HP Cisco MDS 9120 Cisco MDS 9000 Family Storage Media Encryption Configuration - Page 262

Migrating From Cisco KMC to RKM Appendix D RSA Key Manager and Cisco SME Send documentation comments to [email protected] The confirmation window displays the RKM server IP address and the RKM port number. Migrating From Cisco KMC to RKM You can use RKM at the time of Cisco SME installation, or you can choose to deploy Cisco SME with the integrated Cisco KMC later. If RKM is deployed after Cisco KMC has been used alone, you need to perform an explicit key migration procedure before using RKM with Cisco SME. This section describes the procedure for migrating encryption keys, wrap keys, and encryption policy information from Cisco KMC to RKM. Note The migration procedure will differ when Cisco KMC uses the PostgresSQL database or the Oracle Express database for the key catalog. These differences are documented wherever applicable. To migrate keys from the Cisco KMC to RKM, follow these steps: Step 1 Step 2 Step 3 Step 4 Suspend all backup applications and jobs. The migration procedure temporarily suspends access to keys, so the execution of backup operations must be suspended until the migration is completed. Back up the key database. We recommend that you back up the key database before performing the migration. The backup procedure should have been previously tested to help ensure the correct restoration of the keys in case any problems arise during migration. Export all volume group keys in the cluster. Each volume group export will generate a separate password-protected file. The password-protected files contain the keys to be imported in RKM. Shut down the Cisco Fabric Manager, which shuts down the Cisco KMC. This step prevents any key operation from being performed during migration. Cisco MDS 9000 Family Storage Media Encryption Configuration Guide D-8 OL-18091-01, Cisco MDS NX-OS Release 4.x