Brocade Fabric OS Encryption Administrator’s Guide Support Manual de usuario descargar pdf (Pagina 55)

Fabric OS Encryption Administrator’s Guide (DPM) 35

53-1002922-01

Encryption preparation

Before you use the encryption setup wizard for the first time, you should have a detailed

configuration plan in place and available for reference. The encryption setup wizard assumes the

following:

• You have a plan in place to organize encryption devices into encryption groups.

• If you want redundancy and high availability in your implementation, you have a plan to create

high availability (HA) clusters of two encryption switches or blades to provide failover support.

• All switches in the planned encryption group are interconnected on an I/O synch LAN.

• The management ports on all encryption switches and 8-slot Backbone Chassis CPs that have

encryption blades installed, have a LAN connection to the SAN management program and are

available for discovery.

• A supported key management appliance is connected on the same LAN as the encryption

switches, 8-slot Backbone Chassis CPs, and the SAN Management program.

• An external host is available on the LAN to facilitate certificate exchange.

• Switch KAC certificates have been signed by a CA and stored in a known location.

• Key management system (key vault) certificates have been obtained and stored in a known

location.

Creating an encryption group

The following steps describe how to start and run the encryption setup wizard and create a new

encryption group.

NOTE

When a new encryption group is created, any existing tape pools in the switch are removed.

1. Select Configure > Encryption from the menu task bar to display the Encryption Center

dialog box. (Refer to Figure 17.)

FIGURE 17 Encryption Center dialog box - No group defined

1 2 ... 50 51 52 53 54 55 56 57 58 59 60 ... 331 332

Sin comentarios

Brocade Fabric OS Encryption Administrator’s Guide Support Manual de usuario Pagina 55