IBM SAN384B-2, Installation, Service And User Manual

Page: 79 / 190

Avoid double encryption
Encryption and decryption at the storage device level does not affect the
encryption switch or blade capabilities, and does not cause problems with
decrypting the data. However, double encryption adds the unnecessary need to
manage two sets of encryption keys, increases the risk of losing data, may reduce
performance, and does not add security.
Verifying correct operation and backing up the configuration
To verify correct operation and to back up the system, follow these steps.
1. Check the LEDs to verify that all components are functional. For information
about LED patterns, see Chapter 4, “Monitoring system components,” on page
51.
2. If necessary, log on to the switch by Telnet, using the
admin
account.
3. Verify the correct operation of the system by entering the switchShow
command from the workstation. This command provides information about
switch and port status.
4. Verify the correct operation of the SAN384B-2 in the fabric by entering the
fabricShow command from the workstation. This command provides general
information about the fabric.
5.
To back up the configuration, run the following two steps:
a. Enter the configupload -vf command. This command uploads the system
virtual fabric data.
Encryption Configuration
Pre-initialization setup
Generate critical security parameters
and certificates
Load and set up certificates
Establish Trusted Link (LKM
appliance)
Configure global parameters and
policies of encryption group
Generate and back-up master key in
RSA environments
Key Vault high availability handling
Configure cluster interconnect
b32e4009
Node (switch)
level
Encryption
group level
Encryption group configuration
Crypto target container configuration
Crypto LUN (disk) configuration
Crypto tape configuration
Other configuration
Figure 18. Encryption configuration
Chapter 3. Starting and configuring the SAN384B-2
47