Brocade Communications Systems Encryption Switch Service Manual download pdf (Page 116)

98 Fabric OS Encryption Administrator’s Guide (DPM)

53-1002720-02

Disk device decommissioning

Provided that the crypto configuration is not left uncommitted because of any crypto configuration

changes or a failed device decommission operation issued on a encryption group leader node, this

error message will not be seen for any device decommission operation issued serially on an

encryption group member node. If more than one device decommission operation is attempted in

an encryption group from member nodes simultaneously, this error message is transient and will

go away after device decommission operation is complete. If the device decommissioning

operation fails, retry the operation after some time has passed.

Decommissioning disk LUNs

Use the following procedure to decommission a disk LUN.

1. Select Configure > Encryption from the menu task bar to display the Encryption Center

dialog box (Refer to Figure 6 on page 14).

2. Select a group, switch, or engine from the Encryption Center Devices table that contains the

storage device to be configured, then select Group/Switch/Engine > Targets from the menu

task bar.

NOTE

You can also select a group, switch, or engine from the Encryption Center Devices table, then

click the Targets icon.

The Encryption Targets dialog box displays (Figure 60).

3. Select a Target storage device from the list, then click LUNs.

The Encryption Target Disk LUNs dialog box displays.

4. Select the LUNs associated with the device, then click Decommission.

A warning message displays.

5. Click Yes to proceed with the decommissioning process.

A LUN Decommission Status dialog box is displayed while the LUNs are being

decommissioned. Click OK to close the dialog box.

If a rekey operation is currently in progress on a selected LUN, a message is displayed that

gives you a choice of doing a Forced Decommission, or to Cancel and try later after the rekey

operation is complete.

6. To check on the progress of the decommissioning operation, click Refresh. When

decommissioning is complete, the LUNs are removed from the Encryption Target LUNs table.

Displaying and deleting decommissioned key IDs

When disk LUNs are decommissioned, the process includes the disabling of the key record in the

key vault and indication that the key has been decommissioned. These decommissioned keys are

still stored on the switch. You can display, copy, and delete them as an additional security measure.

The Decommissioned Key IDs dialog box lists Key IDs that have been decommissioned at the key

vault. They should also be deleted from the switch for added security, and to create room for new

key IDs. Using this dialog box, you can delete key IDs that are decommissioned at the key vault, but

still stored on the switch.

1 2 ... 111 112 113 114 115 116 117 118 119 120 121 ... 325 326

No comments

Brocade Communications Systems Encryption Switch Service Manual Page 116