Brocade Fabric OS Encryption Administrator’s Guide Supporting RSA Data Protection Manager (DPM) Environments (Supporting Fabric OS v7.2.0) - Manual (Page 223)

Fabric OS Encryption Administrator’s Guide (DPM) 203
53-1002922-01
Thin provisioned LUNs
3
Thin provisioned LUNs
With the introduction of Fabric OS 7.1.0, the Brocade Encryption Switch can discover if a disk LUN
is a thin provisioned LUN. Support for a thin provisioned LUN is limited to disk containers only.
The Brocade Encryption Switch will support thin provisioning of an array only if it satisfies the SCSI
requirements, for example, supporting the GET_LBA_STATUS command. If the requirements are
satisfied, thin provisioning will be supported from that firmware version of the storage array
onward.
NOTE
Currently, thin provisioned LUN support is limited to Brocade-tested storage arrays. The thin
provisioned LUN status will be displayed as Yes for supported storage arrays running specific
supported firmware versions only. Contact your service representative to determine if your storage
array is supported.
Thin provisioned LUNs rely on on-demand allocation of blocks of data instead of the traditional
method of allocating all blocks up front. If a thin provisioned LUN status is shown as Yes, then
first-time encryption and rekey are done on the allocated blocks only, which results in the
provisioned region of the LUN remaining the same after the rekey is performed.
Thin provisioned LUN support requires no action by the user; the Brocade Encryption Switch can
automatically detect if a LUN is a thin provisioned LUN. You can, however, identify a thin
provisioned LUN using the following commands.
cryptocfg
–-
show –container –all –stat
cryptocfg
–-
discoverLUN
-
container
cryptocfg
--
show
-
rekey –all
cryptocfg
–-
show –LUN tpdisk 0 10:00:00:00:c9:29:0f:01 –stat
NOTE:
• For thin provisioned LUNs that were previously full provisioned then converted to thin
provisioned, a discoverLUN command must be performed prior to any rekeying operations.
Failure to do so results in the full capacity of the LUN to be encrypted as if it were not thin
provisioned. Updated thin provisioned status can be verified using the cryptocfg
--
show
-
container
-
all
-
stat command and checking the output for “
Thin Provision LUN: Yes
”.
Similarly, if a thin- to full-LUN conversion has been performed, a discoverLUN command must
be performed for this LUN change to reflect on the Brocade Encryption Switch or FS8-18 blade.
• If a LUN is a thin provisioned LUN, TP LUN status is shown as Yes. (Thin provision support is
limited to Brocade-tested storage arrays. The thin provisioned LUN status will be displayed as
Yes for supported storage arrays only.)
• If a LUN is not a thin provisioned LUN or if thin provisioning is not supported with the LUN, LUN
status is shown as No. (This can be a result of the array not supporting thin provisioning, or the
Brocade Encryption Switch/blade does not support the thin provisioning features of the array.
Refer to the Fabric OS release notes for supported arrays.)
• If LUN status cannot be determined, LUN status is shown as Unknown.
FabricAdmin:switch> cryptocfg –-show –container –all –stat
LUN number: 0xd
LUN type: disk
LUN serial number: 50002AC000BC0A50
Encryption mode: encrypt