Displaying and deleting decommissioned key ids – Brocade Network Advisor SAN + IP User Manual v12.1.0 User Manual
Page 1068
1014
Brocade Network Advisor SAN + IP User Manual
53-1002949-01
Disk device decommissioning
25
Displaying and deleting decommissioned key IDs
With the introduction of Fabric OS 7.1.0, the ability to decommission disk LUNs is supported on all
key vault platforms. Earlier releases restricted this functionality to DPM (formerly RKM) and
LKM/SSKM key vaults only.
When disk LUNs are decommissioned, the process includes the disabling of the key record in the
key vault and indication that the key has been decommissioned. These decommissioned keys are
still stored on the switch. You can display, copy, and delete them as an additional security measure.
The Decommissioned Key IDs dialog box lists Key IDs that have been decommissioned at the key
vault. They should also be deleted from the switch for added security, and to create room for new
key IDs. Using this dialog box, you can delete key IDs that are decommissioned at the key vault, but
still stored on the switch.
In order to delete keys from the key vault, you need to know the Universal ID (UUID). To display
vendor-specific UUIDs of decommissioned key IDs, complete the following procedure:
1. Select Configure > Encryption from the menu task bar to display the Encryption Center
dialog box. (Refer to
Figure 303
on page 852.)
2. Select a switch from the Encryption Center Devices table, then select Switch >
Decommissioned key IDs from the menu task bar.
The Decommissioned Key IDs dialog box displays. (Refer to
Figure 439
.)
FIGURE 439
Decommissioned Key IDs dialog box
The dialog box contains the following information:
•
Decommissioned key IDs that have been decommissioned at the key vault are listed in a
table.
•
Universal ID button: Launches the Universal ID dialog box to display the universal ID for
each selected decommissioned key.
You need to know the Universal ID (UUID) associated with the decommissioned disk LUN
key IDs in order to delete keys from the key vault. You can display vendor-specific UUIDs of
decommissioned key IDs. For more information, refer to
•
Delete All button: Deletes all of the listed decommissioned key IDs.