Brocade Fabric OS Encryption Administrator’s Guide Supporting Key Management Interoperability Protocol (KMIP) Key-Compliant Environments (Supporting Fabric OS v7.1.0) - Manual (Page 119)

Fabric OS Encryption Administrator’s Guide (KMIP) 101
53-1002747-02
Master keys
2
Refer to the following procedures for more information:
- “Saving the master key to a file” on page 101
- “Saving a master key to a key vault” on page 102
- “Saving a master key to a smart card set” on page 103
You must back up the master key when the status is Created but not backed up.
• Restore master key: Enabled when no master key exists or the previous master key has been
backed up. This option is also enabled when using a DPM key vault.
When this option is selected, the Restore Master Key for Encryption Group dialog box displays,
from which you can restore a master key from a file, key vault, or smart card set. Refer to the
following procedures for more information:
- “Restoring a master key from a file” on page 105
- “Restoring a master key from a key vault” on page 106
- “Restoring a master key from a smart card set” on page 107
• Create new master key: Enabled when no master key exists, or the previous master key has
been backed up. Refer to
“Creating a master key” on page 108.
You must create a new master key when the status is Required but not created.
NOTE
If a master key was not created, Not Used is displayed as the status and the Master Key
Actions list is grayed out. In this case, you must create a new master key. Additional master key
statuses are: Backed up but not propagated and Created and backed up.
Saving the master key to a file
Use the following procedure to save the master key to a file.
1. Select Configure > Encryption from the menu task bar to display the Encryption Center
dialog box (Refer to Figure 6 on page 14).
2. Select a group from the Encryption Center Devices table, then select Group > Security from the
menu task bar.
The Encryption Group Properties dialog box displays with the Security tab selected.
3. Select Backup Master Key as the Master Key Action.
The Master Key Backup dialog box displays ( Figure 89 ), but only if the master key has already
been generated.