Brocade Fabric OS Encryption Administrator’s Guide Support Instrukcja Użytkownika Pobierz pdf (Strona 4)

iv Document Title

53-1002720-02

1 2 3 4 5 6 7 8 9 ... 331 332

Fabric OS Encryption 1
Document History 2
Document Title iii 3
53-1002720-02 3
Contents 5
53-1002922-01 10
About This Document 15
What’s new in this document 16
Document conventions 16
Command syntax conventions 17
Notes, cautions, and warnings 17
Additional information 18
Getting technical help 19
Document feedback 20
Encryption Overview 21
Terminology 22
The Brocade Encryption Switch 24
The FS8-18 blade 25
FIPS mode 25
Performance licensing 25
Usage limitations 26
FIGURE 2 Encryption overview 27
FIGURE 3 Frame redirection 28
IO Sync LAN 29
FIGURE 5 DEK life cycle 30
Master key management 31
Support for virtual fabrics 31
Encryption Center features 34
Encryption user privileges 35
Smart card usage 36
Using system cards 41
Deregistering system cards 43
Using smart cards 43
Tracking smart cards 44
Editing smart cards 46
Network connections 47
Blade processor links 47
(KAC) certificate 48
Encryption preparation 55
Creating an encryption group 55
--initnode command 65
--set -keyvault command 65
--reg keyvault command 65
Creating HA clusters 72
Failback option 74
Invoking failback 74
Adding an encryption target 75
FIGURE 46 Next Steps screen 83
Configuring storage arrays 91
Remote replication LUNs 91
Moving targets 96
Tape LUN statistics 99
Encryption engine rebalancing 103
Master keys 104
Active master key 105
Alternate master key 105
Master key actions 106
ATTENTION 107
Creating a master key 113
Security settings 114
Setting zeroization 115
Redirection zones 117
Disk device decommissioning 117
Decommissioning disk LUNs 118
Displaying Universal IDs 120
Setting disk LUN Re-key All 121
Thin provisioned LUNs 125
Thin Provisioning support 126
General tab 133
Members tab 135
Members tab Remove button 136
Security tab 137
HA Clusters tab 139
Tape Pools tab 141
Adding tape pools 142
Engine Operations tab 143
TABLE 3 Encryption acronyms 144
In this chapter 145
Overview 146
Command validation checks 146
(Continued) 148
Cryptocfg Help command output 150
Management LAN configuration 150
Configuring cluster links 151
Node is a group leader node 152
Node is a member node 152
• FIPS crypto officer 153
• FIPS user 153
• Node CP certificate 153
Submitting the CSR to a CA 156
• cryptocfg --initEE 163
• cryptocfg --regEE 163
• cryptocfg --enableEE 163
High availability clusters 168
Creating an HA cluster 169
Policy Configuration Examples 172
Re-exporting a master key 173
Viewing the master key IDs 174
Zoning considerations 177
Frame redirection zoning 178
Gathering information 182
Crypto LUN configuration 186
Discovering a LUN 187
Configuring a Crypto LUN 187
Configuring a tape LUN 191
Decommissioning LUNs 195
SRDF LUNs 199
SRDF pairs 200
Adding replication LUNs 201
Reading metadata after sync 202
-newLUN option 203
TF snapshot rekeying details 208
ID> <initiator PWWN> 209
-not_ready option of TF 209
<initiator PWWN> 209
Tape pool configuration 213
Tape pool labeling 214
NetBackup labeling 215
NetWorker labeling 215
Creating a tape pool 216
Deleting a tape pool 216
Modifying a tape pool 217
First-time encryption 222
Data rekeying 225
Resource allocation 226
Rekeying modes 226
Deployment Scenarios 231
--rdcreate [host wwn] 240
FIGURE 103 FCIP deployment 242
Data mirroring deployment 243
VMware ESX server deployments 245
General guidelines 248
Enabling a disabled LUN 253
HP-UX considerations 253
AIX considerations 253
Disk metadata 254
Tape metadata 254
Tape data compression 255
Tape pools 255
Tape block zero handling 256
Tape key expiry 256
Avoid double encryption 258
PID failover 258
Manual rekey 259
Latency in rekey operations 259
Key vault best practices 263
Tape device LUN mapping 263
Deleting an encryption group 269
Removing an HA cluster member 269
Deleting an HA cluster member 273
Failover/failback example 274
Recovery 275
-hbmisses and -hbtimeout 280
Key vault diagnostics 286
--perfshow 287
-portperfshow 287
Command Activity 291
Problem Resolution 291
General errors and conditions 292
LUN policy troubleshooting 299
MPIO and internal LUN states 301
Multi-node EG replacement 302
Single-node EG replacement 304
Multi-node EG Case 305
Single-node EG Replacement 308
Deregistering a DPM key vault 310
FIGURE 111 DPM Clients page 311
TABLE 15 Compatibility Matrix 313
Encryption group Nodes 314
State and Status Information 317
Security processor KEK status 318
Encrypted LUN states 318
TABLE 22 Tape LUN states 321

Komentarze do niniejszej Instrukcji

Brak uwag

Brocade Fabric OS Encryption Administrator’s Guide Support Instrukcja Użytkownika Strona 4

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Akcesoria komputerowe Brocade Fabric OS Encryption Administrator’s Guide Support