Brocade Fabric OS Encryption Administrator’s Guide Supporting NetApp Lifetime Key Manager (LKM) and KeySecure Storage Secure Key Manager (SSKM) Environments (Supporting Fabric OS v7.2.0) User Manual

Page 168

Advertising
background image

150

Fabric OS Encryption Administrator’s Guide (LKM/SSKM)

53-1002925-01

Crypto LUN configuration

3

Operation Succeeded

3. Configure the Crypto tape LUN. Refer to the section

“Configuring a Crypto LUN”

on page 146

for instructions.

a. Discover the LUN.

FabricAdmin:switch> cryptocfg --discoverLUN my_tape_tgt

Container name: my_tape_tgt

Number of LUN(s): 1

Host:

10:00:00:00:c9:2b:c9:3a

LUN number:

0x0

LUN serial number:

Key ID state: Key ID not Applicable

b. Add the LUN to the tape CryptoTarget container. The following example enables the LUN

for encryption. There is a maximum of eight tape LUNs per Initiator in a container.

FabricAdmin:switch> cryptocfg --add -LUN my_tape_tgt 0x0 \

10:00:00:00:c9:2b:c9:3a 20:00:00:00:c9:2b:c9:3a -encrypt

Operation Succeeded

NOTE

When changing the tape LUN policy from encrypt to cleartext or from cleartext to encrypt,
or the encryption format from Brocade native to DF-compatible while data is being written
to or read from a tape backup device, the policy change is not enforced until the current
process completes and the tape is unmounted, rewound, or overwritten. Refer to the
section

“Impact of tape LUN configuration changes”

on page 153 for more information.

c. Commit the configuration.

FabricAdmin:switch> cryptocfg --commit

Operation Succeeded

d. Display the LUN configuration.

FabricAdmin:switch>cryptocfg --show -LUN my_tape_tgt 0x0 \

10:00:00:00:c9:2b:c9:3a -cfg

EE node:

10:00:00:05:1e:41:9a:7e

EE slot:

0

Target:

20:0c:00:06:2b:0f:72:6d 20:00:00:06:2b:0f:72:6d

VT:

20:00:00:05:1e:41:4e:1d 20:01:00:05:1e:41:4e:1d

Number of host(s): 1

Configuration status: committed

Host:

21:00:00:e0:8b:89:9c:d5 20:00:00:e0:8b:89:9c:d5

VI:

10:00:00:00:c9:2b:c9:3a 20:03:00:05:1e:41:4e:31

LUN number:

0x0

LUN type:

tape

LUN status:

0

Encryption mode: encrypt

Encryption format: DF_compatible

Tape type:

tape

Key life:

90 (day)

Volume/Pool label:

Operation succeeded.

Advertising