Brocade Fabric OS Encryption Administrator’s Guide Support Manual de usuario descargar pdf (Pagina 207)

Fabric OS Encryption Administrator’s Guide (SKM/ESKM) 187

53-1002923-01

Decommissioning replicated LUNs

The following scenarios are provided:

• “Decommissioning primary LUNs only”

• “Decommissioning secondary LUNs only”

• “Decommissioning primary and secondary LUN pairs”

Decommissioning primary LUNs only

To decommission the primary LUN and make the secondary LUN the primary LUN, complete the

following steps. Failure to do so could result in the LUN state showing as Disabled.

1. Log in as Admin or FabricAdmin.

2. Split the copy pairs.

3. Make the secondary LUN write-enabled.

4. Execute the rekey command on the secondary LUN.

FabricAdmin:switch> cryptocfg --manual_rekey <crypto target container name>

5. Decommission the primary LUN.

FabricAdmin:switch> cryptocfg --decommission -container <container name>

-initiator <initiator PWWN> -LUN <lun number>

6. Display the decommissioned key IDs.

FabricAdmin:switch> cryptocfg --show –decommissionedkeyids

7. Delete the respective key from the key vault. On the Brocade Encryption Switch, enter the

following command.

FabricAdmin:switch>cryptocfg --delete –decommissionedkeyids

NOTE

Failure to rekey the secondary LUN might result in loss of data on the secondary LUN after the

primary LUN is decommissioned.

Decommissioning secondary LUNs only

To decommission the secondary LUN, complete the following steps:

1. Log in as Admin or FabricAdmin.

2. Split the copy pairs.

3. Make the secondary LUN write-enabled.

4. Decommission the secondary LUN.

FabricAdmin:switch> cryptocfg --decommission -container <container name>

-initiator <initiator PWWN> -LUN <lun number>

1 2 ... 202 203 204 205 206 207 208 209 210 211 212 ... 323 324

Sin comentarios

Brocade Fabric OS Encryption Administrator’s Guide Support Manual de usuario Pagina 207