgrade and Downgrade Considerations
  232
- HP-UX Considerations
  237
- AIX Considerations
  238
- Disk Metadata
  238
- Enabling a Disabled LUN
  238
- Tape Data Compression
  238
- Tape Metadata
  238
- Tape Pools
  239
- Configuring Cryptotarget Containers and Luns
  240
- Tape Block Zero Handling
  240
- Tape Key Expiry
  240
- Deployment with Admin Domains (AD)
  241
- Do Not Use DHCP for IP Interfaces
  241
- Redirection Zones
  241
- Avoid Double Encryption
  242
- Ensure Uniform Licensing in HA Clusters
  242
- PID Failover
  242
- Tape Library Media Changer Considerations
  242
- Turn off Host-Based Encryption
  242
- Rekeying Best Practices and Policies
  243
- Turn off Compression on Extension Switches
  243
- Changing IP Addresses in Encryption Groups
  244
- KAC Certificate Registration Expiry
  244
- Disabling the Encryption Engine
  245
- Recommendations for Initiator Fan-Ins
  245
- Best Practices for Host Clusters in an Encryption Environment
  246
- HA Cluster Deployment Considerations and Best Practices
  246
- Key Vault Best Practices
  246
- Tape Device LUN Mapping
  247
Chapter 6 Maintenance and Troubleshooting

249
Appendix A State and Status Information

299
- In this Appendix
  299
- Encryption Engine Security Processor (SP) States
  299
- Security Processor KEK Status
  299
- Encrypted LUN States
  299
- Security Processor Kek Status
  300

Brocade Communications Systems Categories

Switch Software

Network Router

Storage Server

More Brocade Communications Systems Manuals

Brocade Communications Systems Fabric OS 7.1.0 Manuals

Brocade Communications Systems Fabric OS 7.1.0 Administrator's Manual (304 pages)

Table of Contents

Chapter 1 Encryption Overview

Chapter 2 Configuring Encryption Using the Management Application

Chapter 3 Configuring Encryption Using the CLI

Chapter 4 Deployment Scenarios

Chapter 5 Best Practices and Special Topics

Chapter 6 Maintenance and Troubleshooting

Appendix A State and Status Information

Related Products

Brocade Communications Systems Categories