HP StorageWorks 1606 HP StorageWorks 8GB SAN Switch hardware reference guide ( - Page 53

Managing the 8-Gb SAN Switches, Configuring the Encryption SAN Switch

Page 53 highlights

3 Managing the 8-Gb SAN Switches The 8-Gb SAN Switches are designed for high availability and low failure. They do not require any regular physical maintenance. They include diagnostic tests and field-replaceable units for the HP StorageWorks 8/40 and 8/80 SAN Switches, the Encryption SAN Switch the FCoE Converged Network Switch, and the 1606 Extension SAN Switch. Configuring the Encryption SAN Switch NOTE: For procedures to configure the encryption functions, including HP Secure Key Manager information, see the Fabric OS Encryption Administrator's Guide. For additional SKM setup requirements, see the HP Secure Key Manager User Guide. If the Encryption SAN Switch is being configured for the first time for encryption services, you must perform the following pre-initialization tasks related to configuring the encryption node (switch): • Generate the CSPs and certificates • Load and set up the certificates • Establish a trusted link (SKM Appliance) • Configure the global parameters and policies of the encryption group • Generate and back up the master key in SKM environments • Handle key-vault high-availability • Configure cluster interconnect After completing the pre-initialization tasks, you may need to perform several tasks related to configuring the encryption group. Figure 25 summarizes the flow of encryption configuration tasks. 8-Gb SAN Switch Hardware Reference Guide 53

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120

3 Managing the 8-Gb SAN Switches
The 8-Gb SAN Switches are designed for high availability and low failure. They do not require any
regular physical maintenance. They include diagnostic tests and field-replaceable units for the HP
StorageWorks 8/40 and 8/80 SAN Switches, the Encryption SAN Switch the FCoE Converged
Network Switch, and the 1606 Extension SAN Switch.
Configuring the Encryption SAN Switch
NOTE:
For procedures to configure the encryption functions, including HP Secure Key Manager information,
see the
Fabric OS Encryption Administrator's Guide
. For additional SKM setup requirements, see the
HP Secure Key Manager User Guide
.
If the Encryption SAN Switch is being configured for the first time for encryption services, you must
perform the following pre-initialization tasks related to configuring the encryption node (switch):
Generate the CSPs and certificates
Load and set up the certificates
Establish a trusted link (SKM Appliance)
Configure the global parameters and policies of the encryption group
Generate and back up the master key in SKM environments
Handle key-vault high-availability
Configure cluster interconnect
After completing the pre-initialization tasks, you may need to perform several tasks related to configuring
the encryption group.
Figure 25
summarizes the flow of encryption configuration tasks.
8-Gb SAN Switch Hardware Reference Guide
53