Brocade Communications Systems Fabric OS Encryption Manuals

Manuals and User Guides for Brocade Communications Systems Fabric OS Encryption. We have 1 Brocade Communications Systems Fabric OS Encryption manual available for free PDF download: Administrator's Manual

Brocade Communications Systems Fabric OS Encryption Administrator's Manual (282 pages)

Supporting HP Secure Key Manager (SKM) Environments and HP Enterprise Secure Key Manager (ESKM) Environments

Brand: Brocade Communications Systems | Category: Software | Size: 3 MB

Document History
2
Table of Contents
5
About this Document
15
How this Document Is Organized
15
In this Chapter
15
Document Conventions
16
- Text Formatting
  16
- Command Syntax Conventions
  17
- Key Terms
  17
Supported Hardware and Software
16
What's New in this Document
16
Additional Information
18
- Brocade Resources
  18
Notice to the Reader
18
Getting Technical Help
19
- Other Industry Resources
  19
Document Feedback
20
Chapter 1 Encryption Overview

21
- In this Chapter
  21
- Host and LUN Considerations
  21
- Terminology
  22
- The Brocade Encryption Switch
  24
- The FS8-18 Blade
  25
- FIPS Mode
  25
- Performance Licensing
  25
  - Adding a License
    25
  - Licensing Best Practices
    25
- Recommendation for Connectivity
  26
- Usage Limitations
  26
- Brocade Encryption Solution Overview
  27
  - Data Flow from Server to Storage
    28
- Data Encryption Key Life Cycle Management
  29
- Master Key Management
  30
  - Master Key Generation
    30
  - Master Key Backup
    30
- Support for Virtual Fabrics
  31
- Cisco Fabric Connectivity Support
  31
Chapter 2 Encryption Configuration

33
Chapter 3 Configuring Brocade Encryption Using the CLI

131
- In this Chapter
  131
- Overview
  132
- Command Validation Checks
  132
- Command RBAC Permissions and AD Types
  133
- Cryptocfg Help Command Output
  135
- Management LAN Configuration
  136
- Configuring Cluster Links
  136
  - Special Consideration for Blades
    137
  - IP Address Change of a Node Within an Encryption Group
    137
- Steps for Connecting to an SKM or ESKM Appliance
  139
- Generating and Backing up the Master Key
  155
- High Availability Cluster Configuration
  157
- Re-Exporting a Master Key
  160
  - Exporting an Additional Key ID
    161
  - Viewing the Master Key Ids
    162
- Enabling the Encryption Engine
  163
  - Checking Encryption Engine Status
    163
- Zoning Considerations
  164
- Cryptotarget Container Configuration
  167
  - Targets
    169
  - Gathering Information
    169
  - Creating a Cryptotarget Container
    169
  - Removing an Initiator from a Cryptotarget Container
    171
  - Deleting a Cryptotarget Container
    172
  - Moving a Cryptotarget Container
    173
- Crypto LUN Configuration
  173
  - Discovering a LUN
    174
  - Configuring a Crypto LUN
    174
  - Crypto LUN Parameters and Policies
    176
  - Configuring a Tape LUN
    178
  - Removing a LUN from a Cryptotarget Container
    179
  - Modifying Crypto LUN Parameters
    180
  - LUN Modification Considerations
    181
- Impact of Tape LUN Configuration Changes
  181
  - Force-Enabling a Disabled Disk LUN for Encryption
    182
- Tape Pool Configuration
  182
  - Tape Pool Labeling
    182
  - Creating a Tape Pool
    184
  - Deleting a Tape Pool
    185
  - Modifying a Tape Pool
    185
  - Impact of Tape Pool Configuration Changes
    186
- Configuring a Multi-Path Crypto LUN
  186
  - Multi-Path LUN Configuration Example
    186
- First-Time Encryption
  189
  - Resource Allocation
    190
  - First Time Encryption Modes
    190
  - Configuring a LUN for First Time Encryption
    190
- Data Re-Keying
  190
  - Resource Allocation
    191
  - Re-Keying Modes
    191
  - Configuring a LUN for Automatic Re-Keying
    191
  - Initiating a Manual Re-Key Session
    192
  - Suspension and Resumption of Re-Keying Operations
    193
Chapter 4 Deployment Scenarios

195
Chapter 5 Best Practices and Special Topics

209
- In this Chapter
  209
- Firmware Download Considerations
  210
- Configuration Upload and Download Considerations
  212
- HP-UX Considerations
  215
- AIX Considerations
  215
- Enable of a Disabled LUN
  215
- Disk Metadata
  215
- Tape Metadata
  216
- Tape Data Compression
  216
- Tape Pools
  216
- Tape Block Zero Handling
  217
- Tape Key Expiry
  217
- Configuring Cryptotarget Containers and Luns
  217
- Redirection Zones
  218
- Deployment with Admin Domains (AD)
  219
- Do Not Use DHCP for IP Interfaces
  219
- Ensure Uniform Licensing in HA Clusters
  219
- Tape Library Media Changer Considerations
  219
- Turn off Host-Based Encryption
  219
- Avoid Double Encryption
  219
- PID Failover
  220
- Turn off Compression on Extension Switches
  220
- Re-Keying Best Practices and Policies
  220
- KAC Certificate Registration Expiry
  221
- Changing IP Addresses in Encryption Groups
  222
- Disabling the Encryption Engine
  222
- Recommendations for Initiator Fan-Ins
  222
- Best Practices for Host Clusters in an Encryption Environment
  224
- HA Cluster Deployment Considerations and Best Practices
  224
- Key Vault Best Practices
  224
- Tape Device LUN Mapping
  224
Chapter 6 Maintenance and Troubleshooting

225
Appendix A State and Status Information

269
- In this Appendix
  269
- Encryption Engine Security Processor (SP) States
  269
  - Security Processor KEK Status
    270
  - Encrypted LUN States
    270

Brocade Communications Systems Categories

Switch Software

Network Router

Storage Server

More Brocade Communications Systems Manuals

Brocade Communications Systems Fabric OS Encryption Manuals

Brocade Communications Systems Fabric OS Encryption Administrator's Manual (282 pages)

Table of Contents

Chapter 1 Encryption Overview

Chapter 2 Encryption Configuration

Chapter 3 Configuring Brocade Encryption Using the CLI

Chapter 4 Deployment Scenarios

Chapter 5 Best Practices and Special Topics

Chapter 6 Maintenance and Troubleshooting

Appendix A State and Status Information

Related Products

Brocade Communications Systems Categories