
Brocade Network Advisor SAN User Manual
693
53-1003154-01
Chapter
20
SAN Encryption Configuration
In this chapter
•
Encryption Center features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 694
•
Encryption user privileges. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 695
•
Smart card usage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 696
•
Network connections. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 707
•
Blade processor links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 707
•
Encryption node initialization and certificate generation. . . . . . . . . . . . . . 708
•
Key Management Interoperability Protocol . . . . . . . . . . . . . . . . . . . . . . . . . 709
•
Supported encryption key manager appliances . . . . . . . . . . . . . . . . . . . . . 712
•
Steps for connecting to a DPM appliance . . . . . . . . . . . . . . . . . . . . . . . . . . 713
•
Steps for connecting to an LKM/SSKM appliance . . . . . . . . . . . . . . . . . . . 718
•
Steps for connecting to an ESKM/SKM appliance . . . . . . . . . . . . . . . . . . . 723
•
Steps for connecting to a TEKA appliance. . . . . . . . . . . . . . . . . . . . . . . . . . 734
•
Steps for connecting to a TKLM appliance . . . . . . . . . . . . . . . . . . . . . . . . . 739
•
Steps for connecting to a KMIP-compliant SafeNet KeySecure . . . . . . . . . 743
•
Steps for connecting to a KMIP-compliant keyAuthority . . . . . . . . . . . . . . . 762
•
Encryption preparation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 763
•
Creating a new encryption group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 764
•
Adding a switch to an encryption group. . . . . . . . . . . . . . . . . . . . . . . . . . . . 801
•
Replacing an encryption engine in an encryption group . . . . . . . . . . . . . . 807
•
High availability clusters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 808
•
Configuring encryption storage targets . . . . . . . . . . . . . . . . . . . . . . . . . . . . 811
•
Configuring hosts for encryption targets . . . . . . . . . . . . . . . . . . . . . . . . . . . 820
•
Adding target disk LUNs for encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . 822
•
Adding target tape LUNs for encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . 829
•
Moving targets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 832
•
Configuring encrypted tape storage in a multi-path environment . . . . . . . 833
•
Tape LUN write early and read ahead . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 834
•
Tape LUN statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 835
•
Encryption engine rebalancing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 840
•
Master keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 841
•
Security settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 850
•
Zeroizing an encryption engine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 850
Summary of Contents for Network Advisor 12.3.0
Page 4: ...iv Brocade Network Advisor SAN User Manual 53 1003154 01...
Page 86: ...34 Brocade Network Advisor SAN User Manual 53 1003154 01 Uninstalling a patch 2...
Page 190: ...138 Brocade Network Advisor SAN User Manual 53 1003154 01 Fabric tracking 4...
Page 216: ...164 Brocade Network Advisor SAN User Manual 53 1003154 01 User profiles 5...
Page 612: ...560 Brocade Network Advisor SAN User Manual 53 1003154 01 Exporting Host port mapping 13...
Page 620: ...568 Brocade Network Advisor SAN User Manual 53 1003154 01 Exporting storage port mapping 14...
Page 720: ...668 Brocade Network Advisor SAN User Manual 53 1003154 01 Security configuration deployment 17...
Page 744: ...692 Brocade Network Advisor SAN User Manual 53 1003154 01 Configuring Virtual Fabrics 19...
Page 1068: ...1016 Brocade Network Advisor SAN User Manual 53 1003154 01 Removing thresholds 24...
Page 1098: ...1046 Brocade Network Advisor SAN User Manual 53 1003154 01 Swapping blades 25...
Page 1176: ...1124 Brocade Network Advisor SAN User Manual 53 1003154 01 SAN connection utilization 28...
Page 1378: ...1326 Brocade Network Advisor SAN User Manual 53 1003154 01 Event logs 32...
Page 1448: ...1396 Brocade Network Advisor SAN User Manual 53 1003154 01 Upload failure data capture 34...
Page 1490: ...1438 Brocade Network Advisor SAN User Manual 53 1003154 01 SAN shortcut menus A...
Page 1494: ...1442 Brocade Network Advisor SAN User Manual 53 1003154 01 Call Home Event Tables B...
Page 1524: ...1472 Brocade Network Advisor SAN User Manual 53 1003154 01 About Roles and Access Levels D...
Page 1552: ...1500 Brocade Network Advisor SAN User Manual 53 1003154 01 Regular Expressions F...
Page 1920: ...1868 Brocade Network Advisor SAN User Manual 53 1003154 01 Views H...