HP Cisco MDS 9120 Cisco MDS 9000 Family Storage Media Encryption Configuration - Page 42

Before You Begin Chapter 2 Getting Started Send documentation comments to [email protected] Table 2-1 shows a description of the Cisco SME roles and the number of users that should be considered for each role. Table 2-1 Cisco SME Roles and Responsibilities Cisco SME Role Cisco SME Administrator Master Key Security Mode Basic mode Standard mode Cisco SME KMC Basic mode Administrator Standard mode Cisco Storage Administrator Basic mode Standard mode Cisco SME Advanced mode Recovery Officer Required # of Users for This What Operations is This Role Role Responsible For? One user should hold the Cisco SME Administrator and the Cisco SME Recovery officer roles. One per VSAN is the minimum for day to day operations; must have access to all VSANs (if there are many VSANs and multiple VSAN administrators are assigned, then Cisco SME administrators, then there may be one Cisco SME Administrator per VSAN for key recovery operations. • Cisco SME management • Tape management • Export/Import tape volume groups The number of users is the same as for the Cisco SME Administrator role. • Key Management operations • Archive/purge volumes • Add/remove volume groups • Import/export volume groups • Rekey/replace smart cards The number of users is the same as for the Cisco SME Administrator role. • Cisco SME provisioning operations • Create/update/delete cluster • Create/update/delete tape backup groups • Add/remove tape devices • Create volume groups • View smart cards Five users (one for each smart card). Each smart card holder must be present during the cluster creation to provide the user login and password information and smart card pin. • Master key recovery • Replace smart card 2-10 Cisco MDS 9000 Family Storage Media Encryption Configuration Guide OL-18091-01, Cisco MDS NX-OS Release 4.x