Brocade Communications Systems Network Advisor 12.0.0, User Manual

Page: 639 / 1505

Brocade Network Advisor SAN User Manual 591
53-1002696-01
Encryption preparation
20
9. Enter the Backup Password in the field provided, then click Restore.
10. After the certificate is restored to the secondary node from the previously backed-up primary
node, select Maintenance > Services.
The Services Configuration page displays ( Figure 229 ).
NOTE
A message displays, advising that the secondary node requires a restart.
FIGURE 229
KeySecure Services Configuration page
11. Under Restart/Halt, select Restart, then click Commit and wait until the restart is completed.
The primary and second KeySecure nodes are now in a cluster and active for use.
Encryption preparation
Before you use the encryption setup wizard for the first time, you should have a detailed
configuration plan in place and available for reference. The encryption setup wizard assumes the
following:
•
You have a plan in place to organize encryption devices into encryption groups.
•
If you want redundancy and high availability in your implementation, you have a plan to create
high availability (HA) clusters of two encryption switches or blades to provide failover support.
•
All switches in the planned encryption group are interconnected on an I/O synch LAN.
•
The management ports on all encryption switches and 8-slot Backbone Chassis CPs that have
encryption blades installed, have a LAN connection to the SAN management program and are
available for discovery.
•
A supported key management appliance is connected on the same LAN as the encryption
switches, 8-slot Backbone Chassis CPs, and the SAN Management program.
•
An external host is available on the LAN to facilitate certificate exchange.