Brocade Fabric OS Encryption Administrator’s Guide Support Instrukcja Użytkownika Strona 241
- Strona / 324
- Spis treści
- ROZWIĄZYWANIE PROBLEMÓW
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
Fabric OS Encryption Administrator’s Guide (SKM/ESKM) 221
53-1002923-01
Chapter
5
Best Practices and Special Topics
•Firmware upgrade and downgrade considerations. . . . . . . . . . . . . . . . . . . 222
•Configuration upload and download considerations . . . . . . . . . . . . . . . . . 225
•HP-UX considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227
•AIX Considerations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228
•Enabling a disabled LUN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228
•Disk metadata . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228
•Tape metadata. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228
•Tape data compression. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229
•Tape pools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229
•Tape block zero handling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 230
•Tape key expiry. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 230
•Configuring CryptoTarget containers and LUNs. . . . . . . . . . . . . . . . . . . . . . 230
•Redirection zones . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231
•Deployment with Admin Domains (AD) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231
•Do not use DHCP for IP interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231
•Ensure uniform licensing in HA clusters . . . . . . . . . . . . . . . . . . . . . . . . . . . 232
•Tape library media changer considerations. . . . . . . . . . . . . . . . . . . . . . . . . 232
•Turn off host-based encryption. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232
•Avoid double encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232
•PID failover . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232
•Turn off compression on extension switches. . . . . . . . . . . . . . . . . . . . . . . . 233
•Rekeying best practices and policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 233
•KAC certificate registration expiry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 234
•Changing IP addresses in encryption groups . . . . . . . . . . . . . . . . . . . . . . . 234
•Disabling the encryption engine. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 235
•Recommendations for Initiator Fan-Ins . . . . . . . . . . . . . . . . . . . . . . . . . . . . 235
•Best practices for host clusters in an encryption environment . . . . . . . . . 236
•HA Cluster deployment considerations and best practices . . . . . . . . . . . . 236
•Key Vault Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 236
•Tape device LUN mapping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237
•Special notes for HP Data Protector backup and restore application . . . . 237
- Fabric OS Encryption 1
- Administrator’s Guide 1
- Document History 2
- Document Title iii 3
- Contents 5
- 53-1002923-01 10
- About This Document 15
- What’s new in this document 16
- Document conventions 16
- Notes, cautions, and warnings 17
- Additional information 18
- Getting technical help 19
- Document feedback 20
- Encryption Overview 21
- Terminology 22
- The Brocade Encryption Switch 24
- FIPS mode 25
- Performance licensing 25
- The FS8-18 blade 25
- Usage limitations 26
- FIGURE 2 Encryption overview 27
- FIGURE 3 Frame redirection 28
- IO Sync LAN 29
- FIGURE 5 DEK life cycle 30
- Master key management 31
- Support for virtual fabrics 31
- Encryption Center features 34
- Encryption user privileges 35
- Smart card usage 36
- Using system cards 41
- Deregistering system cards 43
- Using smart cards 43
- Tracking smart cards 43
- Editing smart cards 46
- Network connections 47
- Blade processor links 47
- (KAC) certificate 48
- <primary 58
- Encryption preparation 60
- Creating an encryption group 61
- (ESKM/SKM) 65
- --initnode command 70
- --set -keyvault command 70
- --reg keyvault command 70
- Creating HA clusters 78
- Failback option 80
- Invoking failback 80
- Adding an encryption target 81
- 4. Click Next 82
- FIGURE 42 Next Steps screen 88
- Configuring storage arrays 95
- Moving targets 99
- Tape LUN statistics 101
- Encryption engine rebalancing 105
- Master keys 106
- Active master key 107
- Alternate master key 107
- Master key actions 108
- ATTENTION 109
- Creating a master key 115
- Security settings 116
- Setting zeroization 117
- Redirection zones 119
- Disk device decommissioning 119
- Decommissioning Disk LUNs 120
- Displaying Universal IDs 122
- Setting disk LUN Re-key All 123
- Thin provisioned LUNs 127
- Thin provisioning support 128
- General tab 135
- Members tab 137
- Members tab Remove button 138
- Security tab 139
- HA Clusters tab 141
- Tape Pools tab 143
- Tape pools overview 144
- Adding tape pools 144
- Engine Operations tab 145
- TABLE 3 Encryption acronyms 146
- Overview 148
- Command validation checks 148
- (Continued) 150
- Cryptocfg Help command output 152
- Management LAN configuration 152
- Configuring cluster links 153
- Node is a group leader node 154
- Node is a member node 154
- • FIPS crypto officer 155
- • FIPS user 155
- • Node CP certificate 155
- Configuring a Brocade group 156
- • Use SSL 160
- • Allow Key Export 160
- Data Encryption Keys 168
- Tape LUN support 169
- • cryptocfg --initEE 170
- • cryptocfg --regEE 170
- • cryptocfg --enableEE 170
- High availability clusters 174
- Creating an HA cluster 175
- Policy Configuration Examples 178
- Re-exporting a master key 179
- Viewing the master key IDs 180
- Zoning considerations 183
- Frame redirection zoning 184
- Gathering information 188
- Crypto LUN configuration 193
- Configuring a Crypto LUN 194
- Configuring a tape LUN 197
- Decommissioning LUNs 205
- Tape pool configuration 210
- CommVault Galaxy labeling 211
- NetBackup labeling 211
- NetWorker labeling 211
- Creating a tape pool 212
- Deleting a tape pool 213
- Modifying a tape pool 213
- First-time encryption 214
- Space reclamation 216
- Data rekeying 217
- Resource allocation 218
- Rekeying modes 218
- Deployment Scenarios 223
- --rdcreate [host wwn] 232
- FIGURE 100 FCIP deployment 235
- VMware ESX server deployments 236
- General guidelines 243
- - KAC certificate 246
- - CP certificate 246
- HP-UX considerations 247
- AIX Considerations 248
- Enabling a disabled LUN 248
- Disk metadata 248
- Tape metadata 248
- Tape data compression 249
- Tape pools 249
- Tape block zero handling 250
- Tape key expiry 250
- Avoid double encryption 252
- PID failover 252
- Manual rekey 253
- Latency in rekey operations 253
- Key Vault Best Practices 256
- Tape device LUN mapping 257
- Deleting an encryption group 263
- Removing an HA cluster member 263
- Deleting an HA cluster member 267
- Failover/failback example 268
- Recovery 269
- -hbmisses and -hbtimeout 274
- Key vault diagnostics 280
- --perfshow 281
- -portperfshow 281
- Command Activity 285
- Problem Resolution 285
- General errors and conditions 286
- LUN policy troubleshooting 293
- MPIO and internal LUN states 295
- Multi-node EG replacement 296
- Single-node EG replacement 298
- Multi-node EG Case 299
- Single-node EG Replacement 302
- SKM 1.x ESKM 2.x ESKM 3.x 306
- Encryption group Nodes 307
- State and Status Information 311
- Security processor KEK status 312
- Encrypted LUN states 312
- TABLE 22 Tape LUN states 315
Powiązane produkty i podręczniki dla Akcesoria komputerowe Brocade Fabric OS Encryption Administrator’s Guide Support
Akcesoria komputerowe Brocade Fabric OS Encryption Administrator’s Guide Support Instrukcja Użytkownika
(322 strony)
(322 strony)
Akcesoria komputerowe Brocade Fabric OS Feature Support Matrix (Supporting Fabri Instrukcja Użytkownika
(12 strony)
(12 strony)
Akcesoria komputerowe Brocade Fabric OS Command Reference (Supporting Fabric OS Instrukcja Użytkownika
(127 strony)
(127 strony)
Akcesoria komputerowe Brocade Fabric OS Software Licensing Guide (Supporting Fab Instrukcja Użytkownika
(58 strony)
(58 strony)
Akcesoria komputerowe Brocade Fabric OS Encryption Administrator’s Guide Support Instrukcja Użytkownika
(300 strony)
(300 strony)
Akcesoria komputerowe Brocade Fabric OS Upgrade Guide (Supporting Fabric OS v7.3 Instrukcja Użytkownika
(34 strony)
(34 strony)
Akcesoria komputerowe Brocade Fabric OS Troubleshooting and Diagnostics Guide (S Instrukcja Użytkownika
(130 strony)
(130 strony)
Akcesoria komputerowe Brocade Fabric Watch Administrators Guide (Supporting Fabr Instrukcja Użytkownika
(116 strony)
(116 strony)
Akcesoria komputerowe Brocade Flow Vision Administrators Guide (Supporting Fabri Instrukcja Użytkownika
(90 strony)
(90 strony)
Akcesoria komputerowe Brocade Monitoring and Alerting Policy Suite Administrator Instrukcja Użytkownika
(114 strony)
(114 strony)
Akcesoria komputerowe Brocade EZSwitchSetup Administrator’s Guide (Supporting 30 Instrukcja Użytkownika
(64 strony)
(64 strony)
Akcesoria komputerowe Brocade FICON Administrator’s Guide (Supporting Fabric OS Instrukcja Użytkownika
(126 strony)
(126 strony)
Akcesoria komputerowe Brocade Web Tools Administrators Guide (Supporting Fabric Instrukcja Użytkownika
(274 strony)
(274 strony)
© 2020, manymanuals.pl. Wszelkie prawa zastrzeżone. | 0.046 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentarze do niniejszej Instrukcji