Brocade Communications Systems Network Advisor 12.3.0, User Manual

Page: 903 / 1940

Brocade Network Advisor SAN User Manual 851
53-1003154-01
Using the Encryption Targets dialog box
20
NOTE
Zeroizing an engine affects the I/Os, but all target and LUN configurations remain intact. Encryption
target configuration data is not deleted.
You can zeroize an encryption engine only if it is enabled (running), or disabled but ready to be
enabled. If the encryption engine is not in one of these states, an error message results.
When using a NetApp LKM/SSKM key vault, if all encryption engines in a switch are zeroized, the
switch loses the link key required to communicate with the LKM/SSKM vault. After the encryption
engines are rebooted and re-enabled, you must use the CLI to create new link keys for the switch.
When using an opaque key vault, if all encryption engines in an encryption group are zeroized, the
encryption group loses the master key required to read data encryption keys from the key vault.
After the encryption engines are rebooted and re-enabled, you must restore the master key from a
backup copy, or alternatively, you can generate a new master key and back it up. Restoring the
master key from a backup copy or generating a new master key and backing it up indicates that all
previously generated DEKs will not be decryptable unless the original master key used to encrypt
them is restored.
Setting zeroization
Use the Restore Master key wizard from the Encryption Group Properties dialog box to restore the
master key from a backup copy.
1. Select Configure > Encryption from the menu task bar to display the Encryption Center
dialog box. (Refer to Figure 266 on page 694.)
2. Select an encryption engine from the Encryption Center Devices table, then select Engine >
Zeroize from the menu task bar.
A warning dialog box describes consequences and actions required to recover.
3. Click Yes to zeroize the encryption engine.
•
For an encryption blade: After the zeroize operation is successful, a message displays
noting that the encryption blade will be powered off and powered on to make it operational
again. Click OK to close the message. After the encryption blade is powered on, click
Refresh in the Encryption Center dialog box to update the status of the encryption blade
and perform any operations.
•
For an encryption switch: After the zeroization operation is successful, you are instructed
to reboot the encryption switch. Click OK to close the message, then reboot the encryption
switch. After the encryption switch is rebooted, click Refresh in the Encryption Center
dialog box to update the status of the encryption switch and perform any operations.
Using the Encryption Targets dialog box
The Encryption Targets dialog box enables you to send outbound data that you want to store as
ciphertext to an encryption device. The encryption target acts as a virtual target when receiving
data from a host, and as a virtual initiator when writing the encrypted data to storage.
NOTE
The Encryption Targets dialog box enables you to launch a variety of wizards and other related
dialog boxes.