Brocade Network Advisor SAN User Manual v12.3.0 - Manual (Page 923)

Brocade Network Advisor SAN User Manual 871
53-1003154-01
Viewing and editing encryption group properties
20
• Key Vault Type: Options are:
- RSA Data Protection Manager (DPM): If an encryption group contains mixed firmware
nodes, the Encryption Group Properties Key Vault Type name is based on the firmware
version of the Group Leader. For example, If a switch is running Fabric OS 7.1.0 or
later, the Key Vault Type is displayed as “RSA Data Protection Manager (DPM).”If a
switch is running a Fabric OS version prior to v7.1.0, Key Vault Type is displayed as
“RSA Key Manager (RKM)”.
- NetApp Lifetime Key Manager (LKM): The NetApp Key Vault Type name is shown as
NetApp Lifetime Key Manager (LKM) for both NetApp Lifetime Key Manager (LKM) and
SafeNet KeySecure for key management (SSKM) Key Vault Types.
- HP Secure Key Manager (SKM): The HP Key Vault Type name is shown as HP Secure
Key Manager (SKM) for both SKM and Enterprise Secure Key Management (ESKM)
Key Vault Types.
- Thales e-Security keyAuthority (TEKA): If an encryption group contains mixed firmware
nodes, the Encryption Group Properties Key Vault Type name is based on the firmware
version of the Group Leader. For example, If a switch is running Fabric OS 7.1.0 or
later, the Key Vault Type is displayed as “Thales e-Security keyAuthority (TEKA).”If a
switch is running a Fabric OS version prior to v7.1.0, Key Vault Type is displayed as
“Thales Key Manager (TEMS)”.
- Tivoli Key Lifetime Manager (TKLM): (No other key vault name is used)
- Key Management Interoperability Protocol (KMIP): Any KMIP-compliant server can be
registered as a key vault on the switch after setting the key vault type to KMIP.
With the introduction of Fabric OS 7.1.0, KMIP with SafeNet KeySecure for key
management (SSKM) native hosting LKM is supported.
With the introduction of Fabric OS 7.2.0, KMIP with TEKA 4.0 is also supported (using
the CLI only). For more information about supported platforms and configuration
instructions, refer to the Fabric OS Encryption Administrator’s Guide Supporting Key
Management Interoperability Protocol (KMIP) Key-Compliant Environments.
• REPL Support: Identifies if the remote replication LUN support is enabled or disabled. You
can change the current setting by clicking on the field and selecting the desired state.
• Primary Key Vault IP Address: The IP address of the primary key vault, either IPv4 or host
name.
• Primary Key Vault Connection Status: The status of the primary key vault link. In an
operating environment, the status should be Connected. Other options are:
- Unknown/Busy
- Not configured
- Not responding
- Failed authentication
• Backup Key Vault IP Address: (Optional.) The IP address of the backup key vault. This field
can be left blank.