HP StorageWorks 2/16V Brocade Secure Fabric OS Administrator's Guide (53-10002 - Page 102

switchDisable, secVersionReset, secPolicySave, secPolicyActivate, The segmented FCS

Page 102 highlights

4 Table 4-5 Recovery Processes (Continued) Symptom Possible Causes Recommended Actions When the SCC policy is created after a fabric segmentation, it automatically includes the segmented FCS switches. The segmented FCS switches are still listed in the FCS policy. Modify FCS policy to remove segmented FCS switches; then, modify or create the SCC policy as required. Passwords that should be consistent across the fabric are not consistent. A password recovery operation might have been performed on one or more switches. To make the passwords consistent, log in to the switch that had the password recovered and enter the switchDisable command, followed by secVersionReset and switchEnable. Unsaved changes to the The primary FCS switch policies are lost. might have failed over. Reenter the changes; then, enter the secPolicySave or secPolicyActivate command. During sectelnet sessions, security does not enable and a hex dump displays. During the active sectelnet session, PKI objects (key and certificate) are removed and reinstalled from another login session. This results in the certificate in the current sectelnet session becoming invalid and displaying errors. Log out from your current sectelnet session and log back in. 4-22 Secure Fabric OS Administrator's Guide Publication Number: 53-1000244-01

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118

4-22
Secure Fabric OS Administrator’s Guide
Publication Number: 53-1000244-01
4
When the SCC policy is
created after a fabric
segmentation, it
automatically includes
the segmented FCS
switches.
The segmented FCS
switches are still listed in
the FCS policy.
Modify FCS policy to remove segmented FCS switches; then,
modify or create the SCC policy as required.
Passwords that should be
consistent across the
fabric are not consistent.
A password recovery
operation might have been
performed on one or more
switches.
To make the passwords consistent, log in to the switch that had the
password recovered and enter the
switchDisable
command,
followed by
secVersionReset
and
switchEnable
.
Unsaved changes to the
policies are lost.
The primary FCS switch
might have failed over.
Reenter the changes; then, enter the
secPolicySave
or
secPolicyActivate
command.
During sectelnet
sessions, security does
not enable and a hex
dump displays.
During the active sectelnet
session, PKI objects (key
and certificate) are removed
and reinstalled from
another login session. This
results in the certificate in
the current sectelnet session
becoming invalid and
displaying errors.
Log out from your current sectelnet session and log back in.
Table 4-5
Recovery Processes
(Continued)
Symptom
Possible Causes
Recommended Actions