HP 8/8 Fabric OS Encryption Administrator's Guide v6.4.0 (53-1001864-01, June - Page 150

Modify example, Commit the configuration.

Page 150 highlights

3 Crypto LUN configuration 10:00:00:00:c9:2b:c9:3a 20:00:00:00:c9:2b:c9:3a -encrypt Operation Succeeded NOTE When changing the tape LUN policy from encrypt to cleartext or from cleartext to encrypt, or the encryption format from Brocade native to DF-compatible while data is being written to or read from a tape backup device, the policy change is not enforced until the current process completes and the tape is unmounted, rewound, or overwritten. Refer to the section "Impact of tape LUN configuration changes" on page 135 for more information. c. Commit the configuration. FabricAdmin:switch>cryptocfg --commit Operation Succeeded d. Display the LUN configuration FabricAdmin:switch>cryptocfg --show -LUN my_tape_tgt 0x0 \ 10:00:00:00:c9:2b:c9:3a -cfg EE node: 10:00:00:05:1e:41:9a:7e EE slot: 0 Target: 20:0c:00:06:2b:0f:72:6d 20:00:00:06:2b:0f:72:6d VT: 20:00:00:05:1e:41:4e:1d 20:01:00:05:1e:41:4e:1d Number of host(s): 1 Configuration status: committed Host: 21:00:00:e0:8b:89:9c:d5 20:00:00:e0:8b:89:9c:d5 VI: 10:00:00:00:c9:2b:c9:3a 20:03:00:05:1e:41:4e:31 LUN number: 0x0 LUN type: tape LUN status: 0 Encryption mode: encrypt Encryption format: DF_compatible Tape type: tape Key life: 90 (day) Volume/Pool label: Operation succeeded. Modify example The following is an example of the use of the cryptocfg - - modify command. This example changes the encryption format from Brocade native to DF-compatible. FabricAdmin:switch>cryptocfg --modify -LUN my_tape_tgt 0x0 10:00:00:00:c9:2b:c9:3a -encryption-format DF_compatible Operation Succeeded 132 Fabric OS Encryption Administrator's Guide 53-1001864-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248

132
Fabric OS Encryption Administrator’s Guide
53-1001864-01
Crypto LUN configuration
3
10:00:00:00:c9:2b:c9:3a 20:00:00:00:c9:2b:c9:3a -encrypt
Operation Succeeded
NOTE
When changing the tape LUN policy from
encrypt
to
cleartext
or from
cleartext
to
encrypt,
or the encryption format from Brocade
native
to
DF-compatible
while data is being written
to or read from a tape backup device, the policy change is not enforced until the current
process completes and the tape is unmounted, rewound, or overwritten. Refer to the
section
“Impact of tape LUN configuration changes”
on page 135 for more information.
c.
Commit the configuration.
FabricAdmin:switch>
cryptocfg --commit
Operation Succeeded
d.
Display the LUN configuration
FabricAdmin:switch>
cryptocfg --show -LUN my_tape_tgt 0x0 \
10:00:00:00:c9:2b:c9:3a -cfg
EE node:
10:00:00:05:1e:41:9a:7e
EE slot:
0
Target:
20:0c:00:06:2b:0f:72:6d 20:00:00:06:2b:0f:72:6d
VT:
20:00:00:05:1e:41:4e:1d 20:01:00:05:1e:41:4e:1d
Number of host(s):
1
Configuration status: committed
Host:
21:00:00:e0:8b:89:9c:d5 20:00:00:e0:8b:89:9c:d5
VI:
10:00:00:00:c9:2b:c9:3a 20:03:00:05:1e:41:4e:31
LUN number:
0x0
LUN type:
tape
LUN status:
0
Encryption mode:
encrypt
Encryption format:
DF_compatible
Tape type:
tape
Key life:
90 (day)
Volume/Pool label:
Operation succeeded.
Modify example
The following is an example of the use of the
cryptocfg - - modify
command. This example changes
the encryption format from Brocade native to DF-compatible.
FabricAdmin:switch>
cryptocfg --modify -LUN my_tape_tgt 0x0
10:00:00:00:c9:2b:c9:3a -encryption-format DF_compatible
Operation Succeeded