Brocade Fabric OS Encryption Administrator’s Guide Supporting RSA Data Protection Manager (DPM) Environments (Supporting Fabric OS v7.2.0) - Manual (Page 216)

196 Fabric OS Encryption Administrator’s Guide (DPM)
53-1002922-01
Tape pool configuration
3
Creating a tape pool
Complete the following steps to create a tape pool:
1. Log in to the group leader as FabricAdmin.
2. Create a tape pool by entering the cryptocfg
--
create
-
tapepool command. Provide a label or
numeric ID for the tape pool and specify the encryption policies. For policies not specified at
this time, LUN-level settings apply.
• Set the tape pool policy to either encrypt or cleartext (default).
• Set the encryption format to Brocade native (default)
• Optionally set an expiration date in days for the key (default is no expiration). If the
key_lifespan parameter is set at the tape pool level to a value other than none (default),
the tape value is used over any LUN-level settings. If the key_lifespan parameter is not set
at the tape level (default of none), LUN level settings apply.
The following example creates a tape pool named “my_tapepool”.
FabricAdmin:switch> cryptocfg --create -tapepool -label my_tapepool
Operation succeeded.
3. Commit the transaction.
FabricAdmin:switch> cryptocfg --commit
Operation succeeded.
4. Display the configuration. Enter the cryptocfg
--
show
-
tapepool command followed by the
tape pool number or label and the -cfg parameter.
FabricAdmin:switch> cryptocfg --show -tapepool -label my_tapepool -stat
Number of tapepool session(s): 1
Tapepool 1:
Tapepool label: my_tapepool
Encryption mode: encrypted
Encryption format: native
Number of sessions: 0
Tape sessions within the pool:
Operation succeeded.
5. Configure the tape pool on your backup application with the same tape pool label you used to
create the tape pool on the encryption switch or blade. Refer to the manufacturer’s product
documentation for instructions.
6. On your backup application, label the tape media to assign to the tape pool. Refer to the
manufacturer’s product documentation for instructions.
Deleting a tape pool
This command does not issue a warning if the tape pool being deleted has tape media or volumes
that are currently accessed by the host. Be sure the tape media is not currently in use.
1. Log in to the group leader as FabricAdmin.
2. Enter the cryptocfg
--
delete
-
tapepool command followed by a tape pool label or number.
Use cryptocfg
--
show
-
tapepool
-
all to display all configured tape pool names and numbers.
FabricAdmin:switch> cryptocfg --delete -tapepool -label my_tapepool