Brocade Fabric OS Encryption Administrator’s Guide Support Instrukcja Użytkownika Strona 31
- Strona / 300
- Spis treści
- ROZWIĄZYWANIE PROBLEMÓW
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
Fabric OS Encryption Administrator’s Guide (LKM/SSKM) 13
53-1002925-01
Chapter
2
Configuring Encryption Using the Management Application
•Encryption Center features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
•Encryption user privileges. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
•Smart card usage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
•Network connections. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
•Blade processor links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
•Encryption node initialization and certificate generation. . . . . . . . . . . . . . . 28
•Steps for connecting to an LKM/SSKM appliance . . . . . . . . . . . . . . . . . . . . 29
•Encryption preparation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
•Creating an encryption group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
•Adding a switch to an encryption group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
•Replacing an encryption engine in an encryption group . . . . . . . . . . . . . . . 49
•High availability clusters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
•Configuring encryption storage targets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
•Configuring hosts for encryption targets . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
•Adding target disk LUNs for encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
•Adding target tape LUNs for encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
•Moving targets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
•Tape LUN write early and read ahead . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
•Tape LUN write early and read ahead . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
•Tape LUN statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
•Encryption engine rebalancing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
•Security settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
•Zeroizing an encryption engine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
•Using the Encryption Targets dialog box . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
•Redirection zones . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
•Disk device decommissioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
•Rekeying all disk LUNs manually . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
•Thin provisioned LUNs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
•Viewing time left for auto rekey . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
•Viewing and editing switch encryption properties. . . . . . . . . . . . . . . . . . . . . 93
•Viewing and editing encryption group properties . . . . . . . . . . . . . . . . . . . . . 97
•Encryption-related acronyms in log messages . . . . . . . . . . . . . . . . . . . . . . 111
- Fabric OS Encryption 1
- Administrator’s Guide 1
- Environments 1
- Document History 2
- Contents 3
- 53-1002925-01 10
- Appendix B LUN Policies 11
- About This Document 13
- What’s new in this document 14
- Document conventions 14
- Notes, cautions, and warnings 15
- Additional information 16
- Getting technical help 17
- Document feedback 18
- Encryption Overview 19
- Terminology 20
- The Brocade Encryption Switch 22
- The FS8-18 blade 23
- FIPS mode 23
- Performance licensing 23
- Usage limitations 24
- FIGURE 2 Encryption overview 25
- FIGURE 3 Frame redirection 26
- IO Sync LAN 27
- FIGURE 5 DEK life cycle 28
- Support for virtual fabrics 29
- Encryption Center features 32
- Encryption user privileges 33
- Smart card usage 34
- Using system cards 39
- Deregistering system cards 41
- Using smart cards 41
- Tracking smart cards 41
- Editing smart cards 44
- Network connections 45
- Blade processor links 45
- (KAC) certificate 46
- Encryption preparation 52
- Creating an encryption group 52
- (LKM/SSKM) 56
- --initnode command 61
- --set -keyvault command 61
- --reg keyvault command 61
- High availability clusters 68
- Creating HA clusters 69
- Failback option 71
- Invoking failback 71
- Adding an encryption target 72
- 4. Click Next 73
- FIGURE 44 Next Steps screen 79
- Configuring storage arrays 87
- Moving targets 90
- Tape LUN statistics 92
- Encryption engine rebalancing 97
- Security settings 98
- Setting zeroization 99
- Redirection zones 101
- Disk device decommissioning 101
- Decommissioning Disk LUNs 102
- Displaying Universal IDs 104
- Setting disk LUN Re-key All 105
- Thin provisioned LUNs 109
- Thin provisioning support 110
- General tab 117
- Members tab 118
- Members tab Remove button 120
- Security tab 121
- HA Clusters tab 123
- Link Keys tab 124
- Tape Pools tab 126
- Adding tape pools 127
- Engine Operations tab 128
- TABLE 3 Encryption acronyms 129
- In this chapter 131
- Overview 132
- Command validation checks 132
- (Continued) 134
- Cryptocfg Help command output 135
- Management LAN configuration 136
- Configuring cluster links 136
- Node is a group leader node 138
- Node is a member node 138
- • Node CP certificate 140
- Establishing the trusted link 145
- [output truncated] 146
- Creating an HA cluster 151
- TABLE 5 Group-wide policies 152
- Zoning considerations 153
- Frame redirection zoning 154
- Gathering information 158
- Crypto LUN configuration 162
- Discovering a LUN 163
- Configuring a Crypto LUN 164
- Configuring a tape LUN 167
- Modify example 169
- Decommissioning LUNs 175
- Tape pool configuration 179
- Tape pool labeling 180
- NetBackup labeling 181
- NetWorker labeling 181
- Creating a tape pool 182
- Deleting a tape pool 183
- Modifying a tape pool 183
- First-time encryption 184
- Data rekeying 187
- Resource allocation 188
- Rekeying modes 188
- 10:00:00:05:1e:53:37:99 191
- Operation Succeeded 191
- Deployment Scenarios 193
- --rdcreate [host wwn] 202
- VMware ESX server deployments 205
- General guidelines 210
- HP-UX considerations 214
- AIX Considerations 215
- Enabling a disabled LUN 215
- Disk metadata 216
- Tape metadata 216
- Tape data compression 217
- Tape pools 217
- Tape block zero handling 218
- Tape key expiry 218
- DF compatibility for tapes 218
- Avoid double encryption 221
- PID failover 221
- Key Vault Best Practices 225
- Tape Device LUN Mapping 225
- Deleting an encryption group 231
- Removing an HA cluster member 231
- Deleting an HA cluster member 235
- Failover/failback example 236
- Recovery 237
- -hbmisses and -hbtimeout 242
- Key vault diagnostics 248
- Command Activity 254
- Problem Resolution 254
- General errors and conditions 255
- SSKM recommendations 256
- LUN policy troubleshooting 262
- MPIO and internal LUN states 264
- Multi-node EG replacement 265
- Single-node EG replacement 267
- Multi-node EG Case 269
- Single-node EG Replacement 272
- Encryption group Nodes 276
- State and Status Information 279
- Security processor KEK status 280
- Encrypted LUN states 280
- TABLE 21 Tape LUN states 283
- LUN Policies 285
Powiązane produkty i podręczniki dla Akcesoria komputerowe Brocade Fabric OS Encryption Administrator’s Guide Support
Akcesoria komputerowe Brocade Fabric OS Upgrade Guide (Supporting Fabric OS v7.3 Instrukcja Użytkownika
(34 strony)
(34 strony)
Akcesoria komputerowe Brocade Fabric OS Troubleshooting and Diagnostics Guide (S Instrukcja Użytkownika
(130 strony)
(130 strony)
Akcesoria komputerowe Brocade Fabric Watch Administrators Guide (Supporting Fabr Instrukcja Użytkownika
(116 strony)
(116 strony)
Akcesoria komputerowe Brocade Flow Vision Administrators Guide (Supporting Fabri Instrukcja Użytkownika
(90 strony)
(90 strony)
Akcesoria komputerowe Brocade Monitoring and Alerting Policy Suite Administrator Instrukcja Użytkownika
(114 strony)
(114 strony)
Akcesoria komputerowe Brocade EZSwitchSetup Administrator’s Guide (Supporting 30 Instrukcja Użytkownika
(64 strony)
(64 strony)
Akcesoria komputerowe Brocade FICON Administrator’s Guide (Supporting Fabric OS Instrukcja Użytkownika
(126 strony)
(126 strony)
Akcesoria komputerowe Brocade Web Tools Administrators Guide (Supporting Fabric Instrukcja Użytkownika
(274 strony)
(274 strony)
© 2020, manymanuals.pl. Wszelkie prawa zastrzeżone. | 0.032 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentarze do niniejszej Instrukcji