IBM XIV STORAGE SYSTEM, User Manual

Page: 495 / 652

Name Type Description Mandatory Default
ipv6 N/A The IPv6 address
of the keyserver
being added.
Either one IPv4
and/or one IPv6
must be used N NONE
port Integer Port used for
keyserver
communication. N 5696
This command defines a keyserver to be used by the system upon startup or
encryption activation to retrieve the key material required to cryptographically
unlock the disks. At least one keservers (but preferably two, and a maximum of
four) must be defined and accessible in order for encrypt_enable to succeed. Only
one of the keyservers may be defined as master.
Example:
xcli -u -c XIV1 encrypt_keyserver_define name=snocone ipv4=snocone.ibm.com
ipv6=2002::a5a7 certificate=’’
Output:
Command executed successfully.
Access Control:
User Category Permission
Storage administrator Disallowed
Storage integration administrator Disallowed
Application administrator Disallowed
Security administrator Allowed
Read-only users Disallowed
Technicians Disallowed
Completion Codes:
v
UNSUPPORTED_HARDWARE
Cannot utilize encryption on unsupported hardware.
Troubleshooting: Contact support to verify encryption status.
v
ENCRYPTION_TOO_MANY_KEYSERVERS
Too many key servers, cannot add.
Troubleshooting: Delete a key server and try again.
v
ENCRYPTION_UNSUPPORTED_KEYSERVER_TYPE
Unsupported key server type.
v ENCRYPTION_KEYSERVER_NAME_EXISTS
Key server name already exists.
Troubleshooting: Check the currently defined key servers
v
ENCRYPTION_KEYSERVER_MUST_HAVE_ADDRESS
Key server must have at least one address (IPv4/IPv6).
Chapter 23. Encryption enablement and support commands
489