HP StorageWorks 8/80 Brocade Fabric OS Command Reference Manual v6.2.0 (53-100 - Page 171

cryptoCfg 2 native The LUN uses the Brocade metadata format and algorithm for the encryption and decryption of data. This is the default mode. DF_compatible The LUN uses the NetApp DataFort metadata format and algorithm for the encryption and decryption of data. Use of this format requires a NetApp DataFort-compatible license to be present on the encryption switch or the chassis that houses the encryption blade. -encrypt | -cleartext Enables or disables the LUN for encryption. By default, cleartext is enabled (no encryption). When the LUN policy is changed from encrypt to cleartext, the following policy parameters become disabled (default) and generate errors when executed: -enable_encexistingdata, -enable_rekey, and -key_lifespan. When a LUN is added in DF -compatible Encryption Format, -cleartext is rejected as invalid. -enable_encexistingdata | -disable_encexistingdata Specifies whether or not existing data should be encrypted. The Encryption policy must be enabled on the LUN before the -enable_encexistingdata can be set and the LUN state must be set to -cleartext. By default, encryption of existing data is disabled. If LUN policy is set to -encrypt, the encryption of existing data must be enabled, or existing data is not preserved. This policy is not valid for tape LUNs. -enable_rekey time_period | -disable_rekey Enables or disables the auto re-keying capability on the specified disk LUN. This operand is not valid for tape LUNs. By default, the automatic re-key feature is disabled. Enabling automatic re-keying is valid only if the LUN policy is set to encrypt. You must specify a time_period in days when enabling auto Re-keying to indicate the interval at which automatic re-keying should take place. -key_lifespan time_in_days | none Specifies the lifespan of the encryption key in days. The key will expire after the specified number of days. Accepted values are integers from 1 to 2982616. The default value is none, which means, the key does not expire. This operand is valid only for tape LUNs. The key lifespan cannot be modified after it is set. --modify -LUN Modifies the encryption policies of one or more LUNs in a specified CTC. This command is valid only on the group leader. The following operands are required when modifying a LUN: crypto_target_container_name Specifies the name of the CTC to which the LUNs belong. LUN_Num | range Specifies the LUN number either as a 16-bit (2 bytes) number in hex notation (for example, 0x07) or as a 64-bit (8 bytes) number in WWN format (for example, 0:07:00:00:00:00:00:00). The LUN number must be zero when a tape LUN is specified and the tape drive is a single LUN device. When specifying a range, the LUN numbers must be entered in the 16-bit hex format. Fabric OS Command Reference 143 53-1001186-01