Brocade Network Advisor SAN + IP User Manual v12.3.0 - Manual (Page 1210)

1138 Brocade Network Advisor SAN + IP User Manual
53-1003155-01
Rekeying all disk LUNs manually
25
Rekeying all disk LUNs manually
The encryption management application allows you to perform a manual rekey operation on all
encrypted primary disk LUNs and all non-replicated disk LUNs hosted on the encryption node that
are in the read-write state.
Manual rekeying of all LUNs might take an extended period of time. The management application
allows manual rekey of no more than 10 LUNs concurrently. If the node has more than 10 LUNs,
additional LUN rekey operations will remain in the pending state until others have finished.
The following conditions must be satisfied for the manual rekey operation to run successfully:
• The node on which you perform the manual rekey operation must be a member of an
encryption group, and that encryption group must have a key vault configured.
• The node must be running Fabric OS 7.0.0 or later.
• The encryption group must be in the converged state.
• The target container that hosts the LUN must be online.
In addition to providing the ability to launch manual rekey operations, the management application
also enables you to monitor their progress.
Setting disk LUN Re-key All
To rekey all disk LUNs on an encryption node, complete these steps:
1. Select Configure > Encryption from the menu task bar to display the Encryption Center
dialog box. (Refer to Figure 376 on page 976.)
2. Select the switch on which to perform a manual re-key from the Encryption Center Devices
table, then select Switch > Re-Key All from the menu task bar. (Refer to Figure 514 .)
FIGURE 514 Selecting the Re-Key All operation
If REPL support is enabled on the encryption group, a confirmation dialog box displays, asking
whether to rekey mirror LUNs.
3. Click Yes to includes mirror LUNs, or click No to exclude mirror LUNs.
A warning message displays, requesting confirmation to proceed with the rekey operation.
4. Click Yes.
Rekeying operations begin on up to 10 LUNs. If more than 10 LUNs are configured on the
switch, the remaining rekey operations are held in the pending state.