Brocade Fabric OS Encryption Administrator’s Guide Supporting Key Management Interoperability Protocol (KMIP) Key-Compliant Environments (Supporting Fabric OS v7.1.0) - Manual (Page 223)

Fabric OS Encryption Administrator’s Guide (KMIP) 205
53-1002747-02
Thin provisioned LUNs
3
Thin provisioned LUNs
With the introduction of Fabric OS 7.1.0, the Brocade Encryption Switch can discover if a disk LUN
is thin provisioned LUN. Support for a thin provisioned LUN is limited to disk containers only.
NOTE
Currently, thin provisioned LUN support is limited to Brocade-tested storage arrays. The thin
provisioned LUN status will be displayed as Yes for supported storage arrays running specific
supported firmware versions only. Contact your service representative to determine if your storage
array is supported.
Thin provisioned LUNs rely on on-demand allocation of blocks of data, instead of the traditional
method of allocating all blocks up front. If a thin provisioned LUN status is shown as Yes, then
first-time encryption and rekey are done on the allocated blocks only, which results in the
provisioned region of the LUN remaining the same after the rekey is performed.
Thin provisioned LUN support requires no action by the user; the Brocade Encryption Switch can
automatically detect if a LUN is a thin provisioned LUN. You can, however, identify a thin provisioned
LUN using the following commands.
cryptocfg –- show –container – all –stat
cryptocfg –- discoverLUN - container
cryptocfg -- show - rekey – all
cryptocfg –- show –LUN tpdisk 0 10:00:00:00:c9:29:0f:01 –stat
NOTE:
• For thin provisioned LUNs that were previously full provisioned then converted to thin, a
discoverLUN command must be performed prior to any rekeying operations. Failure to do so
results in the full capacity of the LUN to be encrypted as if it were not thin provisioned.
Updated thin provisioned status can be verified using the cryptocfg
--
show
-
container
-
all
- stat command and checking the output for “ Thin Provision LUN: Yes ”. Similarly, if a thin-
to full-LUN conversion has been performed, a discoverLUN command must be performed for
this LUN change to reflect on the Brocade Encryption Switch or FS8-18 blade.
• If a LUN is a thin provisioned LUN, TP LUN status is shown as Yes. (Thin provision support is
limited to Brocade-tested storage arrays. The thin provisioned LUN status will be displayed as
Yes for supported storage arrays only.)
• If a LUN is not a thin provisioned LUN or if thin provisioning is not supported with the LUN, LUN
status is shown as No. (This can be a result of the array not supporting thin provisioning, or the
Brocade Encryption Switch/blade does not support the thin provisioning features of the array.
Refer to the Fabric OS release notes for supported arrays.)
• Zero detect with encryption is not supported.
• If LUN status cannot be determined, LUN status is shown as Unknown.
FabricAdmin:switch> cryptocfg –show –container –all –stat
LUN number: 0xd
LUN type: disk
LUN serial number: 50002AC000BC0A50
Encryption mode: encrypt
Encryption format: native
Encrypt existing data: disabled
Rekey: disabled
Internal EE LUN state: Encryption enabled