HP 8/8 Fabric OS Encryption Administrator's Guide v6.4.0 (53-1001864-01, June - Page 58

Fabric OS Encryption Administrator's Guide, Key vault, configuration,

Page 58 highlights

2 Creating a new encryption group FIGURE 17 Configuration Status dialog box The Management application sends API commands to verify the switch configuration. The CLI commands are detailed in the Fabric OS Encryption Administrator's Guide, "Key vault configuration." • Initialize the switch If the switch is not already in the initiated state, the Management application performs the cryptocfg --initnode command. • Create encryption group on the switch The Management application creates a new group using the cryptocfg --create -encgroup command, and sets the key vault type using the cryptocfg --set -keyvault command. • Register key vault(s) The Management application registers the key vault using the cryptocfg --reg keyvault command. • Enable the encryption engines The Management application initializes an encryption switch using the cryptocfg --initEE [] and cryptocfg --regEE [] commands. • Create a new master key The Management application checks for a new master key. New master keys are generated from the Encryption Group Properties dialog box, Security tab. See "Creating a new master key" on page 70 for more information. 40 Fabric OS Encryption Administrator's Guide 53-1001864-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248

40
Fabric OS Encryption Administrator’s Guide
53-1001864-01
Creating a new encryption group
2
FIGURE 17
Configuration Status dialog box
The Management application sends API commands to verify the switch configuration. The CLI
commands are detailed in the
Fabric OS Encryption Administrator’s Guide, “Key vault
configuration
.”
Initialize the switch
If the switch is not already in the initiated state, the Management application performs the
cryptocfg --initnode
command.
Create encryption group on the switch
The Management application creates a new group using the
cryptocfg --create -encgroup
command, and sets the key vault type using the
cryptocfg --set -keyvault command
.
Register key vault(s)
The Management application registers the key vault using the
cryptocfg --reg keyvault
command.
Enable the encryption engines
The Management application initializes an encryption switch using the
cryptocfg --initEE
[<
slotnumber
>]
and
cryptocfg --regEE [<
slotnumber
>]
commands.
Create a new master key
The Management application checks for a new master key. New master keys are generated
from the Encryption Group Properties dialog box, Security tab. See
“Creating a new master key”
on page 70 for more information.