E20425-01 •
Chapter 4 Commands
223
Security Protocol Out Command
If the bit is set to
one
and there is
no volume mounted
the device server
shall terminate the command with CHECK CONDITION status and set the
sense key to ILLEGAL REQUEST and the additional sense code to
INVALID FIELD IN PARAMETER DATA.
•
If the clear key on reservation preempt (CKORP) bit is set to
one
.
The physical device shall set the data encryption parameters to default
values when a persistent reservation is preempted (for example, a
PERSISTENT RESERVE OUT command specifying a service action of
PREEMPT or PREEMPT AND ABORT is processed).
If the bit is set to
zero
, a preemption of a persistent reservation shall not
affect the data encryption parameters.
If the bit is set to
one
and there is no persistent reservation in effect for the
I_T nexus associated with the SECURITY PROTOCOL OUT command,
the device server shall terminate the command with CHECK CONDITION
status and set the sense key to ILLEGAL REQUEST and the additional
sense code to INVALID FIELD IN PARAMETER DATA.
•
If the clear key on reservation loss (CKORL) bit is set to
one
the physical
device shall set the data encryption parameters to default values on a
reservation loss.
If the bit is set to
zero
, a reservation loss shall not affect the data
encryption parameters.
If the CKORL bit is set to
one
and there is
no reservation in effect
for the
I_T nexus associated with the SECURITY PROTOCOL OUT command,
the device server shall terminate the command with CHECK CONDITION
status and set the sense key to ILLEGAL REQUEST and the additional
sense code to INVALID FIELD IN PARAMETER DATA.
•
If the ENCRYPTION MODE field is set to ENCRYPT and the KEY
LENGTH field is set to zero.
The device server shall terminate the command with CHECK CONDITION
status, with the sense key set to ILLEGAL REQUEST, and the additional
sense code set to INVALID FIELD IN PARAMETER DATA.
•
If the DECRYPTION MODE field is set to DECRYPT or MIXED and the
KEY LENGTH field is set to zero,
The device server shall terminate the command with CHECK CONDITION
status, with the sense key set to ILLEGAL REQUEST, and the additional
sense code set to INVALID FIELD IN PARAMETER DATA.
•
If the device server reports that it requires key-associated data (DKAD_C)
from the application client and a Set Data Encryption page is processed
that does not include a key-associated data descriptor.
Summary of Contents for Storage Tek T10000
Page 14: ...Tables xiv T10000 Interface Reference Manual January 2011 E20425 01...
Page 18: ...What s New xx T10000 Interface Reference Manual January 2011 E20425 01...
Page 82: ...Private Loop SCSI Target Discovery 64 T10000 Interface Reference Manual January 2011 E20425 01...
Page 286: ...Glossary 268 T10000 Interface Reference Manual January 2011 E20425 01...
