HP Cisco MDS 9120 Cisco MDS 9000 Family Storage Media Encryption Configuration - Page 130

Key Management Operations Chapter 6 Cisco SME Key Management Send documentation comments to [email protected] A replication relationship is set between the volume groups in the different clusters and the replication context for the destination clusters need to be acquired. Once the relationship is set up between the clusters, whenever a key is generated in the source cluster, the key is automatically translated to the destination cluster. The translation of the keys is a scheduled process and based on the preset frequency all the key pairs generated in that time period are translated to the destination cluster. Every key that is generated and scheduled for replication, since last job start time, are translated using the replication context, which is the public key of the destination cluster. The key replication across data centers requires the translation of key hierarchy. The key from the source cluster is translated using the public key of the destination cluster and then sent to the destination cluster. In the destination cluster, the key is unwrapped with the private key of the destination cluster and then wrapped with the key hierarchy of the destination cluster. Auto Replicating Keys in Fabric Manager Web Client This section describes how to auto replicate the media keys in the Fabric Manager Web Client. The following topics are covered: • Creating Remote Replication Relationships, page 6-16 • Removing Remote Replication Relationships, page 6-18 Creating Remote Replication Relationships To auto replicate the media keys, follow these steps: Step 1 Step 2 Step 3 In the Fabric Manager Web Client, click the SME tab. Select Clusters in the navigation pane to display the clusters. Select a cluster and select Remote Replication. The Remote Replication Relationships pane appears. 6-16 Cisco MDS 9000 Family Storage Media Encryption Configuration Guide OL-18091-01, Cisco MDS NX-OS Release 4.x